JP2003099307A - Databank security system - Google Patents

Abstract

(57) [Summary] [PROBLEMS] To provide a data bank security system that can easily back up data and ensures security management. SOLUTION: Data of an analysis device 9 is stored in a storage device 8c, and is transmitted from a communication means 8e to a firewall 4 provided at an entrance of a bank-side net 5 via the Internet 6 for backup for encryption. Decryption of data, digital signature, virus check, and the like are performed, user authentication is performed using the user name and password in the user management ledger 3a of the domain controller 3, and the data is stored in the user data storage location 2a of the file server 2. Then, the user PC 8 transfers the storage fee to the account file 7d of the transaction bank 7 on the bank side. Then, the storage information is periodically sent from the bank to the user.

Description

Description: BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to data backup of a personal computer and the like, and more particularly, to a method of preparing data when a problem occurs in a system or software to be used. The present invention relates to a data bank security system which is prepared by backing up prepared data in a storage device such as a hard disk or an MO in advance and as an alternative means. 2. Description of the Related Art In an apparatus using a computer, a program such as a magnetic tape, a magnetic disk, an HDD, or a DV is prepared in preparation for destruction or loss due to various troubles.
Backups that are saved and stored in advance in auxiliary storage devices such as D, CD-R, and FD are performed. When a program or data is destroyed due to a hardware or software failure or the like, the data can be restored from this backup, and the changes made since the time of the backup can be reflected to recover the original normal state. Large-scale online and general-purpose computers
The real-time processing system takes various forms, such as taking regular backups, performing automatic backups all the time to reduce the recovery time, and reducing the amount of data to be saved by differential backup that saves only the changed parts. Has been made. Usually, four backup systems shown in FIG. 3 are used in a computer system. (1)
A dual system is a method in which two computers and a database monitor the state of each other and perform the same processing.
(2) In a duplex system, one database is composed of two computers (active and standby), and the standby side usually performs another job. (3) The periodic backup system periodically stores the auxiliary storage device (M
O, CD-R, DVD, etc.) for backup. (4) The disk mirroring system
The HDD is duplicated, and a plurality of data having the same contents are prepared in the shared area of the disk device. In a normal personal computer, (3) a regular backup system is used.
D, MO or PD, CD-R, DVD-RAM, streamer, etc. are copied and backed up. FIG. 4 shows a block diagram of a user-side PC 10 in which a personal computer is incorporated in the analyzer 9. The analysis device 9 is controlled by the CPU 10a by analysis software installed in the HDD 10b, and analysis data obtained by the analysis device 9 is transmitted to the display device 10 via the I / F 10f.
d and is stored in the HDD or the like of the storage device 10c. Then, the data is stored in the FD, MO, CD-R, DV of the auxiliary storage device 10g by using software such as a backup utility installed in the HDD 10b.
D, etc., and are backed up and stored. [0005] Conventional backup of files and data is performed as described above. Specifically, in order to make a backup with the Windows (registered trademark) OS, "Start" is used. "Program" in the menu
And click "Accessories"-"System Tools"-"Backup" in the submenu. If the backup tool is not installed,
In "Control Panel", select "Windows" in the "Add / Remove Programs Properties" dialog box.
"ws file" tab, "Mic" in "system tool"
Specify "software backup" and perform additional installation. Then, Microsoft Backup
Will start, find the backup on your tape drive or removable disk drive and click on it.
A dialog box with the message "Welcome to Microsoft Backup" will appear.
Choose to create a new backup job, open an existing backup, or restore the backed up files. Then, select files and folders to be backed up according to the backup wizard. Click “Next”, compare the data of the backed up file with the original file, and set whether to perform compression at the time of backup, click the “Next” button, name the file Finally, click the "Start" button to perform the backup process. Then, the "Backup progress" dialog box opens, displaying the number of files, bytes, and elapsed time of the files to be backed up. When the process is completed, a message indicating the completion is displayed. [0006] Backing up as described above is a surprisingly difficult task, and there is a problem that a lot of time is spent therefor. If another professional backup agency can easily do this,
Even paying will be very helpful. At that time,
To send a message and data stating "Please save this data anew", the sending operation is easy and can be requested easily, and the security management can only be performed with a system that is reliably guaranteed. There is. [0007] The present invention has been made in view of such circumstances, and data backup can be easily requested to a specialized backup organization, and security management can be reliably guaranteed. It is intended to provide a bank security system. In order to achieve the above object, a data bank security system according to the present invention is arranged such that a contract is made to pay a data storage fee, and a data is transferred from a user side PC to a file server of the bank side PC. , And the bank periodically distributes the stored information as text, or
In a data bank security system that delivers data to an individual via storage media, the bank that stores the data
PC on the bank side, a firewall provided between the LAN and the Internet for checking the security of transmitted data, a domain controller connected to the LAN for checking a user name and password, and a file server for storing the transmitted data And a storage device storing the data, an HDD storing dedicated software necessary for the transmission of the data, a display device, and a user PC including a communication unit, and a user side transmitting the data to the bank side. Means for periodically paying a data storage fee. The data bank security system of the present invention is configured as described above. The user side and the bank side make a contract, the backup data of the user side is transmitted to the bank side, and the data is securely stored in the file server. This is a system in which storage information of data is periodically delivered in text or delivered to an individual via a storage medium, and as a compensation, a storage fee is electronically transferred from the user to the bank. The user PC stores data banking contract software, backup data transmission software, anti-virus software, bank account transfer software, encryption / decryption software, and electronic signature software on the hard disk,
It is periodically connected to the PC on the bank side via the Internet by communication means, the data transmitted from the user side is checked by the firewall provided on the net on the bank side, and the user name and password of the user management ledger of the domain controller are checked. After authentication, it is stored in the user data storage area of the file server. And the user's PC
Transfers the custody fee to the house bank account file. The bank-side PC stores periodic data distribution software and transfer account confirmation software on the hard disk, and periodically distributes the information of the stored data stored in the file server as text or delivers it to the individual via a storage medium. Then, the bank-side PC confirms that the storage fee has been transferred to the account file of the bank. [0010] As described above, the backup of the data on the user's PC is transmitted to and stored in the specialized data bank organization via the Internet, so that the user saves a huge amount of time spent on the backup. be able to. And the data transmission, the encryption is checked by the firewall, without being infected by viruses,
After the user name and password registered in the user management ledger of the domain controller are authenticated, the file is securely stored in the user data storage location where the file server security is secured. In addition, since the storage information is periodically sent to the user side, the user can feel safe. An embodiment of a data bank security system according to the present invention will be described with reference to FIG. FIG. 1 is a diagram showing a block configuration of a data bank security system of the present invention. The data bank security system comprises a bank PC 1 for storing data, a firewall 4 provided between the LAN and the Internet for checking security of transmitted data, a user name and a password connected to the LAN. , A file server 2 for storing transmitted data, and a storage device 8c for storing data via the I / F 8f from the analyzer 9 to a user transmitting the data, and necessary dedicated software. , A display device 8d for displaying information,
Communication means 8e for transmitting data to the bank side, CPU 8a
PC 8 connected to the Internet 6 and transmitting data, and a bank PC 7 having a bank-side account file 7d and capable of transferring an electronic account. The PC 1 on the bank side is LA by the CPU 1a.
N can be connected to the file server 2 by the I / F 1e to operate the data in the user data storage location 2a. Then, the user data storage location 2 is periodically
The data information a is transmitted to the user PC 8. Periodic data distribution software for that purpose is stored in the HDD 1b. Transfer account confirmation software for confirming that the user has transferred the data storage fee to the account file 7d of the bank PC 7 is also stored in the HDD 1b. Then, data such as the record of transmission and reception with the user side PC 8 is stored in the MO, CD-R, DAT tape or the like of the storage device 1c, displayed and confirmed on the display device 1d, and can be passed to the user side as information. . The firewall 4 is a gateway server provided between the LAN of the bank-side net 5 and the Internet 6, manages data communication,
This server protects the internal network from external attacks and unauthorized access. The encryption and digital signature of the data transmitted from the user PC 8 and the virus check are performed here. Domain controller 3
A name that specifies a computer (server) on the Internet is internally converted into an IP address to manage network resources. Here, "Account name ＠
A domain name composed of "subdomain name / organization name / organization type code / country code" is identified, and the matching with the user name and password stored in the user management ledger 3a is checked. The file server 2 provides a storage device to the client, has a user data storage location 2a, and stores backup data sent from the user PC 8 here. User PC
8 is software required for the HDD 8b by the CPU 8a,
For example, analysis software, data banking contract software,
Backup data transmission software, anti-virus software, bank account transfer software, encryption / decryption software,
The electronic signature software is stored, and the I / F 8f
Is obtained in the storage device 8c, the information is displayed on the display device 8d, the data is periodically connected to the bank PC 1 via the Internet 6, and the backup data is transmitted by the communication means 8e. You. Data is transmitted from the PC 8 of the user to the file server 2 of the bank, the storage information is periodically distributed as text from the bank, and a contract for paying the data storage fee by the user is made using data banking contract software. Then, antivirus software is made resident, data is stored in the storage device 8c using analysis software, encoded by encryption / decryption software, data is signed by electronic signature software, and backup data transmission software is used. Then, the backup data is transmitted to the file server 2 on the bank side. The transaction bank PC 7 has a bank account for storing data in an account file 7d of a storage device 7c, and uses the bank account transfer software stored in the HDD 8b from the user PC 8 to make a transaction. Bank PC7
Is electronically transferred to the account file 7d of the storage device 7c. In the house bank PC7, the CPU7
By operating the HDD 7b by a, the storage fee data of the account file 7d can be viewed on the display device 7e. Then, the transfer of the storage fee of the account file 7d of the bank PC 7 can be confirmed from the bank PC 1 by the transfer account confirmation software stored in the HDD 1b. Next, the operation of the data bank security system will be described. First, from the analyzer 9 operated by the analysis software of the HDD 8b, the user PC
A large amount of data is taken into the storage device 8c of FIG. Then, in order to encode the data by the encryption / decryption software, sign the data by the electronic signature software, make the antivirus software resident, and back up this data, the user PC 8 is connected to the bank PC via the Internet 6.
1 is connected. Then, the data is transmitted to the bank side using backup data transmission software. FIG. 2 shows a screen of the backup data transmission software. When this software is started, a folder / trib view 11 is displayed on the screen, and a button for backup transmission 12 and a button for cancel 13 are displayed on the right side. When a folder in which data in the storage device 8c is stored is selected and the button of the backup transmission 12 is pressed, the data of the selected folder is transmitted to the file server 2 via the Internet 6. The bank-side net 5 is connected to the gateway server of the firewall 4 and here the user-side PC
Here, the encryption and digital signature of the data transmitted from 8 and the virus check are performed. What passed the gate enters the domain controller 3 via the file server 2, the domain name is identified, and the match with the user name and password stored in the user management ledger 3a is checked. Those that match are stored in the user data storage location 2a of the file server 2.
Then, the storage information is periodically delivered from the bank as text via the Internet 6 or delivered to an individual via a storage medium. Then, the user PC 8 electronically transfers the data storage fee to the bank-side account file 7d of the transaction bank PC 7 using bank account transfer software. The data bank security system according to the present invention is configured as described above. The user PC and the bank PC are connected via a network, and backup data is stored from the user to the bank. A contract for paying a fee is concluded, backup data of the used device is periodically transmitted from the user PC to the file server on the bank side, and the storage information is periodically transmitted to the user side from the bank side. Therefore, the backup of the data on the user's PC is transferred to a specialized data bank organization, so that the user can save an enormous amount of time spent on the backup. In addition, the data transmission was performed by a firewall (gateway server) provided on the bank-side net to decrypt the code, check the digital signature, check for virus intrusion, and was registered in the user management ledger of the domain controller. User authentication such as a user name and a password is performed, double-checked, and stored in the user data storage area of the file server.
As a result, unauthorized access, data leakage,
Viruses can be safely stored without any crimes or troubles caused by connecting to the Internet. Also,
Since the storage information is periodically sent to the user, it is safe. This eliminates the need for an individual or company to purchase a backup-only device, thereby reducing costs.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a diagram showing one embodiment of a data bank security system of the present invention. FIG. 2 is a diagram showing a window screen of backup data transmission dedicated software of the data bank security system of the present invention. FIG. 3 is a diagram showing a method of a data backup system. FIG. 4 is a diagram showing a user PC for data backup of a conventional analyzer. [Description of Signs] 1 ... Bank side PCs 1a, 7a ... CPUs 1b, 7b, 8b, 10b ... HDDs 1c, 7c, 8c, 10c ... Storage devices 1d, 7e, 8d, 10d ... I / F 2 ... File server 2a ... User data storage location 3 ... Domain controller 3a ... User management ledger 4 ... Firewall 5 ... Bank side net 6 ... Internet 7 ... Transaction bank 7d ... Account file 8, 10 ... User side PC 8e ... Communication means 9 Analysis device 10g Auxiliary storage device 11 Folder / triview 12 Backup transmission 13 Cancel

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 17/60 342 G06F 17/60 342 ZEC ZEC

Claims (1)

Claims 1. A contract is made to pay a data storage fee, data is transmitted from the user PC to the file server of the bank PC, and the storage information is periodically distributed as text from the bank, or In a data bank security system for delivering data to an individual via a storage medium, a bank for storing data, a PC for the bank, a firewall provided between the LAN and the Internet for checking security of transmitted data, and the LAN for the LAN A domain controller that is connected to the server and checks the user name and password, a file server that stores the transmitted data, a storage device that stores the data on the user side that transmits the data, and special software required for transmitting the data User-side PC with stored HDD, display device, and communication means
And a means for periodically paying a data storage fee from the user side to the bank side.