File security system

• US 5,267,313 A
• Filed: 07/20/1992
• Issued: 11/30/1993
• Est. Priority Date: 09/26/1991
• Status: Expired due to Fees

• Current Assignee: Laurel Intelligent Systems Co., Ltd.
• Original Assignee: Laurel Intelligent Systems Co., Ltd.
• Inventors: Hirata, Kozo
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US07/914,722
• Time in Patent Office: 498 Days
• Field of Search: 380/21, 380/25, 380/45, 380/49
• US Class Current: 380/281
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

A file security system of such a constitution that after plaintext has been enciphered by data encryption key means the encryption key means per se is stored or made freely transmissible in the state further enciphered by the encrytion key maintained in secret and the information thus processed can be deciphered into plaintext information only by making good use of said encryption key means.

Claims

1. A file security system which comprises a terminal device and a host device;

said terminal device including;

a removable terminal key means including means for storing a personal encryption key, and destroying said personal encryption key when said terminal key means is opened,

first means for inputting plaintext information and writing corresponding enciphered information and an enciphered data encryption key on a storage device,

security input-output means for enciphering said plaintext information by using the data encryption key and for enciphering said data encryption key by using a personal encryption key,

terminal control means for controlling said first means and said security input-output means, and for outputting said personal encryption key to said terminal key, and

terminal interface means for connecting said first means, said security input-output means, said terminal control means and said terminal key;

said host device including;

a host key means including means for storing said personal encryption key,

second means for reading said corresponding enciphered information from said storage device and writing said plaintext information,

deciphering means for deciphering said enciphered data encryption key using said personal encryption key and deciphering said corresponding enciphered information using said deciphered data encryption key,

host control means for controlling said second means and said deciphering means, and for retrieving said personal encryption key, and

host interface means for connecting said second means, said deciphering means, said host control means and said host key;

wherein said terminal and host keys means contain said means for respectively connecting to said terminal and host interface means.

2. The file security system of claim 1, wherein said terminal and host keys are in the form of a box.

3. The file security system of claim 1, wherein said storage device of said first means includes a magneto-optical floppy for storing said enciphered information and said enciphered data encryption key.

4. The file security system of claim 1, wherein said terminal control means and said host control means include data processing means which enables operations of exclusive OR, substitution, and chaining between codes.

5. The file security system of claim 1, wherein said host key is removable from said host device in normal operation.

6. The file security system of claim 2, wherein said host key is removable from said host device in normal operation.