JP2008217300A - System and method for encrypting and decrypting file with biological information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technique for encrypting and decrypting a file with biological information which is inaccessible when moved out of a high security area by setting the biological information on authorized users in the files. <P>SOLUTION: A terminal has a biological information reading device and sets biological information about authorized users for each file to prohibit access from the user other than the set users. When the file is opened, whether the user has been set is determined. The user biological information and file information are stored in the terminal, and an operation history is sent to a server. The file operation history can be checked by a search through the information. The decryptable biological information is set in each file, so that files are inaccessible from third parties even if they are moved out of a physical high security area. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a file encryption / decryption technique with biometric information for a folder or a file of a fixed or mobile terminal device.

  With the miniaturization and large capacity of terminal devices and the advancement of network technology, files can be easily copied and moved. For example, store a file in a portable storage medium that can be attached to and detached from the terminal body, carry it at home, or download the latest file using a network line, etc. Various applications are becoming possible.

  On the other hand, in recent years, serious damage caused by taking out confidential data or leaking customer data due to theft has not been complete. Various proposals have been made for access management of such confidential data. For example, a terminal that can access confidential data is specified in advance, and the terminal is placed in a physical high-security area that requires biometric authentication, or detailed access rights are set for each file. It is a method of making it access.

For file encryption using biometric information, a technique as described in Patent Document 1 below is known. This uses biometric information for file encryption, but does not embed biometric information in the file itself.
JP 2006-126871 A

  By the way, even if it is a file for which detailed access rights are set in a specific terminal device in a high security area using biometric authentication, an unspecified number of files are used once taken out. Can be accessed by a person and data leakage occurs. For this reason, by managing the access history for files, the morals of people entering the high security area may be improved, or operations may be carried out to prevent taking out by multiple people when entering the high security area. ing. However, in spite of this, there are cases in which customer data is taken out by people who can enter the high security area and criminal cases occur.

  In addition, a method for accessing a file by setting an access right for each user is based on the premise that login authentication is performed on the terminal with a password set in advance for each user. However, due to forgetting of the password, there is a risk that even the person himself cannot authenticate or the password is stolen and authenticated by a third party.

  An object of the present invention is to set biometric information of a user who can access a file in the file itself, so that even if the file is taken out of the high security area, it cannot be accessed. It is to provide a file encryption and decryption technique.

  In order to achieve the above object, the present invention encrypts a file data body with a predetermined file encryption key, and the encrypted file data body has file decryption having biometric information of all users who are permitted to decrypt the file. Permitted biometric information data is added, and the encrypted file data body to which the file decryption-permitted biometric data is added is encrypted with a predetermined encryption key to create an encrypted file with biometric information.

  Further, the present invention obtains a decryption key corresponding to the encryption key when decrypting such an encrypted file with biometric information, and uses the obtained decryption key to store the encrypted file with biometric information. Decrypting, obtaining the file decryption-permitted biometric information data and the encrypted file data body, obtaining the biometric information of the user, and allowing the user to decrypt the file indicated by the file decryption-permitted biometric information The file decryption key for decrypting the encrypted file data main body is obtained only when it is included, and the encrypted file data is obtained using the file decryption key. The main body is decrypted.

  Further, the present invention is a system in which a server and a terminal device are connected to a network, and an encryption key acquisition request is transmitted from the terminal device to the server, and in response to the encryption key acquisition request, the server An encryption key is transmitted, the encryption key transmitted from the server is received by the terminal device, file decryption permission biometric information indicating a user permitted to decrypt the file is input by the terminal device, and the server A file encryption key is generated from the encryption key acquired from the file and the file decryption permission biometric information, the unencrypted file data body is encrypted with the file encryption key, and the file is stored in the encrypted file data body. The file decryption permission biometric information indicating the user who is permitted to decrypt is added, and the encrypted file data body to which the file decryption permit biometric information is added is And encrypted by the encryption key acquired from the server, characterized in that it creates a biometric information with encrypted files.

  In the present invention, when the encrypted file with biometric information is decrypted, the terminal device transmits a decryption key acquisition request to the server, and the server responds to the decryption key acquisition request by the server. A decryption key corresponding to the encryption key is transmitted, the decryption key transmitted from the server is received by the terminal device, and the encrypted file with biometric information is received by the terminal device using the decryption key. Decrypting, obtaining the file decryption-permitted biometric information and the encrypted file data body, obtaining the user's biometric information, and allowing the user to decrypt the file indicated by the file decryption-permitted biometric information The encrypted file is determined from the decryption key obtained from the server and the file decryption-permitted biometric information only when the user is included in the user who permits the decryption. It generates a file decryption key for decrypting the Rudeta body portion, using the generated file decryption key, wherein the decrypting the encrypted file data itself.

  Furthermore, the terminal device transmits the operation history performed on the encrypted file with biometric information and the biometric information of the user when the operation is performed to the server, The operation history transmitted from the terminal device and the user's biometric information may be stored in a file biometric information history database.

The present invention has the following effects.
(1) Even if a file is taken out of the high security area, access to the file by a third party can be prevented.
(2) Since the means for authenticating the user is biometric information, information leakage to a third party due to password theft can be prevented.
(3) Even when the file name of the file taken out is changed or copied, the file access right can be maintained.
(4) The operation history of the file taken out can be checked.
(5) The biometric information set in the file can be received from the host system at any time.
(6) Since the host system holds the contract information of the server, the latest biometric information request from other than the contractor can be eliminated.

  Hereinafter, an embodiment of a file encryption and decryption system with biometric information to which the present invention is applied will be described.

  FIG. 1 is a system configuration diagram showing an embodiment of the present invention. The encryption and decryption system with biometric information of this embodiment includes a host system 101 having a biometric information database 107, and a plurality of servers 102a, 102b,..., And 102n that receive biometric information from the host system 101, A plurality of client terminal devices 103a, 103b,..., And 103n including a reading device 104 for acquiring biometric information are provided. The number of servers 102a, 102b,..., And 102n is arbitrary. When referring to an arbitrary server, it is referred to as “server 102”. The number of terminal devices 103a, 103b,..., And 103n is also arbitrary. When referring to any one terminal device, it is called “terminal device 103”.

  In addition to the biometric information database 107, the host system 101 of FIG. 1 is connected to a reading device 108 for acquiring biometric information and a server information database 109 for storing server information of a biometric information encryption contractor. Yes. In the biological information database 107 of the host system 101, biological information data including, for example, a biological information ID, biological information, a user name, and the like is registered. The biometric information is acquired from all users by the reading device 108, for example, and registered in the biometric information database 107 in association with the biometric information ID or the like. In the server information database 109, the contract information of the biometric information encryption contractor is registered. The contract information of the biometric information encryption contractor includes the contractor information, the server information, the number of connectable terminal devices, the contract period, and the like. These information are transmitted when the biometric information is transmitted to the server 102. Used for. Note that the reading device 108 may be provided at a plurality of locations for the convenience of the user and transmitted to the host system 101 via a network.

  The host system 101 includes a database update unit 110 that performs update processing of the biometric information database 107 and the server information database 109, a transmission / reception unit 111 that mainly performs processing of update requests for biometric information data sent from the server 102, A server confirmation unit 112 is provided for registering a biometric information encryption contractor in the server information database 109 and confirming whether or not the server making a biometric information data update request is the contractor.

  The server 102a includes a biometric information database 113 that stores biometric information data distributed from the host system 101 and its latest registration update date and time, and a file biometric information history database 114 that stores biometric information history data of files of the terminal device 103. And a file decryption permission biometric information database 115 for storing file decryption permit biometric information in units of files and a terminal database 116 for managing the number of contracted terminals and storing terminal information for transmitting biometric information data Has been.

  In the biometric information database 113, biometric information data received from the host system 101, registration update date and time of the biometric information data, and the like are registered. At the time interval set in the server 102a (the time interval can be arbitrarily set by the administrator), the server 102a connects to the host system 101 and receives the biometric information updated from the previously acquired biometric information. The biometric information database 113 is periodically updated.

  In the file biometric information history database 114, biometric information history data of encrypted files with biometric information of a plurality of terminal devices 103a, 103b,. Data stored in the file biometric information history database 114 is access history data for an encrypted file with biometric information that is managed by the present system. The biometric information history data is transmitted from the terminal device 103 to the server 102a at a specific timing and stored in the file biometric information history database 114. Therefore, by referring to the file biometric information history database 114, it is possible to refer to which file is accessed by which terminal at which terminal.

  In the file decryption permission biometric information database 115, biometric information of a user who permits decryption of the encrypted file with biometric information created by the terminal devices 103a, 103b,..., 103n is registered. The file decryption-permitted biometric information registered in the database 115 is for the administrator of the server 102 and the user of the terminal device 103 to specify a specific file and set a user who is permitted to decrypt the file. It is data. For example, if a file decryption-permitted user is set for the system file of the terminal device 103a, the system file of the terminal device 103a is encrypted, so the user who can use the terminal device 103a is set from the administrator side It becomes possible to do.

  In the terminal database 116, information unique to the plurality of terminal devices 103a, 103b,..., And 103n is registered, so that the server 102a has a contracted number of terminal devices (terminals managed by the server 102a). It is possible to provide encryption and decryption services with biometric information only to the device.

  The server 102a also displays a user display unit 117 for displaying a list of users whose biometric information is registered in the biometric information database 113, and biometric information of users who are permitted to decrypt specified by the administrator. A file decoding permission biometric information input unit 118 that reads from the biometric information database 113, generates file decryption permission biometric information data from the read biometric information, and stores the file decryption permission biometric information data in the file decryption permission biometric information database 115; The biometric information (user) permitting the decryption of the file is obtained from the file decryption biometric information database 115 and the terminal database 116, and is transmitted to the terminal device 103. ,..., 103n, a file biometric information receiving unit 121 that receives biometric information history data of files, and a biometric information database. 113, a file biometric information history database 114, a file decryption-permitted biometric information database 115, a search processing unit 122 that searches the contents of the terminal database 116, a search result display unit 120 that displays the search results, and file biometric information A biometric information history display processing unit 123 that reads and displays a biometric information history of a file from the history database 114 and a certificate authority 124 that issues an encryption key and a decryption key to the terminal device 103 are provided. The other servers 102b to 102n having an arbitrary number have the same configuration.

  The terminal device 103a of FIG. 1 includes a plurality of encrypted files 125 with biometric information encrypted with the encryption key and biometric information transmitted from the certificate authority 124 of the server 102, and the biometric information of the user on the terminal device 103a. Is provided. The file 125 in the terminal device 103a is encrypted by using an encryption key issued by the certificate authority 124 of the server 102 so that only a specific user can decrypt and use it. The file 125 can be encrypted by a command from a user of the terminal device 103a or by a command from an administrator of the server 102. The other terminal devices 103b to 103n having an arbitrary number have the same configuration.

  1 is connected to a plurality of servers 102a, 102b,..., And 102n for which biometric information encryption is contracted with the host system 101, and the biometric information on the server 102 can be updated as necessary. It is configured as follows. The network 106 is connected with terminal devices 103a, 103b,..., And 103n within the number of connectable terminal devices contracted with the server 102, and the history of biometric information encrypted files in the terminal can be transmitted to the server 102. Biometric information data on 102, file decryption-permitted biometric information, an encryption key or a decryption key issued from a certificate authority, and the like can be transmitted to the terminal device 103.

  The host system 101 is assumed to be that of a service provider that provides services using the file encryption and decryption technology with biometric information according to the present invention. A company or the like who wants to receive this service becomes a biometric information encryption contractor by applying for the service to the service provider. The server 102 is assumed to be owned by the biometric information encryption contractor or provided by the service providing company to the biometric information encryption contractor. Each user of the terminal device 103 is, for example, an employee such as a company that has become a biometric information encryption contractor.

  FIG. 2 is a detailed configuration diagram of the terminal device 103 of FIG. The terminal device 201 uses a biometric information database 202 for storing biometric information data sent from the server 102, a file biometric information history database 203 for storing an access history of a file encrypted by the biometric information, The file 205 (FIG. 1) encrypted with the biometric information using the reader 204 (104 in FIG. 1) for acquiring the biometric information of the person and the encryption key issued by the certificate authority 124 of the server 102. 1) 125).

  Furthermore, the terminal device 201 includes a user display unit 206 for displaying a list of users whose biometric information is stored in the biometric information database 202, and biometric information acquisition for acquiring user biometric information from the reading device 204. Unit 207, file processing unit 208 including encryption unit 209 that encrypts a file using biometric information, and decryption unit 210 that performs decryption processing, and biometric information history of the file is transmitted to server 102 A biometric information history transmitting unit 211 for inputting the data, and an input unit 212 for inputting the decryption-permitted biometric information of the file.

  The biometric information database 202 in FIG. 2 stores the biometric information data received from the server 102 in FIG. 1 and the registration update date and time of the biometric information data. At the time interval set in the terminal device 201 or the server 102 (the time interval can be arbitrarily set by the administrator of the server 102 or the user of the terminal 201), the terminal device 201 connects to the server 102, and biometric information The updated part of the data is received, and the biometric information database 202 is periodically updated.

  FIG. 3 is a data table of biometric information and biometric information related information stored in the biometric information database 107 of the host system 101 of FIG. The biometric information database 107 has fields of biometric information ID 301, user name 302, biometric information 303, registration date and time 304, and classification 305. The biometric information 303 is the biometric information itself read from the user, such as fingerprint, vein, and iris pattern information. The biometric information ID 301 is an ID that uniquely identifies the biometric information, and the user name 302 is the name of the user. The registration date and time 304 stores the date and time when the biometric information is registered or updated. In the category 305, “biological information” is stored to indicate that the record is a record storing biometric information.

  The biometric information database 113 connected to the server 102 and the biometric information database 202 connected to the terminal device 201 (103) also have the same data format as shown in FIG. In the present embodiment, it is assumed that biometric information of all users belonging to a company or the like who is a biometric information encryption contractor is first read by the reading device 108 of the host system 101 and stored in the biometric information database 107. When the biometric information database 107 of the host system 101 stores the biometric information of all users and adds the server 102 related to the biometric information encryption contractor, in step 804 of FIG. The biometric information of all users under the management of the corresponding biometric information encryption contractor company or the like is read from the biometric information database 107 of the host and stored in the biometric information database 113 of the server 102. Further, when the terminal device 103 connected to the server 102 is added, the terminal device 103 to which all the biological information stored in the biological information database 107 of the server 102 has been added in the installation process in step 906 of FIG. The biometric information database 202 is copied. The biometric information database 202 of the terminal device 103 and the biometric information database 107 of the server 102 are referred to when adding to a file biometric information of a user who is permitted to decrypt the file when the file is encrypted. is there.

  FIG. 4 shows a configuration example of the contract information of the biometric information encryption contractor stored in the server information database 109 of the host system 101. The contract information of the biometric information encryption contractor consists of the contractor ID 401, the contractor name 402, the representative contractor address 403, the contract form 404, the contract date 405, the product key 406, and the number of connected terminals 407. Unique ID for each person, contractor name or corporate name, representative contractor address, contract form, contract period for sending biometric data and biometric information, product key for uniquely specifying the server, and server The number of terminal devices connected to is registered.

  The contract form 404 indicates a contract form according to the configuration method of the server 102. This contract form provides, for example, a fault-tolerant server configuration that provides one service with multiple servers, or provides a service with only one server to improve server performance or cope with server failures. It is used to correspond to the server configuration of the client, such as the configuration of the server.

  FIG. 5 shows a configuration example of file biometric information history data stored in the file biometric information history database 114 of the server 102 of FIG. File biometric information history data consists of a file identifier 501, date 502, biometric data 503, file name 504, user operation 505, and user name 506, each identifying a unique file in all systems To send the file biometric information history data, the date and time when the file biometric history data was sent from the terminal device, the user's biometric information read by the terminal, the file name with the extension, and the file biometric history data The operation contents of the user and the user name are registered.

  The file biometric information history data is transmitted from the terminal device 103 to the server 102 and stored in the file biometric information history database 114 when any user operation is performed on the encrypted file with biometric information in the terminal device 103. Is done. User operations for sending file biometric information history data from the terminal device 103 to the server 102 include “data read”, “data write”, “file delete”, “file name change” for an encrypted file with biometric information. And “file copy”. In addition, the user operation includes “periodic transmission” (not strictly a user operation) and “when network connection starts”. “Periodical transmission” refers to a case where the file information about the encrypted file with biometric information of the terminal device 103 is periodically sent to the server 102 (the period can be set by the user). “At the start of network connection” refers to a case in which the file information about the encrypted file with biometric information of the terminal device 103 is sent to the server 102 when the terminal device 103 starts to connect to the network 106. When these user operations are performed, the terminal device 103 stores the file biometric information history data described in FIG. 5 relating to the operations (the user operation 505 describes the user operation that triggered the operation) as a server. Send to 102. The server 102 stores the sent file biometric information history data in the file biometric information history database 114.

  The file identifier 501 is created using each data of “MAC address”, “system time”, and “file name” of the terminal device. When the encrypted file with biometric information is copied, file biometric information history data corresponding to the encrypted biometric information file with copy destination is created, but the “copy destination file identifier” is “copy source file identifier”. , And “copy source file identifier” can be found by looking at “copy destination file identifier”. Therefore, even when the file is copied, the location of the copy source file can be specified. Since the “MAC address” is unique for each terminal and the “system time” also changes every moment, the same file identifier does not exist throughout all systems.

  The file identifier 501 is not changed when the file name is changed. For example, even if the encrypted file with biometric information whose file name 504 is “Biometric information encryption basic design document.txt” is renamed “20050804_Biometric information encryption basic design document.txt”, the same File identifier.

  FIG. 6 shows a configuration example of the file decryption permission biometric information stored in the file decryption permission biometric information database 115 of the server 102. The file decryption permission biometric information is composed of a file identifier 601, a file path 602, biometric information data 603, and an encryption flag 604, respectively, an identifier for specifying a file, a path of a file to be encrypted with biometric information, An array of biometric information of a user who is permitted to decrypt a file and flag information indicating whether the file is encrypted are registered.

  The file identifier 601 accesses the terminal database 116 when a path of a file to be encrypted using biometric information is set, and the “MAC address”, “system time”, “file name”, and the like of the corresponding terminal device Generate using.

  The file decryption permission biometric information database 115 is used when an administrator of the server 102 or a user of the terminal device 103 designates a specific file and sets an access right. For example, it is possible to set a user who can use the terminal device 103a by setting an access right that can be decrypted only by a specific user for the system file of the terminal device 103a.

  When the administrator of the server 102 designates a specific file of the terminal device 103 and sets and encrypts the file decryption permission biometric information, first, the administrator of the server 102 uses the server 102 and the terminal device 103 to It specifies which file of the terminal device 103 is to be encrypted. As a result, the file decryption permission biometric information of the specified file is set in the file decryption permission biometric information database 115. At this point, the file identifier and file path of the specified file are set in the file identifier 601 and the file path 602. Next, the administrator uses the user display unit 117 to specify all users who are permitted to decrypt the file from the list of users registered in the biometric information database 113. The server 102 reads out the biometric information of the designated user from the biometric information database 113, collects it as an array, and sets it as biometric information data 603. At this time, the encryption flag 604 is set to “not encrypted”. Thereafter, when the server 102 and the terminal device 103 having the file can communicate with each other at an appropriate timing, the server 102 transmits an encryption command for the file to the terminal device 103. This encryption command includes the file decryption permission biometric information data 603. When the terminal device 103 receives the encryption command, the terminal device 103 performs the processing shown in FIG. 11 to be described later (however, the user who permits the decryption of the file has already been designated by the administrator, and the file decryption permission biometric information). Since the data 603 is included in the encryption command, the file decryption permission biometric information data 603 is used in step 1103), and the file is encrypted to be an encrypted file with biometric information. When the encryption process is finished, the terminal device 103 notifies the server 102 to that effect. Upon receiving the notification, the server 102 sets the encryption flag 604 of the file decryption-permitted biometric information related to the file as “encrypted”.

  When the user of the terminal device 103 specifies and encrypts the file in the terminal device, the user first designates which file is to be encrypted in the terminal device 103. When this designation is made, the processing of FIG. 11 described later is executed, and the file is made an encrypted file with biometric information. Thereafter, the terminal device 103 notifies the server 102 of the file identifier of the encrypted file, the file path, and biometric information data indicating the user who is permitted to decrypt. Upon receiving the notification, the server 102 registers the file decryption permission biometric information regarding the file in the file decryption permission biometric information database 115. At this time, the encryption flag 604 is “encrypted”.

  FIG. 7 shows a configuration example of information on terminal devices stored in the terminal database 116 of the server 102. The terminal device information is composed of a terminal device identifier 701, a terminal name 702, and a MAC address 703, and a terminal device identifier value, a terminal name, and a MAC address stored in the terminal device issued by the server are registered. Is done. The value of the terminal device identifier 701 is a value paid out from the server 102 to the terminal device 103 when the software related to the biometric information encryption system is installed in the terminal device 103. It is stored in the terminal database 116 of 102.

  The operation of the biometric information encryption / decryption system configured as described above will be described below.

  FIG. 8 is a flowchart showing an overview of server information addition processing in the host system 101. This process is executed when a new server 102 is added (that is, when a new biometric information encryption contractor is registered).

  First, a new record is added to the server information database 109 (FIG. 4) of the host system 101, and the “contractor ID”, “contractor name”, “representative contractor address”, “contract” of the contractor are added to the record. The “type”, “contract date”, and “number of connected terminals” are registered (step 801). The information entered in the host system 101 may be registered as this information, but the contractor has previously contracted and the "contractor name" and "representative contractor address" are known. May use such information. When registration in the server information database 109 is completed, the host system 101 generates and pays out a “product key” according to the registered information (step 802). The issued “product key” is registered in the record of the server information database 109 and transmitted to the contractor's server 102 via the network 105 together with an installation command. In response to this installation command, the server 102 installs the file encryption system with biometric information using the product key issued by the host system 101 (step 803). By this installation, the configuration of the server 102 shown in FIG. 1 and each DB connected to the server 102 is implemented. The server 102 transmits the product key to the host system 101 after the installation of the file encryption system with biometric information is completed.

  The host system 101 uses the server confirmation unit 112 to compare the product key information transmitted from the server 102 with the product key registered in the server information database 109. If they match, it means that the server has been added appropriately, and the biometric information data in the biometric information database 107 is transmitted to the server 102 by the transmission / reception unit 111 according to the contract form. The server 102 receives the biometric information data, and stores the biometric information data and the date of data registration in the biometric information database 113 (step 804). This completes the server information addition process. Note that the biometric information data transmitted from the host system 101 to the server 102 is only the biometric information of the user (terminal device 103) under the management of the biometric information encryption contractor corresponding to the server 102.

  FIG. 9 is a flowchart illustrating an outline of the terminal device addition process. This process is started by connecting to the server 102 from the terminal device 103 to be added, obtaining a program for installing the file encryption system with biometric information, and executing the program on the terminal device 103.

  The program for installing the file encryption system with biometric information first transmits the MAC address of the terminal device 103 and the terminal device name to the server 102 via the network 106 (step 901). The server 102 compares the received MAC address of the terminal device with the MAC address data already registered in the terminal database 116 (FIG. 7), and if there is the same MAC address, the file encryption system with biometric information is already installed. If it is determined that the installation has not been completed, it is determined that the installation has not been performed (step 902).

  If the installation has not been performed, since it is a new terminal, it is determined whether the number of terminal devices registered in the terminal database 116 is equal to or greater than the number of connected terminals (407 in FIG. 4) permitted by the server in the contract (Step 4). 903). If the number of terminal devices registered in the terminal database 116 is equal to or greater than the number of contracted terminals, it is determined that the file encryption system with biometric information has already been installed for the number of contracted terminals. No new addition is possible, and the installation ends as a failure (step 905). If the number of terminal devices registered in the terminal database 116 is not equal to or greater than the number of contracted terminals, the server 102 generates a terminal device identifier and adds the terminal device information of the terminal to the terminal database 116 (FIG. 7) ( Step 904). After step 904 or when the terminal 103 has already installed the file encryption system with biometric information in step 902, the program of the file encryption system with biometric information and the biometric information data are sent from the server 102 to the terminal 103. The file encryption system with biometric information (terminal version) is installed in the terminal 103 (step 906). By this installation, the configuration of the terminal device 201 illustrated in FIG. 2 and each DB connected to the terminal device 201 is implemented. In the case of proceeding from step 902 to step 906, re-installation is performed.

  FIG. 10 is a flowchart showing a process for updating biometric information data on the biometric information database 113 of the server 102.

  First, the system date (current time) is compared with the latest registration update date of the biometric information database 113 of the server 102, and it is determined whether the biometric information update period set in advance in the server 102 has elapsed (step 1001). If the biometric information update period set in advance in the server 102 has elapsed, the server 102 connects to the host system 101, and the product key (the one assigned to the server 102 in step 802 in FIG. 8) is connected. ). In the host system 101, the server confirmation unit 112 determines whether the contract period of the server 102 stored in the server information database 109 (FIG. 4) has expired (step 1002).

  When the contract period has not expired, the latest biometric information database update date of the server 102 is transmitted to the host system 101, and the latest biometric information database registration update of the server 102 is transmitted to the biometric information database 107 (FIG. 3) of the host system 101. It is determined whether there is biometric information data newer than the day (step 1003). When there is biometric information data that is newer than the latest biometric information database registration update date of the server 102 in the biometric information database 107 of the host system 101, the latest biometric information data is acquired from the host system 101, and the biometric information database 113 of the server 102 is acquired. Is updated (step 1004).

  When the server has a fault tolerance configuration, one main server can be connected to the host system, and other servers can be connected to the main server to update the biometric information data.

  FIG. 11 is a flowchart showing file encryption processing executed by the encryption processing unit 209 of the terminal device 201 (103 in FIG. 1). First, the terminal device 103 determines whether a valid file encryption key has been acquired from the server 102 (step 1101). If the terminal device 103 has not obtained a valid encryption key from the server 102, it connects to the server 102 and obtains an encryption key that has not expired (step 1102). A user who encrypts a file using the terminal device 103 uses the user display unit 206 of the terminal device to designate a user who is permitted to decrypt the file to be encrypted (step 1103). Since the user display unit 206 displays a list of user names stored in the biometric information database 206, it is only necessary to specify a user (or a plurality of users) permitted to decrypt from the list. The terminal device 103 reads all the biometric information of the designated user from the biometric information database 206, creates an array of the read biometric information, and generates file decryption-permitted biometric information data (data corresponding to 603 in FIG. 6). . Next, the terminal device 103 creates a file encryption key for encrypting the file data using the encryption key acquired from the server 102 and the file decryption permission biometric information data (step 1104). That is, a key for encrypting file data is created as needed using biometric information that permits decryption of a file. The file is encrypted using the file encryption key created in step 1104 and the encryption key transmitted from the server (steps 1105 and 1106).

  Note that the server 102 that has received the encryption key acquisition request from the terminal device 103 in step 1102 of FIG. 11 is a terminal in which the terminal device 103 is officially registered with reference to the terminal database 116 of FIG. If the terminal is an officially registered terminal, the terminal device 103 generates and transmits an encryption key used for encryption. The server 102 stores and manages the encryption key in a predetermined database (or the terminal database 116 in FIG. 7) in association with the terminal device 103.

  FIG. 12 shows how file data is encrypted in the biometric information encryption process of steps 1105 and 1106 executed by the encryption processing unit 209 of the terminal device 103. A file data portion 1201 in FIG. 12A shows file data to be encrypted. This file data part 1201 is encrypted by a file encryption key generated from the encryption key transmitted from the server 102 and the file decryption permission biometric data created from the biometric information of the user who permits the decryption of the file. The Reference numeral 1202 in FIG. 12B indicates an encrypted file data portion. Next, as shown in FIG. 12 (c), the file decryption permission biometric information data 1203 is added to the encrypted file data portion 1202. The encrypted file data portion 1202 and the file decryption permission biometric information data portion 1203 are encrypted using the encryption key transmitted from the server 102 to create an encrypted file 1204 with biometric information (FIG. 12 ( d)).

  FIG. 13 is a flowchart showing the decryption process of the encrypted file with biometric information executed by the decryption processing unit 210 of the terminal device 201 (103). First, the terminal device 103 determines whether a valid file decryption key has been acquired from the server 102 (step 1301). If a valid decryption key has not been obtained from the server 102, the server 102 is connected to obtain a decryption key (step 1302).

  Next, in order to acquire the user's biometric information by the terminal device 103, the biometric information acquisition unit 207 of the terminal device connects to the reading device 204 and acquires the biometric information of the user (step 1303). The encrypted file with biometric information to be decrypted is decrypted using the decryption key transmitted from the server 102, and the decryption-permitted biometric information of the file (the file decryption-permitted biometric information unit 1203 in FIG. 12C) is encrypted. The obtained file data part (file data part 1202 in FIG. 12C) is acquired. It is determined whether the user's biometric information acquired from the reading device 204 is within the decryption-permitted biometric information of the file (step 1304). If the user's biometric information is not included in the decryption-permitted biometric information of the file, decryption is not permitted and the process returns to step 1301. If the biometric information of the user is in the decryption-permitted biometric information of the file, a file decryption key is created using the decryption key acquired from the server 102 and the decryption-permitted biometric information of the file (step 1305). . The target file data is decrypted using the file decryption key (step 1306).

  The server 102 that has received the decryption key acquisition request from the terminal device 103 in step 1302 of FIG. 13 is a terminal in which the terminal device 103 is officially registered with reference to the terminal database 116 of FIG. If the terminal is an officially registered terminal, the terminal device 103 transmits a decryption key used for decryption. This decryption key is a decryption key corresponding to the encryption key sent from the server 102 to the terminal device 103 in step 1102 of FIG.

As described above, the biometric information encryption system according to the present embodiment has the following effects.
(1) Even if a file is taken out of the high security area, access to the file by a third party can be prevented.
(2) Since the means for authenticating the user is biometric information, information leakage to a third party due to password theft can be prevented.
(3) Even when the file name of the file taken out is changed or copied, the file access right can be maintained.
(4) The operation history of the file taken out can be checked.
(5) The biometric information set in the file can be received from the host system at any time.
(6) Since the host system holds the contract information of the server, the latest biometric information request from other than the contractor can be eliminated.

  In the above-described embodiment, an example in which a file is encrypted has been described. However, a folder may be specified instead of a file, and all files in the folder may be similarly encrypted. In the above embodiment, the terminal device communicates with the server to perform encryption and decryption. However, the present invention can also be applied to a terminal device that is not connected to the network. Before encryption or decryption, an encryption key or decryption key is obtained from the server, and in encryption, the processing from step 1101 to step 1102 in FIG. Then, step 1301 to step 1302 in FIG. In addition, when an encrypted file with biometric information is operated on a terminal device that is not connected to the network, the history is stored in the terminal device, and is stored when connected to the network later. The history information may be sent to the server and stored in the file biometric information history database 114 of FIG.

  Furthermore, in the above embodiment, the file encryption key is generated from the encryption key acquired from the server and the biometric data data that permits file decryption. However, the present invention is not limited to this method, and the file encryption key is generated by another method. You may do it.

  In the above embodiment, it is assumed that the biometric information of all users belonging to a company that is a biometric information encryption contractor is read by the reading device 108 of the host system 101 and stored in the biometric information database 107. The person in charge of the service provider that provides this service visits the company that is the biometric information encryption contractor, collects the biometric information of all users, takes it home, and stores it in the biometric information database 107 of the host system 101 It may be. In addition, each user may connect to the host system 101 from the terminal via a network so that biometric information can be registered and updated.

  In the above embodiment, the biometric information database 202 is provided in each terminal 103. However, instead of providing the database 202, if it is desired to access the biometric information from the terminal 103, the biometric information connected to the server 102 via the network is provided. The data in the information database 113 may be used.

1 is a system configuration diagram illustrating an embodiment of the present invention. It is a block diagram of a terminal device. It is a data table of the biometric information data and biometric information relevant information stored in the biometric information database of a host system. It is a block diagram of the contract information data of the biometric information encryption contractor stored in the server information database of the host system. It is a block diagram of the file biometric information history information data stored in the file biometric information history database of the server. It is a block diagram of the decoding permission biometric information of the file stored in the file decoding permission biometric information database of a server. It is a block diagram of the information data of the terminal device stored in the terminal database of a server. It is a flowchart which shows the outline | summary of a server information addition process. It is a flowchart which shows the outline | summary of a terminal device addition process. It is a flowchart which shows the update process of the biometric information information data of a server. It is a flowchart which shows the encryption process of the file performed in the encryption process part of a terminal device. It is a schematic diagram which shows the mode of the encryption process of the file performed in the encryption process part of a terminal device. It is a flowchart which shows the position decoding process of the file performed in the decoding process part of a terminal device.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 101 ... Host system, 107 ... Biometric information database, 108 ... Update partial biometric information database, 109 ... Server information database, 110 ... Database update part, 111 ... Transmission / reception part, 112 ... Server confirmation part, 105,106 ... Network, 102a, 102b, And 102n ... servers, 103a, 103b, and 103n ... terminal devices.

Claims (7)

A file encryption system with biometric information for encrypting a file,
Means for encrypting an unencrypted file data body with a predetermined file encryption key and generating an encrypted file data body;
Means for adding file decryption permission biometric data having biometric information of all users who permit decryption of the file to the encrypted file data body;
Means for encrypting the encrypted file data body to which the file decryption-permitted biometric information data is added with a predetermined encryption key, and creating an encrypted file with biometric information. Encryption system. A file decryption system with biometric information for decrypting an encrypted file with biometric information encrypted by the encryption system with biometric information according to claim 1,
Means for obtaining a decryption key corresponding to the encryption key;
Means for decrypting the encrypted file with biometric information using the obtained decryption key, and obtaining the file decryption-permitted biometric information data and the encrypted file data body;
Means for obtaining the biometric information of the user;
Means for determining whether or not the acquired biometric information is included in the file decryption biometric information data;
Only when the obtained biometric information is included in the file decryption-permitted biometric information data, obtain a file decryption key for decrypting the encrypted file data body, using the file decryption key, Means for decrypting the encrypted file data body, and a file decryption system with biometric information. A file encryption system with biometric information for encrypting a file,
A server and a terminal device connected to the network;
The server
Means for transmitting an encryption key in response to a request from the terminal device;
The terminal device
Means for obtaining an encryption key from the server;
Means for accepting the designation of a user permitted to decrypt the file;
Means for generating file decryption permission biometric data having biometric information of all designated users;
Means for generating a file encryption key from the encryption key acquired from the server and the file decryption permission biometric information data;
Means for encrypting an unencrypted file data body with the file encryption key and generating an encrypted file data body;
Means for adding the file decryption permission biometric data to the encrypted file data body;
Means for encrypting the encrypted file data body to which the file decryption-permitted biometric information data is added with an encryption key acquired from the server, and creating an encrypted file with biometric information. File encryption system with information. A file decryption system with biometric information for decrypting an encrypted file with biometric information encrypted by the file encryption system with biometric information according to claim 3,
A server and a terminal device connected to the network;
The server
Means for transmitting a decryption key corresponding to the encryption key used for the encryption in response to a request from the terminal device;
The terminal device
Means for obtaining the decryption key from the server;
Means for decrypting the encrypted file with biometric information using the obtained decryption key, and obtaining the file decryption-permitted biometric information data and the encrypted file data body;
Means for obtaining the biometric information of the user;
Means for determining whether the biometric information of the user is included in the file decryption-permitted biometric information data;
Only when the biometric information of the user is included in the file decryption-permitted biometric information data, the encrypted file data body is decrypted from the decryption key acquired from the server and the file decryption-permitted biometric information data. Means for generating a file decryption key for
Means for decrypting the encrypted file data main body using the generated file decryption key; and a file decryption system with biometric information. The file decryption system with biometric information according to claim 4,
The terminal device includes means for transmitting operation history performed on the encrypted file with biometric information and biometric information of a user when the operation is performed to the server,
The file decoding system with biometric information, characterized in that the server includes means for storing an operation history and biometric information of the user transmitted from the terminal device in a file biometric information history database. A file encryption method with biometric information for encrypting a file,
Connect the server and terminal device to the network,
Transmitting an encryption key acquisition request from the terminal device to the server;
The server transmitting an encryption key in response to the encryption key acquisition request;
Receiving the encryption key transmitted from the server at the terminal device;
The terminal device accepting a designation of a user permitted to decrypt the file;
The step of generating file decryption permission biometric data having biometric information of all the specified users by the terminal device;
The terminal device generates a file encryption key from the encryption key acquired from the server and the file decryption permission biometric data;
The terminal device encrypts an unencrypted file data body with the file encryption key;
The terminal device adding the file decryption permission biometric information data to the encrypted file data body;
The terminal device encrypting the encrypted file data body to which the file decryption permission biometric data is added with the encryption key acquired from the server, and creating an encrypted file with biometric information. A method for encrypting a file with biometric information. A file decryption method with biometric information for decrypting an encrypted file with biometric information encrypted by the file encryption method with biometric information according to claim 6,
A terminal device desiring to decrypt the encrypted file with biometric information transmits a decryption key acquisition request to the server;
In response to the request for obtaining the decryption key, the server transmits a decryption key corresponding to the encryption key;
Receiving at the terminal device a decryption key transmitted from the server;
The terminal device decrypts the biometric information-encrypted file using the decryption key, and acquires the file decryption-permitted biometric information data and the encrypted file data body;
The terminal device acquires a user's biological information;
The terminal device determining whether the user's biometric information is included in the file decryption-permitted biometric information data; and
Only when the biometric information of the user is included in the file decryption-permitted biometric information data, the terminal device uses the decryption key acquired from the server and the file decryption-permitted biometric information data to generate the encrypted file data. Generating a file decryption key for decrypting the body part;
The terminal device comprises a step of decrypting the encrypted file data body using the generated file decryption key. A file decryption method with biometric information, comprising:

Images