Information processing device, program, and information processing system

Abstract

To provide an information processing device, a program, and an information processing system that reduce the frequency of access to an external storage device.SOLUTION: An information processing device divides an original file into first distributed files and second distributed files so as to be restorable. The information processing device includes: a generating unit that aggregates the plurality of second distributed files and generates a distributed original file indicating the plurality of second distributed files aggregated; a dividing unit that divides the distributed original file generated by the generating unit into third distributed files and fourth distributed files so as to be restorable; and a transmitting unit that transmits the fourth distributed files divided by the dividing unit to an external storage device.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to an information processing device, a program, and an information processing system. [Background technology]

[0002] In recent years, companies have been taking measures to prevent information leakage of confidential information such as company secret information and customer information from information processing devices owned by the company. One measure to prevent information leakage is, for example, a file management system that manages files by linking information processing devices used by employees with an external storage device and distributing files to both the information processing device and the external storage device (for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 6705999 Summary of the Invention [Problem to be solved by the invention]

[0004] When using the file management system described above, if the information processing device frequently accesses the external storage device for uploading, downloading, etc., the file management system may become temporarily inaccessible. Therefore, if the external storage device becomes inaccessible, it may not be possible to download files distributed from the external storage device to the information processing device.

[0005] Therefore, one example of a problem to be solved by the present invention is to provide an information processing device, a program, and an information processing system that reduce the frequency of access to an external storage device. [Means for solving the problem]

[0006] A first aspect of the present invention is Multiple The original file For each of the original files In an information processing device that divides a first distributed file and a second distributed file in a restorable manner, a processing unit that stores a plurality of the first distributed files corresponding to the plurality of divided original files in a storage unit; The information processing device includes a generation unit that aggregates multiple second distributed files and generates a distributed original file that indicates the aggregated multiple second distributed files, a division unit that divides the distributed original file generated by the generation unit into a third distributed file and a fourth distributed file so that the file can be restored, and a transmission unit that transmits the fourth distributed file divided by the division unit to an external storage device.

[0007] The transmitting unit may also include a setting unit that sets the frequency at which the fourth distributed file is to be transmitted to the external storage device, and the transmitting unit may transmit the fourth distributed file to the external storage device based on the frequency set by the setting unit.

[0008] The third and fourth distributed files may also include at least an identifier corresponding to the original distributed file.

[0009] In addition, a second aspect of the present invention is Multiple The original file For each of the original files A computer of an information processing device that divides a first distributed file and a second distributed file in a restorable manner, a process of storing a plurality of the first distributed files corresponding to the plurality of divided original files in a storage unit; This is a program that executes the following processes: aggregating multiple second distributed files and generating a distributed original file that indicates the aggregated multiple second distributed files; dividing the distributed original file generated by the generating process into a third distributed file and a fourth distributed file so that the file can be restored; and sending the fourth distributed file divided by the dividing process to an external storage device.

[0010] Furthermore, a third aspect of the present invention is an information processing system including the information processing device of the first aspect described above. [Effects of the Invention]

[0011] According to the present invention, it is possible to reduce the frequency of access to the external storage device. [Brief explanation of the drawings]

[0012] [Figure 1] FIG. 1 is a diagram illustrating an example of a schematic configuration of an information processing system according to an embodiment. [Figure 2] FIG. 2 is a block diagram illustrating an example of a hardware configuration of the information processing apparatus according to the embodiment. [Figure 3] FIG. 3 is a block diagram illustrating an example of a functional configuration of the information processing device according to the embodiment. [Figure 4] FIG. 4 is a diagram illustrating an example of items for managing distributed files according to the embodiment. [Figure 5] FIG. 5 is a flowchart illustrating an example of processing executed by the information processing device according to the embodiment. [Figure 6] FIG. 6 is a flowchart illustrating an example of processing executed by the information processing device according to the embodiment. [Figure 7] FIG. 7 is a flowchart illustrating an example of processing executed by the information processing device according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. The configuration of the embodiment described below, and the actions and effects brought about by the configuration, are merely examples, and the present invention is not limited to the following description.

[0014] 1 is a diagram illustrating an example of a schematic configuration of an information processing system 1 according to an embodiment. The information processing system 1 according to this embodiment is a system that processes files under its management through file management processing. The information processing system 1 processes the files under its management in a state in which the original files cannot be obtained by the information processing device 2 alone, while allowing the files under its management to be operated by the information processing device 2 by linking the information processing device 2 with an external storage device 3.

[0015] The information processing system 1 includes an information processing device 2 and an external storage device 3 connected to the information processing device 2 via an in-house network (not shown). The in-house network includes a wireless network (also called wireless) and a wired network (also called wired).

[0016] The information processing device 2 is a device on which an operator (specifically, a company employee) performs file operations on the original files of files under its management. The information processing device 2 is a portable device that can be taken outside the company (i.e., an environment in which connection to the internal network is not possible). The information processing device 2 is, for example, a personal computer. Note that the information processing device 2 may be, for example, a smartphone, a tablet-type personal computer, or the like, as long as it is capable of file operations.

[0017] The external storage device 3 is a non-volatile storage device that can be accessed from within the company (specifically, the company network) (in other words, can be accessed only under limited circumstances). The external storage device 3 is managed in an environment where strict crime prevention and security measures are implemented, such as within the company or in a data center.

[0018] 2 is a block diagram showing an example of a hardware configuration of an information processing device 2 according to an embodiment. The information processing device 2 illustrated here has a configuration similar to that of a general-purpose computer, and includes a CPU (Central Processing Unit) 21, a RAM (Random Access Memory) 22, a ROM (Read Only Memory) 23, an auxiliary storage device 24, a user I / F (Interface) 25, and an external I / F 26.

[0019] The CPU 21 performs predetermined arithmetic processing using the RAM 22 as a working area in accordance with programs stored in the ROM 23 and the auxiliary storage device 24. The auxiliary storage device 24 is a non-volatile memory and stores various data necessary for the processing of the CPU 21. The auxiliary storage device 24 is configured, for example, by an HDD (Hard Disc Drive) or an SSD (Solid State Drive). The user I / F 25 is a device that enables the transmission and reception of information between a user (a company employee) and the information processing device 2, and may be an LCD display, a keyboard, or the like. The external I / F 26 is, for example, a device for establishing communication with another information processing device 2 via a network in accordance with a predetermined standard. Note that the configuration of the information processing device 2 is not limited to that described above.

[0020] Fig. 3 is a block diagram showing an example of the functional configuration of an information processing device 2 according to an embodiment. The information processing device 2 according to this embodiment includes a storage unit 201, a processing unit 202, an aggregation unit 203, a generation unit 204, a division unit 205, a determination unit 206, a transmission unit 207, a reception unit 208, a combination unit 209, and a setting unit 210. These functional components 201 to 210 can be configured, for example, by cooperation between hardware elements and software elements (such as programs stored in the ROM 23 or the auxiliary storage device 24) of the information processing device 2 as shown in Fig. 2. Note that the functional configuration of the information processing device 2 is not limited to the above.

[0021] The memory unit 201 stores the content processed by the processing unit 202. The memory unit 201 also stores the content aggregated by the aggregation unit 203. The memory unit 201 also stores the content generated by the generation unit 204. The memory unit 201 stores the content divided by the division unit 205. The memory unit 201 also stores the content transmitted by the transmission unit 207. The memory unit 201 also stores the content received by the reception unit 208. The memory unit 201 stores the content combined by the combination unit 209. The memory unit 201 is realized, for example, by an auxiliary storage device 24 provided in the information processing device 2.

[0022] The processing unit 202 executes file management processing. In the file management processing, the processing unit 202 distributes (also called splits) an original file of the file management processing (also called an original file of a file under management) into a first distributed file and a second distributed file so that the original file can be decrypted (also called restored). The original file is also called original data, original file, original data, or original.

[0023] The processing unit 202 distributes the original file into a first distributed file and a second distributed file using, for example, a secret sharing encryption method. Note that since the original file is generated by distributing it, the sizes of the first distributed file and the second distributed file are smaller than the size of the original file.

[0024] The processing unit 202 stores the first distributed file in the storage unit 201, and stores the original file in the external storage device 3. The processing unit 202 acquires the second distributed file that has been combined by the combining unit 209, which will be described later. In this way, the processing unit 202 manages the original file in a state in which the original file cannot be acquired by the information processing device 2 alone.

[0025] The aggregation unit 203 aggregates the multiple second distributed files distributed by the processing unit 202. Specifically, the aggregation unit 203 aggregates the multiple second distributed files that are distributed by the processing unit 202 and are to be stored in the external storage device 3. The multiple second distributed files aggregated by the aggregation unit 203 are stored in, for example, the RAM 22. The frequency (also referred to as timing) at which the aggregation unit 203 aggregates the multiple second distributed files is set by the setting unit 210, which will be described later.

[0026] The generating unit 204 generates a distributed original file indicating a file obtained by aggregating a plurality of second distributed files from the plurality of second distributed files aggregated by the aggregating unit 203. For example, the generating unit 204 acquires the plurality of second distributed files aggregated by the aggregating unit 203 from the RAM 22, and generates a distributed original file indicating a file obtained by aggregating the plurality of second distributed files. The distributed original file generated by the generating unit 204 is stored, for example, in the storage unit 201. The distributed original file is also referred to as distributed original data, distributed original file, distributed original data, or distributed original. The frequency (timing) at which the generating unit 204 generates the distributed original file is determined by the setting unit 210, which will be described later. The functions of the generating unit 204 may be provided by the aggregating unit 203.

[0027] The dividing unit 205 divides the original distribution file generated by the generating unit 204 into a third distributed file and a fourth distributed file so that the original distribution file can be restored. The dividing unit 205 divides the original distribution file into the third distributed file and the fourth distributed file using, for example, a secret sharing encryption method. The third distributed file divided by the dividing unit 205 is stored in, for example, the storage unit 201. Note that, since the original distribution file is generated by dividing it, the sizes of the third distributed file and the fourth distributed file are smaller than the size of the original distribution file. Note that the functions of the dividing unit 205 may be possessed by the processing unit 202.

[0028] The third distributed file and the fourth distributed file will now be described with reference to Fig. 4. Fig. 4 shows an example of a list of the third distributed files and the fourth distributed files divided by the dividing unit 205.

[0029] The third distributed file and the fourth distributed file are managed by the following items for each file: record ID, file division ID, storage location, and data capacity. The record ID is a single ID that indicates the identity of the third distributed file and the fourth distributed file. The file division ID indicates the ID of the original distributed file before the third distributed file and the fourth distributed file were divided. In other words, the third distributed file and the fourth distributed file include at least an identifier that corresponds to the original distributed file.

[0030] The storage destination is the location where the third distributed file and the fourth distributed file were stored in the information processing device 2. For example, the storage destination is a folder in the information processing device 2. The data capacity indicates the size of the data in the third distributed file and the fourth distributed file. Note that the items for managing the third distributed file and the fourth distributed file are not limited to these.

[0031] Returning to Fig. 3, the determination unit 206 determines whether a certain time has elapsed since the transmission unit 207, which will be described later, completed transmission of the fourth distributed file divided by the division unit 205 to the external storage device 3. Specifically, the determination unit 206 determines whether the transmission unit 207, which will be described later, can transmit the fourth distributed file to the external storage device 3, based on the transmission frequency (timing) to the external storage device 3 set by the setting unit 210. This allows the information processing device 2 to reduce the frequency of access to the external storage device 3.

[0032] The transmitting unit 207 transmits the fourth distributed files divided by the dividing unit 205 to the external storage device 3. The transmitting unit 207 transmits multiple fourth distributed files to the external storage device 3 according to the transmission frequency set by the setting unit 210, which will be described later.

[0033] Furthermore, the transmitting unit 207 transmits the fourth distributed file based on a user operation. Specifically, the transmitting unit 207 transmits the fourth distributed file in cooperation with the user I / F 25. For example, the transmitting unit 207 transmits the fourth distributed file before the information processing device 2 is shut down. Note that the functions of the transmitting unit 207 may be possessed by the processing unit 202.

[0034] The receiving unit 208 receives the fourth distributed file based on a user operation. Specifically, the receiving unit 208 receives the fourth distributed file in cooperation with the user I / F 25. For example, the receiving unit 208 receives the fourth distributed file after the information processing device 2 is started up. Also, for example, the receiving unit 208 receives the fourth received file at the timing when the user operates the file to be used. Note that the functions possessed by the receiving unit 208 may be possessed by the processing unit 202.

[0035] The combining unit 209 combines the third distributed file stored in the storage unit 201 with the fourth distributed file received by the receiving unit 208. Specifically, when the receiving unit 208 receives the fourth distributed file, the combining unit 209 combines it with the third distributed file stored in the storage unit 201 that corresponds to the received fourth distributed file.

[0036] For example, the combining unit 209 compares the division IDs included in the fourth distributed file received by the receiving unit 208 with the division IDs included in the third distributed file stored in the storage unit 201, and combines the third distributed file and the fourth distributed file based on the matching division IDs. The result of the combining unit 209 combining the third distributed file and the fourth distributed file becomes the original distributed file. Note that the functions of the combining unit 209 may be possessed by the processing unit 202.

[0037] The setting unit 210 sets the frequency (timing) at which the aggregation unit 203 aggregates multiple second distributed files. The setting unit 210 also sets the frequency (timing) at which the generation unit 204 generates the distributed original file. The setting unit 210 also sets the frequency (timing) at which the transmission unit 207 transmits the fourth distributed file to the external storage device 3. The setting unit 210 also sets the frequency (timing) at which the reception unit 208 receives the fourth distributed file from the external storage device 3. Note that the contents set by the setting unit 210 are not limited to this. For example, the setting unit 210 may set the size of the file that generates the distributed original file generated by the generation unit 204.

[0038] Next, processing executed by the information processing device 2 according to this embodiment will be described with reference to Figures 5, 6, and 7. Figures 5, 6, and 7 are flowcharts showing an example of processing in the information processing device 2 according to this embodiment. Here, the information processing device 2 has completed initial settings for connecting to the external storage device 3 and is connected to the in-house network.

[0039] First, in FIG. 5, it is assumed that the user is using the information processing device 2 and that an original file used by the user has been updated.

[0040] The processing unit 202 divides the original file into a first distributed file and a second distributed file so that the original file can be decoded (step S501). Subsequently, the aggregation unit 203 aggregates the multiple second distributed files that were distributed by the processing unit 202 (step S502).

[0041] Next, the generating unit 204 generates a distributed original file indicating a file in which multiple second distributed files have been combined into one, from the multiple second distributed files aggregated by the aggregation unit 203 (step S503). Next, the dividing unit 205 divides the distributed original file generated by the generating unit 204 into a third distributed file and a fourth distributed file so that they can be restored (step S504).

[0042] Next, the determination unit 206 determines whether a certain time has elapsed since the transmission unit 207 transmitted the fourth distributed file to the external storage device 3 (step S505). If the determination unit 206 determines that the certain time has not elapsed (step S505: No), step S505 is continued until the certain time has elapsed. On the other hand, if the determination unit 206 determines that the certain time has elapsed (step S505: Yes), the process proceeds to step S506.

[0043] Next, the transmitting unit 207 transmits the fourth distributed file divided by the dividing unit 205 to the external storage device 3 (step S506). When the transmission process is completed, the process returns to step S501, and this process continues in the background while the information processing device 2 is running.

[0044] Next, in FIG. 6, it is assumed that the information processing device 2 starts from a state where an end operation such as a shutdown or restart has been received and an original file used by the user has been updated.

[0045] The processing unit 202 divides the original file into a first distributed file and a second distributed file so that the original file can be decoded (step S601). Subsequently, the aggregation unit 203 aggregates the multiple second distributed files distributed by the processing unit 202 (step S602).

[0046] Next, the generation unit 204 generates an original distributed file indicating the multiple second distributed files aggregated by the aggregation unit 203 (step S603). Next, the division unit 205 divides the original distributed file generated by the generation unit 204 into a third distributed file and a fourth distributed file so that they can be restored (step S604).

[0047] Next, the transmitting unit 207 transmits the fourth distributed file divided by the dividing unit 205 to the external storage device 3 (step S605). When the transmission process is completed, this process ends.

[0048] Next, in FIG. 7, it is assumed that the user starts the information processing device 2, completes the initial settings for connecting to the external storage device 3, and starts from a state where the information processing device 2 is connected to the company network.

[0049] The receiving unit 208 receives the fourth distributed file from the external storage device 3 (step S701). Subsequently, the combining unit 209 combines the fourth distributed file received by the receiving unit 208 with the third distributed file stored in the storage unit 201 (step S702). The file combined by the combining unit 209 is the original distributed file.

[0050] Next, the processing unit 202 combines the second distributed file and the first distributed file contained in the original distributed file combined by the combining unit 209, and decrypts the original file (step S703). When the processing unit 202 decrypts the original file, this process of the information processing device 2 ends.

[0051] As described above, the information processing device 2 according to one aspect of the present invention aggregates multiple second distributed files to generate a single unified distributed original file. The original distributed file is then split into a third distributed file and a fourth distributed file, and the fourth distributed file is sent to the external storage device 3. As a result, according to this embodiment, by aggregating multiple second distributed files to generate a single unified distributed original file, each second distributed file does not need to be sent to the external storage device 3, and the information processing device 2 can reduce the frequency of access to the external storage device 3.

[0052] Furthermore, in the above-described embodiment, the transmitting unit 207 sets the frequency at which the fourth distributed file is transmitted to the external storage device 3, and the transmitting unit 207 transmits the fourth distributed file to the external storage device 3 based on the set frequency. This allows the fourth distributed file to be transmitted to the external storage device 3 based on the frequency set by the information processing device 2.

[0053] Furthermore, in the above-described embodiment, the third distributed file and the fourth distributed file include at least an identifier corresponding to the original distributed file, which allows the information processing device 2 to combine the distributed files based on the identifier corresponding to the original distributed file.

[0054] The program for realizing the above functions may be provided, for example, in a state in which it is pre-stored in a storage element mounted on the CPU 21, but is not limited to this. The program may be provided, for example, in a state in which it is stored on an appropriate storage medium such as a CD-ROM, or may be provided via a computer network such as the Internet.

[0055] The above-described embodiment can be modified as needed by changing a portion of the configuration of the device. Therefore, several modifications of the above-described embodiment will be described below as other embodiments. The following mainly focuses on differences from the above-described embodiment, and detailed descriptions of commonalities with the content already described will be omitted. The modifications described below may be implemented individually or in appropriate combination.

[0056] (Variation 1) In the above embodiment, the external storage device 3 connected to the information processing device 2 is described as being connected to the information processing device 2 via an in-house network, but this is not intended to be limiting. For example, the external storage device 3 may be a portable terminal device. The portable terminal device is, for example, a non-volatile storage device that can be accessed outside the company, such as a smartphone.

[0057] The portable terminal device may be any terminal equipped with a storage device, and may take the form of, for example, a USB (Universal Serial Bus) memory, a tablet-type personal computer, a digital camera, a portable music player, a mouse, a pen, headphones, or a card-type storage medium (e.g., an IC (Integrated Circuit) card).

[0058] (Variation 2) In the above embodiment, the functions of the information processing device 2 are described as constituting the functions of the aggregation unit 203, generation unit 204, division unit 205, determination unit 206, transmission unit 207, reception unit 208, combination unit 209, and setting unit 210, but this is not intended to be limiting. For example, the aggregation unit 203, generation unit 204, division unit 205, determination unit 206, transmission unit 207, reception unit 208, combination unit 209, and setting unit 210 may be other information processing devices connected to the information processing device 2. The other information processing device may be, for example, a local server within the company.

[0059] Although the embodiments and modifications of the present invention have been described above, they are presented as examples and are not intended to limit the scope of the invention. These novel embodiments and modifications may be embodied in various other forms, and various omissions, substitutions, and modifications may be made without departing from the spirit of the invention. These embodiments and modifications are included within the scope and spirit of the invention, and are also included in the inventions and their equivalents as defined in the claims. [Explanation of symbols]

[0060] 1...information processing system, 2...information processing device, 3...external storage device, 201...storage unit, 202...processing unit, 203...aggregation unit, 204...generation unit, 205...division unit, 206...determination unit, 207...transmission unit, 208...reception unit, 209...combination unit, 210...setting unit

Claims

1. An information processing device that divides a plurality of original files into a first distributed file and a second distributed file so that each of the original files can be restored, a processing unit that stores a plurality of the first distributed files corresponding to the plurality of divided original files in a storage unit; a generation unit that aggregates a plurality of the second distributed files corresponding to the plurality of divided original files and generates a distributed original file that indicates the aggregated plurality of the second distributed files; a division unit that divides the original distributed file generated by the generation unit into a third distributed file and a fourth distributed file so that the original distributed file can be restored; a transmitting unit that transmits the fourth distributed file divided by the dividing unit to an external storage device; An information processing device comprising:

2. a setting unit that sets a frequency at which the sending unit sends the fourth distributed file to the external storage device, the transmitting unit transmits the fourth distributed file to the external storage device based on the frequency set by the setting unit. The information processing device according to claim 1 .

3. the third distribution file and the fourth distribution file include at least an identifier corresponding to the original distribution file; 3. The information processing device according to claim 1.

4. A computer of an information processing device that divides a plurality of original files into a first distributed file and a second distributed file so that each of the original files can be restored, a process of storing a plurality of the first distributed files corresponding to the plurality of divided original files in a storage unit; a process of aggregating a plurality of the second distributed files corresponding to the plurality of divided original files and generating a distributed original file indicating the aggregated plurality of the second distributed files; a process of dividing the original distributed file generated by the generating process into a third distributed file and a fourth distributed file in a manner that allows the original distributed file to be restored; a process of transmitting the fourth distributed file divided by the dividing process to an external storage device; A program that executes the following.

5. An information processing system comprising the information processing device according to any one of claims 1 to 3.

Images