Digital multi-function peripheral and data protection method of external memory

• US 9,672,386 B2
• Filed: 06/03/2014
• Issued: 06/06/2017
• Est. Priority Date: 06/03/2014
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Tec Corporation (Toshiba Corporation)
• Inventors: Takemura, Minoru
• Primary Examiner(s): Rashid, Harunur
• Assistant Examiner(s): Huang, Cheng-Feng
• Application Number:
  US14/294,509
• Publication Number:
  US 20150347767A1
• Time in Patent Office: 1,099 Days
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

In accordance with one embodiment, a digital multi-function peripheral comprises an interface, a data storage section, a memory and a processor. The interface connects an external memory device. The processor holds the authentication information of a user who connects the external memory device, generates a hash value from the information containing the authentication information of the user who connects the external memory device in a case where the state of connection of the external memory device with the interface meets a data saving condition, stores the data obtained by encrypting the data in the external memory device using the generated hash value in the data storage section, and erases the data in the external memory device.

Claims

1. A digital multi-function peripheral, comprising:

an operation panel configured to receive an operation input;

an interface configured to connect an external memory device;

a data storage configured to store data;

a memory configured to store a command executed by a processor; and

a processor configured to execute the command stored in the memory;

wherein

the processor holds an authentication information of a user who connects the external memory device,

disables an input on the operation panel in a first case where the external memory device is attached when the user logs out,

encrypts data in the external memory device in a second case where removal of the external memory device is not detected within a given period of time after the input on the operation panel is disabled,

stores the data obtained by encrypting the data in the external memory device in the data storage,

erases the data in the external memory device, and

enables the input on the operation panel after the encrypted data is stored in the data storage,

wherein the operation panel includes a display,

the processor displays, on the display,

a warning indicating that the external memory device is to be removed in the first case where the external memory device is attached when the user logs out,

the processor generates a first hash value from information containing the authentication information of the user who connects the external memory device in a third case where a state of connection of the external memory device with the interface satisfies a data saving condition,

encrypts the data in the external memory device using the first hash value,

stores the data obtained by encrypting the data in the external memory device using the first hash value in the data storage,

generates a second hash value from the authentication information input by the user after the encrypted data is stored in the data storage, and

decrypts the encrypted data stored in the data storage based on the second hash value.

2. The digital multi-function peripheral according to claim 1, wherein

the processor overwrites the data in the external memory device with any data.

3. The digital multi-function peripheral according to claim 1, wherein

the processor generates a first hash value from information containing the authentication information of the user who connects the external memory device in a third case where a state of connection of the external memory device with the interface satisfies a data saving condition,

encrypts the data in the external memory device using the first hash value,

stores the data obtained by encrypting the data in the external memory device using the first hash value in the data storage,

writes the first hash value with which the data is encrypted in the external memory device after the data of the external memory device is erased,

generates a second hash value from the authentication information input by the user after the encrypted data is stored in the data storage, and

decrypts the encrypted data stored in the data storage based on the second hash value in a fourth case where the second hash value is consistent with the first hash value stored in the external memory device.

4. A data protection method of an external memory device, including:

holding authentication information of a user who connects the external memory device with an interface;

disabling an input on an operation panel in a first case where the external memory device is attached when a user logs out;

encrypting data in the external memory device in a second case where removal of the external memory device is not detected within a given period of time after the input on the operation panel is disabled;

storing the data stored in the external memory device in a data storage section in a state of being encrypted;

erasing the data of a data area of the external memory device; and

enabling the input on the operation panel after the encrypted data is stored in the data storage section;

displaying a warning indicating that the external memory device is to be removed in the first case where the external memory device is attached when the user logs out;

generating a first hash value from information containing the authentication information of the user who connects the external memory device in a third case where a state of connection of the external memory device with the interface satisfies a data saving condition;

encrypting the data in the external memory device using the first hash value;

storing the data obtained by encrypting the data in the external memory device using the first hash value in the data storage section;

generating a second hash value from the authentication information input by the user after the encrypted data is stored in the data storage section; and

decrypting the encrypted data stored in the data storage section using the second hash value.

5. The data protection method of an external memory device according to claim 4, wherein

the data area of the external memory device is overwritten with any data.

6. The data protection method of an external memory device according to claim 4, further including:

generating a first hash value from information containing the authentication information of the user who connects the external memory device in a third case where a state of connection of the external memory device with the interface satisfies a data saving condition,

encrypting the data in the external memory device using the first hash value,

storing the data obtained by encrypting the data in the external memory device using the first hash value in the data storage section,

writing the first hash value with which the data is encrypted in the external memory device after the data of the data area of the external memory device is erased;

generating a second hash value from the authentication information input by the user after the encrypted data is stored in the data storage section; and

decrypting the encrypted data stored in the data storage section using the second hash value in a fourth case where the second hash value is consistent with the first hash value stored in the external memory device.