Secure data transfer methods

Abstract

This provides a method for securely exchanging data between computers without the risk of unauthorized data intrusion. [Solution] Instead of using Ethernet, which can be a foothold for malicious data intrusion, file data is transferred between computers using memory devices such as USB and keyboard input signals. This prevents malicious data from entering either computer from the start and does not require any special maintenance or work to remove malicious data.

Description

Technical Field

[0001] Relates to a method for securely transferring or replicating (hereinafter referred to as transferring) data owned by one computer to other computers among a plurality of computers connected to a data communication network.

Background Art

[0002] In order to transfer important data among a plurality of computers, so-called security measures are taken to prevent data leakage and tampering. Usually, a device called a gateway is provided between computers, and a mechanism with a so-called filter function that distinguishes normal data from illegal data and allows only normal data to pass through is provided.

[0003] Here, when an abnormal operation occurs due to the intrusion of illegal data into a computer, the identification of the cause illegal data and the extraction of its characteristics are performed. At the same time, measures are taken at the gateway to prevent the re-intrusion of illegal data with this characteristic. A method is taken to prevent the spread of similar abnormal operations to other computers by reflecting this measure in other gateways.

[0004] Therefore, there is a problem here that it is impossible to prevent the occurrence of abnormal operations occurring at least in the first computer, and there is also a problem that it is impossible to avoid the occurrence of abnormal operations occurring during the working period until measures for eliminating illegal data are reflected in other gateway devices. Furthermore, additional measures are required each time a new type of abnormal operation occurs, and there is also a serious problem that work for an endless response is required.

Prior Art Documents

Patent Documents

[0005]

Patent Document 1

Patent Document 2

[0006] Patent Documents 1 and 2 disclose a method for achieving secure data transfer by using a memory device with a two-way switch, where one computer (referred to as the data-holding computer) writes data to the memory device and another computer (referred to as the data-receiving computer) reads it, in order to eliminate unauthorized data.

[0007] However, these methods have a problem in that if malicious data is introduced into the data acquisition computer, the memory containing the stored data will be connected to the data provision computer with the malicious data still present, making it impossible to prevent the malicious data from entering the data provision computer.

[0008] Data acquisition computers, which connect to an unspecified number of computers via Ethernet (hereinafter referred to as LAN), are more likely to come into contact with malicious data. On the other hand, data provision computers, also known as shared servers, often operate in a way that provides important data to many data acquisition computers. Therefore, even if malicious data intrusion is permitted into data acquisition computers, a mechanism is required to absolutely prevent malicious data intrusion into data provision computers. [Means for solving the problem]

[0009] For the sake of explanation, this invention describes a method for securely transferring data between two computers, using a data-providing computer to collect data held by a data-collecting computer. This invention securely transfers data using an alternative means to LANs, which are considered breeding grounds for malicious software intrusion.

[0010] This system uses a data storage memory for temporarily storing data to be transferred, a selector switch for connecting the data storage memory to one of several computers, and a memory switching control device for operating the selector switch.

[0011] The aforementioned memory switching control device plays an important role in the present invention. It has the function of switching the connection of the data storage memory to the data supply computer or the data collection computer, and also maintains a computer connection condition table that registers several commands indicating methods for ensuring the security of the data storage memory.

[0012] For example, commands may be included to instruct the system to erase all contents of the data storage memory before connecting it to the data provision computer, to delete files other than those with specific filenames from the data storage memory, and to delete data other than those with specific suffixes such as .txt and .jpg from the data storage memory.

[0013] The memory switching control device, when switching the connection of data storage memory to any computer by referring to the computer connection condition table, first connects the data storage memory to the memory switching control device and provides a function to detect and remove any malicious data that may be mixed into the data storage memory, thereby ensuring the security of the transferred data.

[0014] Meanwhile, the data-providing computer and the data-collecting computer exchange information to identify the data files to be transferred. Here, we adopt a method of exchanging information using a code composed of strings generated by keyboard operations, which is free from the risk of unauthorized data intrusion and is a standard data receiving function available on many computers.

[0015] Furthermore, the present invention does not preclude the method of exchanging information using message-format data via a serial communication port on a computer, instead of using the aforementioned keyboard input port to exchange information using keyboard code data.

[0016] Here, data is transferred from the data-providing computer to the data-collecting computer in the following manner. Specifically, the data-collecting computer first notifies the data-providing computer of the filename of the data to be transferred using a secure method involving keyboard codes. It also notifies the memory switching control device.

[0017] Furthermore, notification from the data acquisition computer to the memory switching control device can be a simple method, such as using a binary information signal (e.g., a contact signal) to indicate the start of operation of the memory switching control device. The memory switching control device connects the data storage memory device to itself and verifies the contents of the data storage memory device.

[0018] Here, a table listing the filenames of data whose safety has been confirmed is referenced, and for example, any data that does not match the filenames listed is completely erased from the data storage memory device. Next, the memory device is connected to the data provision computer, and the data notified by the data collection computer is transferred to the memory device. The data collection computer then securely acquires the target data by reconnecting the data storage memory device, which now contains the stored data, to the data collection computer using the aforementioned switching operation.

[0019] A typical example of data storage memory is a USB memory device, but the data storage memory and memory device signal input / output ports referred to here are not limited to USB-related methods; any method that allows input and output to and from data storage memory is acceptable. [Effects of the Invention]

[0020] In the present invention, data transfer between computers can be carried out more safely by using a method that employs a memory device with a switching switch. In addition, it is possible to prevent damage caused by unauthorized software intrusion through a LAN. Therefore, it is not necessary to take countermeasures every time new unauthorized data is generated, and the maintenance work, which has been a major burden, is also unnecessary.

Example 1

[0021] FIG. 1 shows an invention composed of a memory switching switch (1), a data storage memory (2), a memory switching control device (3), a computer connection condition table (4), a data collection computer (5), a data collection & distribution function (6), a data storage (7), an input / output port for the memory device (8), a data providing computer (10), a memory data input / output function (11), a data storage (12), an input / output port for the memory device (13), and a keyboard signal input port (14). Here, FIG. 4 explains the operation of the memory switching control device (3).

[0022] The memory data input / output function (11) is a function that receives a command including the data transfer file name and transfers the data stored in the data storage (7) to the data storage memory (2). For example, software that is called a command prompt and is standardly installed on many computers may be used.

[0023] First, the operation of transferring a file specified by the data collection computer (5) from the data storage (12) of the data providing computer (10) to the data storage (7) of the data collection computer (5) will be described.

[0024] First, the memory switching control device (3) operates the memory switching switch (1) to connect the data storage memory (2) to the memory switching control device (3). Here, in order to eliminate any illegal data that may remain in the data storage memory (2), the memory switching control device (3) operates on the data storage memory (2) according to the commands described in the data providing computer connection condition table section that constitutes the computer connection condition table (4).

[0025] Here, an example is shown in which the stored content of the data storage memory (2) is erased according to a command to erase all the stored content of the data storage memory (2). Next, the memory switching switch (1) is operated again to connect the now-safe data storage memory (2) to the data providing computer (10).

[0026] The data collection & distribution function (6) uses the keyboard signal input port (14) to notify the memory data input / output function (11) provided in the data providing computer (10) of a data transfer command including a file name. For example, it is a command in the format of copy c:\data.txt e:.

[0027] The memory data input / output function (11) extracts a command including copy illustrated in FIG. 2. This is a command showing an example of copying the corresponding file data recorded in the data storage (12) shown as c:\data.txt to the data storage memory (2) shown as e: which is connected to the memory device input / output port (13).

[0028] Next, the memory switching control device (3) operates on the data storage memory (2) according to the commands described in the data collection computer connection condition table section that constitutes the computer connection condition table (4). Here, an example is shown in which data.txt is left in the data storage memory (2) according to a command to erase all except the specified file name when connecting to the data collection computer.

[0029] The memory switch (1) is operated to connect the data storage memory (2) to the data acquisition computer (5). Once the data storage memory (2) is connected to the data acquisition computer (5), the data acquisition and distribution function (6) copies the file data written to the data storage memory (2) to the data storage (7). [Example 2]

[0030] Figure 5 shows that, in place of the memory data input / output function (11) and keyboard signal input port (14) in Figure 1, a screen operation data writing function (40), a mouse & keyboard signal input port (41), a screen operation mouse & keyboard signal generation function (42), and a scenario file (43) are provided.

[0031] Similar to Example 1, we will first describe the operation of copying files located in the data storage (12) of the data providing computer (10) to the data storage (7) of the data collecting computer (5). Here, the data collection and distribution function (6) of the data collecting computer (5) requests the data providing computer (10) to write data to the data storage memory (2). Before that, however, the memory switching control device (3) operates the memory switching switch (1) to temporarily connect the data storage memory (2) to its own memory switching control device (3).

[0032] The memory switching control device (3) here shows an example of erasing the contents of the data storage memory (2) in accordance with the commands described in the data provision computer connection condition table section of the computer connection condition table (4) in order to eliminate malicious software. After this, the memory switching switch (1) is operated again to connect the data storage memory (2) to the data provision computer (10).

[0033] The data collection and distribution function (6) notifies the screen operation mouse and keyboard signal generation function (42) of the individual scenario name in the scenario file (43). The individual scenario contains information indicating screen operation methods provided on the data provision computer (10) for moving or copying data from the data storage (12) from the memory device input / output port (13) to the data storage memory (2), such as cursor movement, mouse click operations, and key input operations for operating the screen of the data provision computer (10).

[0034] Here, the screen operation mouse and keyboard signal generation function (42) generates mouse and keyboard signals for operating the screen (hereinafter referred to as the screen) displayed on the monitor of the data supply computer (10), and notifies the screen operation data writing function (40) using the mouse and keyboard signal input port (41). The screen operation data writing function (40) writes the data from the data storage (12) to the data storage memory (2) connected to the memory device input / output port (13).

[0035] In other words, if the screen operation data writing function (40) operates the screen according to the mouse operation signal or keyboard operation signal notified by the screen operation mouse & keyboard signal generation function (42), the data from the data storage (12) is transferred from the memory device input / output port (13) to the data storage memory (2).

[0036] Figure 6 shows an example (50) of a screen provided on the data supply computer (10) for transferring data from the data storage (12) to the data storage memory (2). The example screen (50) shows an example of a file selection button display (51) and an execution button display (52). The present invention will be explained using this example screen. There are several methods for transferring data to the data storage memory (2), but here two representative methods will be explained using Figures 5, 6, and 7.

[0037] Operation Method 1 is an operation method that uses the scenario data file shown in Figure 6. Here, the cursor is moved to the button that indicates the target file name displayed on the screen. For this purpose, a command with the format mov x1,y1 is used, which contains the position information of the cursor destination. Here, x1 and y1 are information that indicates the horizontal position and vertical reporting position on the screen where the target file name is displayed, respectively.

[0038] The command `mcl` is a command that means a left mouse click. In the example screen (50), in addition to the above, there may be other commands as needed, for example, `mcr` which indicates a right click and `mcd` which indicates a double click. In other words, the above commands are merely examples, and anything that defines how to operate the screen is acceptable. Here, we will explain the screen operations that the screen operation mouse & keyboard signal generation function (42) executes according to the commands described in the example scenario file command shown in Figure 7.

[0039] The screen operation mouse and keyboard signal generation function (42) retrieves the first command described in the individual scenario data registered in the scenario data file (43), generates a mouse signal or keyboard signal, and notifies the screen operation data writing function (40).

[0040] As a result, screen operations such as moving the cursor position on the screen, clicking, and key inputs are performed. In this way, the first command, mov 100,50, moves the cursor to a horizontal position of 100 and a vertical position of 50. The second command, mcl, performs a left mouse click.

[0041] The third command, mov 150,80, moves the cursor to a horizontal position of 150 and a vertical position of 80. The fourth command, mcl, performs a left mouse click. The command end terminates the screen operation. Through these operations, the data from the data storage (12) is written to the data storage memory (2) connected to the memory device input / output port (13).

[0042] Method 2 uses the screen shown in Figure 8 and the scenario file shown in Figure 9, instead of Figures 5 and 6 in Method 1. Here, file transfer is performed using both keyboard input and keyboard input. For example, one method is to use the command prompt, a function that is standard on many computers, and input the command in the format shown as copy c:\data.txt e:.

[0043] This is an example of how to copy a file represented as c:\data.txt in data storage (12) to data storage memory (2) represented as e:. The screen operation mouse and keyboard signal generation function (42) retrieves the first command described in the individual scenario data registered in the scenario data file (43), generates a mouse signal or keyboard signal, and notifies the screen operation data writing function (40).

[0044] As a result, screen operations such as moving the cursor position on the screen, clicking, and key inputs are performed. In this way, the first command, mov 100,500, moves the cursor to a horizontal position of 100 and a vertical position of 500. The second command, mcl, performs a left mouse click.

[0045] This is the screen operation required to accept the following key input operation. The third command, `copy c:\data.txt e:`, uses the command prompt functionality to copy the data represented as `c:\data.txt` to the data storage memory (2) represented as `e:`.

[0046] Next, the memory switching control device (3) operates in the same manner as described in Operation Method 1. The memory switching control device (3) operates the data storage memory (2) in accordance with the commands described in the data acquisition computer connection condition table section that constitutes the computer connection condition table (4) in the same manner as the procedure described in Operation Method 1.

[0047] Here, we show an example where data.txt is left in the data storage memory (2) by following a command that erases everything except the specified file name when connecting to the data acquisition computer. The data storage memory (2) is connected to the data acquisition computer (5) by operating the memory switching switch (1). When the data storage memory (2) is connected to the data acquisition computer (5), the data acquisition and distribution function (6) copies the file data written to the data storage memory (2) to the data storage (7). [Example 3]

[0048] This embodiment aims to securely connect and disconnect a removable data storage memory to a computer in order to perform operations such as retrieving and writing storage data held by the computer.

[0049] The operation of this embodiment will be described below using the memory switching switch (90), data storage memory (91), memory data input / output port (92), memory switching control device (93), computer connection condition table (94), computer (95), memory data input / output port (96) shown in Figure 9, and Figure 10.

[0050] First, the memory switching switch (90) is set to the switching control device (93), and when the data storage memory (91) is connected to the memory data input / output port (92), the data storage memory (91) is connected to the memory switching control device (93).

[0051] The memory switching control device (93) processes the data storage memory (91) according to the built-in computer connection condition table (94). Specifically, if the computer connection condition table (94) contains the example entry shown in Figure 10, the memory switching control device (93) erases all data except dddd.txt.

[0052] If the specified file name dddd.txt is not present, all the contents of the data storage memory (91) are erased. Next, the memory switching control device (93) operates the memory switching switch (1) to connect the data storage memory (91) to the computer's memory data input / output port (96). In this way, the data storage memory (91) is connected to the computer (95) in a secure state. [Industrial applicability]

[0053] This technology enables the secure transfer of data from one computer to another. In particular, it allows for the safe and maintenance-free retrieval of equipment operation data from industrial computers that are essential to social infrastructure, where the intrusion of unauthorized data could lead to serious disruption. [Brief explanation of the drawing]

[0054] [Figure 1] Diagram of the invention [Figure 2] Example of a command prompt screen [Figure 3] Function description of the memory switching control device [Figure 4] Configuration of Example 2 using the screen operation function [Figure 5] Example of display screen [Figure 6] Scenario file command example 1 [Figure 7] Example of a command key input screen [Figure 8] Scenario file command example 2 [Figure 9] Configuration of Example 3 [Figure 10] Example of a computer connection conditions table [Explanation of symbols]

[0055] 1. Memory selector switch 2. Data storage memory 3. Memory switching control device 4. Computer Connection Conditions Table 5 Data Collection Computers 6. Data Collection & Distribution Function 7. Data Storage 8 Input / Output Ports for Memory Devices 10 Data-providing computers 11. Memory data input / output function 12 Data Storage 13 Input / Output Ports for Memory Devices 14 Keyboard signal input ports 40. Data writing function via screen operation. 41 Mouse & Keyboard Signal Input Ports 42. Mouse & keyboard signal generation function for screen operation. 43 Scenario Files 50 Example of display screen 51 Example of file selection button display 52 Example of execution button display 90 Memory Switch Switch 91 Data storage memory 92 Memory data input / output ports 93 Memory switching control device 94 Computer Connection Conditions Table 95 Computer 96 Memory Data Input / Output Ports

Claims

[Claim 1] A method for performing data exchange operations between computers, comprising two or more computers, a memory device with a changeover switch, and a switch switching control device, wherein the switch switching control device switches the memory device with a changeover switch, which holds data written by one computer, to another computer, and the other computer reads the data.

Images