Patent Application
20110154063
1. Field of the Invention
The present invention relates to an information management system, information management method and apparatus, and encryption method and program which are designed to deal with the problem of the leakage, invasion of security, alteration, tampering, and destruction of information relating to files (including ordinary files and programs and other executable files) and data, that is, which make partial use of the functions of codes generated by utilizing color etc. for prevention of the leakage, invasion of security, and prevention of alteration, tampering, and destruction and which manage the information unitarily by a standard means so as to prevent the leakage etc.
2. Description of the Related Art
There are diverse means for dealing with the leakage of information handled by computers (personal computers (PCs), servers, etc.), mobile phones, I-phones, recorders/players, game machines, and terminals of units resembling the same (hereinafter referred to as “computers etc.”). Encryption, lock-boxing, passwordization, filtering, and numerous other techniques are being employed. As a typical method which can be utilized for encryption, as, the assignee has previously proposed the technique of using color (WO00/72228).
In recent years, in various fields (industry, broadcasting, machinery, public services, consumer services, leisure, etc.), the need for management for prevention of the leakage of various types of information (here, this “information” including technical information relating to the embeded software of machinery and equipment or embeded systems) has been pointed to. At the same time, the leakage of personal information and business relating to the same has become an issue. In actuality, there have been many cases of leakage of information from computers etc. The damage has been great. Means for preventing this are therefore desired. Further, the level of management of information has become a major issue. This tends to be largely governed by the degree of awareness relating to the leakage of information. The lack of management and issue of awareness relating to the leakage of information have been called in question. Prevention of leakage is therefore desired.
Furthermore, unification or standardization of the management of information by organizations, managers, or levels of the same has been desired.
The invention disclosed in the above-mentioned related art document includes the art of encrypting computer objects (meaning individual data or information (including programs (software)) such as characters, symbols, graphics, mathematical formulas, images, video (moving pictures), audio, etc. handled inside computers or through computers, including also software and data handled by the same combined together). Expansion of the scope of application of the art of encryption is desired.
An object of the present invention, in consideration of the above problems, is to provide an information management system, information management method and apparatus, and encryption method and program which enable unification of information management at organizations, managers, or levels of the same and, due to this, which can lighten the load of information management and prevent the leakage of information.
The above information management system also covers embeded software and embeded systems of machinery and equipment.
The information management system, information management method and apparatus, and encryption method and program according to the present invention are configured as follows for achieving the above object.
The information management system according to the present invention is an information management system for managing a file which is handled on a computer, configured to enable operation on various types of computers, which system is provided with an encrypting means for encrypting an original file comprised of various types of files including at least a document file, drawing file, and executable file (program or software) (this “file” further including images, video (moving pictures), and audio files, a system drive file, and broadcast and other media content) by a conversion function of at least one of an information substitution type and information conversion type so as to prepare an encrypted file; a data storage memory which stores the encrypted file; a decrypting means which has a conversion function which is reverse to the encryption of the encrypting means; a working memory; and an information managing means for enabling the display and viewing of or an operation on the encrypted file, which is stored in the data storage memory, by a regular operational processing cycle after initial processing, by decryping the encrypted file by the decrypting means to an editable display file (including also application software (AP software)) and storing it in the working memory, for performing the required editing (or, in the case of AP software, execution) by the format of the display file, and for converting the display file by the encrypting means to convert it to the encrypted file and storing this in the data storage memory; the memory further provided with an information management file which controls the processing of or operation on the encrypted file at the information managing means.
The above information management file includes the later explained “appended matter”. The “appended matter” is used as the basis for control of the processing of or operation on the encrypted file.
The above information management system is preferably configured so that the data storage memory stores only the encrypted file and does not store the original file corresponding to the encrypted file.
In the above information management system, alternatively, preferably the data storage memory can be configured so as to store the original file together with the encrypted file.
The information management system according to the present invention having the above constitution preferably further is configured as follows:
The encrypting means for encrypting the original file to the encrypted file is a means for encrypting utilizing color. This encrypting is configured so as to include an information substitution type conversion function based on an ONC correspondence table (correspondence of at least one of an ON correspondence, NC correspondence, and CO correspondence) and, furthermore, when necessary, an information conversion type conversion function based on a color encryption key.
The information management system is preferably configured to enable operation on various types of computers (PCs, servers, clients, etc.) and is provided with a startup means for comparing a computer identification number embedded in a system executable file forming part of the information managing means against a computer identification number uniquely assigned to the computer which is used and, when the two match, starting up and, when they do not match, not starting up.
The information management system is preferably configured so that the above information management file includes, as component elements for processing of or operation on the encrypted file, at least one of an ONC correspondence table identification number list (table), an organization division/rank management table, a file double management table, appended matter, and an external recording device identification number list (table).
The information management system is preferably configured so that the encrypting means uses an ONC correspondence table designated by an ONC correspondence table identification number in the ONC correspondence table identification number list which is included in the information management file as the basis to color encrypt the original file at the time of initial processing so as to prepare the encrypted file, and the decrypting means and encrypting means use the designated ONC correspondence table to decrypt the encrypted file or encrypt it again in a regular operational processing cycle.
The information management system is preferably configured provided with a takeout prohibiting means for prohibiting the takeout of file information by an external recording device based on the external recording device identification number list which is included in the information management file.
This information management system is preferably configured so that the takeout prohibiting means, when an external recording device is connected to the system, uses an external recording device identification number list which is included in the information management file as the basis for comparison with an identification number of the external recording device, permits use when the comparison results in a match, and does not permit use when there is no match.
The information management system is preferably configured so that the decrypting means or the encrypting means uses the ONC correspondence table as the basis for encryption and decryption at the time of initial processing or at a regular operational processing cycle, the system is provided with a correspondence table changing means for changing the ONC correspondence table, the correspondence table changing means changes the ONC correspondence table, the ONC correspondence table changed due to this being used as a basis to prepare another encrypted file, and the other encrypted file is able to be decrypted based on the ONC correspondence table after the change and is not able to be decrypted based on the ONC correspondence table before the change.
The information management system is preferably configured so that the ONC correspondence table is changed based on a change of OC correspondence, a change of ON correspondence, or a change of NC correspondence.
The information management system is preferably configured so that the decrypting means and the encrypting means use the ONC correspondence table as the basis for encryption and decryption at the time of initial processing or at a regular operational processing cycle, the system is provided with a correspondence table deleting means for deleting an ONC correspondence table, and the correspondence table deleting means deletes the ONC correspondence table and, due to this, decryption processing is disabled. Alternatively, it is configured so as to encrypt the ONC correspondence table and to use the ONC correspondence table as the basis to disable decryption.
The information management system is preferably configured so as to set conditions for change or deletion of the ONC correspondence table and thereby limit use of the decryption function or limit use of a display file which is decrypted from the encrypted file.
The information management system is preferably configured so as to set conditions of the timing for change or deletion of the ONC correspondence table to thereby perform at least one of limitation of the term, limitation of the time, establishment of a deadline, and limitation of the number of times of execution.
The information management system is preferably configured so as to use the appended matter which is included in the information management file as the basis for automatic or manual conditional execution control, in accordance with appended conditions which are included in the appended matter, of encryption processing, decryption processing, file operations, and file input and storage.
The information management system is preferably configured so that the appended conditions of the appended matter are freely set in content with reference to the objective of the file. Therefore, more preferably:
(1) The system is configured to automatically or manually perform conditional execution control of file operations or file input and storage of an original file.
(2) The system is configured to automatically or manually perform conditional execution control of file operations or file input and storage of a color file (in general, an encrypted file).
(3) The system is configured to automatically or manually perform conditional execution control of file operations or file input and storage of a display file.
(4) The system is configured to encrypt the executable file and disable execution when execution is not permitted.
(5) The system is configured to encrypt e-mail software and disable transfer of a display file when transfer is not permitted.
(6) The system is configured to encrypt a printer driver and disable printing of a display file when printing is not permitted.
Furthermore, the information management system prevents alteration, tampering, editing, and copying of a display file, a homepage (display screen by browser), or a display/viewing screen (display screen by viewer), by a third party (person assuming position equal to manufacturer's side) in accordance with appended conditions included in the appended matter. Due to this, it is possible to prevent tampering, alteration, etc. by “identity theft or spoofing”.
From another viewpoint, the present invention provides the following information management system:
The information management system is preferably configured so that, in the steps where the encrypting means encrypts the original file to the encrypted file as initial processing, the decrypting means decrypts the encrypted file to the display file, and the encrypting means again encrypts the display file to the encrypted file, except for the original file, the encrypted file and the display file, elements which are used for the encryption, and elements which are used for the decryption are set with a computer identification number which is uniquely assigned to the computer.
The information management system is preferably configured so that, for computer objects of the file which is managed at the computer under the control of the information management system, the system is configured to enable editing, execution, storage, and deletion of computer objects in the state of the display file, a closed loop environment at the computer is formed based on the state of the encrypted file, and the computer objects in the state of the encrypted file are handled in the closed loop environment.
The information management system is preferably configured so that when the computer objects are stored in the storage memory in the state of the encrypted file, the corresponding original file is deleted.
Furthermore, the information management system is preferably configured so that the system provides an external recording device which can be attached to or detached from the computer and which includes a first recording unit which records an already obtained encrypted file and/or a second recording unit which records elements relating to a conversion function of at least one of an information substitution type and information conversion type and provides contents which are recorded in the first recording unit and the second recording unit to the computer as a module and performs encryption processing by the encrypting means, decryption processing by the decrypting means, and processing for control of execution relating to operations on the file when the external recording device is connected to the computer.
Furthermore, the information management system is preferably configured to use an external recording device which can be attached to or detached from the computer and which is provided with the encrypting means, the storage memory, the decrypting means, the information managing means, and the information management file as a module.
The above computer may be a game machine or a unit terminal device.
Furthermore, in another aspect, the present invention provides the following information management system.
The information management system according to this aspect of the present invention is provided with an encrypting means for encrypting an original file comprised of various types of files including a document file, a drawing file, and an executable file (program) based on at least information substitution type conversion function to prepare an encrypted file; a data storage memory which stores the encrypted file and the original file before the encryption initial processing; and an information managing means for encrypting the original file before encryption initial processing by the encrypting means to the encrypted file then moving or copying it to another external recording device (computer, external recording device, etc.) when there is a request for movement or copying of the original file before encryption initial processing to the other external recording device.
The information management system is preferably configured to encodes the original file before encryption initial processing to the encrypted file at the point of time when a movement destination or copying destination is designated in a request for moving or copying the original file before encryption initial processing to another external recording device.
Further, in another aspect, the present invention provides the following information management method and apparatus.
The information management method according to the present invention is an information management method which is executed in an information management system which uses an encrypting means or decrypting means to encrypt or decrypt an original file and an encrypted file under control based on control-use component elements provided in an information management file, which method prepares a computer identification number such as a MAC address or board serial number, adds the computer identification number to the encrypted file, an encrypting-use correspondence table of the encrypting means, and a decrypting-use correspondence table of the decrypting means, and permits decryption processing of the encrypted file when the condition is satisfied of the computer identification number which is added to the encrypting-use correspondence table and the computer identification number which is added to the decrypting-use correspondence table matching and, due to this, makes a password, which is required for usual encryption, unnecessary.
The information management apparatus according to the present invention is an information management apparatus which is used in an information management system which uses an encrypting means or decrypting means to encrypt or decrypt an original file and an encrypted file under control based on control-use component elements provided in an information management file, which apparatus is provided with a means for preparing a computer identification number such as a MAC address or board serial number, a means for adding the computer identification number to the encrypted file, an encrypting-use correspondence table of the encrypting means, and a decrypting-use correspondence table of the decrypting means, and a means for permitting decryption processing of the encrypted file when the condition is satisfied of the computer identification number which is added to the encrypting-use correspondence table and the computer identification number which is added to the decrypting-use correspondence table matching and makes a password, which is required for usual encryption, unnecessary.
By utilizing the information management system according to the present invention, more specifically, the following configurations can be realized:
(1) An information management system (this information management system including an information management system of files, data, etc. built into machinery or equipment) wherein appended conditions of appended matter (permission/rejection of printing) are followed so that, when the information management system is a printer apparatus for example, the information management system built into the printer by a computer built into the printer apparatus, when deciding to permit or reject printing, permits only printing of the color file (decryption, then printing) and rejects printing of the display file/original file.
(2) An information management system which is built in a printer wherein appended conditions of appended matter of a color file (printing conditions) are followed for automatic conditional execution control of color file printing. As the “appended conditions” (printing conditions), content is set with reference to the use of the printer and the objective to be realized. In this example, this is the printing range (pages), number of printed copies, vertical/horizontal printing, and other settings.
(3) An information management system which uses a color encryption key etc. for encryption/decryption between an original file and an encrypted file under the control of an information management file, wherein appended conditions of appended matter of the information management system (permission/rejection of printing) are followed so that the information management system built into a printer by a computer built into the printer, when deciding to permit or reject printing, permits only printing of the encrypted file (decryption, then printing) and rejects printing of the display file/original file.
(4) An information management system which uses a color encryption key etc. for encryption/decryption between an original file and an encrypted file under the control of an information management file, wherein appended conditions of appended matter (permission/rejection of printing) are followed so that, when deciding to permit or reject printing, the system encodes (freezes) a printer driver to disable printing of the display file.
(5) An information management system configured so as to follow appended conditions of appended matter so as to automatically perform conditional execution control of encryption of an original file. The appended conditions include permission/rejection of encryption, term, time, time limit, range, number of times of execution, etc. and also limitations on the matters required in management.
(6) An information management system configured so as to follow appended conditions of appended matter so as to automatically perform conditional execution control of encryption of a display file. The appended conditions include permission/rejection of encryption, term, time, time limit, range, number of times of execution, etc. and also limitations on the matters required in management.
(7) An information management system configured so as to follow appended conditions of appended matter so as to automatically perform conditional execution control of decryption (restoration) of a color file. The appended conditions include permission/rejection of decryption, term, time, time limit, range, number of times of execution, etc. and also limitations on the matters required in management.
(8) An information management system configured so as to decrypt (restore) a color file, which is obtained by encrypting an original song or video, by automatically performing conditional execution control by appended conditions of appended matter which are added to the color file. The above appended conditions include measures against downloading of illegitimate files by some sort of restrictions on the copied file/playback of a single song, intro, single stanza, etc. and other measures for promoting legitimate procedures, fee-based and free time periods, limitation of range, identification of user (identification code unique to specific device of apparatus), display of commercials, and other information.
(9) An information management system configured so as to decrypt (restore) a color file, which is obtained by encrypting an original file for download use, by automatically performing conditional execution control by appended conditions of appended matter which are added to the color file. The above appended conditions include, when the PC/or mobile phone identification number is unknown or mostly unknown, establishing limits on use and initially enabling restoration of the file so as to promote legitimate procedures and increased sales.
(10) An information management system configured so that appended conditions of appended matter (recorded external recording device identification number list) are followed to run a comparative check of external recording device identification numbers, permit use when matching, display a message screen of “use not permitted” and disable further operations on the PC screen when not matching, and thereby prohibiting the external recording device from taking out file information.
(11) An information management system configured so that so as to set conditions for rejecting execution so as to thereby reject execution of an original file in the permission/rejection in attached conditions with reference to the purpose of confidentiality of blocking intervention by a third party to a high degree in embeded software and an embeded system of an apparatus. This is configured to enable automation of decryption of an encrypted file.
(12) An information management system configured so as to use a file double management table of an information management file as the basis to enable access to a color file by the original file name and configured so as to confidentially store the color file of a recording device by standard management.
(13) An information management system configured so that a file double management table of an information management file is comprised of original file names to which color file identification numbers and storage folder names (paths to folder locations) are linked. It is configured so that when an original file name is designated, the color file stored on a hard disk can be accessed using the storage folder name (path to folder location) and color file identification number. A color file is an actual file which has been color encrypted from an original file and does not allow illegitimate viewing of information. On the other hand, the original file itself is automatically deleted after color encryption and no longer exists, so a third party cannot directly take it outside. The original file is generated based on the color file and the correspondence table.
(14) An information management system configured so that the color file identification number is a number which is not suggestive of the original file name, the color file itself is a hidden file, the storage folder is also a hidden folder, and the color file corresponding to the original file cannot be found by a search.
(15) An information management system configured so as to color encrypt an original file to generate a color file at the time of initial processing, automatically delete the original file from a recording device, and store only the color file which has been encrypted based on a file double management table in the recording device. According to this, leakage of raw information of the original file to the outside is prevented. Even if the color-encrypted color file is leaked to the outside, it cannot be decrypted without an ONC correspondence table, so the information will not be illegitimately viewed.
(16) An information management system configured so as to decrypt/encrypt a color file of a recording device at the time of regular operation after initial processing so as to render a display file editable, wherein the display file and a file double management table are used as the basis to confidentially store the color file of the recording device by standard management. Due to this, outside leakage of raw information of the original file is prevented. Even if the color-encrypted color file is leaked to the outside, it cannot be decrypted without an ONC correspondence table, so the information will not be illegitimately viewed.
(17) An information management system configured so as to use an organization division table/organization rank table of an information management file as the basis for decrypting/encrypting a color file in an organization division-wise/organization rank-wise manner and to make the segmentation of security management (prevent of leakage of information to the outside) more detailed and stricter.
(18) An information management system configured so as to use an organization division-wise/organization rank-wise ONC correspondence table comprised of an organization division table/organization rank table of an information management file as the basis for initially color encrypting an original file to generate an organization division-wise/organization rank-wise color file and so as to decrypt/encrypt the organization division-wise/organization rank-wise color file at a regular operational cycle.
(19) An information management system configured to use an ONC correspondence table, which can only be used organization division-wise/organization rank-wise, as the basis for color encrypting an original file to generate an organization division-wise/organization rank-wise color file at the time of initial processing, to decrypt/edit/encrypt an organization division-wise/organization rank-wise color file from a recording device during a cycle of regular operational processing, to store the organization division-wise/organization rank-wise color file in the recording device, to allow the circulation of only the encrypted organization division-wise/organization rank-wise color file inside the PC used etc., and to manage the security of color files partitioned organization division-wise/organization rank-wise (prevent leakage of information to the outside).
(20) An information management system configured so that when decrypting the organization division-wise/organization rank-wise color file to a display file, the range of use of a display file is restricted. The “range of use of the display file” means the disclosable file region at which file operations (viewing, creation, editing, deletion, copying, and transfer) can be performed.
(21) An information management system configured so that the organization rank table is an ONC correspondence table in which use is permitted for individual ranks showing relationships in a leadership command system in an organization and a table of indices (identification number IDs) of color files.
(22) An information management system configured so that the organization division table is an ONC correspondence table in which use is permitted for individual ranks showing relationships in a leadership command system in an organization and a table of indices (identification number IDs) of color files.
Furthermore the encryption method and program of the present invention are configured as follows:
The encryption method is configured having a first step of extracting a predetermined bit string from any designated key image, a second step of using the bit string to generate a first random number array and repeatedly using a hash function on the first random number array to create a first encryption key, and a third step of combining the first encryption key, separately provided data to be encrypted, and a known processing method for encryption to generate an encrypted file relating to the data to be encrypted.
In the above encryption method, the third step includes a step of using the first encryption key to create a second encryption key, a step of using a hash function on the data to be encrypted to create a file key, a step of using the file key to generate a third random number array, a step of shuffling the second encryption key by the third random number array to create a third encryption key, and a step of applying an XOR operation to the data to be encrypted in bit units by the third encryption key to create the encrypted file.
Furthermore in the above encryption method, the third step includes a step of using the first encryption key to create a second encryption key, a step of using a hash function on the data to be encrypted to create a file key, a step of using the file key to generate a third random number array, a step of shuffling the second encryption key by the third random number array to create a third encryption key, and a step of using the third encryption key as a key for block encryption and using the block encryption as the basis to create the encrypted file from the data to be encrypted.
Further the encryption program is a program for making a computer realize an encryption device and using the encryption device to make the computer run the encryption method.
The information management system according to the present invention has the following effects.
(1) According to the information management system, the system operates under control of an information management file and color encrypts/decrypts an original file as its basic function. It is therefore possible to realize an integrated information management system environment which restricts file operations to prevent outside leakage of file information from an overall perspective.
(2) According to the information management system, a comparative check is made of a PC identification number etc. which is embedded in a system executable file and a PC identification number etc. which is uniquely assigned to the PC used etc. (LAN card MAC address, motherboard serial number, CPU ID, BIOS serial number, hard disk serial number, etc.) If matching, the system is started up. If not matching, the system is not started up. By this, it is possible to prevent illicit use of software.
(3) The information management file is comprised of an ONC correspondence table identification number table (or list), organization division/rank management table, file double management table, appended matter, and external recording device identification number table. Due to this, the security of the file information itself and the access to the file is managed on an organization-wise basis. It is therefore possible to realize an integrated information management system environment which prevents outside leakage of file information from an overall perspective.
(4) In an organization, software etc. on the computer is under the unitary or standard management of a manager and can be controlled. The user can freely create, edit, delete, copy, and transfer a file (including attached files). It is therefore possible to prevent arbitrary changes to the restrictions on permitted functions/hardware usage of a computer imposed by the information management system manager.
(5) A file in which a virus is embedded is also converted to a color file. A file designed for intrusion is therefore encrypted and converted to a color file. The color file is configured to be changed based on a correspondence table, so there is no effect causing a change in a recording. Therefore, the effect is limited to the file in the system. The information management system functions by the color file and the functions of the CPU to prevent file leakage/damage. Therefore, there is also the effect of limiting damage due to viruses. Further, the file is encrypted as a color file, so there are also a sealoff effect and effect of enabling deletion, capture, and analysis.
(6) It is possible to prevent deletion due to work errors, deliberate deletion, etc. This is based on the usage of a color file. It is possible to form a double structure of a color file identification code and a file name (formation of double layer or duplexing of identification code).
(7) It is not possible to copy information which is displayed on a monitor or other display. Even if attempting to copy a file which is displayed on a monitor by dragging and pasting by a mouse, when the copied file is transferred elsewhere, it will be changed by being encrypted to a color file. Furthermore there is copy medium and BIOS management. Utilization of peripheral devices is restricted making copying impossible. Due to this, leakage of information is prevented.
(8) It is possible to maintain the security of and protect the system, data, file, and other information of a high security system. Further, processing for preventing deletion and copying of data in an HDD or other memory is not required.
The above objects and features of the present invention will become clearer from the following art of the preferred embodiments given in relation to the attached drawings, wherein:
Below, preferred embodiments of the present invention will be explained based on the drawings.
Note that the means/elements which are utilized for encryption is explained in the present embodiment with reference typically to “color”, but is not limited to “color”. Other means/elements which have substantially the same action can also be utilized.
Note that the Internet interface 26 may in general also be a communication device. “Communication” is a concept including broadcasting and sending and receiving signals by a communications satellite.
The above hard disk (HD) 21, as shown in
As types of the above external recording device 31, as shown in
These elements 21 to 25 send and receive data with the CPU 12 via the input/output controller 14 and bus 11. Here, the “CPU” has a broad meaning and includes a processor, microprocessor, microcomputer, and DSP.
The external device is at least one other computer (computer system) 27. The computer 10 can communicate with the other computer 27 typically through the Internet or a LAN or other communication line 28 so as to send and receive document files, drawing files, executable files (including various types of programs), various types of other data, and other data and information.
In the above configuration, the memory 13 is a main memory and includes a working memory which temporarily holds data which has been processed by the CPU 12 or data which is in the middle of process. The hard disk 21 (internal HD 21A and external HD 21B) is a storage memory for storing data which has been created by processing by the CPU 12 and which is temporarily held in the memory 13. Further, the external recording device 31 is an external memory and mainly functions as a portable type storage memory.
Note that the above computer 10, as is well known, is a general use device constituted by a personal computer (PC) or other computer of a server etc. or a dedicated device constituted by a computer. The latter dedicated device constituted by a computer is an intelligent device which has a built-in CPU 12, for example, is a stationary or portable type game machine, mobile phone, smart phone, etc., that is, a device for specific applications including the CPU 12. In the case of a computer as such a dedicated device, provision of the above external recording device 31 is restricted by the conditions of the hardware. For example, a semiconductor memory (RAM, ROM) well known as a storage memory may be used. In the following embodiments, for the computer 10, the example of a “PC” will be explained.
In the above system configuration, as shown in
In
The information management system 32 is the part of the system where functions are realized by a program performing the information management characterizing the present invention (information management by encryption). This information management system 32 is assigned the unique “identification number” 32-1. The computer 10, in this embodiment, is explained in particular with reference to the example of a personal computer (PC), so the identification number 32-1 is a “PC identification number”.
Note that as examples of the above “PC identification number” 32-1, in general there are in general a MAC address, motherboard serial number, CPU ID, BIOS serial number, hard disk serial number, etc.
The information management file 33 is a file including various types of data which imposes conditions required for processing when the information management system 32 performs processing requested for a selected file for management. The information management system 32 obtains the data required for processing from the information management file 33.
As hardware elements forming the computer 10, the above-mentioned CPU 12, memory 13, and input/output control system (BIOS) 14 are shown. Furthermore, the LAN card 34 and the motherboard 35 are shown.
Among these hardware elements, the CPU 12 is assigned the “CPU ID” 12-1, the LAN card 34 is assigned the “MAC address” 34-1, the input/output control system 14 is assigned the “serial number” 14-1, and the motherboard 35 is assigned the “serial number” 35-1.
For the hardware elements in the computer (PC) 10, there are the CPU ID 12-1 of the CPU 12, the PC identification number 32-1 of the information management system 32 in the memory 13, the MAC address 34-1 of the LAN card 34, the serial number 14-1 of the input/output control system 14, the serial number 35-1 of the motherboard 35, and the identification number which identifies the computer 10. In general, these are referred to all together as the “computer identification number”.
In the configuration of the computer 10 which is shown in
Next, referring to
This example of operation is an example of operation which perform initial processing for first encrypting an original file, that is, a computer object, to a color file and then performs processing during a cycle of regular operational processing after initial processing.
Further,
Note that in
In the above, the original file may also be a file which is comprised of AP software and documents or other data which was prepared and edited by the AP software. In this case, the document file etc. and the executable file relating to the AP software are combined in the original file. The original file is encrypted to a single color file. Therefore, the above “display file” 43 which is generated by decrypting this color file corresponds to the above original film comprised of the document file etc. and executable file of the AP software combined together.
Note that the content of the above “initial processing” will be explained later with reference to
In the information management system 32 shown in
Inside the hard disk 21, as one example, a large number (a plurality of) color files 41 are stored. A color file 41, in the case of this embodiment, is a file which was encrypted from an original file using an ONC correspondence table or color encryption key prepared separately in advance or a ONC correspondence table and a color encryption key. The method of encryption and original file will be explained later. Note that the method of encryption is not limited to just one using color.
The method of storage of the color file in the hard disk 21 may be the hidden folder format or the hidden file format. In
A single color file 41A is taken out from the color files 41 of the hard disk 21 (step S11) and is acquired by the information management system 32. The content of the original file before encryption of this color file 41A is a document file etc.
In the information management system 32, on the memory 13, the acquired color file 41A is converted to the original file, that is, the display file 43, based on the decryption processing by the decrypting means 42. The display file 43 is handled on the memory 13 as in the editing processing. When the target processing ends, the display file 43 is again converted to the color file 41A based on the encryption processing by the encrypting means 44. The encrypted color file 41A is updated in content. After that, the color file 41A is stored in the color file 41 of the hard disk 21 (step S12).
Here, the method of encryption and the original file will be explained.
First, the “original file” will be generally explained. Here, the “original file” means something which is handled on an ordinary computer or through a computer (data, information program, hardware driving file, or broadcast or other media content), that is, a computer object. A “computer object” is “text (document), symbols, graphics, mathematical formulas, images, video (moving pictures), audio, and other individual data, information, programs (executable file, software), a combination of application software and data handled by the same, which are handled inside a computer or through a computer”.
Note that a computer object can be handled even in a peripheral device of a computer 10, various related devices, or a computer system comprised of a plurality of computers connected by communication lines.
Next the method of “encryption” will be explained. In the present embodiment, representatively, encryption is performed using color.
In the encryption method utilizing color, color data which is expressed by “color” or “data relating to color” and showing the encrypted content is data for expressing the RGB or CMYK or other color. As explained above, the color data is stored in the hard disk 21 in the form of the color file 41. Below, the “color data” and “color file” are synonymous.
Here, “color” means the hundreds of colors which are handled as data in a computer and can be displayed on the screen of its display. The “color”, in principle, is a physical presence recognized by ordinary persons by their visual sense under visible light. If displaying the color on the screen of the display 22 of a computer 10, the color is recognized by the visual sense of a person as a display based on a combination of colors on the screen, that is, an image of a “color code”.
Note that the above “color data” is “color digital values”. The “color digital values” are numerical values dependent on the attributes of the color and are digital values assigned when handling color as data on a computer.
The computer object (original file) is converted by the encrypting means (converter) 44 to color data (color file). The conversion function of the encrypting means (converter) includes two types of conversion functions of “an information conversion type conversion function” and “an information substitution type conversion function”. These two types of conversion functions are selectively used.
If the above color data prepared by the information conversion/information substitution function of the converter 33 (function of information conversion or function of information substitution), that is, the function of “color encryption”, is displayed on the screen of the display 22, it is possible to display a specific color code image. Here, a “color code image” is synonymous with “color image”. The color data itself forms the above color file 41 on the hard disk 21 of the computer 10.
As explained above, the computer object (original file) is converted by the encrypting means 44 to the color file 41.
In the above, the computer object (original file) and the color file are in a correspondence relationship. Each of the computer objects (original files) is linked with a color file (color data) by the information conversion/information substitution function of the encrypting means 44.
The “information conversion/information substitution” function of the encrypting means 44 is comprised of the “information conversion (conversion)” function in the usual sense and the function of simple “information substitution (substitution)”. The information substitution function may also be a replacement function. For the conversion function of the encrypting means 44, whether “information conversion” or “information substitution” is determined by the content of the computer object. For example, byte data document data etc. are processed by information substitution processing, while compressed data of binary data and programs etc. are processed by information conversion processing. However, the byte data may be processed by information conversion processing and information substitution processing, but binary data can only be processed by information conversion. In actuality, “information conversion” and “information substitution” depend on the computer object and are separate matters, but are treated comprehensively as the information conversion/information substitution function of the encrypting means 44.
Further, conversely, if converting the color file 41 by the decrypting means (inverse converter) 42, it is returned to the computer object, that is, the original file.
The encrypting means 44, as explained later, uses the color conversion table which is provided in the information management file 33 (at least one of ONC correspondence table (ON correspondence, NC correspondence, and CO correspondence) or substitution program) or a color conversion key (color encryption key or encryption program) for processing, based on which the function of “information conversion/information substitution” is realized. Note that “color conversion table” also includes, in the broad sense, a “color encryption key”.
The above “0” means a computer object, “N” means a color number, and “C” means a color.
Furthermore, the decrypting means 42 similarly uses a color inverse conversion table (ONC correspondence table (at least one of ON correspondence, NC correspondence, and CO correspondence) or substitution program) which is provided in the information management file 33 or uses a color conversion key (color encryption/decryption key) for processing based on which a decryption (inverse conversion) function is realized.
The color inversion conversion table is the above color conversion table used in the reverse direction. In the correspondence table, the conversion origin and conversion destination were merely switched. It can be said to be substantially the same.
If a computer object (original file) is converted by the encrypting means 44 to a color file 41, it is not possible to directly view and learn the content of the original computer object based on the color file 41. When desiring to view the color file 41 as a computer object (original file), it is necessary to use the decrypting means 42 to restore it to the original state. However, this is only on the information management system 32 on the computer 10. In the state stored on the hard disk 21, the file is always in the form of the color file 41. The original file, that is, the computer object, does not exist. Due to this, it is possible to maintain the confidentiality of and protect the data, information, programs, etc. which are stored on the hard disk 21 of the computer 10.
Next, returning again to
In the flow of processing of the information management system 42 shown in
Next,
Note that in the constitution of the information management system 32 shown in
As explained above, the PC identification number 32-1 which is given to the information management system 32 was a condition for permitting legitimate startup at the computer 10. In the information management system 32, when the system executable file does not have the PC identification number 32-1 embedded in it, startup at the computer 10 is not possible.
That is, in the information management system 32, when the PC identification number 32-1 is not embedded, the “ONC correspondence table” and “color encryption key” 45 are not provided from the information management file 33, so the decrypting means 42 and the encrypting means 44 cannot be realized. Therefore, even if taking out a color file 41A from the hard disk 21 (step S11), for example, it is not possible to generate processes such as subsequent editing of the display file 43, updating of the color file 41A, and storage of the updated color file 41A (step S12).
The content of the information management file 33, that is, the file constitution etc. are shown in
The above encrypting means 44 and decrypting means 42 are realized by the function of “encryption/decryption”. In the function of “encryption/decryption”, the file is configured by the “ONC correspondence table identification number table”, “organization division table”, and “organization rank table”.
The substantive file of the ONC correspondence table identification number table is the “ONC correspondence table”. The ONC correspondence table, as explained above, is a color conversion table, ONC correspondence table (at least one of ON correspondence, NC correspondence, and CO correspondence) or substitution program. Further, the ONC correspondence table includes, in the broad sense, a color conversion key (color encryption key or encryption program) in concept. Furthermore, the “ONC correspondence table” includes content of inverse conversion for decryption.
Further the substantive file of the “organization division table” is a “division-wise ONC correspondence table”, while the substantive file of the “organization rank table” is a “rank-wise ONC correspondence table”. One example of the “division-wise OCN correspondence table” in the “organization division table” is shown in
In the tables shown in
In the table which is shown in
In the table shown in
The substantive file in the “file name double management table” is a “color file”. One example of the “file name double management table” is shown in
Further, in the “summary of security”, “file input/storage rejected” is described. This is sometimes for the purpose of controlling or limiting the input of original files other than color files and controlling permission/rejection in the case of a very important file or file requiring hardware management. This means limitation of the original files which can be input to or stored in the system. In other words, appended matter is added to the original file, the content of the appended matter includes requirements for input/storage of files, and permission/rejection of processing in the system is judged based on whether a file is provided with management matter/processing requirements complying with the appended matter.
In the “file operation restriction” function, the file is configured by “appended matter (file operation)”. The substantive files are the “original file”, “color file”, and “display file”. The relationship between the information management file 32 etc. and the “appended matter” will be explained later with reference to
Note that in the “summary of security” of the “file operation restriction”, when trying to input or store a file in the system from outside, permission/rejection of input/storage in the system is judged only for files provided with certain conditions so as to thereby enable control of input or storage. This is for the purpose of rejecting the malicious input/storage of files in the system.
In the “file information takeout prohibition” function, the file is configured by an “external recording device identification number”. An external recording device of an identification number (serial number) which is not registered at the information management system 32 is rejected at the computer 10.
Next, referring to
Note that in editing of the appended matter, configuration is also possible to as to include only a display function and not an editing function.
Further the “conditional execution control” of the “permission/rejection of preparation” includes “prepare” and “reject”. Further, the “coverage” includes a “color file” and “original file”. The “examples” includes “reject original file in “initialization processing of file”.
In the content of “comparison of PC identification numbers and comparison of appended matter (constant conditions)”, the “conditional execution control” includes “decrypt” and “reject”, the “coverage” includes “color file” and “original file”, and, furthermore, the “examples” includes “reject files not meeting conditions”.
In a configuration adding appended matter to the above ONC correspondence table, preferably the color numbers in the ONC correspondence table are formed as records, in the color number record field, functions corresponding to the appended matter are assigned, and in the record field having a function, appended matter is provided.
Note that the content of descriptions shown as appended matter, the appended conditions, etc. are suitably changed for realization of the categories.
Further, the appended matter 50C does not restrict the content of the appended matter and can be set based on need in accordance with the display file etc.
The appended conditions of the above appended matter are configured to be able to be freely set in content in accordance with the purpose of the file. Further, the control based on the appended conditions of the appended matter is configured to be performed automatically or manually. Note that when performing this manually, the display 22 of the computer 10 displays to the operator a message instructing manual operation. The operator performs the necessary manual operations based on the instruction message.
Next the content of the operation which is executed by the above hardware configuration (computer 10 etc.), various types of functional means (information management system 32, encrypting means 44, decrypting means 42, etc.) and files (information management file 33, color file 41, etc.) will be explained in detail.
Referring to
The operation will be explained in accordance with the flowchart shown in
At step S101, the information management system 32 is started up on the computer 10. At that time, the PC identification number is checked. When matching, startup and operation are permitted. The CPU 12 executes the information management system-use program whereby the information management system 32 is constructed on the memory 13.
At the next step S102, based on the content of the information management file 33, the encryption function of the information management system 32 (encrypting means 44) is used. As a result, in the memory 13, an encrypting means 44 (in
At step S103, based on the content of the information management file 33, the ONC correspondence table/color encryption key 45 is designated. This “ONC correspondence table/color encryption key 45” can be called a “key image”. The “key image”, that is, the “ONC correspondence table/color encryption key 45”, corresponds to a so-called “password” and is an element having the role of a unique password in the present invention.
At the next step S104, the original file to be encrypted is designated from the original file 51 which is stored in the hard disk 21. The designated original file 51A is taken out from the hard disk 21 (step S21 of
At step S105, the original file 51A which was taken out is processed by the encryption function, that is, the color encrypting means 44, for substitution or conversion to the color file 41A. In the color encryption processing at the color encrypting means, the ONC correspondence table and/or color encryption key 45 is used.
At the next step S106, the generated color file 41A is stored in the hard disk 21 (step S22). In this way, a large number of storage regions for color files 41 are formed.
At the final step S107, the original file 41A from which the color file 51A was generated as explained above is automatically deleted from the hard disk 21.
According to the above initial processing, after the initial processing, when all of the large number of original files 51 become color files 41 due to the color encryption (color encrypting means 44), all of the original files 51 disappear. In the hard disk 21 or other storage memory, the original files 51 are automatically deleted and disappear, so original files cannot be taken outside. Further in subsequent updating of content or other processing, inside the computer 10, only encrypted secure color files 41 are circulated forming a closed loop, so leakage of data etc. can be reliably prevented.
In the above configuration, regarding the original files 51 which were encrypted to color files 41 by the initial processing, after the initial processing, preferably all of the original files 51 are automatically deleted from the hard disk 21, but if necessary, it is also possible to configure the system so as to leave part or all of the original files 51. In this case, the data storage memory, that is, the hard disk 21, holds the original files 51 and the encrypted color files 41 corresponding to those original files after the initial processing, that is, the two sets of files coexist. This means that the system can be designed in any way.
Furthermore, only naturally, in the data storage memory, that is, the hard disk 21, the original files 51 before the initial processing and the color files 41 after the initial processing can be made to coexist. The original files 51 themselves are successively generated by ordinary functions and operations of the computer 10, so it is usual for color files 41 for which initial processing has finished and original files 51 in a state before initial processing to coexist on the hard disk 21 of a computer 10.
Furthermore, when storing an original file 51 on the hard disk 21 of a computer through a USB memory 31A or other external recording device 31 etc. and the original file 51 has a virus or other file embedded in it, this is removed by cleaning. That is, all of the files embedded inside the original file 51 other than the file encrypting software of the present invention are removed by cleaning at the time of the encryption in the initial processing.
Regarding the method of the above cleaning processing, setting removal/deletion markers, “setting of deletion” at the appended matter explained at
Next, referring to
The operation will be explained in accordance with the flowchart shown in
The constitution shown in
At step S201, the information management system 32 is started up on the computer 10. At that time, the PC identification number is checked. If matching, startup and operation are permitted. By the CPU 12 executing the information management system-use program, an information management system 32 is constructed on the memory 13.
Note that when the PC identification numbers match at the time of checking the PC identification numbers, the above-mentioned cleaning processing is executed in advance so that virus software is not launched.
At the next step S202, the decryption function (decrypting means 42) of the information management system 32 is used based on the content of the information management file 33. As a result, the decrypting means 42 is realized in the memory 13.
At step S203, based on the content of the information management file 33, the ONC correspondence table/color encryption key 45 is designated.
At the next step S204, the color file 41A to be updated is designated from the color files 41 stored in the hard disk 21. The designated color file 41A is taken out from the hard disk 21 (step S11 at
At step S205, the taken out color file 41A is processed by the decryption function, that is, the decrypting means 42, for substitution or conversion to the display file 43. In the decryption processing at the decrypting means 42, the ONC correspondence table and/or color encryption key 45 is used.
At step S206, the editing work of the display file 43 is performed and the content of the display file 43 is updated. Note that in this example, the example of a display file 43 was explained, but the same is true even for AP software.
At the next step S207, the display file 43 which was updated in the editing work is encrypted by the encrypting means 44 to a color file 41A.
Furthermore, at step S208, the color file 41A is stored in the hard disk 21 (step S12).
In the above, the computer object is stored in the hard disk 21 in the form of a color file 41. When updating the content, the information management system 32 handles the object as a display file 43 and performs editing work on only the memory 13. At this time, what is edited is only the display file 43 and not the original file. The “display file” means a file whose content is displayed on the display 22 and which can be edited using a keyboard 23 etc.
As shown in
According to the operation of the above-mentioned regular operational processing, the display file 43 is present in only the primary work region, that is, the memory 13, and cannot exist at all other storage regions or recording regions. The display file 43 is a volatile file on the memory 13. Further, the system is set up so that in operations on the display file 43, for “storage”, the original file is automatically deleted at all times. Further the system is set up so that for “print/transfer”, a stop mode is set which is released by input of a password.
Further, the printer can stop use or enable printing of the decrypted content by addition of the device identification number or appended matter. Due to this, the functions of the printer are limitatively used. In the appended conditions of the appended matter, for example, at the time of “permission/rejection of printing” under the printing conditions, printed output of the display file which is decrypted from the color file is rejected. Further, at the time of “printing permitted” under the printing conditions, printed output of the display file is permitted. Further, the printing conditions may include the printed range, number of copies, vertical/horizontal printing, etc.
Further, even if storing the content which was stored in the hard disk 21 in a USB memory 31A etc., walking around with it, and losing the USB memory 31A etc. for some reason or another, third parties cannot decode it without the OC correspondence table, so the content is extremely secure.
A modification of the flowchart showing the content of operation of the regular operational processing which is shown in
The flowcharts shown in
After step S204, step S301 is executed. At this step S301, the “appended matter” which is assigned to the color file is taken out from the designated color file.
At the next step S302, conditional execution control is performed in accordance with the appended conditions of the “appended matter” which was taken out. The specific content of step 302 is, for example, to end the decryption when NO and to execute the decryption function, take out the designated color file, and restore the display file when YES.
After step S206 relating to the editing of the display file etc., step S303 is executed. At step S303, conditional execution control is performed in accordance with the appended conditions of the “appended matter” which was taken out. The specific content of step 303 is, for example, to end the encryption when NO and to execute the encryption function and encode the edited display file by the encryption function to a color file when YES.
Finally, the color file which was changed in content is stored again in the hard disk 21 (step S208).
Next, referring to
In
The operation will be explained in accordance with the flowcharts shown in
Due to this step S401, on the computer 10, the information management system 32 is started up. At this time, the PC identification number is checked and, when matching this, startup and operation are permitted. By the CPU 12 executing the information management system-use program, the information management system 32 is constructed on the memory 13.
At the next step S402, based on the content of the information management file 33, the decryption function of the information management system 32 (decrypting means 42) is used. As a result, the decrypting means 42 is realized in the memory 13.
At step S403, based on the information management file 33, an 01\IC correspondence table/color encryption key 45 is designated.
At the next step S404, “file index management” is performed. The functional part of this “file index management” is shown by the block 62 in
At step S405, the original file name 64 is designated from the original file name list 63. This original file name is selectively input. The original files 64 are designated individually or all together.
At the next step S406, based on the file double management table 61, the corresponding color file identification number 65 and path (position information) are obtained from this.
At the next step 407, the obtained color file identification number 65 is used to designate the color file corresponding to the color file identification number. In the operation of regular operational processing for updating content which is circulating, when taking out a color file 41A fox updating, a color file having the above color file identification number is taken out (step S11 in
At step S408, the taken out color file 41A is processed by the decryption function, that is, the decrypting means 42, for substitution or conversion to a display file 43 for restoration. In the decryption processing at the decrypting means 42, an ONC correspondence table and/or color encryption key 45 is used.
At step S409, the editing work of the display file 43 is performed and the content of the display file 43 is updated. Note that in this example, the example of a display file 43 was explained, but the same is true for AP software as well.
At the next step S410, the display file 43 which was updated at the editing work is encrypted by the encrypting means 44 to the color file 41A.
Furthermore, at step S411, the color file 41A is stored in the hard disk 21 (step S12).
Further, as shown in
The characterizing configuration of
The characterizing configurations of
The characterizing configuration of
The characterizing configurations of
In the explanation of the above embodiments, the explanation was given with reference to an example of use of a hard disk (HD) 21 as the data storage memory, but the system may be similarly configured even when using another data storage memory, that is, an external recording device 31 (USB memory 31A or an FD, CD, or other external recording device 31B).
Next another embodiment of the information management system 32 according to the present invention will be explained. This embodiment is a modification of the operation of the information management system 32 explained above.
First, referring to
Further, in the above, in a request for moving or copying an original file before encryption initial processing to an outside USB memory etc., the original file before the encryption initial processing is encrypted to an encrypted file at the point of time when the movement destination or copy destination is designated.
In the configuration of above embodiments, it is preferable to add a memo region part to the original file which is encrypted to a color file and to add to the memo region part for example the “PC identification number”, “HD serial number”, or other information. By employing this configuration, password authentication becomes unnecessary.
Next, referring to
With this encryption system, the data to be encrypted (plain text) is subjected to an XOR operation in bit units by an encryption key, which is prepared by the following routine, so as to prepare an encrypted file. The data to be encrypted and the encryption key are equal in size. Further, conversely, with this encryption key, the encrypted file is again subjected to an XOR operation and decrypted. This encryption is a common key type of encryption.
In
For the key image 101, typically a color photo image is used, but the invention is not limited to this. For the color photo image, for example a not problematic suitable image which is shown in a book etc. is used. Furthermore, for the color photo image, it is also possible to use a similar image which is shown on the display screen of an e-book reader.
As the original file 102, in this example, document data which is displayed on a browser is used.
The processing (algorithm) of color encryption shown in
Step (A): This step is a step of extracting the data 111 (bit array, byte string) from the key image 101.
What extent of length (number of bits) to make the extracted array is freely determined based on the relationship with the following generation of a random number. Since this key image 101 is used to generate the later mentioned encryption key, the key image plays a role similar to a password which is utilized at the time of ordinary encryption. The size of the extracted data 111 is made about half of the image, that is, several thousands to several tens of thousands of bytes as a general yardstick. Further, the grounds for an extraction size being satisfied for which a full search is de facto impossible from the standpoint of current computer performance will be explained later in the section on “regarding cracking by full search”.
Step (B): This step is a step of generating a random number.
Here, the “random number” means all pseudo random numbers. The above extracted data is set as the initial value (seed) of the random number generator 112 and a random number array 113 is generated. Note that it is desirable that the difference in the random number array 113 due to a difference in the initial value be sufficiently noticeable.
Step (C): This step is a step of preparing an encryption key A.
The above random number array 113 is divided into suitable lengths (fixed lengths), the parts are used as the input values (keys) for the hash function 114 to find hash values, and these are combined to prepare the encryption key A. This encryption key A, together with the later explained file key, enables reproduction of an encryption key. For this reason, use such as movement and storage at a location separate from the encryption application may be considered.
To answer this, other than the viewpoint of the encryption strength, it is necessary to consider the traffic load on the network and determine the size (compactness) so that handling of data becomes possible without obstruction. This is named the “size suitability” of the encryption key A. This becomes a numeral value of a natural range. The number of times of use of the hash function (repetition) is determined conditional on the sum of the lengths of the hash values (output length) meeting this size suitability.
Note that this is conditional on the key (input) length of the hash function being sufficiently larger than the output length.
Step (D): This step is a step of preparation of an encryption key B.
The above encryption key A is used as an initial value (seed) for generation of a random number array 116 at the random number generator 115. The hash function 117 is used to divide the random number array 116 into suitable lengths, find hash values, and combine these to prepare a suitable length of a bit string which is then called an “encryption key B”. Partial arrays of this encryption key B are extracted and rearranged to obtain an encryption key. Refer to the “shuffle” of step (F) shown in
The operations up to the above steps (A) to (D) can be performed at the time the key image 101 is determined. This is preferable. The routine for encrypting data to be encrypted (plain text) (steps (E) to (H)) assuming this will be explained below.
Step (E): This step is a step of preparation of a file key. In this step, the data to be encrypted (plain text) 102, that is, the original file 102, is entered into the hash function 118 to obtain a bit array which is used as the file key 119.
Step (F): This step is a step of preparing a random number array for shuffling use. At this step, the file key 119 is used as the initial value to allow the random number generator 120 to generate the random number array 121 for shuffle use.
Step (G): This step is a step of preparation of an encryption key.
The above prepared encryption key B and shuffle-use random number array 121 are used for shuffling 122 to prepare an encryption key 123.
The shuffle-use random number array 121 is divided into suitable lengths of “L” bits (fixed).
As the condition of “L”, 21≧(bit length of encryption key B) is suitable. The “L” bit parts of the divided bit array are converted to numerical values to obtain ai, bi (i=1, 2, . . . ) (shown in
Next, the remainders after dividing ai and bi by the bit length of the encryption key B are designated as ai* and bi*.
That is,
ai*=ai mod (bit length of encryption key B)
bi*=bi mod (bit length of encryption key B)
At this time,
0≦ai*≦(bit length of encryption key B)−1
0≦bi*≦(bit length of encryption key B)−1
Therefore,
1≦ai*+1≦(bit length of encryption key B)
1≦bi*+1≦(bit length of encryption key B)
Now, compare the magnitudes of ai* and bi* and designate the larger one as “c” and the smaller one as “d”.
The c+1 bit to d+1 bit bit arrays of the encryption key B are designated as Ei (bit length of ei) and combined with Ei−1.
At this time,
e
1
+e
2
+ . . . +e
i−1
+e
i<bit length of plain text
If so, continuing after this, Ei+1 is prepared for ai+1, bi+1, and the combined array E1+ . . . Ei+1 is prepared. This is continued until the sum of the lengths exceeds the bit length of the plain text.
If
e
1
+e
2
+ . . . +e
i−1
+e
i≧plain text bit length,
the combined E1+E2+ . . . +Ei−1+Ei of the bit array is made the encryption key 123.
Step (H): This step applies an XOR operation to the data to be encrypted (plain text), that is, original file 102, in bit units by the encryption key 123 and encrypts the result to prepare a color file (encrypted file) 103.
When decrypting the color file (encrypted file) 103 prepared in the above way, the encryption key B and the file key 119 are used to reproduce the routine of steps (D), (F), and (G) shown in
Next, cracking by a full search relating to the color encrypting method of the present invention will be explained.
Assume that a 10-byte (10 alphanumeric) password setting is cracked by a full search in 10−n seconds (if n=3, 1 millisecond, if n=6, 1 microsecond, and if n=9, 1 nanosecond).
At this time, let us calculate in about how long a time a 10 times greater 100 byte (100 alphanumeric) password setting can be cracked.
When employing the key image according to the present invention, this corresponds to setting a password of thousands to tens of thousands of characters as explained before.
When setting a 10 byte password, the conceivable cases become
25610=(28)10=280 (1)
Similarly, in the case of 100 bytes, they become
256100=(28)100=2800 (2)
If, to crack (1), it takes 10−n seconds, while to crack (2), it takes x seconds, then
280:2800=10−n:x
x=(2800)×10−n/280=2720/10n(seconds)
If converting this to years,
2720/(10n×60×60×24×365)(years)
To show how large an order of magnitude (y digits) this value is by the binary method, the following is set:
10y=2720/(10n×60×60×24×365)
If taking the (natural) log of the two sides,
y log 10=720·log 2−n·log(10×60×60×24×365)
y=(720·log 2−n·log(10×60×60×24×365))/log 10
At this time,
when n=3y≈191
when n=6y≈166
when n=9y≈140
Now then, a CPU with a clock frequency of 1 GHz has a basic circuit which performs 1 billion (=109) operations per second. Assume that a single operation enables one case in a full search to be judged. If so, the time required for a full search of a 10 byte password by an nGHz performance CPU would become,
280/(n×109)(seconds)=280/(n×109×60×60×24×365)(years)
Even if using a CPU of a performance of about 1000 times that of a 1 GHz CPU (n=103),
280/(1012×60×60×24×365)(years)≈40,000 years
of time would be required. Considering this, it will be understood that the assumption that a 10 byte password setting could be cracked in 1 millisecond ( 1/1000th of a second) is extraordinarily generous, but the calculations will be proceeded with for maintaining this.
If, by a full search, a 10 byte (10 alphanumeric) password setting can be cracked in 1 millisecond ( 1/1000th of a second), the time required for cracking a 100 byte (100 alphanumeric) password can be expressed by an about 190 order of magnitude of number of years.
By way of note, the time from the creation of the earth to the present is believed to be about 5 billion years. This corresponds to an order of magnitude of at most about 10.
Compared with the age of the earth, the time required to crack a 100 byte password is about 10190/1010=10180=(1090)2 times larger. Just how big this is can be understood from the following.
Assume that the total number of atoms in the entire universe is (somewhat largely) 1090 and that we count each of these (by the same speed).
If counting up the total number of atoms repeatedly for each atom, the count will end at 1090×1090=(1090)2.
If the time required for this operation is assumed as the time required for cracking a 100 byte password, the 5 billion years of the “age of the earth” would only correspond to the time required for counting one atom.
In the above color encrypting method, at step G for preparing the encryption key, shuffling 122 was performed to prepare the encryption key 123, but it is also possible instead to use the technique of “block encryption”.
Below, first, “block encryption” will be explained.
A function in which an Nb bit block and an Nk bit key are input and from which an Nb bit block is output as encryption is called “block encryption (type of common key encryption”. This is comprised of two algorithms of encryption E and decryption E−1. When k is a length Nk bit key and m is a length Nb bit plain text,
E
k
−1(Ek(m))=m
stands. That is, this shows that what has been encrypted can be decrypted.
As typical “block encryption”, there is the AES (Advanced Encryption Standard) established by the NIST of the U.S. or the MISTY1 or Camellia etc. made by Japan.
Next the encryption method using the above “block encryption” will be explained.
As one request made on encryption, encrypted loading after objective assessment by a public organization is sometimes sought. For example, on Feb. 20, 2003, the Japanese Ministry of Internal Affairs and Communications and the Japanese Ministry of Economy, Trade, and Industry announced a list of recommended encryption for electronic government. The algorithm in the case of using a common key type of block encryption for encryption to respond to this request will be explained below. Note that, as the attributes of the block encryption used, attributes beyond those of the above “block encryption” are assumed to not be sought.
The process until preparing the “encryption key 123” after the “shuffling 122” in
First, the encryption key is divided in lengths of Nk bits. These bit arrays are expressed by k1, k2, k3, . . . , ki, . . . . Similarly, the text to be encrypted (plain text) is also divided into lengths of Nb bits. These bit arrays are expressed by m1, m2, m3, . . . , mi. At this time, block encryption (function) E is used to replace the bit arrays mj by Ekj(mj) (j=1, 2, 3, . . . ) to thereby encrypt the text to be encrypted (plain text).
Further, to decrypt such encrypted data, an encryption key and E−1−1 are utilized to apply Ekj−1 to the bit array Ekj(mi) and return it to Ekj−1(Ekj(mj))=mj (j=1, 2, 3, . . . ) for decryption.
In the explanation of the embodiments given above, the computer system 10 shown in
If the computer system 10 is a server, the server constituted by the computer system 10 is connected through a network to a plurality of clients (other computer systems) and send and receive various types of files with these clients. These various types of files are handled and encrypted as original files. According to the configuration shown in
According to
The above encryption processing 203 and decryption processing 205 are basically the same in content as the color encryption processing (algorithm) explained in
According to the configuration shown in
Function as “Gatekeeper”: The server 200A has the role of maintaining the same security as for example the check-in counter at an airport. A client 200B can only access a server 200A and send and receive information with the server 200A on the condition of him or her legitimately having an authentication ID (legitimate user) and able to legitimately access the server 200A which is installed in the in-house network etc. (legitimate used machine). A client or external computer which does not meet these conditions cannot access the server 200A. Due to this, by limiting access to persons able to legitimately access the server 200A, a certain degree of security can be secured. Furthermore, a person who illicitly accesses the server 200A will leave his or her machine information in the records of the server and can be searched for illicit intrusion.
Function of “Key Image Management”: The key image 201 corresponds to a “password” and is stored in the server 200A. The key image 201, even if copied, taken out, and lost at the outside of the server 200A, can be acquired again. Further, the key image 201 differs from a conventional ordinary password in that even if the key image 201 is leaked together with an encrypted file, it is not enough for decryption. The server 200A does not record the image data itself of the key image. It encrypts and stores just enough data for decryption.
Function of “Communication Relay”: In an in-house network etc., it would be convenient if it were possible to attach an encrypted file 203 to e-mail sent to users in the firm. Even if the encrypted file 203 were leaked to the outside, it could only be decoded by an authorized user able to access the server 200A, so the file has high security. Due to this, in the in-house network etc., a configuration of “encryption of a file by a shareable mode” is realized. If sending an encrypted file 203 to another user in this way, it is not necessary to simultaneously send a key for decrypting the encrypted file 203. The other user obtains the key image information by another means from the server 200A. In this way, the server 200A functions as a relay device between a user which has prepared an encrypted file 203 and another user which decrypts the encrypted file 203.
Function of “Web Service”: As a means for communication between a client 200B and a server 200A, a “web service” is used. This web service is also called a “SOAP (Simple Object Access Protocol)”. The communication protocol of a web service is exactly the same as that which a web server uses. In general, a web server sends a media stress display standards on a web browser, that is, the HTML, to the client (web browser). On the other hand, a web service sends and receives a media called XML which stresses data communication. A web service uses the HTTP as the communication protocol, so if a PC which can use a web browser to view a website, any PC can utilize the web service. That is, there is no need to set complicated PC settings. Furthermore, in accordance with need, communication between the server 200A and the client 200B can be encrypted using established encryption technology of web servers.
In general, according to the functions of the information management system according to the present invention, which is built into a PC (including a client) or a server etc. like the above and which has encryption software using color files, or according to the framework for such encryption, there are the following characterizing features:
The present encryption software, when using data once encrypted to a color file, confirms that the user or used machine is legitimate, then automatically decodes the data to the original file (“plain text” etc.) and transfers control over to an application which is concluded to be related to the original file. Therefore, as explained with reference to
To decode the encrypted file 203, as shown in
Further, the encryption software of the present invention has the advantage of enabling both “construction and loading of uncrackability making it impossible to decrypt an original file (plain text) from an encrypted file (encrypted text)” and “provision of a function enabling authorized users to proceed with work without over consciousness of encryption and decryption and preventing in advance leakage of data to the outside due to one's own carelessness or a malicious third party”.
A color file which is encrypted by the present encryption software is without contention a single image. According to the present encryption software, the encrypted file is envisioned not as a “meaningless image”, but a color file which does not exclude the possibility of being able to be read if desiring to read its meaning. This point is the core of the encryption concept and is not found in existing encryption software.
That is, conventional encryption software was conceived as so-called secondary insurance with the assumption/framework that even if an encrypted file were leaked to the outside, it could not be or substantially could not be cracked, but leakage to the outside had to be avoided in any case. As opposed to this, the characteristic of the color file of the present invention, which has the ultimate uncrackability of cracking being meaningless, is that important data is not concealed, but rather is circulated over networks freely as a color file which can be selectively distributed using the decryption function of the present encrypting software as a decryption key.
In particular, in the case of delivering data to an unspecified number of parties such as with delivery of movies and downloading of e-books and music, the information is converted to a color file for circulation. The present encryption software shows its true value in this. At that time, the encrypted color file is substantially the same in size as the original file (plain text). There characteristic results in the advantage that current data compression schemes can be utilized as they are.
The configurations, shapes, sizes, and relative layouts explained in the above embodiments are only shown schematically to an extent enabling the present invention to be understood and worked. Therefore, the present invention is not limited to the embodiments explained above and can be changed in various ways so long as not departing from the scope of the technical ideas shown in the claims.
The information management system according to the present invention etc. manages information which is handled on a computer or through a computer. It converts the file information of all files (document files or executable files including programs etc.) to typically color files. By doing this, routine work on the computer is possible. Therefore, while enabling use of the computer without any odd feeling, this can be expected to be utilized for stopping, blocking, preventing, and protecting against leakage, preventing destruction, and preventing tampering and alteration by malicious third parties. Therefore, the invention can be worked in fields where there is concern over leakage in use of computers and where leakage may cause damage. Great use and application in numerous industrial fields where leakage is a concern can be expected.
The present disclosure relates to subject matter contained in Japanese Patent Application No. 2009-290282 filed on Dec. 22, 2009, the entire contents of which being clearly incorporated herein by reference.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2009-290282 | Dec 2009 | JP | national |
