JP2006195719A - Nonvolatile memory device, nonvolatile memory system, data erasure method, program, and storage medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent illegal use of data for maintaining confidentiality by automatically erasing data stored in a nonvolatile memory, and to erase the data only when required irrespective of data volume stored. <P>SOLUTION: This nonvolatile memory device is provided with a means 11 for detecting attachment/detachment thereof from an information processing apparatus, and a timer means 12 for starting timing when the detachment is detected. When the attachment is detected, the timer means 12 is suspended, and an identification code stored before hand in the information processing apparatus is read to determine whether to coincide with a correct identification code. When the difference between these identification codes is determined, the subsequent timing operation is started. The completion of the timing operation by the timer means 12 for a prescribed time triggers an erasure instruction, thereby an erasure means 15 erases the storage contents of a memory part 16. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a nonvolatile memory device, a nonvolatile memory system, a data erasing method, a program, and a storage medium.

  Conventionally, in various electronic devices, a nonvolatile memory device has been widely used as a memory device for storing and holding data (including programs).

  As a conventional technique for automatically erasing data stored in a nonvolatile memory device to prevent unauthorized use of the data and to maintain confidentiality, for example, there is a technique described in Patent Document 1.

  That is, in the technique of Patent Document 1, a set of data is distributedly stored in a plurality of nonvolatile memory devices, and when any of these nonvolatile memory devices is illegally removed from the device body, The stored contents of the nonvolatile memory device are automatically deleted.

  Japanese Patent Application Laid-Open No. 2004-228688 discloses a technique for preventing confidential use of data and maintaining confidentiality by permitting data reading of the nonvolatile memory device only when the input code is correct.

In Patent Document 2, when a predetermined time has elapsed after the completion of data reading, the security code is improved by erasing the input code code data.
JP 2002-073422 A (Claim 2, FIG. 1) Japanese Patent Laid-Open No. 2001-125832 (FIG. 2)

  However, in the case of the technique of the above-mentioned Patent Document 1, since a group of data is stored in a plurality of nonvolatile memory devices in a distributed manner, there is a problem that a plurality of nonvolatile memory devices are required, and a plurality of pieces of data are collected. The troublesome processing of storing in a non-volatile memory device in a distributed manner is required.

  In addition, since at least one nonvolatile memory device can be removed illegally, the data stored in each nonvolatile memory device is a small-sized data piece that does not make sense as information alone. There is a need to. For this reason, if the amount of data is large, the required number of nonvolatile memory devices becomes enormous.

  In addition, when the nonvolatile memory device is removed, the data is always erased regardless of the reason. Therefore, there is a problem that the data is erased even when the nonvolatile memory device is removed for some valid reason.

  Further, the technique of Patent Document 2 does not have a function of erasing data stored in the nonvolatile memory device. Furthermore, the technique of Patent Document 2 does not assume that the nonvolatile memory device is attached or detached. Therefore, when the nonvolatile memory device is attached or detached, there is a problem that the data read restriction function does not function effectively and the data is illegally used.

  The present invention has been made to solve the above-described problems. By automatically erasing data stored in the nonvolatile memory device, unauthorized use of the data is prevented and confidentiality is maintained. In a non-volatile memory device capable of erasing data regardless of the amount of data to be stored and only when the data should be erased, a non-volatile memory system including the non-volatile memory device, and a non-volatile memory device It is an object to provide a data erasing method, a program thereof, and a storage medium storing the program.

  In order to solve the above problems, a nonvolatile memory device according to the present invention is a nonvolatile memory device configured to be detachable from an information processing device, when a memory unit that stores data in a nonvolatile manner and a predetermined trigger occurs. , An erasure instruction means for issuing an erasure instruction for erasing data stored in the memory section, and an erasure means for erasing the data stored in the memory section in response to an erasure instruction from the erasure instruction means. It is characterized by that.

  In the nonvolatile memory device of the present invention, when the attachment detection unit detects attachment of the nonvolatile memory device to the information processing device, and the attachment detection unit detects attachment of the nonvolatile memory device, An identification code requesting unit for requesting reading of an identification code stored in the apparatus from the information processing apparatus, and an identification code read from the information processing apparatus as a result of a request by the identification code requesting unit are preset. Identification code determination means for determining whether or not the identification code matches, and the erasure instruction means is triggered by the determination by the identification code determination means that the identification code does not match. It is preferable to issue an erasure instruction.

  In the nonvolatile memory device of the present invention, a removal detection unit that detects removal of the nonvolatile memory device from the information processing device, and a time measurement for a predetermined time when removal of the nonvolatile memory device is detected by the removal detection unit Timing means for starting operation, attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device, and timing by the timing means when attachment of the nonvolatile memory device is detected by the attachment detection means A timekeeping operation pausing unit for pausing the operation, and a request for reading an identification code stored in the information processing device in advance from the information processing device when the attachment detecting unit detects the attachment of the nonvolatile memory device Identification code requesting means for performing the request, and the request by the identification code requesting means As a result, the identification code read from the information processing apparatus matches the identification code determined by the identification code determination means for determining whether or not the identification code matches a preset correct identification code. If it is determined that the identification code does not match with the time counting operation stopping means for stopping the time measuring operation by the time measuring means and the identification code determining means, the continuation of the time measuring operation by the time measuring means is started. It is preferable that the time counting operation restarting means is further provided, and the erasing instruction means issues the erasing instruction triggered by expiration of a time counting operation for a predetermined time by the time counting means.

  In the nonvolatile memory device of the present invention, a removal detection unit that detects removal of the nonvolatile memory device from the information processing device, and a time measurement for a predetermined time when removal of the nonvolatile memory device is detected by the removal detection unit A timing means for starting operation; an attachment detection means for detecting attachment of the nonvolatile memory device to the information processing apparatus; and the information processing apparatus in advance when the attachment detection means detects attachment of the nonvolatile memory device. The identification code requesting means for requesting reading of the identification code stored in the information processing apparatus, and the identification code read from the information processing apparatus as a result of the request by the identification code requesting means are preset. An identification code determining means for determining whether or not the correct identification code matches, and the identification code A timing operation stopping means for stopping the timing operation by the timing means when the identification code is determined to match, the erasure instruction means counts a predetermined time by the timing means. It is preferable that the erasure instruction is issued when the operation is completed or when it is determined by the identification code determination means that the identification codes do not match.

  In the nonvolatile memory device of the present invention, the timekeeping operation stopping means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value when the identification code determining means determines that the identification codes match, It is preferable to stop the operation.

  In the nonvolatile memory device of the present invention, it is preferable that the erasure instruction means issues the erasure instruction even when the identification code cannot be read from the information processing apparatus as a result of the request by the identification code request means.

  In the nonvolatile memory device of the present invention, a removal detection unit that detects the removal of the nonvolatile memory device from the information processing device, and a timing operation is started when the removal of the nonvolatile memory device is detected by the removal detection unit Timing means, an attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device, and when the attachment detection means detects attachment of the nonvolatile memory device, the timing operation by the timing means is stopped. It is preferable that the erasing instruction means further issues a erasing instruction triggered by the expiration of a time measuring operation for a predetermined time by the timing means.

  In the nonvolatile memory device of the present invention, the timekeeping operation stop means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value when the attachment detection means detects the attachment of the nonvolatile memory device. It is preferable to stop the timing operation.

  The non-volatile memory device of the present invention further comprises a removal detecting means for detecting removal of the non-volatile memory device from the information processing apparatus, and the erasure instruction means detects that the non-volatile memory device is removed by the removal detecting means. It is preferable to issue the erasure instruction with this being triggered.

  In the non-volatile memory device of the present invention, a password input operation means for performing an input operation of the password, and a password entered by the input operation to the password input operation means is a correct password set in advance. A security code judging means for judging whether or not they match, and the time counting operation stopping means, when the security code judgment means judges that the security code matches, the remaining timing operation by the time measuring means It is preferable to return the time to the initial value.

  In the non-volatile memory device of the present invention, the timekeeping operation stopping means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value when the security code judgment means determines that the codecodes coincide with each other. It is preferable to stop the timing operation by the means.

  In the nonvolatile memory device of the present invention, the erasure instruction means detects the removal of the nonvolatile memory device by the removal detection means and before determining that the secret code coincides with the secret code determination means. It is preferable that the erasure instruction is issued when the attachment detection unit detects the attachment of the nonvolatile memory device as a trigger.

  In the nonvolatile memory device of the present invention, a removal detection unit that detects removal of the nonvolatile memory device from the information processing device, an attachment detection unit that detects attachment of the nonvolatile memory device to the information processing device, and a password PIN code input operation means for performing the input operation, and PIN code determination for determining whether or not the PIN code input by the input operation to the PIN code input operation means matches a preset correct password code And the erasure instruction means after the removal detection means detects removal of the nonvolatile memory device and before the security code determination means determines that the security code matches, the attachment detection means. The deletion instruction is triggered by the detection of attachment of the nonvolatile memory device by Rukoto is preferable.

  The non-volatile memory device of the present invention further includes a mismatch determination continuous number counting unit that counts a continuous number of times that the determination result by the personal identification code determination unit does not match, and the erasure instruction unit is determined by the personal identification code mismatch number counting unit. It is preferable that the erase instruction is issued as the trigger when the count number exceeds a predetermined number.

  The non-volatile memory system of the present invention is a non-volatile memory system configured to include the non-volatile memory device of the present invention and the information processing device, wherein the information processing device stores and holds an identification code in advance, The identification code is transmitted to the nonvolatile memory device in response to a request from the identification code requesting means of the nonvolatile memory device.

  The data erasing method of the present invention is a method of erasing data stored in a nonvolatile manner in a nonvolatile memory device configured to be detachable from the information processing device, the process of monitoring the occurrence of a predetermined trigger, The method includes a step of issuing an erasure instruction for erasing the data when the predetermined trigger occurs, and a step of erasing the data when the erasure instruction is issued.

  In the data erasing method of the present invention, when the process of monitoring the attachment of the nonvolatile memory device to the information processing device and the attachment of the nonvolatile memory device to the information processing device are detected, the information processing device in advance The process in which the nonvolatile memory device makes a request for reading the identification code stored in the information processing apparatus, and the identification code read from the information processing apparatus as a result of the request is a correct correct identification code set in advance. And a step of generating the predetermined trigger when it is determined that the identification information does not match as a result of the determination.

  In the data erasing method of the present invention, the process of monitoring the removal of the nonvolatile memory device from the information processing device, and the timing of a predetermined time when the removal of the nonvolatile memory device from the information processing device is detected. A process of starting an operation; a process of monitoring the attachment of the nonvolatile memory device to the information processing apparatus; and a process of temporarily stopping the timing operation when attachment of the nonvolatile memory device to the information processing apparatus is detected. And when the nonvolatile memory device detects the attachment of the nonvolatile memory device to the information processing device, the nonvolatile memory device makes a request to read the identification code stored in the information processing device in advance from the information processing device; The identification code read from the information processing apparatus as a result of the request is correct and set in advance. A process of determining whether or not it matches another code, a process of starting the continuation of the timing operation when it is determined that the identification information does not match as a result of the determination, and a timing of a predetermined time by the timing operation It is preferable that the method includes the step of generating the predetermined trigger when the time expires.

  In the data erasing method of the present invention, the process of monitoring the removal of the nonvolatile memory device from the information processing device, and the timing of a predetermined time when the removal of the nonvolatile memory device from the information processing device is detected. When the process of starting operation, the process of monitoring the attachment of the nonvolatile memory device to the information processing device, and the attachment of the nonvolatile memory device to the information processing device are detected, the information is stored in the information processing device in advance. The nonvolatile memory device makes a request to read the identification code being read from the information processing apparatus, and the identification code read from the information processing apparatus as a result of the request matches a preset correct identification code A process of determining whether or not a predetermined time has expired due to the timing operation, or as a result of the determination, If another information is determined not to match, it is preferably provided with the steps of generating the predetermined trigger.

  In the data erasing method of the present invention, the process of monitoring the removal of the nonvolatile memory device from the information processing device, and the timing of a predetermined time when the removal of the nonvolatile memory device from the information processing device is detected. A process of starting operation, a process of monitoring the attachment of the nonvolatile memory device to the information processing apparatus, and a timing operation by the timing means when the attachment of the nonvolatile memory device to the information processing apparatus is detected. It is preferable to include a process and a process of generating the predetermined trigger when a predetermined time has expired due to the timing operation.

  In the data erasing method of the present invention, the process of monitoring the removal of the nonvolatile memory device from the information processing device, and the removal of the nonvolatile memory device from the information processing device are detected. And generating a trigger.

  In the data erasing method of the present invention, a process of accepting an input operation of a personal identification code, a process of determining whether or not the input personal identification code matches a preset correct personal identification code, and a result of the determination It is preferable that the method further comprises a step of returning the remaining time of the time measuring operation to an initial value when it is determined that the passwords match.

  In the data erasing method of the present invention, after the removal of the non-volatile memory device from the information processing device is detected, and before the determination is made that the passwords match, the information processing device It is preferable to provide a step of generating the predetermined trigger when the attachment of the nonvolatile memory device is detected.

  In the data erasing method of the present invention, the process of monitoring the removal of the nonvolatile memory device from the information processing device, the process of monitoring the attachment of the nonvolatile memory device to the information processing device, and the password input operation , A step of determining whether or not the input code matches the preset correct code, and after removal of the nonvolatile memory device from the information processing device is detected, It is preferable to include a step of generating the predetermined trigger when attachment of the nonvolatile memory device to the information processing device is detected before it is determined that the passwords match as a result of the determination.

  In the data erasing method of the present invention, as a result of the determination, the process of counting the number of consecutive times when the code is determined to be inconsistent, and when the number of counts by the count exceeds a predetermined number, And generating a trigger.

  The program of the present invention is a computer-executable program, a process that monitors the occurrence of a predetermined trigger in the computer-executable program, and is attached to and detached from the information processing apparatus when the predetermined trigger occurs. A process for issuing an erasure instruction for erasing data stored in a nonvolatile manner in a non-volatile memory device configured to be possible, and a process for erasing the data when the erasure instruction is issued, Yes.

  The recording medium of the present invention is a computer-readable recording medium in which the program of the present invention is stored.

  According to the present invention, when a predetermined trigger occurs, an erasure instruction is issued from the erasure instruction means, and the erasure means that has received this erasure instruction erases the data stored in the memory unit. By automatically erasing the data stored in the memory unit of the apparatus, it is possible to prevent confidential data from being leaked intentionally or accidentally, thereby maintaining confidentiality. In addition, unlike the prior arts such as Patent Documents 1 and 2, for example, the nonvolatile memory medium itself includes an erasing unit. Therefore, for example, even if all data is stored in one memory unit, there is no problem. Therefore, the size of data stored in the memory portion is not limited. Further, when a predetermined trigger occurs, an erasure instruction is generated, and the erasure unit that has received this instruction erases the data in the memory unit. Therefore, only when the situation is such that data should be erased in terms of security. Data can be erased.

  Specifically, for example, when a non-volatile memory device is attached to an information processing device (for example, a personal computer), a request to read an identification code stored in the information processing device in advance from the information processing device is made. The nonvolatile memory device is configured to determine whether or not the identification code read as a result of this request matches a preset correct identification code, and to generate an erasure instruction when it is determined that they do not match can do. In this case, the data stored in the memory unit of the nonvolatile memory device can be read only from an information processing device that stores and holds a correct identification code in advance (an information processing device that is permitted to read data from the nonvolatile memory device). On the other hand, it cannot be read from an information processing device that does not store a correct identification code (an information processing device that is not permitted to read data from a nonvolatile memory device), thereby preventing unauthorized use of data. be able to.

  Alternatively, for example, when the nonvolatile memory device is removed from the information processing device, the timing operation is started. When the nonvolatile memory device is attached to the information processing device, the timing operation is temporarily stopped while the information Making a request to read out the identification code stored in advance in the processing device from the information processing device, determining whether the identification code read out as a result of this request matches a preset correct identification code; When it is determined that they match, the timing operation is stopped, while when it is determined that they do not match, the continuation of the timing operation is resumed, and an erase instruction is generated when the timing operation for a predetermined time has expired. A nonvolatile memory device can be configured. In this case, the data stored in the memory unit of the nonvolatile memory device is an information processing in which a correct identification code is stored and held in advance until a predetermined time elapses after the nonvolatile memory device is removed from the information processing device. Non-volatile memory device for information processing device that can read only when attached to device (information processing device permitted to read data from non-volatile memory device), while storing correct identification code in advance If the clocking operation for a predetermined time has expired without being attached, data cannot be read, and unauthorized use of data can be prevented.

  Alternatively, for example, when the nonvolatile memory device is removed from the information processing device, the timing operation is started, and when the nonvolatile memory device is attached to the information processing device, the identification stored in the information processing device in advance A request for reading a code from the information processing apparatus is made, it is determined whether or not the identification code read as a result of this request matches a preset correct identification code, and the identification code is determined to match In such a case, the timing operation is stopped and it is determined that the identification codes do not match, or the nonvolatile memory device can be configured to generate an erasure instruction when the timing operation for a predetermined time has expired. In this case, the data stored in the memory unit of the nonvolatile memory device is an information processing in which a correct identification code is stored and held in advance until a predetermined time elapses after the nonvolatile memory device is removed from the information processing device. An information processing device (data from a non-volatile memory device) that can be read only when attached to a device (information processing device permitted to read data from the non-volatile memory device) but does not store a correct identification code If it is not attached to an information processing device that is not allowed to read), or if the timing operation for a predetermined time has expired, it cannot be read, and unauthorized use of data can be prevented. .

  Alternatively, for example, the timing operation is started when the nonvolatile memory device is removed from the information processing device, and an erasure instruction is issued when the timing operation for a predetermined time expires before the nonvolatile memory device is reattached to the information processing device. A non-volatile memory device can be configured to occur. In this case, the data stored in the memory unit of the nonvolatile memory device is erased when a predetermined time elapses with the nonvolatile memory device removed from the information processing device, thereby preventing unauthorized use of the data. Can do.

  Alternatively, for example, the nonvolatile memory device may be configured so that an erasure instruction is generated when the nonvolatile memory device is simply removed from the information processing device. In this case, the data stored in the memory unit of the non-volatile memory device is erased only by removing the non-volatile memory device from the information processing device, and unauthorized use of the data can be prevented.

  Alternatively, for example, after the nonvolatile memory device is removed from the information processing device, the nonvolatile memory device may generate an erasure instruction when the nonvolatile memory device is attached to the information processing device before the correct password is input by the user. A memory device may be configured. In this case, after the volatile memory device is removed from the information processing device, if the nonvolatile memory device is attached to the information processing device before the correct password is input by the user, the data is erased and the data is illegally used. Can be prevented.

  Embodiments according to the present invention will be described below with reference to the drawings.

[First Embodiment]
FIG. 1 is a block diagram showing a nonvolatile storage medium (nonvolatile memory device) 10 according to the first embodiment, and FIG. 2 is a drawing of a medium extraction / insertion detection unit (removal detection means, attachment detection means) 11 provided in the nonvolatile storage medium 10. FIG. 3 is a schematic perspective view showing a state in which the nonvolatile storage medium 10 is inserted into the enclosure (information processing apparatus) 20. Note that the enclosure 20 and the nonvolatile storage medium 10 constitute a nonvolatile memory system according to the present embodiment.

  As shown in FIG. 1, the non-volatile storage medium 10 is, for example, a hard disk device, a USB memory (USB: Universal Serial Bus), or other storage medium. (Timing means) 12, an identification code confirmation section (identification code request means, identification code determination means) 13 that performs an identification code confirmation operation (described later) of the enclosure 20, and a nonvolatile memory section (memory section) that stores data in a nonvolatile manner 16, an erasure unit (erase unit) 15 for erasing the stored contents of the nonvolatile memory unit 16, and a control unit (erase instruction unit, stop timing operation) for controlling the operation of the erasure unit 15, identification code confirmation unit 13 and timer 12 Means, timing operation pause means, timing operation restarting means) 14 and the enclosure 20 Interface portion 21.

  Among these, the medium extraction / insertion detection unit 11 indicates that the nonvolatile storage medium 10 has been extracted (removed) from the enclosure 20 and that the nonvolatile storage medium 10 has been inserted (attached) into the enclosure 20. Is detected.

  For example, as shown in FIG. 2, the medium extraction / insertion detection unit 11 includes a switch 17 and a determination unit 18 that determines the state of the switch 17.

  The switch 17 includes a pair of contact points 17A and 17B and a conduction part 17C that converts the pair of contact points 17A and 17B into a state in which they are electrically connected to each other and a state in which they are not connected to each other.

  The determination unit 18 determines that the nonvolatile storage medium 10 has been pulled out and inserted from the enclosure 20 according to the electrical connection state between the contacts 17A and 17B of the switch 17.

  That is, when the non-volatile storage medium 10 is inserted into the enclosure 20 as shown in FIG. 3, the conduction portion 17C of the switch 17 of the medium removal / insertion detection unit 11 is replaced with a non-conductive member (not shown: pin shape, for example). As a result, the contacts 17A and 17B are not electrically connected to each other. Then, the determination unit 18 determines that the nonvolatile storage medium 10 has been inserted into the enclosure 20 (detects the insertion of the nonvolatile storage medium 10), and sends a detection signal (hereinafter referred to as an insertion detection signal) to that effect to the control unit 14. Send.

  On the other hand, when the non-volatile storage medium 10 is pulled out from the enclosure 20, the conducting portion 17C of the switch 17 of the medium pulling / insertion detecting portion 11 is released from the pressed state by the non-conductive member (not shown) of the enclosure 20, and the contact 17A , 17B return to the state of being electrically connected to each other. Then, the determination unit 18 determines that the nonvolatile storage medium 10 has been extracted from the enclosure 20 (detects extraction of the nonvolatile storage medium 10), and sends a detection signal (hereinafter referred to as an extraction detection signal) to that effect to the control unit 14. Send.

  When the removal / insertion detection unit 11 detects that the nonvolatile storage medium 10 has been pulled out (when a pulling detection signal is received), the control unit 14 causes the timer 12 to start timing. As a result, when the timer 12 completes the time counting operation for a predetermined time, the control unit 14 transmits a command to the erasing unit 15 to erase the stored contents of the nonvolatile memory unit 16.

  However, when insertion of the non-volatile storage medium 10 is detected by the medium extraction / insertion detection unit 11 while the timing operation by the timer 12 is being executed based on the detection of the extraction of the non-volatile storage medium 10 (the insertion detection signal is The control unit 14 temporarily stops the timer 12 and transmits a command to the identification code confirmation unit 13 to read and confirm the identification code stored in the enclosure 20 in advance. Let the unit 13 do this.

  That is, when the identification code confirmation unit 13 receives a command from the control unit 14, the identification code confirmation unit 13 transmits an identification code reading request to the enclosure 20. As a result of this request, when an identification code is transmitted from the enclosure 20, the identification code confirmation unit 13 transmits the transmitted identification code (that is, the identification code read from the enclosure 20) and the nonvolatile storage medium 10. It is confirmed whether or not the identification code stored in advance in the memory unit 16 matches, and the confirmation result is notified to the control unit 14.

  As a result of confirmation by the identification code confirmation unit 13, if the identification codes do not match (if the correct identification code cannot be read from the enclosure 20), the control unit 14 performs the timekeeping operation by the timer 12 (time remaining time measurement operation). To resume.

  If the correct identification code cannot be read from the enclosure 20 before the timer 12 completes the time counting operation for a predetermined time, the control unit 14 transmits a command to the erasing unit 15 to store the nonvolatile memory. The stored contents of the unit 16 are erased.

  Here, the control unit 14 includes, for example, a CPU, a ROM (recording medium), and a RAM. Among these, the ROM stores a control program (program) for the CPU, and the CPU operates according to the control program. The RAM functions as a work area for the CPU. Similarly, the identification code confirmation unit 13 includes, for example, a CPU, a ROM (recording medium), and a RAM. The ROM stores a control program (program) for the CPU, and the CPU stores the control program. The RAM functions as a work area of the CPU. In addition, the control part 14 and the identification code confirmation part 13 may be comprised by each one part of the same control part (it is provided with CPU, ROM, and RAM).

  The enclosure 20 is, for example, a personal computer or other information processing apparatus, and stores an identification code in advance. Specifically, this identification code is stored in a storage unit included in the enclosure 20 when, for example, a control program for the enclosure 20 is installed in the enclosure 20. When the enclosure 20 receives a request for reading the identification code from the nonvolatile storage medium 10, the enclosure 20 transmits the identification code stored and held by the enclosure 20 to the nonvolatile storage medium 10.

  FIG. 4 is a flowchart showing the operation of the nonvolatile storage medium 10, particularly the operation after the nonvolatile storage medium 10 is pulled out from the enclosure 20.

  The operation in the case of the first embodiment will be described below with reference to FIG.

  When the non-volatile storage medium 10 is pulled out from the enclosure 20, the determination unit 18 of the medium pull-out / insertion detection unit 11 detects that the non-volatile storage medium 10 has been pulled out from the enclosure 20, and controls a pull-out detection signal indicating that effect. It outputs to the part 14 (step S1).

  The control unit 14 that has received the extraction detection signal from the medium extraction / insertion detection unit 11 starts the time measuring operation by the timer 12 (step S2).

  Here, the timer 12 is set so as to perform a timing operation for measuring a predetermined time, and the timing when the timing operation for the predetermined time is completed, that is, the remaining time becomes 0 as a result of the timing operation. At the timing, a timer expiration signal indicating that is output to the control unit 14.

  When the control unit 14 receives a timer expiration signal from the timer 12 (Yes in step S3), the control unit 14 transmits an erasing instruction to the erasing unit 15, causing the erasing unit 15 to erase the storage contents of the nonvolatile memory unit 16. The remaining time of the time measuring operation by the timer 12 is returned to the initial value, and the timer 12 is stopped (step S4).

  However, when the non-volatile storage medium 10 is inserted into one of the enclosures 20 before the timer 12 expires (No in step S3), the medium extraction / insertion detection unit 11 When the insertion detection signal is transmitted (Yes in step S5), the control unit 14 temporarily stops the timing operation by the timer 12 (step S6), transmits a command to the identification code confirmation unit 13, and Confirm the identification code.

  That is, upon receiving a command from the control unit 14, the identification code confirmation unit 13 transmits an identification code request to the enclosure 20. Upon receiving this request, the enclosure 20 transmits an identification code stored in advance to the nonvolatile storage medium 10. Thus, the non-volatile storage medium 10 acquires the identification code of the enclosure 20 (step S7).

  The identification code confirmation unit 13 determines whether or not the identification code acquired from the enclosure 20 matches the identification code stored in the nonvolatile memory unit 16, and if the identification code matches (Yes in step S8), A coincidence notification indicating the coincidence is output to the control unit 14.

  Receiving this coincidence notification, the control unit 14 returns the remaining time of the time measuring operation by the timer 12 to the initial value, stops the timer 12, and ends the control (step S9).

  On the other hand, if the identification codes do not match (No in step S8), the control unit 14 outputs a command to continue the timing operation to the timer 12 (step S10), and confirms the remaining time of the timer 12. Processing (processing after step S3) is performed.

  As a result, if the identification code confirmation unit 13 cannot acquire the identification code of the enclosure 20 within a predetermined time, it is determined Yes in step S3, so the stored contents of the nonvolatile memory unit 16 are erased. It is erased by the part 15.

  According to the first embodiment as described above, as a situation where it is better to erase the stored contents of the nonvolatile memory unit 16 for security reasons, for example, after the removal of the nonvolatile storage medium 10 is detected, the timer 12 Since the erasure instruction is issued triggered by the expiration of the timing operation for a predetermined time, the contents stored in the nonvolatile memory unit 16 can be automatically erased. However, the non-volatile storage medium 10 is inserted into the enclosure 20 before the timer 12 expires after detecting the removal of the non-volatile storage medium 10 and the identification code of the enclosure 20 is correct. In the case of the code, the stored contents of the nonvolatile memory unit 16 are not erased, so that the stored contents of the nonvolatile memory unit 16 are not erased unnecessarily. That is, data can be erased only when it is necessary to erase the data in terms of security.

  That is, when the non-volatile storage medium 10 is removed from the enclosure 20, the timer 12 starts a timing operation, and when the non-volatile storage medium 10 is attached to the enclosure 20, the timing operation is temporarily stopped. 20 makes a request for reading out the identification code stored and stored in advance in the enclosure 20 and determines whether or not the identification code read as a result of this request matches a preset correct identification code. If it is determined that they do not coincide with each other, the continuation of the clocking operation is resumed, and when the clocking operation for a predetermined time expires, an erasure instruction is generated, and the stored contents of the nonvolatile memory unit 16 are erased.

  Therefore, the data stored in the nonvolatile memory unit 16 of the nonvolatile storage medium 10 is not until the predetermined time elapses after the nonvolatile storage medium 10 is removed from the enclosure 20 (however, the identification code is requested, read, and determined). Read only when the non-volatile storage medium 10 is attached to the enclosure 20 (enclosure 20 permitted to read data from the non-volatile storage medium 10) that stores and holds the correct identification code in advance. On the other hand, if the timing operation for a predetermined time has expired without being attached to the enclosure 20 in which the nonvolatile storage medium 10 stores and holds the correct identification code in advance, the erasure unit 15 causes the nonvolatile memory to The data stored in the unit 16 is erased, so the data cannot be read. It, it is possible to confidentiality to prevent data loss due to deliberate or negligent.

  Further, unlike the prior art such as Patent Document 1, for example, the nonvolatile storage medium 10 itself includes the erasing unit 15, so that there is no problem even if all the data is stored in one nonvolatile memory unit 16, for example. Absent. Therefore, the size of data stored in the nonvolatile memory unit 16 is not limited.

  In the first embodiment described above, in step S4, it is more preferable from the viewpoint of security to erase all the stored contents (including the identification code) of the nonvolatile memory unit 16.

  However, in step S4, it is also preferable that only the identification code of the storage contents of the nonvolatile memory unit 16 is not erased. In this case, the nonvolatile storage medium 10 in which the storage contents of the nonvolatile memory unit 16 are once erased is stored. Can be reused.

  In the first embodiment, the enclosure 20 originally does not store any identification code, or does not have a function of transmitting the identification code to the nonvolatile storage medium 10 in response to a request. In step S7, the identification code cannot be acquired. In this case, at the stage where the identification code could not be acquired in step S7, the identification code may be considered to be inconsistent (as No in step S8), or the process may be continued. Alternatively, in step S7 When the identification code cannot be acquired (cannot be read), the controller 14 immediately transmits an erasure instruction to the erasure unit 15 and the erasure unit 15 erases the stored contents of the nonvolatile memory unit 16. You may do it.

  In the first embodiment, the example in which the time measurement operation by the timer 12 is temporarily stopped when the attachment of the nonvolatile storage medium 10 to the enclosure 20 is detected has been described. Even when the attachment is detected, the timing operation by the timer 12 may be continued without being temporarily stopped. In this case, when it is determined that the identification codes match, the remaining time of the timing operation by the timer 12 is returned to the initial value and the timer 12 is stopped.

  In the first embodiment described above, an example in which the timekeeping operation by the timer 12 is resumed when the identification code read from the enclosure 20 is incorrect has been described. However, the identification code read from the enclosure 20 was incorrect. In this case, an erasing instruction may be immediately transmitted from the control unit 14 to the erasing unit 15 and the stored contents of the nonvolatile memory unit 16 may be erased by the erasing unit 15.

  In the first embodiment, the example in which the authentication of the identification code is combined with the operation of measuring the elapsed time since the removal of the nonvolatile storage medium 10 from the enclosure 20 is detected has been described. Only the identification code may be authenticated. That is, when attachment of the non-volatile storage medium 10 to the enclosure 20 is detected by the medium removal / insertion detection unit 11, the identification code of the enclosure 20 is read, and the read identification code does not match the correct identification code The erasing unit 15 may erase the stored contents of the nonvolatile memory unit 16. In this case, the nonvolatile storage medium need not include the timer 12 among the components shown in FIG.

[Second Embodiment]
FIG. 5 is a block diagram showing a configuration of a nonvolatile storage medium (nonvolatile memory device) 30 according to the second embodiment.

  Of the constituent elements of the nonvolatile storage medium 30 shown in FIG. 5, the same constituent elements as those in the nonvolatile storage medium 10 (FIG. 1) according to the first embodiment are given the same reference numerals. The description is omitted.

  As shown in FIG. 5, the non-volatile storage medium 30 according to the second embodiment does not include the identification code confirmation unit 13 (FIG. 1), and the password input operation unit (accepting the password input operation by the user) A password code input operation means) 31 and a password code confirmation unit (password code determination means) 19 for confirming the input password code.

  In addition, the control unit 14 includes an erasure flag 14A and a password mismatch count counter (mismatch determination continuous count counter) 14B. The erasure flag 14A and the password mismatch count counter 14B may be configured by a partial storage area of a RAM provided in the control unit 14, for example.

  Among these flags, the erase flag 14A is a flag whose value is set to either “0” or “1”, and is used to determine whether or not to perform the erase operation by the erase unit 15. Specifically, for example, when the value of the erasure flag 14A is “1”, the control unit 14 instructs the erasure unit 15 when the nonvolatile storage medium 30 is inserted into the enclosure 20. And the stored contents of the nonvolatile memory unit 16 are erased.

  The password mismatch count counter 14B is a counter that counts the number of consecutive times (the number of consecutive times of mismatch) determined that the password input to the password code input operation unit 31 does not match the correct password. . When the count number by the password mismatch count counter 14B exceeds a predetermined number, the control unit 14 transmits a command to the erasing unit 15 to erase the stored contents of the nonvolatile memory unit 16.

  In the case of the second embodiment, when the medium extraction / insertion detection unit 11 detects the extraction of the nonvolatile storage medium 30, the timer 12 starts a time measuring operation. If the correct password is input from the password input operation unit 31 before the time counting operation by the timer 12 expires (when the passwords match), the stored contents of the nonvolatile memory unit 16 are retained. When the timekeeping operation by the timer 12 expires without the correct password being input from the password input operation unit 31, or when the number of times the input password is continuously mismatched exceeds a predetermined number, or when the password is input If the nonvolatile storage medium 30 is inserted into the enclosure 20 before the correct password is input to the operation unit 31, the erasure unit 15 erases the stored contents of the nonvolatile memory unit 16 under the control of the control unit 14. To do.

  6 to 8 are flowcharts showing the operation of the nonvolatile storage medium 30 according to the second embodiment.

  The operation in the case of the second embodiment will be described below with reference to FIGS.

  When the non-volatile storage medium 30 is pulled out from the enclosure 20, the determination unit 18 of the medium pull-out / insertion detection unit 11 detects that the non-volatile storage medium 30 has been pulled out from the enclosure 20, and controls a pull-out detection signal indicating that effect. Is output to the unit 14 (step S21 in FIG. 6).

  The control unit 14 that has received the extraction detection signal from the medium extraction / insertion detection unit 11 starts the time measuring operation by the timer 12 (step S22 in FIG. 6).

  Furthermore, the control unit 14 sets the value of the erasure flag 14A to “1”, and resets the count number by the password mismatch count counter 14B to zero (“0”) (step S23 in FIG. 6).

  In addition, in a state where the nonvolatile storage medium 30 is pulled out from the enclosure 20 (after the control unit 14 receives the pull-out detection signal from the medium pull-out / insertion detection unit 11 and before receiving the insertion detection signal), the password is input. When the operation unit 31 detects the input of the security code, the security code confirmation unit 19 confirms whether or not the input security code matches the preset correct security code, and the confirmation result Is notified to the control unit 14 (step S31 in FIG. 7).

  When the notification that the input code and the correct code match is received (Yes in step S32 in FIG. 7), the control unit 14 resets the timer 12 to the initial value and stops it (FIG. 7). In step S33), the value of the erase flag 14A is changed to "0" (step S34 in FIG. 7).

  Note that, when the timing operation by the timer 12 has expired, the control unit 14 transmits a command to the erasing unit 15 to erase the stored contents of the nonvolatile memory unit 16.

  When the notification that the input code and the correct code do not match is received (No in step S32 in FIG. 7), the control unit 14 sets the value of the code mismatch count counter 14B to “+1”. After the increment, it is determined whether or not the value of the password mismatch count counter 14B exceeds a predetermined number (for example, three times) (step S35 in FIG. 7).

  When the value of the password mismatch count counter 14B exceeds the predetermined number (Yes in step S35 in FIG. 7), the control unit 14 transmits a command to the erasing unit 15 and erases the stored contents of the nonvolatile memory unit 16. (Step S36 in FIG. 7).

  On the other hand, when the value of the password mismatch count counter 14B is equal to or smaller than the predetermined number (No in step S35 in FIG. 7), the nonvolatile storage medium 30 waits for the input of the password code to the password code input operation unit 31 (step S31 in FIG. 7). Repeat the following process).

  When the nonvolatile storage medium 30 is inserted into the enclosure 20 and the storage contents of the nonvolatile memory unit 16 can be read (step S41 in FIG. 8), the control unit 14 confirms the value of the erase flag 14A. (Step S42 in FIG. 8) If the value is “1” (Yes in Step S42 in FIG. 8), a command is transmitted to the erasing unit 15 and the stored contents of the nonvolatile memory unit 16 are erased. (Step S43 in FIG. 8), the value of the erase flag 14A is returned to “0”.

  On the other hand, when the value of the erasure flag 14A is “0” (No in step S42 in FIG. 8), the control unit 14 ends the process. For this reason, the enclosure 20 can read the stored contents of the nonvolatile memory unit 16. That is, as a result of the determination in step S32 in FIG. 7, when it is determined that the input code matches the correct code, the storage content of the nonvolatile memory unit 16 can be read by the enclosure 20. Become.

  According to the second embodiment as described above, as a situation where it is better to erase the stored contents of the nonvolatile memory unit 16 for security, for example, the timer 12 detects the removal of the nonvolatile storage medium 30 after detecting the removal. Even if the time keeping operation for a predetermined time expires or before the time keeping operation for the predetermined time by the timer 12 expires, the code input to the code input operation unit 31 is continuously inconsistent. Or the non-volatile storage medium 30 is inserted into the enclosure 20 before a correct password is input to the password input operation unit 31 (Yes in step S35 in FIG. 7). Since the erasure instruction is issued with the trigger at step S42 in FIG. It is possible to confidentiality to prevent data loss due to negligence. However, when a correct password is input to the password input operation unit 31 before the timer 12 completes a predetermined time counting operation after detecting the removal of the nonvolatile storage medium 30 (step of FIG. 7). Since the stored contents of the nonvolatile memory section 16 are not erased at Yes in S32, the stored contents of the nonvolatile memory section 16 are not unnecessarily erased. That is, data can be erased only when it is necessary to erase the data in terms of security.

  Further, for example, unlike the conventional technique such as Patent Document 1, the nonvolatile storage medium 30 itself includes the erasing unit 15, so that there is no problem even if all the data is stored in one nonvolatile memory unit 16, for example. Absent. Therefore, the size of data stored in the nonvolatile memory unit 16 is not limited.

  In the case of the second embodiment as well, as in the case of the first embodiment, when the stored contents of the nonvolatile memory unit 16 are erased, all of the stored contents (including the identification code) are included. Is more preferable from the viewpoint of security. However, it is also preferable that only the identification code in the stored contents of the nonvolatile memory unit 16 is not erased. In this case, the nonvolatile storage medium 30 in which the stored contents of the nonvolatile memory unit 16 are once erased can be reused. it can.

  In the second embodiment, when it is determined that the passwords match (Yes in step S32 in FIG. 7), the remaining time of the time measuring operation by the timer 12 is returned to the initial value and the time measuring operation is stopped. 7 (step S33 in FIG. 7) has been described. However, if it is determined that the passwords match (Yes in step S32 in FIG. 7), in step S33 in FIG. You may just return to the value. In this case, even when a correct password is input, the time of the time measuring operation by the timer 12 is only extended, and when the time measuring operation by the timer 12 expires, the nonvolatile memory unit 16 The stored contents will be erased.

  In the second embodiment, the example in which the authentication of the secret code is combined with the operation of measuring the elapsed time after the nonvolatile storage medium 10 is removed from the enclosure 20 has been described. When the correct password is input with the medium 10 removed from the enclosure 20, the storage contents of the nonvolatile memory unit 16 are not erased even if the nonvolatile storage medium 10 is attached to the enclosure 20. If the nonvolatile storage medium 10 is attached to the enclosure 20 before the correct password is input with the 10 removed from the enclosure 20, the stored contents of the nonvolatile memory unit 16 may be erased. . In this case, it is not necessary to provide the timer 12 among the components shown in FIG.

  The authentication of the secret code as described in the second embodiment can be combined with the first embodiment.

  For example, when a correct password is input with the nonvolatile storage medium 10 removed from the enclosure 20, the remaining time of the time measuring operation by the timer 12 may be returned to the initial value. In this case, when a correct password is input, it is possible to extend the time until the timing operation by the timer 12 expires.

  Alternatively, when the correct password is input with the nonvolatile storage medium 10 removed from the enclosure 20, the remaining time of the time measuring operation by the timer 12 is returned to the initial value and the time measuring operation is stopped. good. In this case, it is possible to prevent the stored contents of the nonvolatile memory unit 16 from being erased when a correct password is input.

  Alternatively, when the nonvolatile storage medium 10 is attached to the enclosure 20 without the correct password being input, the erasing unit 15 may erase the stored contents of the nonvolatile memory unit 16. In this case, even if the nonvolatile storage medium 10 is attached to the enclosure 20 that is permitted to read data from the nonvolatile storage medium 10, if the correct password is not input, the nonvolatile memory unit 16 The stored contents will be erased.

  Furthermore, the present invention is not limited to the above example.

  For example, the erasure unit 15 may simply erase the stored contents of the nonvolatile memory unit 16 when the removal of the nonvolatile storage medium 10 from the enclosure 20 is detected by the medium removal / insertion detection unit 11 as a trigger. . In this case, the nonvolatile storage medium need not include the identification code confirmation unit 13 and the timer 12 among the components shown in FIG.

  Alternatively, the timer 12 measures the elapsed time from the detection of the removal of the nonvolatile storage medium 10 from the enclosure 20 by the medium removal / insertion detection unit 11 until the detection of the attachment of the nonvolatile storage medium 10 to the enclosure 20 is performed. The erasure unit 15 may erase the stored contents of the nonvolatile memory unit 16 using the elapsed time as a trigger. In this case, the nonvolatile storage medium need not include the identification code confirmation unit 13 among the components shown in FIG. Further, in this case, the remaining time of the timing operation by the timer 12 may be returned to the initial value and stopped at the timing when the medium removal / insertion detection unit 11 detects the attachment of the nonvolatile storage medium 10 to the enclosure 20. .

  In the above description, the determination unit 18 may be included in the control unit 14 instead of the medium extraction / insertion detection unit 11. In this case, the determination unit 18 does not need to notify the control unit 14 that the nonvolatile storage medium 10 has been pulled out and inserted from the enclosure 20.

1 is a block diagram showing a nonvolatile storage medium (nonvolatile memory device) according to a first embodiment. FIG. 2 is a schematic diagram illustrating a medium extraction / insertion detection unit included in the nonvolatile storage medium of FIG. 1. 1 is a schematic perspective view showing a nonvolatile memory system according to a first embodiment. It is a flowchart which shows the flow of operation | movement in the case of 1st Embodiment. It is a block diagram which shows the non-volatile storage medium (nonvolatile memory device) which concerns on 2nd Embodiment. It is a flowchart which shows the flow of operation | movement in the case of 2nd Embodiment. It is a flowchart which shows the flow of operation | movement in the case of 2nd Embodiment. It is a flowchart which shows the flow of operation | movement in the case of 2nd Embodiment.

Explanation of symbols

10 Nonvolatile storage medium (nonvolatile memory device)
11 Medium extraction / insertion detection unit (detachment detection means, attachment detection means)
12 Timer (time measuring means)
13 Identification code confirmation unit (identification code request means, identification code determination means)
14 Control unit (erasing instruction means, time measuring operation stop means, time operation stop means, time operation restart means)
15 Eraser (Erase means)
16 Nonvolatile memory part (memory part)
20 Enclosure (information processing equipment)
30 Nonvolatile storage medium (nonvolatile memory device)
31 PIN code input operation section (password code input operation means)
19 PIN code confirmation part (password code judging means)
14B PIN mismatch counter (disagreement determination continuous count counter)

Claims (27)

In the nonvolatile memory device configured to be detachable from the information processing device,
A memory unit for storing data in a nonvolatile manner;
An erasure instruction means for issuing an erasure instruction for erasing data stored in the memory unit when a predetermined trigger occurs;
In response to an erasure instruction from the erasure instruction means, erasure means for erasing data stored in the memory unit;
A non-volatile memory device comprising: Attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device;
An identification code requesting means for making a request to read out an identification code stored in the information processing apparatus in advance from the information processing apparatus when the attachment detection means detects the attachment of the nonvolatile memory device;
Identification code determination means for determining whether or not the identification code read from the information processing apparatus as a result of the request by the identification code requesting means matches a preset correct identification code;
Further comprising
2. The non-volatile memory device according to claim 1, wherein the erasure instruction means issues the erasure instruction triggered by the determination by the identification code determination means that the identification codes do not match. Removal detecting means for detecting removal of the nonvolatile memory device from the information processing device;
Timing means for starting a timing operation for a predetermined time when removal of the nonvolatile memory device is detected by the removal detection means;
Attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device;
When the attachment detecting means detects the attachment of the nonvolatile memory device, the time measuring operation pausing means for temporarily stopping the time measuring operation by the time measuring means,
An identification code requesting means for making a request to read out an identification code stored in the information processing apparatus in advance from the information processing apparatus when the attachment detection means detects the attachment of the nonvolatile memory device;
Identification code determination means for determining whether or not the identification code read from the information processing apparatus as a result of the request by the identification code requesting means matches a preset correct identification code;
When it is determined by the identification code determination means that the identification codes match, the timing operation stopping means for stopping the timing operation by the timing means;
When it is determined by the identification code determination means that the identification codes do not match, the timing operation restarting means for starting the continuation of the timing operation by the timing means;
Further comprising
2. The non-volatile memory device according to claim 1, wherein the erasure instruction means issues the erasure instruction when a timing operation for a predetermined time by the timing means expires. Removal detecting means for detecting removal of the nonvolatile memory device from the information processing device;
Timing means for starting a timing operation for a predetermined time when removal of the nonvolatile memory device is detected by the removal detection means;
Attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device;
An identification code requesting means for making a request to read out an identification code stored in the information processing apparatus in advance from the information processing apparatus when the attachment detection means detects the attachment of the nonvolatile memory device;
Identification code determination means for determining whether or not the identification code read from the information processing apparatus as a result of the request by the identification code requesting means matches a preset correct identification code;
When it is determined by the identification code determination means that the identification codes match, the timing operation stopping means for stopping the timing operation by the timing means;
Further comprising
The erasure instruction means issues the erasure instruction when a timing operation of the predetermined time by the timing means expires or when the identification code determination means determines that the identification codes do not match. The nonvolatile memory device according to claim 1.   The timekeeping operation stop means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value and stops the timekeeping operation when the identification code determination means determines that the identification codes match. The non-volatile memory device according to claim 3.   6. The erasure instruction means also issues the erasure instruction even when an identification code cannot be read from the information processing apparatus as a result of a request from the identification code request means. The non-volatile memory device according to one item. Removal detecting means for detecting removal of the nonvolatile memory device from the information processing device;
Timing means for starting a timing operation when removal of the nonvolatile memory device is detected by the removal detection means;
Attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device;
Timekeeping operation stopping means for stopping the timekeeping operation by the timekeeping means when attachment of the nonvolatile memory device is detected by the attachment detection means;
Further comprising
2. The nonvolatile memory device according to claim 1, wherein the erasure instruction unit issues the erasure instruction when a timing operation for a predetermined time by the timing unit expires.   The timekeeping operation stop means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value and stops the timekeeping operation when the attachment detection means detects the attachment of the nonvolatile memory device. The nonvolatile memory device according to claim 7. A removal detecting means for detecting removal of the nonvolatile memory device from the information processing apparatus;
2. The non-volatile memory device according to claim 1, wherein the erasing instruction means issues the erasing instruction triggered by detection of removal of the non-volatile memory device by the removal detecting means. A code input operation means for performing an input operation of the code;
A security code determination means for determining whether or not a security code input by an input operation to the security code input operation means matches a preset correct security code;
Further comprising
10. The timekeeping operation stopping means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value when it is determined by the security code determination means that the passwords match. The non-volatile memory device according to claim 1.   The timekeeping operation stopping means returns the remaining time of the timekeeping operation by the timekeeping means to an initial value and stops the timekeeping operation by the timekeeping means when it is determined by the code code determination means that the passwords match. The non-volatile memory device according to claim 10.   The erasure instruction means detects the removal of the nonvolatile memory device by the removal detection means and before the security code determination means determines that the passwords coincide with each other before the attachment detection means 12. The non-volatile memory device according to claim 10, wherein the erasure instruction is issued with the detection of attachment as a trigger. Removal detecting means for detecting removal of the nonvolatile memory device from the information processing device;
Attachment detection means for detecting attachment of the nonvolatile memory device to the information processing device;
A code input operation means for performing an input operation of the code;
A security code determination means for determining whether or not a security code input by an input operation to the security code input operation means matches a preset correct security code;
With
The erasure instruction means detects the removal of the non-volatile memory device by the removal detection means and before the security code determination means determines that the passwords match, the attachment detection means The non-volatile memory device according to claim 1, wherein the erasure instruction is issued when attachment is detected as a trigger. A non-coincidence determination continuous number counting unit that counts the continuous number of times that the determination result by the personal identification code determination unit does not match,
The non-volatile memory device according to claim 12 or 13, wherein the erasure instruction means issues the erasure instruction as the trigger when the count number by the code code mismatch count counting means exceeds a predetermined number. The nonvolatile memory device according to any one of claims 2 to 6,
The information processing apparatus;
A nonvolatile memory system comprising:
The information processing apparatus stores and holds an identification code in advance, and transmits the identification code to the nonvolatile memory device in response to a request from the identification code requesting unit of the nonvolatile memory device. Memory system. A method for erasing data stored in a nonvolatile manner in a nonvolatile memory device configured to be detachable from an information processing device,
Monitoring the occurrence of a predetermined trigger; and
A process of issuing an erasure instruction to erase the data when the predetermined trigger occurs;
Erasing the data when the erasure instruction is issued; and
A method for erasing data, comprising: Monitoring the attachment of the non-volatile memory device to the information processing device;
When the nonvolatile memory device makes a request to read the identification code stored in the information processing device in advance from the information processing device when attachment of the nonvolatile memory device to the information processing device is detected;
Determining whether the identification code read from the information processing device as a result of the request matches a preset correct identification code;
As a result of the determination, when it is determined that the identification information does not match, a process of generating the predetermined trigger;
The data erasing method according to claim 16, further comprising: Monitoring the removal of the non-volatile memory device from the information processing device;
A process of starting a timing operation for a predetermined time when removal of the nonvolatile memory device from the information processing device is detected;
Monitoring the attachment of the non-volatile memory device to the information processing device;
When the attachment of the nonvolatile memory device to the information processing device is detected, the process of temporarily stopping the timing operation;
When the nonvolatile memory device makes a request to read the identification code stored in the information processing device in advance from the information processing device when attachment of the nonvolatile memory device to the information processing device is detected;
Determining whether the identification code read from the information processing device as a result of the request matches a preset correct identification code;
As a result of the determination, when it is determined that the identification information does not match, a process of starting the continuation of the timing operation;
A step of generating the predetermined trigger when a predetermined time has expired due to the timing operation;
The data erasing method according to claim 16, further comprising: Monitoring the removal of the non-volatile memory device from the information processing device;
A process of starting a timing operation for a predetermined time when removal of the nonvolatile memory device from the information processing device is detected;
Monitoring the attachment of the non-volatile memory device to the information processing device;
When the nonvolatile memory device makes a request to read the identification code stored in the information processing device in advance from the information processing device when attachment of the nonvolatile memory device to the information processing device is detected;
Determining whether the identification code read from the information processing device as a result of the request matches a preset correct identification code;
The process of generating the predetermined trigger when the time measurement for a predetermined time expires by the time counting operation or when it is determined that the identification information does not match as a result of the determination,
The data erasing method according to claim 16, further comprising: Monitoring the removal of the non-volatile memory device from the information processing device;
A process of starting a timing operation for a predetermined time when removal of the nonvolatile memory device from the information processing device is detected;
Monitoring the attachment of the non-volatile memory device to the information processing device;
A step of stopping the time measuring operation by the time measuring means when attachment of the nonvolatile memory device to the information processing device is detected;
A step of generating the predetermined trigger when a predetermined time has expired due to the timing operation;
The data erasing method according to claim 16, further comprising: Monitoring the removal of the non-volatile memory device from the information processing device;
A step of generating the predetermined trigger when the removal of the nonvolatile memory device from the information processing device is detected;
The data erasing method according to claim 16, further comprising: A process of accepting a password input operation;
A process of determining whether or not the input security code matches a preset correct security code;
As a result of the determination, when it is determined that the passwords match, the process of returning the remaining time of the timing operation to an initial value;
The data erasing method according to claim 18, further comprising:   After the removal of the non-volatile memory device from the information processing device is detected, and as a result of the determination, the attachment of the non-volatile memory device to the information processing device is detected before it is determined that the passwords match. 23. The data erasing method according to claim 22, further comprising the step of generating the predetermined trigger. Monitoring the removal of the non-volatile memory device from the information processing device;
Monitoring the attachment of the non-volatile memory device to the information processing device;
A process of accepting a password input operation;
A process of determining whether or not the input security code matches a preset correct security code;
After the removal of the non-volatile memory device from the information processing device is detected, and as a result of the determination, the attachment of the non-volatile memory device to the information processing device is detected before it is determined that the passwords match. Generating the predetermined trigger; and
The data erasing method according to claim 16, further comprising: As a result of the determination, a process of counting the number of consecutive times that the code is determined to be inconsistent;
A step of generating the predetermined trigger when the number of counts by the count exceeds a predetermined number;
The data erasing method according to claim 23 or 24, comprising: In a computer executable program,
A process for monitoring the occurrence of a predetermined trigger;
A process of issuing an erasure instruction for erasing data stored in a nonvolatile manner in a nonvolatile memory device configured to be detachable from the information processing device when the predetermined trigger occurs;
A process of erasing the data when the erasure instruction is issued;
A program characterized by executing A computer-readable recording medium, wherein the program according to claim 26 is stored.

Images