Electronic device, system, and method for erasing data stored in a storage device of an electronic device

Abstract

This electronic apparatus is provided with a first storage device, a communication device, and a processor. The processor, by using the communication device, transmits to a server device a first signal including identification information for uniquely identifying the first storage device so as to cause the server device to register the electronic apparatus, and transmits, to the server device, a second signal which includes the identification information of the first storage device and which is for making inquiries about whether or not the server device includes a registration indicating that data stored in the first storage device is to be deleted. Upon reception of a third signal which instructs deletion of the data stored in the first storage device, the processor deletes the data stored in the first storage device. The third signal is transmitted from the server device to the electronic apparatus, in a case where the server device determines that identification information of the first storage device included in the second signal matches with identification information of the first storage device included in the first signal and the server device includes a registration indicating that the data stored in the first storage device is to be deleted.

Description

[Technical Field]

[0001] The present disclosure relates to an electronic device, a system, and a method for erasing data stored on a storage device of an electronic device. [Background technology]

[0002] When an organization such as a company disposes of an electronic device such as a personal computer, it is required to erase the data stored in the storage device in order to prevent confidential business information from being leaked.

[0003] Patent Document 1 discloses a data erasure management method in which data is erased from a storage device in a terminal to be managed, and the execution results are recorded and managed in a management database for each terminal to be managed. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent No. 4493677 Summary of the Invention

[0005] When an organization manages a large number of electronic devices, there is a risk that data stored in the storage devices of electronic devices that is not the target of erasure may be accidentally erased. Furthermore, erasing data stored in the storage devices of a large number of electronic devices takes time and effort. Therefore, it is necessary to accurately identify and easily erase data stored in the storage devices.

[0006] The present disclosure provides an electronic device that can identify and easily erase data stored in a storage device without error, a system including such an electronic device and a server device, and a method for erasing data stored in a storage device of an electronic device.

[0007] According to one embodiment of the present disclosure, an electronic device includes a first storage device, a communication device, and a processor. The processor uses the communication device to register the electronic device with the server device by transmitting a first signal including identification information that uniquely identifies the first storage device. The processor uses the communication device to transmit a second signal including the identification information of the first storage device to the server device, the second signal inquiring whether the server device is registered to erase data stored in the first storage device. The processor erases the data stored in the first storage device when the server device receives a third signal using the communication device from the server device instructing the server device to erase the data. The third signal is transmitted from the server device to the electronic device when the server device determines that the identification information of the first storage device included in the second signal matches the identification information of the first storage device included in the first signal and when the server device is registered to erase data stored in the first storage device.

[0008] According to an electronic device according to an aspect of the present disclosure, data stored in a storage device can be identified without error and easily erased. [Brief explanation of the drawings]

[0009] [Figure 1] 1 is a schematic diagram showing the configuration of a system 100 according to a first embodiment. [Figure 2] 2 is a block diagram showing the configuration of a client device 1 in FIG. 1. FIG. [Figure 3] 2 is a block diagram showing the configuration of a server device 2 in FIG. 1. FIG. [Figure 4] FIG. 2 is a block diagram showing the configuration of an administrator device 3 in FIG. [Figure 5] FIG. 2 is a block diagram showing the configuration of a user terminal device 4 in FIG. [Figure 6] 3 is a schematic diagram showing the functional blocks of a firmware program 50 and an erase application program 70 executed by the processor 11 of FIG. 2. FIG. [Figure 7]3 is a flowchart showing a registration process by an erasure application program 70 executed by the processor 11 of FIG. 2. [Figure 8] 4 is a flowchart showing a registration process of the server device 2 executed by the processor 21 of FIG. 3. [Figure 9] 4 is a diagram showing exemplary contents of a management table 22a stored in the memory 22 of FIG. 3. FIG. [Figure 10] 3 is a flowchart showing an erasure process by an erasure application program 70 executed by the processor 11 of FIG. 2. [Figure 11] 3 is a flowchart showing an erasure process by a firmware program 50 executed by the processor 11 of FIG. 2. [Figure 12] 4 is a flowchart showing an erasure process of the server device 2 executed by the processor 21 of FIG. 3. [Figure 13] FIG. 12 is a diagram showing the content displayed on the display device 16 of the client device 1 in step S39 of FIG. [Figure 14] 1. FIG. 4 is a sequence diagram showing the operation of the system 100 in the case where transmission of erasure result information via the communication line 6 in the system 100 of FIG. 1 is successful. [Figure 15] 1. FIG. 4 is a sequence diagram showing the operation of the system 100 in the case where transmission of erasure result information via the communication line 6 in the system 100 of FIG. [Figure 16] 10 is a flowchart showing the operation of the system according to the second embodiment, illustrating erasure and verification processing by the firmware program 50 executed by the processor 11 of the client device 1. [Figure 17] 17 is a flowchart showing a subroutine of step S70 (verification processing) of FIG. 16. [Figure 18] 10 is a flowchart showing the operation of the system according to the second embodiment, illustrating the erasure and verification process of the server device 2 executed by the processor 21. [Figure 19]FIG. 10 is a schematic diagram for explaining a first verification method for the storage device 13. [Figure 20] FIG. 10 is a schematic diagram for explaining a second verification method for the storage device 13. [Figure 21] FIG. 10 is a sequence diagram illustrating the operation of the system according to the second embodiment, showing the operation of the system 100 when the erasure result information and the verification result information are successfully transmitted via the communication line 6. [Figure 22] FIG. 10 is a sequence diagram illustrating the operation of the system according to the second embodiment, showing the operation of the system 100 when transmission of erasure result information and verification result information via the communication line 6 fails. [Figure 23] 10 is a flowchart showing the operation of a system according to a modified example of the second embodiment, illustrating a subroutine of step S70A (verification process) executed by the processor 11 of the client device 1. FIG. [Figure 24] 10 is a flowchart showing the operation of the system according to a modified example of the second embodiment, illustrating the erasure and verification process of the server device 2 executed by the processor 21. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. However, more detailed description than necessary may be omitted. For example, detailed description of well-known matters or redundant description of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following description and to facilitate understanding by those skilled in the art.

[0011] The inventors provide the accompanying drawings and the following description to enable those skilled in the art to fully understand the present disclosure, and do not intend for them to limit the subject matter described in the claims.

[0012] [First embodiment] [Configuration of the first embodiment] 1 is a schematic diagram showing the configuration of a system 100 according to the first embodiment. The system 100 in FIG. 1 includes a plurality of client devices 1-1 to 1-3, a server device 2, an administrator device 3, a user terminal device 4, a base station device 5, and a communication line 6.

[0013] The client devices 1-1 to 1-3 are communicably connected to the server device 2 via a communication line 6. The client devices 1-1 to 1-3 are electronic devices equipped with a storage device (described later), such as a personal computer or a mobile phone.

[0014] In this specification, the client devices 1-1 to 1-3 are also collectively referred to as "client device 1."

[0015] The server device 2 manages the erasure of data stored in the storage device of each client device 1.

[0016] The administrator device 3 is communicably connected to the server device 2 via a communication line 6. The administrator of each client device 1 uses the administrator device 3 to access the server device 2 and specify the storage device from which stored data should be erased.

[0017] The user terminal device 4 is an electronic device, such as a mobile phone, equipped with a camera 48 and a communication device. The user terminal device 4 is connected to the server device 2 via the base station device 5 so as to be able to communicate with the server device 2.

[0018] The communication line 6 is, for example, a local area network (LAN), the Internet, or a combination thereof.

[0019] For example, each client device 1 and administrator device 3 may be owned by an organization such as a company, while the server device 2 may be operated by a third party different from this organization. In this case, the organization that owns each client device 1 and administrator device 3 enters into a contract with the operator of server device 2 to manage the erasure of data stored in the storage device of each client device 1, and becomes a customer of this operator.

[0020] In this specification, "erasing" means making the original stored data unreadable, and overwriting it with other data, such as "0", "1", or random values. thing Alternatively, the original data may be made unreadable by executing a command erasure function (for example, a secure erase command) incorporated in the firmware program of the storage device.

[0021] FIG. 2 is a block diagram showing the configuration of the client device 1 of FIG. 1. The client device 1 includes a bus 10, a processor 11, a memory 12, a storage device 13, a storage device 14, a communication device 15, a display device 16, and an input device 17. The processor 11 controls the overall operation of the client device 1 and, for example, erases data stored in the storage device 13. The memory 12 temporarily stores programs and data necessary for the operation of the client device 1. The storage device 13 stores data including an operating system (OS), multiple application programs (APPs), and user data. The storage device 13 is a non-volatile storage medium such as a hard disk drive (HDD) or a solid-state drive (SSD). The storage device 14 stores a firmware program for the client device 1, such as a UEFI (Unified Extensible Firmware Interface) or a BIOS (Basic Input / Output System) program. The storage device 14 is a non-volatile storage medium such as a flash memory. The communication device 15 is communicably connected to the server device 2 via a communication line 6. The display device 16 displays information related to the status of the client device 1, for example, an image including information related to erasure of data stored in the storage device 13. The input device 17 receives user input that controls the operation of the client device 1, for example, user input related to erasure of data stored in the storage device 13. The input device 17 includes, for example, a keyboard and a pointing device. The processor 11, the memory 12, the storage device 13, the storage device 14, the communication device 15, the display device 16, and the input device 17 are connected to each other via the bus 10.

[0022] FIG. 3 is a block diagram showing the configuration of the server device 2 of FIG. 1. The server device 2 includes a bus 20, a processor 21, a memory 22, a storage device 23, and a communication device 25. The processor 21 controls the overall operation of the server device 2 and manages the deletion of data stored in the storage device 13 of each client device 1. The memory 22 temporarily stores programs and data necessary for the operation of the server device 2. For example, the memory 22 stores a management table 22a for managing the deletion of data stored in the storage device 13 of each client device 1. The storage device 23 is a non-volatile storage medium that stores programs necessary for the operation of the server device 2. The communication device 25 is communicably connected to each client device 1 and the administrator device 3 via a communication line 6. The processor 21, the memory 22, the storage device 23, and the communication device 25 are connected to one another via a bus 20.

[0023] FIG. 4 is a block diagram showing the configuration of the administrator device 3 in FIG. 1. The administrator device 3 includes a bus 30, a processor 31, a memory 32, a storage device 33, a communication device 35, a display device 36, and an input device 37. The processor 31 controls the overall operation of the administrator device 3. The memory 32 temporarily stores programs and data necessary for the operation of the administrator device 3. The storage device 33 is a non-volatile storage medium that stores programs necessary for the operation of the administrator device 3. The communication device 35 is communicably connected to the server device 2 via a communication line 6. The display device 36 displays information related to the status of the administrator device 3. The input device 37 receives user input to control the operation of the administrator device 3. The input device 37 includes, for example, a keyboard and a pointing device. The processor 31, the memory 32, the storage device 33, the communication device 35, the display device 36, and the input device 37 are connected to one another via a bus 30.

[0024] The server device 2 provides an interface, for example, a web page-based interface, accessible by the administrator device 3 to manage the erasure of data stored in the storage device of each client device 1. In this case, the server device 2 executes a web server application program, and the administrator device 3 executes a web browser application program to access the web server of the server device 2.

[0025] FIG. 5 is a block diagram showing the configuration of the user terminal device 4 of FIG. 1. The user terminal device 4 includes a bus 40, a processor 41, a memory 42, a storage device 43, a communication device 45, a display device 46, an input device 47, and a camera 48. The processor 41 controls the overall operation of the user terminal device 4. The memory 42 temporarily stores programs and data necessary for the operation of the user terminal device 4. The storage device 43 is a non-volatile storage medium that stores programs necessary for the operation of the user terminal device 4. The communication device 45 is communicably connected to the server device 2 via the base station device 5. The display device 46 displays information related to the status of the user terminal device 4. The input device 47 receives user input that controls the operation of the user terminal device 4. The input device 47 includes, for example, a switch and a touch panel. The camera 48 captures, for example, an image displayed on the display device 16 of the client device 1. As will be described later, the display device 16 of the client device 1 may display an image (e.g., a two-dimensional barcode) containing information related to the deletion of data stored in the storage device 13 of the client device 1. In this case, the user terminal device 4 transmits the contents of the captured image to the server device 2 via the base station device 5. The processor 41, the memory 42, the storage device 43, the communication device 45, the display device 46, the input device 47, and the camera 48 are connected to one another via a bus 40.

[0026] [Operation of the first embodiment] As described above, in the client device 1, the storage device 13 stores an operating system and multiple application programs, and the storage device 14 stores a firmware program. The operating system, each application program, and the firmware program are executed by the processor 11. Generally, when the client device 1 starts up, the firmware program is executed first, and then the operating system is called from the firmware program. The application program is executed on the operating system. The application program accesses each hardware device of the client device 1 (the storage device 13, the storage device 14, the communication device 15, the display device 16, and the input device 17) via the operating system. On the other hand, the firmware program accesses each hardware device of the client device 1 directly without going through the operating system. One of the application programs is an erasure application program for erasing data stored in the storage device 13. The client device 1 is configured to erase data stored in the storage device 13 by executing the erasure application program and the firmware program.

[0027] FIG. 6 is a schematic diagram showing the functional blocks of the firmware program 50 and the erase application program 70 executed by the processor 11 of FIG.

[0028] The firmware program 50 includes, as its functional blocks, a core control unit 51, an erasure control unit 52, a data encoding unit 53, and a two-dimensional barcode generation unit 54, for example. The core control unit 51 controls the other functional blocks of the firmware program 50, controls the input and output of data between the functional blocks, and controls the input and output of data to and from the firmware program 50. The erasure control unit 52 controls the erasure of data stored in the storage device 13. The data encoding unit 53 encodes erasure result information indicating whether or not all data stored in the storage device 13 has been successfully erased using a predetermined encoding method. The two-dimensional barcode generation unit 54 generates a two-dimensional barcode including erasure result information indicating whether or not all data stored in the storage device 13 has been successfully erased (including erasure completion information if the data erasure was successful).

[0029] The operating system 60 provides an interface for each hardware device (storage device 13, storage device 14, communication device 15, display device 16, and input device 17) of the client device 1 to the erasure application program 70 and other application programs (not shown). The operating system 60 includes, as its functional blocks, a device information monitor 61 and a power management unit 62. The device information monitor 61 acquires information about the client device 1 from the client device 1 and also acquires information about various components of the client device 1 from the components. The example of FIG. 6 shows a case where the device information monitor 61 acquires information about the storage device 13 of the client device 1. The information about the client device 1 includes, for example, the manufacturer, model, serial number, and UUID (Universally Unique Identifier) ​​of the client device 1. The information about the storage device 13 includes, for example, the manufacturer, model, serial number, UUID, and capacity of the storage device 13. The power management unit 62 controls the stopping, suspending, hibernation, and restarting of the client device 1.

[0030] The storage devices 13 of each client device 1 under the management of a certain server device 2 can be identified from one another using at least some of the manufacturer of the client device 1, the model of the client device 1, the serial number of the client device 1, the UUID of the client device 1, the manufacturer of the storage device 13, the model of the storage device 13, the serial number of the storage device 13, the UUID of the storage device 13, and the capacity of the storage device 13. Therefore, at least some of the manufacturer of the client device 1, the model of the client device 1, the serial number of the client device 1, the UUID of the client device 1, the manufacturer of the storage device 13, the model of the storage device 13, the serial number of the storage device 13, the UUID of the storage device 13, and the capacity of the storage device 13 can be used as identification information that uniquely identifies the storage device 13.

[0031] The erasure application program 70 includes, as its functional blocks, for example, a core control unit 71. The core control unit 71 controls other functional blocks (not shown) of the erasure application program 70, controls input and output of data between the functional blocks, and controls input and output of data from and to the outside of the erasure application program 70.

[0032] The storage device 13 of the client device 1 executes a firmware program including the functional blocks shown in FIG. 6. The storage device 13 includes, as its functional blocks, a core control unit 81, a reading unit 82, a writing unit 83, and an erasing unit 84, for example. The core control unit 81 controls the other functional blocks of the storage device 13 and controls the input and output of data between the functional blocks. The reading unit 82 reads data from a storage medium (not shown) of the storage device 13. The writing unit 83 writes data to the storage medium of the storage device 13 (including erasing original data by overwriting with "0", "1", random values, etc.). The erasing unit 84 erases data from the storage medium of the storage device 13 (including erasing data by executing a secure erase command incorporated in the firmware program).

[0033] The operation of the client device 1 will be described below with reference to the functional blocks in FIG. 6, and the operation of the server device 2 will also be described.

[0034] Fig. 7 is a flowchart showing the registration process of the client device 1 by the erasure application program 70 executed by the processor 11 of Fig. 2. Fig. 8 is a flowchart showing the registration process of the server device 2 executed by the processor 21 of Fig. 3.

[0035] If the organization that owns each client device 1 is not registered with the server device 2, before performing the registration process of Figure 7, an administrator or other person in charge of the organization that owns each client device 1 obtains the following information from the server device 2. Server device 2 account information (customer ID and password) - URL (Uniform Resource Locator) of the erasure application program 70 Customer number (a serial number assigned to each customer and associated with their account information) The customer number is generated for each customer, that is, for each contract that governs the erasure of data stored in the storage device of each client device 1, and is therefore not identification information for each client device 1 or storage device 13.

[0036] Each client device 1 accesses the URL of the erasure application program 70, downloads the erasure application program 70, and installs it. After installation, the erasure application program 70 is started automatically or manually. After the erasure application program 70 is started, the processor 11 executes the registration process of FIG. 7 to register the storage device 13 of the client device 1 with the server device 2.

[0037] 7, the core control unit 71 of the client device 1 displays on the display device 16 a dialog box prompting the user to enter a customer number assigned to the organization that owns the client device 1. The user of the client device 1 follows the dialog box to enter the customer number using the input device 17. The core control unit 71 acquires the customer number from the user via the input device 17.

[0038] In step S2, the core control unit 71 of the client device 1 acquires information about the client device 1 and information about the storage device 13 from the device information monitor 61 of the operating system 60.

[0039] In step S3, the core control unit 71 of the client device 1 uses the communication device 15 to transmit the customer number, the information of the client device 1, and the information of the storage device 13 to the server device 2.

[0040] 8, the server device 2 receives the customer number, information about the client device 1, and information about the storage device 13. In step S12, the server device 2 registers the client device 1 and its storage device 13 in the management table 22a as new management targets. When the client device 1 and its storage device 13 have been registered, the server device 2 transmits an acknowledgement signal to the client device 1 in step S13.

[0041] In step S4 of FIG. 7, the core control unit 71 of the client device 1 determines whether or not an acknowledgment signal has been received from the server device 2, and if YES, ends the process, and if NO, returns to step S3.

[0042] 7 and 8, the storage device 13 of the client device 1 is registered in the management table 22a of the server device 2 as a new management target. According to the registration process of Figures 7 and 8, the user of the client device 1 only needs to input the customer number using the input device 17, and information about the client device 1 and information about the storage device 13 are automatically transmitted from the client device 1 to the server device 2. According to the registration process of Figures 7 and 8, the user of the client device 1 does not need to be aware of the organization to which he or she belongs (or the organization that owns the client device 1), and the server device 2 automatically classifies the registered storage devices 13 by customer based on the customer number.

[0043] After the storage devices 13 of each client device 1 are registered with the server device 2, an administrator of the organization that owns each client device 1 registers with the server device 2, as necessary, that the data stored in the storage devices 13 should be erased. To do this, the administrator first uses the administrator device 3 to access the server device 2 and logs in to the server device 2 using account information. Next, while viewing the list of storage devices 13 registered in the management table 22a, the administrator sets an erase flag for one or more storage devices 13, indicating that the data stored therein should be erased.

[0044] Fig. 9 is a diagram showing exemplary contents of the management table 22a stored in the memory 22 of Fig. 3. The management table 22a includes, for each client device 1 or storage device 13 to be managed, for example, a customer number, a group number, information about the client device 1, information about the storage device 13, an erasure flag, a processing number, an erasure start time, and an erasure end time.

[0045] As described above, a customer number is assigned to each customer. A group number is assigned to any sub-organization (group) that is part of the customer's organization. For example, if the customer is a company, a group may be a department or section of the company. As described above, the information about the client device 1 includes, for example, the manufacturer, model, serial number, and UUID of the client device 1. As described above, the information about the storage device 13 includes, for example, the manufacturer, model, serial number, UUID, and capacity of the storage device 13. As described above, the erasure flag indicates that data stored in the storage device 13 should be erased. A processing number is issued for each storage device 13 for which the erasure flag indicates that data stored in the storage device 13 should be erased. The erasure start time and erasure end time indicate the actual start and end times of erasure of data stored in the storage device 13.

[0046] The customer number is provided by the server device 2. The group number, information about the client device 1, and information about the storage device 13 are provided by the client device 1. The erasure flag is set by the administrator of the organization that owns each client device 1 using the administrator device 3. The processing number is provided by the server device when the erasure flag is set, indicating that the stored data should be erased. The erasure start time and erasure end time are obtained when the data stored in the storage device 13 is actually erased.

[0047] Based on the management table 22a, the server device 2 may generate a status report indicating the status of each client device 1 and each storage device 13. The status report indicates, for example, which of the following states each storage device 13 is in: -Flag for deletion set Erasing -Erasing completed -Erasure completed and erasure certificate issued ·Erase failure The certificate of erasure will be described later.

[0048] The status report may also include the following information: -Date and time when the deletion flag was set Approval of deletion Start date and time of erasure ·Erase completion date and time ·Elimination method The manufacturer, model, and serial number of the client device 1 The manufacturer, model, serial number, and capacity of the storage device 13 The administrator can view the status report by accessing the server device 2 using the administrator device 3.

[0049] Fig. 10 is a flowchart showing the erasure processing by the erasure application program 70 executed by the processor 11 of Fig. 2. Fig. 11 is a flowchart showing the erasure processing by the firmware program 50 executed by the processor 11 of Fig. 2. Fig. 12 is a flowchart showing the erasure processing of the server device 2 executed by the processor 21 of Fig. 3.

[0050] 12, the server device 2 determines whether or not a storage device 13 to be erased has been designated by the administrator device 3. If the determination is YES, the server device 2 proceeds to step S52, and if the determination is NO, the server device 2 repeats step S51. In step S52, the server device 2 sets an erasure flag in the management table 22a for the storage device 13 designated as the storage device to be erased, and updates the status report of this storage device 13.

[0051] After the client device 1 is started, the erasure application program 70 is started automatically or manually.

[0052] In step S21 of FIG. 10, the core control unit 71 of the client device 1 inquires of the server device 2 using the communication device 15 whether an erasure flag is registered in the management table 22a of the server device 2 for the memory device 13 of the client device 1 that is executing the erasure process of FIG. 10.

[0053] 12, the server device 2 determines whether or not an inquiry about the deletion flag has been received from the client device 1, and if the answer is YES, the process proceeds to step S54, and if the answer is NO, the process returns to step S51. In step S54, the server device 2 replies to the client device 1 about the presence or absence of the deletion flag.

[0054] In step S22 of FIG. 10, the core control unit 71 of the client device 1 determines whether an erasure flag is registered in the management table 22a of the server device 2 for the memory device 13 of the client device 1 that is executing the erasure process of FIG. 10, and if YES, proceeds to step S23, and if NO, returns to step S21.

[0055] In step S23, the core control unit 71 of the client device 1 uses the communication device 15 to transmit information about the client device 1 and information about the storage device 13 to the server device 2.

[0056] In step S55 of FIG. 12, the server device 2 determines whether or not the information on the client device 1 and the storage device 13 has been received, and if YES, the process proceeds to step S56, and if NO, the process returns to step S51.

[0057] If the information about the client device 1 and the storage device 13 received by the server device 2 matches the information about the client device 1 and the storage device 13 registered in the management table 22a by the registration process of FIG. 7, in step S56, the server device 2 generates a processing number for the storage device 13 of the client device 1 that is executing the erasure process of FIG. 10 and transmits it to the client device 1. If the server device 2 cannot identify the storage device 13 based on the received information about the client device 1 and the storage device 13, or if the erasure flag is not set, the server device 2 returns an error response. If the server device 2 can identify the storage device 13 based on the received information about the client device 1 and the storage device 13, but the erasure flag is not set or the identification information of the storage device 13 is different, the server device 2 may return a response indicating that the information is different. In this case, since the processing number is not returned, the client device 1 cannot erase the data stored in the storage device.

[0058] In step S24 of FIG. 10, the core control unit 71 of the client device 1 determines whether or not a processing number for erasure has been received in response to the information sent in step S23, and if YES, proceeds to step S25, and if NO, returns to step S23.

[0059] In step S25, the core control unit 71 of the client device 1 displays a dialog box on the display device 16 to confirm whether or not to erase the data stored in the storage device 13. The user of the client device 1 uses the input device 17 in accordance with the dialog box to input whether or not to erase the data stored in the storage device 13. The core control unit 71 obtains, via the input device 17, whether or not to erase the data stored in the storage device 13.

[0060] In step S26, the core control unit 71 of the client device 1 determines whether the user has consented to the erasure of the data stored in the storage device 13, and if YES, proceeds to step S27, and if NO, ends the process.

[0061] In step S27, the core control unit 71 of the client device 1 sends the UUID of the storage device 13, the processing number, the address of the server device 2, and information on the erasure method to the firmware program 50. The information on the erasure method includes, for example, secure erase (an example of command erasure), overwrite erase three times (overwrite content: either "0", "1", or a random value), overwrite erase once (overwrite content: either "0", "1", or a random value), failure, etc.

[0062] The core control unit 51 of the firmware program 50 stores the UUID of the storage device 13, the processing number, the address of the server device 2, and the information on the erasure method acquired from the erasure application program 70 in the storage device 14 (see step S31 in FIG. 11). When the core control unit 51 has acquired and stored the UUID of the storage device 13, the processing number, the address of the server device 2, and the information on the erasure method, it sends an acknowledgement signal to the erasure application program 70 (see step S32 in FIG. 11).

[0063] In step S28 of FIG. 10, the core control unit 71 of the client device 1 determines whether or not an acknowledgment signal has been received from the firmware program 50, and if YES, proceeds to step S29, and if NO, returns to step S27.

[0064] In step S29, the core control unit 71 of the client device 1 sends a control signal to the power management unit 62 of the operating system 60 to restart the client device 1.

[0065] Steps S31 to S33 in FIG. 11 correspond to steps S27 to S29 in FIG.

[0066] In step S31 of FIG. 11, the core control unit 51 of the client device 1 stores the UUID of the storage device 13, the processing number, the address of the server device 2, and the information on the erasure method acquired from the erasure application program 70 in the storage device 14.

[0067] In step S32, the core control unit 51 of the client device 1 sends an acknowledgement signal to the erasure application program 70 when it has acquired and stored the UUID of the storage device 13, the processing number, the address of the server device 2, and the erasure method information.

[0068] In step S33, the erasure application program 70 restarts the client device 1.

[0069] After rebooting, the firmware program 50 continues the erasure process of FIG. 11 without calling the operating system 60.

[0070] In step S34, the core control unit 51 of the client device 1 uses the erasure control unit 52 to erase all data stored in the storage device 13 using the specified erasure method. The erasure control unit 52 may erase data (command erasure) using the secure erase command of the storage device. After the erasure is complete, the core control unit 51 stores data indicating the erasure result, including the erasure start time, erasure end time, and erasure method, in the storage device 14.

[0071] In step S35, the core control unit 51 of the client device 1 reads the data indicating the deletion result from the storage device 14, and encodes the data indicating the deletion result using a predetermined encoding method using the data encoding unit 53. The core control unit 51 stores the encoded data in the storage device 14.

[0072] The encoding of the data indicating the encoded erasure result is performed, for example, in the following steps. (1) These parameters, which serially arrange the UUID, the processing number, the erasure start time, the erasure end time, and the erasure method, may be arranged in, for example, a CSV format. (2) The character string related to the parameter in step (1) is converted to a half-width character string such as BCD. Here, a character string may be added. (3) Calculate the hash value of the string from step (2). (4) The character string in step (2) and the hash value in step (3) are converted into a format that can be transmitted via the communication line 6. If necessary, for example, URL encoding is performed. (5) The data from step (4) is sent to the address of the server device 2 as the destination.

[0073] In step S36, the core control unit 51 of the client device 1 reads the coded data indicating the deletion result from the storage device 14, and transmits the coded data indicating the deletion result to the server device 2 using the communication device 15.

[0074] In step S57 of FIG. 12, the server device 2 determines whether or not it has received an erasure result from the client device 1, and if YES, the process proceeds to step S58, and if NO, the process returns to step S51.

[0075] In step S58, the server device 2 transmits to the client device 1 an acknowledgement signal for the result of erasure.

[0076] In step S37 of FIG. 11, the core control unit 51 of the client device 1 determines whether or not an acknowledgment signal has been received from the server device 2, and if YES, proceeds to step S41, and if NO, proceeds to step S38.

[0077] In step S38, the core control unit 51 of the client device 1 reads the data indicating the erasure result from the storage device 14, and generates a two-dimensional barcode from the data indicating the erasure result using the two-dimensional barcode generation unit 54. The core control unit 51 stores the generated two-dimensional barcode in the storage device 14.

[0078] In step S39, the core control unit 51 of the client device 1 reads the two-dimensional barcode from the storage device 14 and displays the two-dimensional barcode on the display device 16.

[0079] 13 is a diagram showing the content displayed on the display device 16 of the client device 1 in step S39 of Fig. 11. The display screen 200 displayed on the display device 16 includes, for example, a two-dimensional barcode 201, a keyword 202, and an input field 203. The user can operate the user terminal device 4 so that the camera 48 of the user terminal device 4 photographs the two-dimensional barcode 201, the processor 41 of the user terminal device 4 decodes the two-dimensional barcode 201, extracts data indicating the deletion result, and transmits this data to the server device 2.

[0080] 11, the core control unit 51 of the client device 1 determines whether the keyword displayed on the display device 16 has been input from the input device 17. If the result is YES, the process proceeds to step S41. If the result is NO, the process repeats step S40. Here, the image of the two-dimensional barcode 201 may not be erased by a simple process such as turning off the power. For example, the core control unit 51 may display, along with the two-dimensional barcode 201, a message on the display device 16 prompting the user to input a predetermined keyword 202 ("End1207" in the example of FIG. 13). When the keyword 202 is entered in the input field 203 and the Enter key is pressed, the process proceeds to step S41. If a different keyword is entered or the power switch is operated, the same screen is displayed again.

[0081] 11, the erasure result is first transmitted from client device 1 to server device 2 via communication line 6 in step S36. If a failure or the like occurs on communication line 6, that is, if an acknowledgment signal for the erasure result is not received in step S37, the erasure result is transmitted to server device 2 via user terminal device 4 by executing steps S38 to S39. Therefore, in step S57 of FIG. 12, server device 2 may receive the erasure result from client device 1 via communication line 6, or may receive the erasure result via user terminal device 4.

[0082] Referring to Figure 12, step S58After executing the above, in step S59, the server device 2 stores the erase result in the management table 22a and updates the status report.

[0083] In step S60, the server device 2 issues an erasure certificate based on the erasure result.

[0084] In step S41 of FIG. 11, the core control unit 51 of the client device 1 performs post-processing and shuts down the client device 1.

[0085] Fig. 14 is a sequence diagram showing the operation of the system 100 in Fig. 1 when the system 100 has succeeded in transmitting the erasure result information via the communication line 6. Fig. 15 is a sequence diagram showing the operation of the system 100 in Fig. 1 when the system 100 has failed to transmit the erasure result information via the communication line 6.

[0086] 14 and 15, for the sake of simplicity, only the main steps among those described with reference to FIGS. 7, 8, and 10 to 12 are shown, and the others are omitted.

[0087] 14, the client device 1 acquires a customer number from a user in step S1. Then, the client device 1 transmits the customer number, information about the client device 1, and information about the storage device 13 to the server device 2.

[0088] In step S12, the server device 2 registers the storage device 13 of the client device 1 as a new management target based on the customer number, the information of the client device 1, and the information of the storage device 13.

[0089] Thereafter, the administrator device 3 transmits the account information to the server device 2 to log in to the server device 2, and in step S101 specifies the storage device 13 to be erased, that is, the storage device 13 from which the stored data should be erased.

[0090] In step S52, the server device 2 stores the erasure flag in the management table 22a so as to correspond to the storage device 13 designated in step S101.

[0091] Thereafter, the client device 1 periodically inquires of the server device 2 as to whether or not an erasure flag has been set in the management table 22a corresponding to the storage device 13 of the client device 1. When the client device 1 receives a response signal from the server device 2 in response to the erasure flag inquiry indicating that an erasure flag has been set in the management table 22a, the client device 1 transmits information about the client device 1 and information about the storage device 13 to the server device 2. When the information about the client device 1 and the storage device 13 received by the server device 2 matches the information about the client device 1 and the storage device 13 registered in the management table 22a, the server device 2 generates a processing number for the storage device 13 of the client device 1 and transmits the processing number to the client device 1.

[0092] Thereafter, in step S25, the client device 1 displays a dialog box on the display device 16 to confirm whether or not to erase the data stored in the storage device 13. If the user agrees to erase the data stored in the storage device 13, the client device 1 restarts in step S29. Thereafter, in step S34, the client device 1 erases all data stored in the storage device 13.

[0093] After the erasure is completed, the client device 1 transmits erasure result information to the server device 2. If a response signal to the erasure result information is received from the server device 2 within a predetermined timeout period, the client device 1 ends the process.

[0094] In step S59, the server device 2 stores the erasure result included in the erasure result signal in the management table 22a. In step S60, the server device 2 issues an erasure certificate based on the erasure result included in the erasure result signal.

[0095] On the other hand, as shown in FIG. 15, if the erasure result information sent by the client device 1 does not reach the server device 2, or if a response signal to the erasure result information is not received, There was no At this time, the client device 1 displays the two-dimensional barcode on the display device 16 in step S39.

[0096] In step S111, the user of client device 1 uses user terminal device 4 to capture an image of the two-dimensional barcode displayed on display device 16 of client device 1. Processor 41 of user terminal device 4 decodes the two-dimensional barcode to extract data indicating the deletion result, and transmits this data to server device 2. Thereafter, steps S59 to S60 in FIG. 15 are the same as the corresponding steps in FIG. 14.

[0097] [Certificate of erasure] For example, when data stored in a storage device is erased using erasure software or an erasure process certified by a third-party certification body such as the Association of Data Erase Certification Council (ADEC), a certificate can be issued to indicate that proper erasure of data has been performed. The certificate includes, for example, the following information: (1) Information on client device 1 ·Manufacturer Model Serial number (2) Information on storage device 13 ·Manufacturer Model Serial number ·capacity (3) Information to be deleted - Information about the company to be deleted (company ID, company name, rating) - Erasure software information (vendor name, software name, certification number, erasure method) - Erase execution date and time (erasure start time, erasure end time) Erasing results As described above, information about the client device 1 and information about the storage device 13 are sent from the client device 1 to the server device 2 by the erasure application program 70. Of the erasure information, the business ID, business name, vendor name, and software name must be applied for and certified in advance by a certification authority. Once the erasure software is certified, an authentication number is issued. The firmware program 50 also sends the erasure execution date and time and the erasure result from the client device 1 to the server device 2. In this way, the information required to issue an erasure certificate can be automatically sent from the client device 1 to the server device 2, making it easy to issue an erasure certificate.

[0098] [summary] As described above, according to the system of the first embodiment, the administrator accesses the server device 2 and sets an erasure flag indicating that data stored in the storage device 13 of each client device 1 should be erased. Thereafter, the client device inquires of the server device 2 about the presence or absence of the erasure flag, without transmitting an erasure command or the like from the server device 2 to the client device 1. This allows the storage device 13 to be erased to be identified without error and easily set. No signal is sent from the server device 2 to the client device 1 when erasure is to begin; the user of the client device 1 simply connects the client device 1 to the communication line 6 when erasure is to begin. Therefore, data can be erased at the user's convenience. This allows the data stored in the storage device 13 to be identified without error and easily erased.

[0099] Performing the erasure process not only by the erasure application program 70 but also by a combination of the erasure application program 70 and the firmware program 50 has the following advantages. The erasure application program 70, which runs on the operating system 60, resides in the storage device 13. Similarly, the UEFI application program, which runs on the firmware program 50, resides in the storage device 13. Therefore, when data stored in the storage device 13 is erased by the erasure application program 70 or the UEFI application program, the area of ​​the storage device 13 where the program resides cannot be deleted. Furthermore, the erasure application program 70 or the UEFI application program cannot communicate with the server device 2 via a communication line after the data erasure is complete. Furthermore, since the erasure application program 70 or the UEFI application program cannot operate after the data erasure is complete, it cannot obtain information indicating the erasure result (e.g., the erasure start time, the erasure end time, and the erasure method). According to the system 100 of the first embodiment, by executing the firmware program 50, all data stored in the storage device 13 can be erased. After the data erasure is complete, communication with the server device 2 can be performed via a communication line, and after the data erasure is complete, information indicating the erasure result can be obtained.

[0100] For example, it is conceivable to outsource the erasure of data stored in the storage device 13 to a service provider. However, transporting a client device equipped with a storage device from which data is to be erased to the service provider's business premises poses security risks. Using a highly secure delivery method increases costs. Furthermore, a lot of work is required for the erasure and subsequent checks. Furthermore, erasing data takes a long time, for example, half a day. According to the system 100 of the first embodiment, data stored in the storage device 13 can be erased without moving the client device 1, enabling data to be erased easily, with high security, and at low cost.

[0101] Here, some examples of use of the system according to the first embodiment will be described.

[0102] [Usage example 1] First, consider the case where all client devices 1 corresponding to a certain user group (for example, one department in a company) are to be disposed of, but these client devices 1 are not managed as a group. Each user registers their corresponding client device 1 in the server device 2. The system administrator checks all of the client devices 1 to be disposed of (for all members of the group) and sets an erasure flag in the management table 22a of the server device 2. Each user then erases the data stored in the storage device 13. The administrator checks that the erasure has been completed; if the administrator can confirm this, erasure can be certified, but if the administrator cannot confirm this, the administrator urges the user to erase the data. If necessary, the administrator obtains an ADEC erasure certificate.

[0103] [Usage example 2] Next, consider the case where all client devices 1 corresponding to a certain user group (for example, a department in a company) are to be disposed of and these client devices 1 are to be managed as a group. Most of the administrator's tasks are undertaken by the person in charge of the group (for example, the department manager). The administrator sets up the group. Each user sets up and registers their corresponding client devices 1 in the server device 2 as a group. The person in charge checks all of the client devices 1 to be disposed of (for all members of the group) and sets an erasure flag in the management table 22a of the server device 2. Then, each user erases the data stored in the storage device 13. The person in charge checks that the erasure has been completed; if the person in charge can confirm this, erasure can be certified, but if the person in charge cannot confirm this, the person in charge urges the user to erase the data. The person in charge requests the issuance of an ADEC erasure certificate. The administrator obtains the ADEC erasure certificate.

[0104] [Usage example 3] Also, consider the case where all client devices 1 corresponding to a certain user group (for example, one department in a company) are to be disposed of and these client devices 1 are to be managed as a group. The administrator sets up a group. Each user sets up and registers their corresponding client devices 1 in the server device 2 as a group. The person in charge confirms all of the client devices 1 to be disposed of (for all members of the group) and contacts the administrator. The administrator sets an erasure flag in the management table 22a of the server device 2. Then, each user erases the data stored in the storage device 13. The person in charge confirms that the erasure has been completed; if the person in charge can confirm this, erasure can be certified, but if the person in charge cannot confirm this, the person in charge urges the user to erase the data. The person in charge requests the issuance of an ADEC erasure certificate. The administrator obtains the ADEC erasure certificate.

[0105] In any of the use examples 1 to 3, data stored in the storage device 13 can be identified without error and easily erased.

[0106] [Advantages of the first embodiment] According to one aspect of the present disclosure, client device 1 (an example of an electronic device) includes storage device 13 (an example of a first storage device), communication device 15, and processor 11. Processor 11 uses communication device 15 to send a first signal including identification information that uniquely identifies storage device 13 to server device 2, thereby registering client device 1 to server device 2. Processor 11 uses communication device 15 to send a second signal including identification information of storage device 13 to server device 2, inquiring whether data stored in storage device 13 is registered to be erased by server device 2. When processor 11 receives a third signal from server device 2 using communication device 15 instructing to erase data stored in storage device 13, processor 11 erases the data stored in storage device 13. When server device 2 determines that the identification information of storage device 13 included in the second signal matches the identification information of storage device 13 included in the first signal and when server device 2 has registered that data stored in storage device 13 is registered to be erased by server device 2, the third signal is sent from server device 2 to client device 1.

[0107] This allows data stored in the storage device to be identified without error and easily erased.

[0108] According to one embodiment of the present disclosure, the storage device 13 may store data including an operating system, application programs, and user data. The client device 1 may further include a storage device 14 (an example of a second storage device) that stores a firmware program. The processor 11 may erase all data stored in the storage device 13 by executing the firmware program.

[0109] This allows you to erase all data stored on the storage device, including the operating system.

[0110] According to one aspect of the present disclosure, after the erasure of all data stored in the storage device 13 is completed, the processor 11 may execute a firmware program to send, using the communication device 15, a fourth signal including erasure completion information to the server device 2, indicating that the erasure of all data stored in the storage device 13 has been completed.

[0111] This allows the information required to create an erasure certificate to be transmitted to the server device after all data stored in the storage device, including the operating system, has been erased.

[0112] According to an embodiment of the present disclosure, the client device 1 may further include a display device 16. If the processor 11 does not receive an acknowledgment signal in response to the fourth signal from the server device 2, the processor 11 may execute a firmware program to display on the display device 16 a two-dimensional barcode 201 (an example of a first two-dimensional barcode) including erasure completion information indicating that erasure of all data stored in the storage device 13 has been completed.

[0113] This makes it possible to obtain the information necessary to create an erasure certificate even when communication with the server device is not possible.

[0114] According to one embodiment of the present disclosure, the second signal may include a sixth signal inquiring of the server device 2 as to whether the server device 2 is registered as requiring the data stored in the storage device 13 to be erased, and a seventh signal including identification information of the storage device 13. The processor 11 may transmit the sixth signal to the server device 2 using the communication device 15, and, if the processor 11 receives an eighth signal from the server device 2, indicating that the server device 2 is registered as requiring the data stored in the storage device 13 to be erased, may transmit the seventh signal to the server device 2 using the communication device 15.

[0115] This makes it possible to avoid unnecessary communication including the identification information of the storage device 13 and reduce the amount of communication data.

[0116] According to one aspect of the present disclosure, the identification information of the storage device 13 may include at least some of the manufacturer of the client device 1, the model of the client device 1, the serial number of the client device 1, the UUID of the client device 1, the manufacturer of the storage device 13, the model of the storage device 13, the serial number of the storage device 13, the UUID of the storage device 13, and the capacity of the storage device 13.

[0117] This allows the storage device 13 of the client device 1 to be identified.

[0118] According to one aspect of the present disclosure, a system including the above-described plurality of client devices 1 and a server device 2 is provided.

[0119] This allows data stored in the storage device to be identified without error and easily erased.

[0120] According to one aspect of the present disclosure, the server device 2 may obtain erasure completion information from the client device 1 indicating that erasure of all data stored in the storage device 13 has been completed, and may issue an erasure certificate certifying that erasure of all data stored in the storage device 13 has been completed based on the erasure completion information.

[0121] This makes it possible to issue a certificate of erasure that proves that all data stored in the storage device has been completely erased.

[0122] According to one embodiment of the present disclosure, the third signal may include a processing number issued to each storage device 13 of a plurality of client devices 1 registered in the server device 2 as a device that should erase data stored in the storage device 13. The erasure completion information may include the processing number, the UUID of the storage device 13, the erasure start time, the erasure completion time, and the erasure method.

[0123] This makes it possible to issue a certificate of erasure that proves that all data stored in the storage device has been completely erased.

[0124] According to one aspect of the present disclosure, a method for erasing data stored in a storage device 13 of a client device 1 includes registering the client device 1 with a server device 2 by transmitting a first signal from the client device 1 including identification information that uniquely identifies the storage device 13. The method also includes transmitting a second signal from the client device 1 to the server device 2, the second signal including identification information of the storage device 13, inquiring whether the server device 2 is registered to erase data stored in the storage device 13. The method also includes erasing the data stored in the storage device 13 when the server device 2 receives a third signal instructing the server device 2 to erase the data stored in the storage device 13. The third signal is transmitted from the server device 2 to the client device 1 when the server device 2 determines that the identification information of the storage device 13 included in the second signal matches the identification information of the storage device 13 included in the first signal and when the server device 2 is registered to erase data stored in the storage device 13.

[0125] This allows data stored in the storage device to be identified without error and easily erased.

[0126] [Second embodiment] After erasing data stored in a storage device of an electronic device, it may be necessary to verify that the data has been erased. Just as erasing data requires writing a fixed bit value (such as a zero value) or a random bit value to all storage areas of the storage device, verifying the erasure generally requires reading the bit values ​​from all storage areas of the storage device. For example, if a 1TB SSD is overwritten three times and the erasure result is verified, the erasure takes approximately two hours (40 minutes x 3), and the erasure verification takes another 40 minutes. This means that it takes a very long time to know the results of the erasure and verification, causing users and administrators of the electronic device to wait.

[0127] In the second embodiment, an electronic device and system are provided in which erasure verification does not keep users and administrators waiting long, and usability is less likely to be reduced than when erasure verification is not performed.

[0128] [Configuration of the second embodiment] The system according to the second embodiment is configured in the same manner as the system 100 according to the first embodiment, which includes a client device 1, a server device 2, an administrator device 3, a user terminal device 4, etc., as described with reference to Figures 1 to 6.

[0129] 6, in the system according to the second embodiment, the erasure control unit 52, data encoding unit 53, and two-dimensional barcode generation unit 54 of the firmware program 50 are configured to perform the following operations in addition to the operations described above. The erasure control unit 52 further controls verification that data stored in the storage device 13 has been erased. The data encoding unit 53 further encodes, using a predetermined encoding method, verification result information indicating whether or not verification that the data stored in the storage device 13 has been erased has been successful. The two-dimensional barcode generation unit 54 further generates a two-dimensional barcode including verification result information indicating whether or not verification that the data stored in the storage device 13 has been erased has been successful (including verification completion information if verification has been successful).

[0130] The operations of the client device 1, the server device 2, the administrator device 3, and the user terminal device 4 will be described below.

[0131] [Operation of the second embodiment] Fig. 16 is a flowchart showing the operation of the system according to the second embodiment, which is an erasure and verification process by the firmware program 50 executed by the processor 11 of the client device 1. Fig. 17 is a flowchart showing a subroutine of step S70 (verification process) in Fig. 16. Fig. 18 is a flowchart showing the operation of the system according to the second embodiment, which is an erasure and verification process of the server device 2 executed by the processor 21.

[0132] The process of Fig. 16 includes a verification process of step S70 in addition to the steps of Fig. 11, in which it is verified that the data stored in the storage device 13 has been erased. Moreover, the process of Fig. 18 further includes steps S91 to S93 in addition to the steps of Fig. 12.

[0133] If step S37 in FIG. 16 is YES or if step S40 is YES, the core control unit 51 of the client device 1 proceeds to the verification process of step S70.

[0134] 17, the core control unit 51 of the client device 1 uses the erasure control unit 52 to verify that the data stored in the storage device 13 has been erased using a specified verification method. For example, when erasing data by writing zero values ​​to a storage area of ​​the storage device 13, the erasure may be verified by reading the bit values ​​of the storage area of ​​the storage device 13 and confirming that each bit is a zero value. After the verification is completed, the core control unit 51 stores data indicating the verification result in the storage device 14.

[0135] 19 is a schematic diagram for explaining a first verification method for the memory device 13. Erasure verification may be performed by reading and checking the bit values ​​of all memory areas of the memory device 13.

[0136] 20 is a schematic diagram illustrating a second verification method for the memory device 13. Erasure verification may be performed by reading and checking bit values ​​of a predetermined number of partial areas randomly extracted from a plurality of partial areas obtained by dividing the entire memory area of ​​the memory device 13. In the example of FIG. 20, the entire memory area of ​​the memory device 13 includes a plurality of (e.g., 1000) medium areas 301, and each of the medium areas 301 includes a plurality of (e.g., 20) small areas 302. Erasure verification may be performed by reading and checking bit values ​​of at least some (e.g., two randomly extracted) small areas 302 in each of the medium areas 301.

[0137] 17, the core control unit 51 of the client device 1 reads data indicating the verification result from the storage device 14, and encodes the data indicating the verification result using a predetermined encoding method using the data encoding unit 53. The core control unit 51 stores the encoded data in the storage device 14.

[0138] In step S73, the core control unit 51 of the client device 1 reads the coded data indicating the verification result from the storage device 14, and transmits the coded data indicating the verification result to the server device 2 using the communication device 15.

[0139] In step S91 of FIG. 18, the server device 2 determines whether or not the verification result has been received from the client device 1, and if YES, the process proceeds to step S92, and if NO, the process returns to step S51.

[0140] In step S92, the server device 2 transmits to the client device 1 an affirmative response signal in response to the verification result.

[0141] In step S74 of Figure 17, the core control unit 51 of the client device 1 determines whether or not an acknowledgment signal has been received from the server device 2, and if YES, proceeds to step S41 of Figure 16, and if NO, proceeds to step S75 of Figure 17.

[0142] In step S75, the core control unit 51 of the client device 1 reads data indicating the verification result from the storage device 14, and generates a two-dimensional barcode from the data indicating the verification result using the two-dimensional barcode generation unit 54. The core control unit 51 stores the generated two-dimensional barcode in the storage device 14.

[0143] In step S76, the core control unit 51 of the client device 1 reads the two-dimensional barcode from the storage device 14 and displays the two-dimensional barcode together with the keyword and input field on the display device 16. The two-dimensional barcode, keyword, and input field displayed in step S76 are similar to, for example, the two-dimensional barcode 201, keyword 202, and input field 203 shown in FIG.

[0144] In step S77, the core control unit 51 of the client device 1 determines whether the keyword displayed on the display device 16 has been input from the input device 17, and if YES, proceeds to step S41 in Figure 16, and if NO, repeats step S77.

[0145] Referring to Figure 18, step S92 After the above steps are executed, in step S93, the server device 2 stores the verification result in the management table 22a and updates the status report.

[0146] In the second embodiment, the status report indicates, for example, which of the following states each storage device 13 is in. -Flag for deletion set Erasing -Erasing completed · Erasure completed but erasure certificate cannot be issued (provisional) -Erasing completed and erasure certificate can be issued -Erasure completed and erasure certificate issued - Erasure failed and erasure certificate cannot be issued After steps S59 and S93 are executed, in step S60A, the server device 2 issues an erasure certificate based on the erasure result and the verification result.

[0147] Referring to FIG. 16, after step S70 is executed, the core control unit 51 of the client device 1 performs post-processing and shuts down the client device 1 in step S41.

[0148] Fig. 21 is a sequence diagram showing the operation of the system according to the second embodiment, which is the operation of the system 100 when the erasure result information and the verification result information are successfully transmitted via the communication line 6. Fig. 22 is a sequence diagram showing the operation of the system according to the second embodiment, which is the operation of the system 100 when the erasure result information and the verification result information are unsuccessfully transmitted via the communication line 6.

[0149] The operations in steps S1 to S59 in FIG. 21 are the same as those described with reference to FIG.

[0150] In step S34, all data stored in the storage device 13 is erased, and then erasure result information is sent to the server device 2. If a response signal is received from the server device 2, the client device 1 verifies in step S71 that the data stored in the storage device 13 has been erased.

[0151] After the verification is completed, the client device 1 transmits the verification result information to the server device 2. If a response signal to the verification result information is received from the server device 2 within a predetermined timeout period, the client device 1 ends the process.

[0152] In step S93, the server device 2 stores the verification result included in the verification result signal in the management table 22a. In step S60A, the server device 2 issues an erasure certificate based on the erasure result included in the erasure result signal and the verification result included in the verification result signal.

[0153] On the other hand, as shown in FIG. 22, if the verification result information transmitted by the client device 1 does not arrive at the server device 2, or if a response signal to the verification result information is not received, There was no At this time, the client device 1 displays the two-dimensional barcode on the display device 16 in step S76.

[0154] In step S112, the user of client device 1 uses user terminal device 4 to capture an image of the two-dimensional barcode displayed on display device 16 of client device 1. Processor 41 of user terminal device 4 decodes the two-dimensional barcode to extract data indicating the verification result, and transmits this data to server device 2. Thereafter, steps S93 and S60A in FIG. 22 are the same as the corresponding steps in FIG. 21.

[0155] [summary] According to the system of the second embodiment, like the system of the first embodiment, data stored in the storage device 13 can be identified without error and easily erased. Furthermore, according to the system of the second embodiment, the server device 2 is notified of the erasure result at the time when erasure of data stored in the storage device 13 is completed, so that the administrator can quickly recognize the status of the storage device 13. As a result, even if erasure verification is performed, the user and administrator do not have to wait long, and usability is less likely to deteriorate than when erasure verification is not performed.

[0156] For example, if data stored in the storage device 13 is successfully erased and the verification result indicates successful erasure, the system operates as follows. First, after the erasure is complete, the client device 1 does not display the erasure result on the display device 16, but transmits the erasure result to the server device 2 using the communication device 15. If the erasure result is successfully transmitted, the client device 1 displays nothing on the display device 16. If the erasure result transmission fails, the client device 1 displays a two-dimensional barcode on the display device 16. At this point, the status report becomes "Erasure completed and erasure certificate cannot be issued (provisional)." After that, after the verification is complete, the client device 1 does not display the verification result on the display device 16, but transmits the verification result to the server device 2 using the communication device 15. If the verification result transmission is successful, the client device 1 displays nothing on the display device 16. If the verification result transmission fails, the client device 1 displays a two-dimensional barcode on the display device 16. At this point, the status report becomes "Erasure completed and erasure certificate can be issued."

[0157] If the erasure of data stored in the storage device 13 is complete but the verification result indicates a failure of the erasure, the system operates as follows. First, after the erasure is complete, the client device 1 does not display the erasure result on the display device 16, but transmits the erasure result to the server device 2 using the communication device 15. If the transmission of the erasure result is successful, the client device 1 displays nothing on the display device 16. If the transmission of the erasure result is unsuccessful, the client device 1 displays a two-dimensional barcode on the display device 16. At this point, the status report becomes "Erasure completed and erasure certificate cannot be issued (provisional)." After that, after the verification is complete, the client device 1 displays the verification result on the display device 16 and transmits the verification result to the server device 2 using the communication device 15. If the transmission of the verification result is successful, the client device 1 displays nothing on the display device 16. If the transmission of the verification result is unsuccessful, the client device 1 displays a two-dimensional barcode on the display device 16. At this point, the status report becomes "Erasure failed and erasure certificate cannot be issued."

[0158] If erasure of data stored in the storage device 13 fails, the system operates as follows. First, after the erasure is complete, the client device 1 displays the erasure result on the display device 16 and transmits the erasure result to the server device 2 using the communication device 15. If the transmission of the erasure result is successful, the client device 1 displays nothing on the display device 16, but if the transmission of the erasure result fails, the client device 1 displays a two-dimensional barcode on the display device 16. At this point, the status report will read "Erasure failed and erasure certificate cannot be issued." Verification of the erasure is not performed.

[0159] When erasing data stored in the storage device 13, the client device 1 may display "erasing" on the display device 16. When verifying the erasure, the client device 1 may display "verifying" on the display device 16.

[0160] Even if the transmission of the erasure result or verification result fails due to a fault in the communication line 6 and the two-dimensional barcode is displayed on the display device 16, when the communication line 6 is restored, the erasure result and verification result are retransmitted and the display of the two-dimensional barcode is stopped.

[0161] The system according to the second embodiment is useful when it is necessary to erase data stored in the storage device 13, such as when the client device 1 is disposed of or when the client device 1 is stolen. In particular, when the client device 1 is stolen, the administrator can erase the data stored in the storage device 13 and verify the erasure, thereby quickly grasping the status of the storage device 13.

[0162] [Modification of the second embodiment] As mentioned above, erasure verification takes a long time. Therefore, in the system according to the second embodiment, erasure verification may be performed in stages. This allows the user or administrator to recognize the progress of erasure verification.

[0163] Fig. 23 is a flowchart showing the operation of a system according to a modification of the second embodiment, which is a subroutine of step S70A (verification process) executed by the processor 11 of the client device 1. Fig. 24 is a flowchart showing the operation of a system according to a modification of the second embodiment, which is a subroutine of step S70A (verification process) executed by the processor 21 of the server device 2.

[0164] The process in Fig. 23 is executed in place of step S70 in Fig. 16. Moreover, the process in Fig. 24 includes steps S91A to S93A and S94 in place of steps S91 to S93 in Fig. 18.

[0165] In this case, a plurality of checkpoints are set in advance, each of which indicates the progress of the erase verification.

[0166] In step S81 of FIG. 23, the core control unit 51 of the client device 1 uses the erasure control unit 52 to verify, using the specified verification method, that the data stored in the storage device 13 has been erased.

[0167] In step S82, the core control unit 51 of the client device 1 determines whether the verification of erasure has reached a predetermined checkpoint, and if YES, proceeds to step S83, and if NO, repeats step S82.

[0168] In step S83, the core control unit 51 of the client device 1 uses the data encoding unit 53 to encode the data indicating the verification result and the progress thereof in a predetermined encoding method.

[0169] In step S84, the core control unit 51 of the client device 1 uses the communication device 15 to transmit to the server device 2 the coded verification result and data indicating the progress of the verification.

[0170] In step S91A of FIG. 24, the server device 2 determines whether or not the verification result and its progress have been received from the client device 1, and if YES, proceeds to step S92A, and if NO, returns to step S51.

[0171] In step S92A, the server device 2 transmits to the client device 1 a positive response signal for the verification result and the progress of the verification.

[0172] In step S85 of FIG. 23, the core control unit 51 of the client device 1 determines whether or not all areas to be processed out of the total memory area of ​​the memory device 13 have been verified, and if YES, proceed to step S41 of FIG. 16, and if NO, proceed to step S86 of FIG. 23.

[0173] In step S86, the core control unit 51 of the client device 1 sets the next checkpoint, and then repeats steps S82 to S86.

[0174] Referring to Figure 24, step S92A After the above steps are executed, in step S93A, the server device 2 stores the verification result and the progress thereof in the management table 22a, and updates the status report.

[0175] In step S94, the server device 2 determines whether or not the final verification result has been received, and if YES, the process proceeds to step S60A, and if NO, the process returns to step S51.

[0176] As a result, the client device 1 transmits to the server device 2 a plurality of signals each indicating that the verification of erasure has been completed to one of a plurality of different degrees of progress.

[0177] When erasure verification is performed as shown in FIG. 19 , the client device 1 may transmit to the server device 2 multiple signals indicating that erasure verification has been completed up to multiple predetermined percentages of the total storage area of ​​the storage device 13. In this case, the multiple checkpoints indicating the progress of erasure verification are the percentages of the total storage area of ​​the storage device 13 for which erasure verification has been completed, for example, 10%, 20%, 30%, ..., 90%, and 100%. When erasure verification is performed as shown in FIG. 20 , the client device 1 may transmit to the server device 2 multiple signals indicating that erasure verification has been completed up to a predetermined number of partial areas randomly extracted from multiple partial areas obtained by dividing the total storage area of ​​the storage device 13. In this case, the multiple checkpoints indicating the progress of erasure verification are the numbers of small areas 302 extracted from each medium area 301, for example, 1, 2, 3, ..., 9, and 10.

[0178] 23, if the client device 1 does not receive an acknowledgment signal from the server device 2, the client device 1 may display a two-dimensional barcode including information about the verification result and the progress on the display device 16, similar to the verification process of FIG. 17. The user of the client device 1 can transmit data indicating the verification result and the progress to the server device 2 by photographing the displayed two-dimensional barcode using the user terminal device 4.

[0179] According to the processes of FIGS. 23 and 24, erasure verification is performed in stages, allowing the administrator to recognize the state of the storage device 13 at an early stage, and to recognize more accurate verification results over time.

[0180] [Advantages of the second embodiment] According to one embodiment of the present disclosure, the client device 1 includes a storage device 13, a communication device 15, and a processor 11. The processor 11 registers the client device 1 with the server device 2 by using the communication device 15 to transmit a first signal including identification information that uniquely identifies the storage device 13. The processor 11 uses the communication device 15 to transmit a second signal including identification information of the storage device 13 to the server device 2, the second signal inquiring whether the server device 2 is registered to erase data stored in the storage device 13. When the processor 11 receives a third signal from the server device 2 using the communication device 15 instructing the server device 2 to erase the data stored in the storage device 13, the processor 11 erases the data stored in the storage device 13. After erasure of all data stored in the storage device 13 is completed, the processor 11 uses the communication device 15 to transmit a fourth signal to the server device 2 including erasure completion information indicating that erasure of all data stored in the storage device 13 has been completed. The processor 11 verifies that the data stored in the storage device 13 has been erased. During or after verifying the erasure, processor 11 uses communication device 15 to send a fifth signal to server device 2 indicating that verification that the data stored in storage device 13 has been erased has been at least partially completed. A third signal is sent from server device 2 to client device 1 if server device 2 determines that the identification information of storage device 13 included in the second signal matches the identification information of storage device 13 included in the first signal, and if server device 2 is registered with server device 2 as indicating that the data stored in storage device 13 should be erased.

[0181] This makes it possible to reduce the wait time for users and administrators even when erasure verification is performed, and to make it less likely that usability will be reduced than if erasure verification is not performed.

[0182] According to one aspect of the present disclosure, the processor 11 may transmit a plurality of fifth signals to the server device 2, each of which indicates that the verification of erasure has been completed to one of a plurality of different degrees of progress.

[0183] This allows the administrator to recognize the state of the storage device early on, and as time passes, the administrator can recognize more accurate verification results.

[0184] According to one aspect of the present disclosure, the processor 11 may send multiple fifth signals to the server device 2, each signal indicating that verification of erasure has been completed up to multiple predetermined percentages of the total storage area of ​​the storage device 13.

[0185] This makes it possible to finally verify the erasure of data stored in all storage areas of the storage device.

[0186] According to one aspect of the present disclosure, the processor 11 may send multiple fifth signals to the server device 2, each signal indicating that verification of erasure has been completed for a predetermined number of partial areas randomly extracted from multiple partial areas into which the entire storage area of ​​the storage device 13 is divided.

[0187] This allows the verification of the erase to be completed early.

[0188] According to one aspect of the present disclosure, the storage device 13 may store data including an operating system, application programs, and user data. In this case, the client device 1 further includes a storage device 14 that stores a firmware program. The processor 11 executes the firmware program to erase all data stored in the storage device 13 and verify that the data stored in the storage device 13 has been erased.

[0189] This allows you to erase all data stored on the storage device, including the operating system.

[0190] According to an embodiment of the present disclosure, the client device 1 may further include a display device 16. In this case, if the processor 11 does not receive an acknowledgment signal in response to the fourth signal from the server device 2, the processor 11 executes a firmware program to display on the display device 16 a two-dimensional barcode 201 including erasure completion information indicating that erasure of all data stored in the storage device 13 has been completed.

[0191] This makes it possible to obtain the information necessary to create an erasure certificate even when communication with the server device is not possible.

[0192] According to one aspect of the present disclosure, if the processor 11 does not receive an affirmative response signal to the fifth signal from the server device 2, the processor 11 may execute a firmware program to display on the display device 16 a second two-dimensional barcode including verification completion information indicating that verification of the erasure has been completed.

[0193] This makes it possible to obtain the information necessary to create an erasure certificate even when communication with the server device is not possible.

[0194] According to one aspect of the present disclosure, a system including the above-described plurality of client devices 1 and a server device 2 is provided.

[0195] This makes it possible to reduce the wait time for users and administrators even when erasure verification is performed, and to make it less likely that usability will be reduced than if erasure verification is not performed.

[0196] According to one aspect of the present disclosure, the server device 2 may obtain, from the client device 1, erasure completion information indicating that erasure of all data stored in the storage device 13 has been completed, and may obtain, from the client device 1, verification completion information indicating that verification of the erasure of the data stored in the storage device 13 has been completed. In this case, the server device 2 issues an erasure certificate certifying that erasure of all data stored in the storage device 13 has been completed, based on the erasure completion information and the verification completion information.

[0197] This makes it possible to issue a certificate of erasure that proves that all data stored in the storage device has been completely erased.

[0198] According to one aspect of the present disclosure, a method for erasing data stored in a storage device of a client device is provided. The method includes registering the client device with a server device by transmitting a first signal from the client device to the server device, the first signal including identification information that uniquely identifies the storage device. The method also includes transmitting a second signal from the client device to the server device, the second signal including identification information of the storage device, inquiring whether the server device is registered to erase data stored in the storage device. The method also includes erasing the data stored in the storage device when a third signal instructing the server device to erase the data stored in the storage device is received from the server device. After the erasure of all data stored in the storage device is complete, the method also includes transmitting a fourth signal from the client device to the server device indicating that the erasure of all data stored in the storage device has been completed. The method also includes verifying that the data stored in the storage device has been erased. The method also includes transmitting a fifth signal from the client device to the server device during or after the verification of the erasure, indicating that the verification that the data stored in the storage device has been erased has been at least partially completed. The third signal is sent from the server device 2 to the client device 1 when the server device 2 determines that the identification information of the storage device included in the second signal matches the identification information of the storage device included in the first signal, and the server device 2 is registered as indicating that the data stored in the storage device should be erased.

[0199] This makes it possible to reduce the wait time for users and administrators even when erasure verification is performed, and to make it less likely that usability will be reduced than if erasure verification is not performed.

[0200] [Other embodiments] As described above, the embodiments have been described as examples of the technology disclosed in this application. However, the technology in this disclosure is not limited to these, and can be applied to embodiments in which appropriate modifications, substitutions, additions, omissions, etc. are made. Furthermore, it is also possible to combine the components described in the above embodiments to create new embodiments.

[0201] Therefore, other embodiments will be exemplified below.

[0202] When issuing an erasure permit, it may be possible to issue it by specifying the model. In addition to the model, user information may be entered in the notes so that if a user has a model other than the specified model, an erasure permit for the specified model may be issued. The specified models may be displayed in a list so that the administrator can issue an erasure permit. This has the effect of allowing the client device 1 to be managed in a way that reflects the user's intentions, such as discarding models that have predetermined features or discarding models that do not have predetermined features (for example, discarding models that do not have both the form of a notebook computer and a tablet computer (so-called "2-in-1")). This has the effect of allowing, for example, older models to be discarded first.

[0203] Furthermore, erasure authorization may be issued by specifying the manufacturer of the storage device 13. This has the effect of eliminating client devices 1 supplied by manufacturers that tend to cause malfunctions.

[0204] The management table 22a may also have a remarks field in which any character string can be entered. By entering user information in the remarks field, it is possible to list users who use multiple client devices 1 and issue erasure authorizations to them. This has the effect of reducing the total number of client devices 1. Furthermore, by entering user information in the remarks field, it becomes easier to handle multiple client devices 1 in units such as departments or sections.

[0205] Furthermore, by transmitting SMART (Self-Monitoring Analysis and Reporting Technology) information of the client device 1 to the server device 2, a client device 1 in poor condition may be discovered and erasure permission may be issued based on that information. To evaluate the status of the storage device 13 based on the SMART information, for example, the number of sectors that have been replaced, the number of power-on times, the error rate caused by impact, the length of use time, the temperature, the increase in the above parameters as seen by the server device 2, or a combination thereof may be used. The client device 1 may calculate the status of the client device 1 based on the SMART information and transmit the status as remarks to the server device 2. Registered client devices 1 may periodically send SMART information to the server device 2 so that the server device 2 can grasp the status of all client devices 1. Registered client devices 1 may periodically calculate the status of the client device 1 based on the SMART information of the client device 1 and transmit the status as remarks to the server device 2 so that the server device 2 can grasp the status of all client devices 1. This has the effect of enabling client devices 1 in poor condition to be discarded first.

[0206] Furthermore, by sending the usage time of the client device 1 to the server device 2, a client device 1 in poor condition may be discovered and erasure permission may be issued based on that information. The usage time of the client device 1 may also be sent as remark information to the server device 2. This has the effect of enabling client devices 1 with long usage times to be discarded first.

[0207] Furthermore, stress information of the client device 1 may be sent to the server device 2 to discover client devices 1 in poor condition and issue deletion permission based on that information. The stress of the client device 1 may be sent as remark information to the server device 2. This has the effect of making it possible to discard client devices 1 that have been used in high-load environments.

[0208] 10, 12, 14, and 15, the client device 1 inquires about the deletion flag and transmits information about the client device 1 and the storage device 13 to the server device 2 separately, but these communications may be performed simultaneously. When the server device 2 receives the information about the client device 1 and the storage device 13 from the client device 1, the server device 2 may consider that it has received an inquiry about the deletion flag.

[0209] 10 to 12, 14, and 15, a case has been described in which the client device 1 is restarted to transition from erasure processing using a combination of the erasure application program 70 and the firmware program 50 to erasure processing using only the firmware program 50. However, the client device 1 may be configured to transition from erasure processing using a combination of the erasure application program 70 and the firmware program 50 to erasure processing using only the firmware program 50 without restarting.

[0210] In the example of Fig. 2, the client device 1 is described as having only one storage device 13 from which stored data is to be erased, but the client device 1 may also have multiple storage devices 13 from which stored data is to be erased. The multiple storage devices 13 may be configured as a RAID (Redundant Array of Inexpensive Disks) device, for example. In this case, the multiple storage devices 13 are treated as a unified device, the data stored therein is erased as a unified device, and the erasure results are verified as a unified device. Alternatively, the multiple storage devices 13 may be treated individually, the data stored therein is erased as a unified device, and the erasure results are verified as a unified device.

[0211] In the second embodiment, the user or administrator may be allowed to select whether or not to verify the erasure. If verification of the erasure is not performed, the processing can be completed in the same time as in the first embodiment.

[0212] When erasing data stored in the storage device 13, if secure erase is specified as the erasure method but fails, and three times overwrite erase is performed as an alternative and succeeds, "three times overwrite erase" is recorded as the erasure result information. The firmware program 50 presets the alternative process to be performed when erasure fails. For example, each time erasure fails, it switches from secure erase to overwrite. 3 times You can also change the erasure method in the order of erase → overwrite once erase.

[0213] As described above, the embodiments have been described as examples of the technology in the present disclosure, and for that purpose, the accompanying drawings and detailed description have been provided.

[0214] Therefore, the components shown in the accompanying drawings and detailed description may include not only essential components for solving the problem, but also components that are not essential for solving the problem in order to illustrate the above technology. Therefore, the fact that these non-essential components are shown in the accompanying drawings or detailed description should not be interpreted as immediately indicating that these non-essential components are essential.

[0215] Furthermore, since the above-described embodiments are intended to illustrate the technology of the present disclosure, various modifications, substitutions, additions, omissions, etc. may be made within the scope of the claims or their equivalents. [Industrial Applicability]

[0216] An electronic device according to one aspect of the present disclosure is useful for erasing data stored in a storage device. [Explanation of symbols]

[0217] 1,1-1~1-3 Client device 2. Server device 3 Administrator device 4. User terminal equipment 5 Base station equipment 6. Communication lines 10 Bus 11 processors 12 Memory 13 Storage device 14 Storage device 15. Communications equipment 16 Display device 17 Input Devices 20 Bus 21 processors 22 Memory 23 Storage device 25 Communication equipment 30 Bus 31 processors 32 memory 33 Storage device 35 Communication equipment 36 Display device 37 Input Devices 40 Bus 41 processors 42 memory 43 Storage device 45 Communication equipment 46 Display device 47 Input Devices 48 Camera 50 Firmware Program 51 Core control unit 52 Erase control section 53 Data Encoding Unit 54 Two-dimensional barcode generator 60 Operating Systems 61 Device Information Monitor 62 Power management section 70 Erasure Application Program 71 Core control unit 81 Core control unit 82 Readout section 83 Writing section 84 Eraser 100 systems 200 display screen 201 Two-dimensional barcode 202 Keywords 203 Input field 301 Medium area 302 small area

Claims

1. 1. An electronic device comprising a first storage device, a communication device, and a processor, The processor: registering the electronic device with a server device by transmitting a first signal to the server device using the communication device, the first signal including identification information that uniquely identifies the first storage device; using the communication device, transmitting to the server device a second signal including the identification information of the first storage device, the second signal inquiring whether the server device is registered to erase data stored in the first storage device; erasing the data stored in the first storage device when a third signal instructing the erasure of the data stored in the first storage device is received from the server device using the communication device; the third signal is transmitted from the server device to the electronic device when the server device determines that the identification information of the first storage device included in the second signal matches the identification information of the first storage device included in the first signal, and when the data stored in the first storage device is registered in the server device to be erased; After the erasure of the data stored in the first storage device is completed, using the communication device, transmit a fourth signal to the server device indicating that the erasure of the data stored in the first storage device is completed; Verifying the erasure of the data stored in the first storage device; during or after the verification of the erasure, using the communication device, transmitting at least one fifth signal to the server device indicating that the verification of the erasure of the data stored in the first storage device has at least partially completed. electronic equipment.

2. the electronic device further comprises a second storage device storing a firmware program; the data stored on the first storage device includes an operating system, application programs, and user data; the processor erases the data stored in the first storage device by executing the firmware program; The electronic device of claim 1 .

3. After the erasure of the data stored in the first storage device is completed, the processor executes the firmware program to transmit, via the communication device, a fourth signal indicating that the erasure of the data stored in the first storage device has been completed to the server device.

3. The electronic device of claim 2.

4. the electronic device further comprises a display device; when the processor does not receive an acknowledgment signal in response to the fourth signal from the server device, it executes the firmware program to display on the display device a first two-dimensional barcode including erasure completion information indicating that the erasure of the data stored in the first storage device has been completed.

4. The electronic device of claim 3.

5. the at least one fifth signal is a plurality of fifth signals; the plurality of fifth signals respectively indicate that the verification of erasure has been completed to one of a plurality of different degrees of progress; The electronic device of claim 1 .

6. the at least one fifth signal is a plurality of fifth signals; the plurality of fifth signals respectively indicate that the verification of erasure has been completed up to a plurality of predetermined percentages of the total storage area of ​​the first storage device; The electronic device of claim 1 .

7. the at least one fifth signal is a plurality of fifth signals; the plurality of fifth signals respectively indicate that the verification of erasure has been completed for a plurality of predetermined partial areas randomly extracted from a plurality of partial areas obtained by dividing the entire storage area of ​​the first storage device; The electronic device of claim 1 .

8. and when the processor does not receive an acknowledgment signal in response to the at least one fifth signal from the server device, the processor executes the firmware program to display on the display device a second two-dimensional barcode including verification completion information indicating that the verification of the erasure has been completed.

5. The electronic device of claim 4.

9. the second signal includes a sixth signal inquiring whether or not the server device is registered to erase the data stored in the first storage device, and a seventh signal including the identification information of the first storage device; The processor: transmitting the sixth signal to the server device using the communication device; transmitting the seventh signal to the server device using the communication device when an eighth signal indicating that the data stored in the first storage device should be erased is received from the server device using the communication device; The electronic device of claim 1 .

10. the identification information of the first storage device includes at least a part of a manufacturer of the electronic device, a model of the electronic device, a serial number of the electronic device, a universally unique identifier (UUID) of the electronic device, a manufacturer of the first storage device, a model of the first storage device, the serial number of the first storage device, the UUID of the first storage device, and a capacity of the first storage device; The electronic device of claim 1 .

11. a plurality of electronic devices, each of which is an electronic device according to one of claims 1 to 10; the server device, system.

12. The server device acquiring, from the electronic device, erasure completion information indicating that erasure of the data stored in the first storage device has been completed; issuing an erasure certificate that certifies that the erasure of the data stored in the first storage device has been completed based on the erasure completion information; The system of claim 11.

13. the third signal includes a transaction number issued to the first storage device of each of the plurality of electronic devices that are registered with the server device as having the data stored in the first storage device to be erased; the erasure completion information includes the processing number, a UUID (Universally Unique Identifier) ​​of the first storage device, an erasure start time, an erasure completion time, and an erasure method; The system of claim 12.

14. The server device acquiring, from the electronic device, erasure completion information indicating that the erasure of the data stored in the first storage device has been completed; obtaining, from the electronic device, verification completion information indicating that verification of the erasure of the data stored in the first storage device has been completed; issuing an erasure certificate that certifies that the erasure of the data stored in the first storage device has been completed based on the erasure completion information and the verification completion information; The system of claim 11.

15. 1. A method for erasing data stored in a storage device of an electronic device, comprising: registering the electronic device with the server device by transmitting a first signal from the electronic device to the server device, the first signal including identification information that uniquely identifies the storage device; transmitting a second signal from the electronic device to the server device, the second signal including the identification information of the storage device, the second signal inquiring whether the storage device is registered to the server device as one for which data stored on the storage device should be erased; and erasing the data stored in the storage device when a third signal instructing to erase the data stored in the storage device is received from the server device; transmitting the third signal from the server device to the electronic device when the server device determines that the identification information of the storage device included in the second signal matches the identification information of the storage device included in the first signal, and when the data stored in the storage device is registered in the server device to be erased; After the erasure of the data stored in the storage device is completed, transmitting a fourth signal from the electronic device to the server device indicating that the erasure of the data stored in the storage device is completed; verifying that the data stored on the storage device has been erased; during or after verifying the erasure, transmitting a fifth signal from the electronic device to the server device indicating that verification that the data stored on the storage device has been erased has at least partially completed; How to erase data.

Images