Communication control device, data security system, communication control method, and computer product

• US 11,651,094 B2
• Filed: 12/29/2015
• Issued: 05/16/2023
• Est. Priority Date: 07/24/2008
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Nimura, Kazuaki, Nakamura, Yousuke, Yasaki, Kouichi, Honda, Fumio
• Primary Examiner(s): Obeid, Mamon
• Application Number:
  US14/982,943
• Publication Number:
  US 20160132689A1
• Time in Patent Office: 2,695 Days
• Field of Search: None
• CPC Class Codes: G06F 1/3293 by switching to a less power-consuming processor, e.g. sub-CPU
• CPC Class Codes: G06F 1/3296 by lowering the supply or operating voltage
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0618 Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

A communication control device configured to access an information processing apparatus in which data is stored. The device and method acquires an operational condition of an information processing apparatus, and notifies the information processing apparatus of a security command for causing the information processing apparatus to execute a security process on the data in an event that an operational condition is activated and, in an event that the operational condition is a standby mode, a hibernate mode, or a shutdown mode, notifies the information processing apparatus of an activation command for activating the information processing apparatus, and notifies of a security command for causing the information processing apparatus to execute a security process on the data.

Claims

1. A communication control device configured to access an information processing apparatus in which data is stored, the communication control device comprising:

a memory, and

a processor coupled to the memory whereby the processor;

acquires an operational mode of the information processing apparatus according to an instruction related to a security process, the instruction being received via a network;

determines whether the acquired operational mode of the information processing apparatus according to the instruction related to the security process is a shutdown mode in which a power source of the information processing apparatus is deactivated; and

transmits an activation command and a data deletion command to the information processing apparatus in response to the acquired operational mode of the information processing apparatus being determined to be in the shutdown mode,

wherein;

the activation command activates one of a Basic Input/Output System (BIOS) or an Extensible Firmware Interface (EFI) of the information processing apparatus, without activating an operating system of the information processing apparatus, and

the data deletion command is according to the security process controlling the information processing apparatus which performs a data deletion process through the activated BIOS or EFI including deleting at least a portion of the data stored in the information processing apparatus.

2. The communication control device according to claim 1, wherein

the data deletion process implements the deleting of the at least a portion of the data stored in the information processing apparatus based on a range information which indicates range of data to be deleted by the information processing apparatus.

3. The communication control device according to claim 1, wherein

the portion of the data includes a cipher key used to encode the data stored in the information processing apparatus, and

the data deletion process deletes the cipher key stored in the information processing apparatus.

4. The communication control device according to claim 1, wherein the processor is further configured to:

store the data deletion command and/or the activation command in the memory in a case that a residual power acquired from the information processing apparatus is equal to or less than a given value; and

transmit the data deletion command and/or the activation command to the information processing apparatus in a case that the residual power exceeds the given value.

5. The communication control device according to claim 4, further comprising:

a first power source circuit configured to supply power to the communication control device; and

a power source switch configured to supply power to the communication control device by switching to either a power supply received from a second power source circuit of the information processing apparatus which is configured to supply power to the communication control device, or a power supply received from the first power source circuit;

wherein the processor is further configured to issue, in an event that the residual power acquired from the information processing apparatus is equal to or less than the given value, an instruction to the power source switch to switch to the power supply received from the first power source circuit.

6. A communication control method for executing processing by a communication control device configured to access an information processing apparatus in which data is stored, the communication control method comprising:

acquiring, by the communication control device, an operational mode of the information processing apparatus according to an instruction related to a security process, the instruction being received via a network;

determining whether the acquired operational mode of the information processing apparatus according to the instruction related to the security process is a shutdown mode in which a power source of the information processing apparatus is deactivated; and

transmitting by the communication control device, an activation command and a data deletion command to the information processing apparatus, the transmitting being in response to the acquired operational mode of the information processing apparatus being determined to be in the shutdown mode,

wherein;

the activation command one of a Basic Input/Output System (BIOS) or an Extensible Firmware Interface (EFI) of the information processing apparatus is activated, without activating an operational system of the information processing apparatus, and

the data deletion command is according to the security process controlling the information processing apparatus which performs a data deletion process through the activated BIOS or EFI including deleting at least a portion of the data stored in the information processing apparatus.

7. The method according to claim 6, wherein

the data deletion process implements the deletion of the at least a portion of the data stored in the information processing apparatus based on a range information which indicates range of data to be deleted by the information processing apparatus.

8. The method according to claim 7, wherein

the portion of the data includes a cipher key used to encode the data stored in the information processing apparatus, and

the data deletion process deletes the cipher key stored in the information processing apparatus.

9. The method according to claim 6, further comprising:

storing the data deletion command and/or the activation command in a memory in a case that a residual power acquired from the information processing apparatus is equal to or less than a given value; and

transmitting, by the communication control device, the data deletion command and/or the activation command to the information processing apparatus in a case that the residual power exceeds the given value.

10. The method according to claim 9, further comprising:

controlling, by the communication control device, a power source switch to switch a power supply provided for the communication control device from a second power source circuit of the information processing apparatus which is configured to supply power to the communication control device to a first power source circuit which supplies power to the communication control device in a case that the residual power acquired from the information processing apparatus is equal to or less than the given value.

11. A non-transitory computer readable medium having stored therein a program that causes a communication control device to execute a process, the communication control device being configured to access an information processing apparatus in which data is stored, the process comprising:

acquiring an operational mode of the information processing apparatus according to an instruction related to a security process, the instruction being received via a network;

determining whether the acquired operational mode of the information processing apparatus according to the instruction related to the security process is a shutdown mode in which a power source of the information processing apparatus is deactivated; and

transmitting an activation command and a data deletion command to the information processing apparatus in response to the acquired operational mode of the information processing apparatus being determined to be in the shutdown mode,

wherein;

the activation command activates one of a Basic Input/Output System (BIOS) or an Extensible Firmware Interface (EFI) of the information processing apparatus, without activating an operational system of the information processing apparatus,

the data deletion command is according to the security process controlling the information processing apparatus which performs a data deletion process through the activated BIOS or EFI including deleting at least a portion of the data stored in the information processing apparatus.

12. The non-transitory computer readable medium according to claim 11, wherein

the data deletion process implements the deletion of the at least a portion of the data stored in the information processing apparatus based on a range information which indicates range of data to be deleted by the information processing apparatus.

13. The non-transitory computer readable medium according to claim 12, wherein

the portion of the data includes a cipher key used to encode the data stored in the information processing apparatus, and

the data deletion process deletes the cipher key stored in the information processing apparatus.

14. The non-transitory computer readable medium according to claim 11, wherein the process further comprising:

storing the data deletion command and/or the activation command in a memory in a case that a residual power acquired from the information processing apparatus is equal to or less than a given value, and

transmitting the data deletion command and/or the activation command to the information processing apparatus in a case that the residual power exceeds the given value.

15. The non-transitory computer readable medium according to claim 14, wherein the process further comprising:

controlling a power source switch to switch a power supply provided for the communication control device from a second power source circuit of the information processing apparatus which is configured to supply power to the communication control device to a first power source circuit which supplies power to the communication control device in a case that the residual power acquired from the information processing apparatus is equal to or less than the given value.