JP2007102661A - Encryption management method and encryption management program for data and file - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To encrypt and manage data or files which are appropriate to store with encryption without any special setting work by a user. <P>SOLUTION: After power-ON of a computer, encryption software 100 reads, when it is started first, data and/or files related to a protection item stored in a predetermined area in a hard disk 24 according to a predetermined sequence of protection items, encrypts the read data and/or file, and stores the encrypted data and/or file in a predetermined area of the hard disk 24. According to the sequence of protection items, reading, encryption and storage to hard disk of data and/or files related to the protection items are successively repeated. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a method and program for encrypting files such as documents and application data stored in a storage device of a computer.

  Various methods have been proposed for preventing data or files stored on a hard disk of a computer from being referred to or modified by a person other than a user or an authorized person. For example, Patent Document 1 discloses a technique in which an encryption key used when encrypting a selected file is scrambled by a secret key and an algorithmic modification of the secret key.

Patent Document 2 discloses an electronic file storage area for storing an electronic file, an electronic file management means for adding access authority information to the electronic file and storing it in the electronic file storage area, and an access request to the electronic file. Accordingly, an electronic file management apparatus having a protected electronic file output means for outputting a protected electronic file obtained by encrypting and protecting the electronic file is disclosed. In this electronic file management apparatus, the access authority information is added to manage the electronic file (document) and the protected electronic file (protected document) is output, so that the security for the original electronic file can be improved.
JP-A-9-293021 JP 2004-164604 A

  Conventionally, in a technology for encrypting a file in a computer, in particular, a personal computer alone, such as devices disclosed in Patent Documents 1 and 2, a user installs encryption software and starts it. In this state, it is necessary to select or specify the file or application software data that is determined to be encrypted. For example, if the user wishes to save the sent / received mail data stored in the mailer to the hard disk in an encrypted state, the mailer operates the input device etc. to send / receive the mailer in the encrypted software. It is necessary to make settings to encrypt the mail data. Also, when encrypting document files, tabular files, image files, etc. stored in a specific folder, the user operates the input device etc. to encrypt and save the files individually. It is necessary to instruct the software, or to instruct the encryption software to encrypt and store a predetermined type of file in a specific folder. Many users of personal computers do not have expert knowledge of the data stored in the application or the folder structure, so which data is appropriate to store encrypted It is not easy to judge. Also, there is a problem that it is complicated to instruct to store the encrypted data for each application and each folder.

  SUMMARY OF THE INVENTION An object of the present invention is to provide an encryption management method and an encryption management program for encrypting and managing data and files that are appropriate to be encrypted and stored without any special setting work by a user.

An object of the present invention is a method for encrypting and managing application software data and / or files stored in a hard disk of a computer,
A step of reading data and / or a file relating to the protection item stored in a predetermined area in the hard disk according to a predetermined sequence of protection items in the case of the first activation after the computer is turned on. When,
Encrypting the read data and / or file;
Storing encrypted data and / or files in a predetermined area in the hard disk,
According to the sequence of the protection items, the data and / or file related to the protection items are sequentially read, encrypted, and stored in the hard disk.

In a preferred embodiment, during installation, presenting a list of protected items on the screen of the display device;
Receiving the protection item selected by the user and storing the selected protection item in the hard disk;
Creating a sequence of protection items for the selected protection item in the first activation,
According to the created selected protected item sequence, the data and / or file related to the protected item is read, encrypted, and stored in the hard disk repeatedly.

Further, in a preferred embodiment, at the time of installation, displaying a password input image having a password input field on the screen of the display device;
Receiving a password entered by a user and storing the password in the hard disk;
A step of displaying a password input field again when the computer is turned on for the second time or later after powering on the computer;
Verifying the input password and the password stored in the hard disk,
If the input password matches the stored password, the protection item is allowed to be decrypted.

In another preferred embodiment, the encrypted data and / or file related to the protection item stored in a predetermined area in the hard disk is read with the activation of application software that handles the data related to the protection item. Steps,
Decrypting the encrypted data and / or files;
Storing the decrypted data and / or file in a predetermined area in the hard disk.

In a more preferred embodiment, the step of reading the data and / or file relating to the protection item stored in a predetermined area in the hard disk upon termination of application software handling the data relating to the protection item;
Encrypting the read data and / or files;
Storing encrypted data and / or files in a predetermined area in the hard disk.

In yet another preferred embodiment, the file storage area related to the protection item is stored in a predetermined area in the hard disk as the file storage area related to the protection item is opened by a user operation. Reading encrypted data and / or files
Decrypting the encrypted data and / or files;
Storing the decrypted data and / or file in a predetermined area in the hard disk.

In a more preferred embodiment, a file is created in the file storage area related to the protection item, or when the created or updated file is closed when the file is updated, Reading out data and / or files contained in a file storage area related to the protection item stored in a predetermined area;
Encrypting the read data and / or files;
Storing encrypted data and / or files in a predetermined area in the hard disk.

Another object of the present invention is a program for encrypting and managing application software data and / or files stored in a hard disk of a computer.
Data and / or files related to the protection item stored in a predetermined area in the hard disk in accordance with a predetermined protection item sequence when it is determined that the computer is turned on for the first time after the computer is turned on. A step of reading
Encrypting the read data and / or file;
Storing encrypted data and / or files in a predetermined area in the hard disk,
According to the sequence of the protection items, it is also achieved by a program in which data and / or files relating to the protection items are sequentially read, encrypted, and stored in the hard disk.

In a preferred embodiment, the computer includes:
Presenting a list of protected items on the screen of the display device during installation;
Receiving the protection item selected by the user and storing the selected protection item in the hard disk;
Creating a sequence of protection items for the selected protection item in the first activation;
The data and / or file related to the protection item is read, encrypted, and stored in the hard disk in accordance with the created selected protection item sequence.

In a preferred embodiment, the computer includes
A step of displaying a password input image having a password input field on the screen of the display device during installation;
Receiving a password entered by a user and storing the password in the hard disk;
A step of displaying a password input field again when the computer is turned on for the second time or later after powering on the computer;
Executing the step of verifying the input password and the password stored in the hard disk;
When the input password matches the stored password, decryption of the protection item is permitted.

In another preferred embodiment, the computer includes:
Reading encrypted data and / or files related to the protection item stored in a predetermined area in the hard disk in accordance with activation of application software that handles data related to the protection item;
Decrypting the encrypted data and / or files;
Storing the decrypted data and / or file in a predetermined area in the hard disk.

In a more preferred embodiment, the computer includes:
Reading out data and / or files related to the protection item stored in a predetermined area in the hard disk upon termination of application software that handles data related to the protection item;
Encrypting the read data and / or files;
Storing the encrypted data and / or file in a predetermined area in the hard disk.

In yet another preferred embodiment, the computer includes:
Encrypted data contained in the file storage area related to the protection item and / or stored in a predetermined area in the hard disk as the file storage area related to the protection item is opened by the user's operation Reading the file;
Decrypting the encrypted data and / or files;
Storing the decrypted data and / or file in a predetermined area in the hard disk.

In a more preferred embodiment, the computer includes:
When a file is created in the file storage area related to the protection item or when the file is updated, the created or updated file is stored in a predetermined area in the hard disk as the file is closed. Reading data and / or files contained in the file storage area relating to the protection item;
Encrypting the read data and / or files;
Storing the encrypted data and / or file in a predetermined area in the hard disk.

  According to the present invention, it is possible to provide an encryption management method and an encryption management program for encrypting and managing data and files that are suitable to be encrypted and stored without any special setting work by a user. .

  Embodiments of the present invention will be described below with reference to the accompanying drawings. The data and / or file encryption management method according to the present embodiment is realized by installing an encryption program in a personal computer. FIG. 1 is a functional block diagram of a personal computer for realizing the encryption management method according to the present embodiment. As shown in FIG. 1, in the personal computer 10, various application software such as a mailer 14, a browser 16, document creation software 18, table creation software 20, and image processing software 22 operate under an operating system (OS) 12. can do. Various data are created in the course of processing by the application software or as a result of the processing. For example, in the mailer 14, the address book 102 and transmission / reception data 104 are created, and in the browser 16, the URL history 106 that is accessed, the bookmark 108, and the autocomplete that is the history of information searched by the user using the browser. A history 110 is created. In addition, various files (see reference numerals 112, 114, and 116) are created by the document creation software 18, the table creation software 20, and the image processing software 22 executing processes according to user operations. Data and files created by these application software processes are stored in predetermined areas of the hard disk 24, respectively.

  The encryption software 100 according to the present embodiment is installed in the personal computer 10, and the program is stored in the hard disk 24 (not shown in FIG. 1). Also, the encryption software 100 encrypts data stored in the hard disk 24 immediately after installation, and thereafter after the application software is terminated. Also, data and files are decrypted as the application software is started and folders and files are opened.

  By installing the encryption software 100 in the personal computer 10 configured as described above, the program is stored in a predetermined area of the hard disk 24. The user once turns off the personal computer 10 and then restarts. As shown in FIG. 2, when the personal computer 10 is turned on again and restarted (step 201), the encryption software 100 is turned on for the first time after installation, that is, the first power after installation. It is automatically activated upon entry (step 202), and a password input image is displayed on the screen of a display device (not shown) of the personal computer 10.

  FIG. 3A is a diagram illustrating an example of a password input image. As illustrated in FIG. 3A, the password input image 300 includes password input fields 301 and 302. The user operates an input device (not shown), inputs a desired password in the password input fields 301 and 302, and turns on the button 303. Thereby, the input password is notified to the encryption software 100. When the encrypted software 100 accepts the input password, the encrypted software 100 stores the accepted password in an area managed by the encrypted software 100 in the hard disk 24 (step 203). This sets a password.

  Next, the encryption software 100 displays a protection item list image including a list of items (protection items) to be encrypted on the screen of the display device. FIG. 3B is a diagram illustrating an example of the protection item list image. As shown in FIG. 3B, in the present embodiment, the encryption software 100 includes an address book of a mailer (mailer 1), an address book and mail data of another mailer (mailer 2), and a folder of My Documents. Files, cookies, autocomplete history, bookmarks set by the user in the browser, and browser URL history can be encrypted. Initially, in the protected item list image 310, all check boxes for protected items (for example, reference numerals 311 and 312) are checked. The user can operate the input device to remove the check box of the protection item determined to be unnecessary for encryption in the protection item list image. When the button 313 is turned on, the encryption software 100 is notified of on / off information of check boxes of the respective protection items. When the encryption software 100 receives the ON / OFF information of the check box of the protection item, the encryption software 100 stores the protection item checked in the check box (that is, in the ON state) in a predetermined area in the hard disk 24 (step). 204). Thereby, a protection item is set. The protection items stored in the hard disk 24 are in the form of a sequence. By sequentially reading out the sequence of protection items, the encryption software 100 identifies the protection items to be encrypted, and the data and files related to the protection items. Can be encrypted.

  The encryption software 100 reads the information of the protection item in the hard disk 24, identifies the protection item to be processed (step 205), and reads data and files related to the item from the hard disk 24 (step 206). For example, if the protection item is “mailer 1”, the address book is read from the hard disk 24, and if “mailer 2”, the address book and mail data are read from the hard disk 24. Similarly, if the protection item is “My Document”, all the files stored in the “My Document” folder are sequentially read.

  The encryption software 100 reads from the hard disk 24, encrypts data and files related to the protection items (step 207), and stores the encrypted data and files in the original area from which the data in the hard disk 24 is read. (Step 208). In the present embodiment, RC4, which is a kind of shared key method, is used as the encryption algorithm. Of course, it goes without saying that other encryption algorithms may be used.

  The encryption software 100 refers to the protection item sequence stored in the hard disk 24, identifies the protection item to be processed next (step 205), reads data and files related to the protection item (step 206), and The encryption (step 207) and the storage of the encrypted data and file in the original area (step 208) are repeated (see step 209). When the encryption is completed for all the protection items selected by the user, this process ends.

  According to the present embodiment, the user does not need to specify files and data to be encrypted one by one and does not need to encrypt them. When installing the encryption software (actually, the personal computer after installation is installed). At the time of restart), by referring to the protection item list, only data that does not require encryption is cleared, and data and files that are determined to be encrypted are sequentially encrypted by simply removing the check box.

  In this way, when data or a file is encrypted by the encryption software 100, the data or file is decrypted as the application software related to the protection item is activated and the file or folder is opened. As a premise, when starting the personal computer, the encryption software 100 prompts the user to input a password, compares the input password with a password stored in a predetermined area of the hard disk 24, and compares them. If they match, the encryption software 100 determines that the encrypted data or file related to the protection item may be decrypted.

  As shown in FIG. 4A, when application software such as a mailer or a browser in which data related to the software is encrypted is activated by encryption software, the encryption software 100 is activated accordingly. (Step 401). The encryption software 100 reads encrypted data and files related to the activated application software from the hard disk 24. For example, if the activated application software is “Mailer 2”, the encrypted address book and mail data are read from the hard disk 24 in accordance with the selected protection item. If the activated application software is a browser, the encrypted cookie, autocomplete history, bookmark, and history are read from the hard disk 24 in accordance with the selected protection item.

  The encryption software 100 decrypts the encrypted data and file read from the hard disk 24 (step 403), and stores the decrypted data and file in the original area in the hard disk 24 (step 404). After that, applications such as mailers and browsers are started. Since the decryption of the encrypted data or file has already been completed, for example, the decrypted plain text mail body or address book can be displayed on the screen of the display device of the personal computer. .

  Even when the folder of the selected protection item such as My Document is opened by the user's input device operation, as shown in FIG. 4B, the encryption software 100 is activated accordingly (step) 411). The encryption software 100 reads the encrypted file contained in the protection item folder from the hard disk 24 (step 412), decrypts it (step 413), and restores the decrypted file to the original area of the hard disk 24. Store (step 414). The encrypted file 100 repeats the processing of steps 412 to 414 for all the encrypted files included in the folder of the protection item (see steps 415 and 416). As a result, when the folder is opened in accordance with a user instruction, the document file, the table format file, the image file, and the like included in the folder are decrypted.

  Next, processing executed at the end of application software, such as a mailer or browser, in which data or files are encrypted by encrypted software will be described. When the application software described above is completed, the encrypted software 100 is activated as shown in FIG. 5A (step 501). The encryption software 100 reads data and files to be encrypted regarding the application software from the hard disk 24 (step 502), encrypts the data and files (step 503), and stores the encrypted data and files on the hard disk 24. The original area is stored (step 504). Here, the encryption software 100 may be activated immediately after the mailer or browser is terminated, or the encryption software 100 may be activated after a predetermined time (for example, 1 minute) has elapsed.

  Further, as shown in FIG. 5B, a new file is created by the document creation software 18, the table creation software 20, the image processing software 22, etc. (step 511), and the created file is like a My Document. Even when the file is stored in the protection item folder, the encryption software 100 is activated when the created file is closed (step 512). The encryption software 100 reads the created file from the hard disk 24 (step 513), encrypts the file (step 514), and stores the encrypted file in the original area in the hard disk 24 (step 515). ). The encryption software 100 may be activated immediately after the file is closed, or may be activated after a predetermined time (for example, 1 minute) has elapsed. FIG. 5B illustrates the processing of the encryption software 100 when creating a new file. The decrypted file is updated by the document creation software 18, the table creation software 20, and the image processing software 22. Even in such a case, the encryption software 100 is activated in accordance with the closing of the file, and Steps 513 to 515 are executed. Furthermore, even when a file stored in another folder is moved to a folder for protected items such as My Documents by the user's operation of the input device, in particular, dragging with the mouse, Thus, the encryption software 100 is activated and steps 513 to 515 are executed.

  According to the present embodiment, at the time of installation of the encryption software (actually, when the personal computer is restarted after installation), the user refers to the protection item list, and only the items that do not require encryption are By simply clearing the check box, data and files that are determined to be encrypted are sequentially encrypted. For the selected protection items, a password is entered when the personal computer is started, data and files are decrypted when the software is used, and data and files are decrypted when the software is closed or when the file is closed. The file is encrypted again.

  The present invention is not limited to the above embodiments, and various modifications can be made within the scope of the invention described in the claims, and these are also included in the scope of the present invention. Needless to say.

  For example, in the above-described embodiment, the address book and transmission / reception data regarding the mailer, the URL history regarding the browser, the bookmark, the autocomplete history and cookies, and the My Document as the storage area are the protection items. However, the present invention is not limited to this, and data or files created by other application software, or other storage areas (for example, a desktop) may be used as the protection items. Also in this case, the protection item list image is displayed on the screen of the display device, and the user can select a desired protection item.

FIG. 1 is a functional block diagram of a personal computer for realizing the encryption management method according to the present embodiment. FIG. 2 is a flowchart showing an outline of the encryption processing according to the present embodiment. FIGS. 3A and 3B are diagrams showing examples of images displayed on the screen of the display device of the personal computer in the present embodiment. FIGS. 4A and 4B are flowcharts illustrating an example of the decoding process according to the present embodiment. FIGS. 5A and 5B are flowcharts showing an example of encryption processing according to the present embodiment.

Explanation of symbols

10 Personal computer 12 OS
14 Mailer 16 Browser 18 Document creation software 20 Table creation software 22 Image processing software 24 Hard disk 100 Encryption software

Claims (14)

A method of encrypting and managing application software data and / or files stored in a hard disk of a computer,
A step of reading data and / or a file relating to the protection item stored in a predetermined area in the hard disk according to a predetermined sequence of protection items in the case of the first activation after the computer is turned on. When,
Encrypting the read data and / or file;
Storing encrypted data and / or files in a predetermined area in the hard disk,
According to the sequence of the protection items, reading and encryption of data and / or files related to the protection items, and storage in a hard disk are repeated in order. Presenting a list of protected items on the screen of the display device during installation;
Receiving the protection item selected by the user and storing the selected protection item in the hard disk;
Creating a sequence of protection items for the selected protection item in the first activation,
The method according to claim 1, characterized in that the reading and encryption of data and / or files relating to the protection items and the storage on the hard disk are repeated according to the created sequence of selected protection items. A step of displaying a password input image having a password input field on the screen of the display device during installation;
Receiving a password entered by a user and storing the password in the hard disk;
A step of displaying a password input field again when the computer is turned on for the second time or later after powering on the computer;
Verifying the input password and the password stored in the hard disk,
The method according to claim 1 or 2, wherein the decryption of the protection item is permitted when the input password matches the stored password. Reading encrypted data and / or files related to the protection item stored in a predetermined area in the hard disk in accordance with activation of application software that handles data related to the protection item;
Decrypting the encrypted data and / or files;
4. The method of claim 3, comprising: storing the decrypted data and / or file in a predetermined area in the hard disk. Reading out data and / or files related to the protection item stored in a predetermined area in the hard disk upon termination of application software that handles data related to the protection item;
Encrypting the read data and / or files;
5. The method of claim 4, further comprising the step of storing encrypted data and / or files in a predetermined area in the hard disk. Encrypted data contained in the file storage area related to the protection item and / or stored in a predetermined area in the hard disk as the file storage area related to the protection item is opened by the user's operation Reading the file;
Decrypting the encrypted data and / or files;
4. The method of claim 3, comprising: storing the decrypted data and / or file in a predetermined area in the hard disk. When a file is created in the file storage area related to the protection item or when the file is updated, the created or updated file is stored in a predetermined area in the hard disk as the file is closed. Reading data and / or files contained in the file storage area relating to the protection item;
Encrypting the read data and / or files;
The method according to claim 6, further comprising the step of storing encrypted data and / or files in a predetermined area in the hard disk. A program for encrypting and managing application software data and / or files stored in a hard disk of a computer,
Data and / or files related to the protection item stored in a predetermined area in the hard disk in accordance with a predetermined protection item sequence when it is determined that the computer is turned on for the first time after the computer is turned on. A step of reading
Encrypting the read data and / or file;
Storing encrypted data and / or files in a predetermined area in the hard disk,
According to the sequence of the protection items, reading of data and / or files relating to the protection items, encryption, and storage in a hard disk are repeated sequentially. In the computer,
Presenting a list of protected items on the screen of the display device during installation;
Receiving the protection item selected by the user and storing the selected protection item in the hard disk;
Creating a sequence of protection items for the selected protection item in the first activation;
9. The program according to claim 8, wherein reading and encryption of data and / or files relating to the protection item, and storage on the hard disk are repeated according to the created selected protection item sequence. . In the computer,
A step of displaying a password input image having a password input field on the screen of the display device during installation;
Receiving a password entered by a user and storing the password in the hard disk;
A step of displaying a password input field again when the computer is turned on for the second time or later after powering on the computer;
Executing the step of verifying the input password and the password stored in the hard disk;
10. The program according to claim 8, wherein decryption of the protection item is permitted when the input password matches the stored password. In the computer,
Reading encrypted data and / or files related to the protection item stored in a predetermined area in the hard disk in accordance with activation of application software that handles data related to the protection item;
Decrypting the encrypted data and / or files;
The decrypted data and / or file is stored in a predetermined area in the hard disk, and the program is executed. In the computer,
Reading out data and / or files related to the protection item stored in a predetermined area in the hard disk upon termination of application software that handles data related to the protection item;
Encrypting the read data and / or files;
12. The program according to claim 11, further comprising: storing encrypted data and / or a file in a predetermined area in the hard disk. In the computer,
Encrypted data contained in the file storage area related to the protection item and / or stored in a predetermined area in the hard disk as the file storage area related to the protection item is opened by the user's operation Reading the file;
Decrypting the encrypted data and / or files;
The decrypted data and / or file is stored in a predetermined area in the hard disk, and the program is executed. In the computer,
When a file is created in the file storage area related to the protection item or when the file is updated, the created or updated file is stored in a predetermined area in the hard disk as the file is closed. Reading data and / or files contained in the file storage area relating to the protection item;
Encrypting the read data and / or files;
The program according to claim 13, further comprising: storing encrypted data and / or a file in a predetermined area in the hard disk.

Images