Information Processing Apparatus and Removable Media Management Method

• US 20120166524A1
• Filed: 10/18/2011
• Published: 06/28/2012
• Est. Priority Date: 12/27/2010
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation), Toshiba Digital Solutions Corporation (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Watakabe, Takeshi, Fujiwara, Yuji
• Granted Patent: US 8,590,051 B2
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: G06F 12/1416 by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights G06F12/1458 takes precedence
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2117 User registration

Abstract

According to one embodiment, an information processing apparatus includes an identifier generation module, an identifier write module, an identifier storage, and a removable media control module. The identifier generation module generates a media identifier for a removable medium connected to the information processing apparatus. The identifier write module writes the generated media identifier in a predetermined area in the removable medium. The identifier storage stores the generated media identifier in an identifier list. The removable media control module permits use of a removable medium which is newly connected to the information processing apparatus if a media identifier included in the identifier list is written in a predetermined area in the newly connected removable medium.

Claims

1. An information processing apparatus comprising:

an identifier generation module configured to generate a media identifier for a removable medium connected to the information processing apparatus;

an identifier write module configured to write the generated media identifier in a predetermined area in the removable medium;

an identifier storage configured to store the generated media identifier in an identifier list; and

a removable media control module configured to permit use of a removable medium which is newly connected to the information processing apparatus if a media identifier included in the identifier list is written in a predetermined area in the newly connected removable medium.

2. The information processing apparatus of claim 1, wherein the predetermined area comprises a free area between a master boot record area and a partition area in the removable medium.

3. The information processing apparatus of claim 2, further comprising:

an area creation module configured to create the free area in the removable medium if the free area is not included in the removable medium,

wherein the identifier write module is configured to write the generated media identifier in the created free area.

4. The information processing apparatus of claim 2, further comprising:

a first validation value calculation module configured to calculate a first validation value using the generated media identifier,

wherein the identifier write module is further configured to write the calculated first validation value in the free area.

5. The information processing apparatus of claim 4, wherein the identifier write module is configured to write the generated media identifier in a start area in a predetermined sector in the free area, and to write the calculated first validation value in a last area in the predetermined sector.

6. The information processing apparatus of claim 5, wherein the identifier write module is configured to write the generated media identifier in the start area, to write the calculated first validation value in the last area, and to write a random number in a remaining area in the predetermined sector.

7. The information processing apparatus of claim 4, wherein the generated media identifier has a first length, and

the first validation value calculation module is configured to calculate the first validation value by dividing the generated media identifier into first data bit parts each having a second length shorter than the first length, and calculating an exclusive OR of the first data bit parts.

8. The information processing apparatus of claim 7, further comprising:

an identifier read module configured to read identifier data and validation value data from the newly connected removable medium, the identifier data being stored in the start area and having the first length, the validation value data being stored in the last area and having the second length; and

a second validation value calculation module configured to calculate a second validation value by dividing a value of the read identifier data into second data bit parts each having the second length shorter than the first length, and calculating an exclusive OR of the second data bit parts,

wherein the removable media control module is configured to permit the use of the newly connected removable medium if a value of the read validation data is equal to the second validation value and the value of the read identifier data is included in the identifier list.

9. The information processing apparatus of claim 1, wherein the removable media control module permits the use of the newly connected removable medium if hardware identification information included in the identifier list is embedded in the newly connected removable medium or if hardware identification information included in the identifier list is not embedded in the newly connected removable medium and a media identifier included in the identifier list is written in the predetermined area in the newly connected removable medium.

10. The information processing apparatus of claim 1, further comprising:

a policy setting module configured to set a policy,

wherein the removable media control module is configured to control the use of the newly connected removable medium according to the policy if a media identifier included in the identifier list is written in the predetermined area in the newly connected removable medium.

11. The information processing apparatus of claim 10, wherein the policy specifies permission of reading data from the newly connected removable medium and permission of writing data to the removable medium, permission of reading data from the removable medium and inhibition of writing data to the removable medium, or inhibition of reading data from the removable medium and inhibition of writing data to the removable medium.

12. The information processing apparatus of claim 11, wherein the policy setting module is configured to set a first policy and a second policy, and

the removable media control module is configured to control the use of the newly connected removable medium according to the first policy if a media identifier included in the identifier list is written in the predetermined area in the newly connected removable medium, and to control the use of the newly connected removable medium according to the second policy if any media identifier included in the identifier list is not written in the predetermined area in the newly connected removable medium.

13. The information processing apparatus of claim 12, wherein the first policy and the second policy specify permission of reading data from the newly connected removable medium and permission of writing data to the removable medium, permission of reading data from the removable medium and inhibition of writing data to the removable medium, or inhibition of reading data from the removable medium and inhibition of writing data to the removable medium.

14. A removable media management method of controlling use of a removable medium connected to an information processing apparatus, the method comprising:

generating a media identifier for a removable medium connected to the information processing apparatus;

writing the generated media identifier in a predetermined area in the removable medium;

storing the generated media identifier in an identifier list; and

permitting use of a removable medium which is newly connected to the information processing apparatus if a media identifier included in the identifier list is written in a predetermined area in the newly connected removable medium.

15. The removable media management method of claim 14, wherein the predetermined area comprises a free area between a master boot record area and a partition area in the removable medium.

16. A removable media management system comprising a server apparatus and a client apparatus which are interconnected via a network,

wherein the server apparatus is configured to:

set a policy; and

store an identifier list, and

wherein the client apparatus is configured to;

generate a media identifier for a removable medium connected to the client apparatus;

write the generated media identifier in a predetermined area in the removable medium;

add the generated media identifier in the identifier list; and

control use of a removable medium, which is newly connected, according to the policy if a media identifier included in the identifier list is written in a predetermined area in the newly connected removable medium.

17. The removable media management system of claim 16, wherein the predetermined area comprises a free area between a master boot record area and a partition area in the removable medium.

18. A removable media management system comprising a server apparatus, a first client apparatus and a second client apparatus,

wherein the server apparatus is configured to:

set a policy;

store an identifier list; and

add a media identifier to the identifier list, the media identifier being transmitted from the first client apparatus,

the first client apparatus is configured to;

connect to the server apparatus via a network;

generate the media identifier for a removable medium connected to the first client apparatus;

write the generated media identifier in a predetermined area in the removable medium; and

transmit the generated media identifier to the server apparatus, and

the second client apparatus is configured to;

connect to the server apparatus via a network;

control use of a removable medium, which is newly connected, according to the policy if a media identifier included in the identifier list is written in a predetermined area in the newly connected removable medium.