Client computer for protecting confidential file, server computer therefor, method therefor, and computer program

Abstract

A client computer includes an encryption / decryption unit for encrypting a confidential file in which an encryption key ID is embedded using an encryption key corresponding to the encryption key ID and decrypting the confidential file using a decryption key corresponding to the encryption key ID, an encryption key storage unit for storing the encryption key, a decryption key storage unit for storing the decryption key, a compliance requirement storage unit for storing security compliance requirements for the client computer transmitted from a server computer, and a security requirement monitoring unit for determining, according to a read command or a write command for the confidential file issued by application software, whether the client computer complies with the security compliance requirements, and, when the requirements are complied with, passing the encryption key and the encryption key ID corresponding to the encryption key from the encryption key storage unit to the encryption / decryption unit in response to the write command or passing the decryption key corresponding to the encryption key ID embedded in the encrypted confidential file from the decryption key storage unit to the encryption / decryption unit in response to the read command.

Description

technical field [0001] The present invention relates to a client computer and a server computer thereof, as well as a method and a computer program thereof, for protecting confidential documents. Background technique [0002] Outflow of confidential information caused by file sharing software such as P2P often occurs. The reason is that personal computers (hereinafter referred to as PCs) lack adequate security countermeasures. In order to prevent the leakage of confidential information from happening again, companies or government agencies are implementing the following countermeasures. [0003] ・The system administrator promotes security countermeasures for all PCs of each user. [0004] Introduce security software, such as antivirus software and spyware monitoring software, and instruct individual users on the security compliance requirements. [0005] Import the Health Check utility that monitors whether each user's PC satisfies the defined security compliance requirem...

AI Technical Summary

Problems solved by technology

[0008] But even with these measures, there may be undue intrusions caused by forgetting to update the definition files of security software

Additionally, the above countermeasures force users to do extra work when traveling with files and require users to encrypt every file operation

As a result, the convenience of the user is deteriorated, and the office efficiency is also reduced.

Images