WO2007052342A1

WO2007052342A1 - Information preserving program, information preserving method, and information preserving system

Info

Publication number: WO2007052342A1
Application number: PCT/JP2005/020143
Authority: WO
Inventors: Osamu Aoki; Kenichi Koide
Original assignee: Intelligent Wave Inc.
Priority date: 2005-11-01
Filing date: 2005-11-01
Publication date: 2007-05-10
Also published as: JPWO2007052342A1

Abstract

Provided is an information preserving program, which authorizes a computer to act only in case the carrying-out of information to be acquired from a computer is approved in advance, so that the information may be preserved in case the computer is used in an environment different from the normal network environment. When the operator of a computer is connected with the normal network environment, an application notice designating the carrying-out term on the use of the computer in an environment other than the normal one is sent to an approval authority by an electronic mail or the like, and the carrying-out approval term approved by an approval notice or a return from the approval authority is stored as the set information of the computer. When the computer is used in an environment other than the normal one, it is checked whether or not the carrying-out approval term is stored in the set information. Within the carrying-out approval term, the use of the computer is authorized as it is. Otherwise, a predetermined operation is performed to preserve the information of the computer.

Description

Specification

Information preservation program, information preservation method and information preservation system

Technical field

[0001] In the present invention, when a computer is used in an environment different from a regular network environment, in order to preserve the information that can be obtained from the computer, the computer is only obtained when it is approved in advance by the approver. The present invention relates to an information security program, an information security method, and an information security system that make it possible to operate.

Background art

[0002] As the use of computers and networks expands, various important information is handled by computers connected to the network. Therefore, security measures for computers and networks to protect important information are important issues in using computer systems. Means to prevent unauthorized access from outside the network and the invasion of computer viruses, such as firewalls and anti-virus software, are widely used. However, as seen in incidents such as leakage of personal information of customers, etc. Therefore, measures against taking out illegal information from inside are an important issue.

[0003] As a method for preventing information leakage due to unauthorized computer operations inside,

'In addition to the widely used method of authenticating computer operation authority using passwords, etc., register operation patterns that are generally likely to be unauthorized operations as rules, and compare operations accepted by the computer with rules. It is also possible to determine the possibility of an unauthorized operation by rule base, the history of computer operations, create a profile that sets the user's behavior pattern, and compare the operations accepted by the computer with the profile. The

[0004] In addition, paying attention to the fact that information leakage from a computer is likely to occur due to unauthorized removal of the computer due to theft, etc., store the connection environment during normal use in the computer, and then restart the computer. Judgment is made whether the connection environment is a normal connection environment. If the connection environment is different from the normal connection environment, a password must be entered. (See Patent Document 1.) o

[0005] Patent Document 1: JP 2002-278932 A

Disclosure of the invention

Problems to be solved by the invention

[0006] According to the invention described in Patent Document 1, the computer can be used without a password input operation during normal use, in view of being able to handle unauthorized computer removal due to theft or the like. Can do. According to the present invention, when a regular user uses a computer in a connection environment different from that during normal use, for example, when taking out the computer on a business trip, a password is issued in advance. The password must be entered each time the computer is started or the power-saving state is restored.

[0007] Further, since a password is used for authentication, if this password is leaked for some reason, there is a risk that an unauthorized operation of the computer will be performed by a malicious operator. Furthermore, users who have been issued passwords can always use the computer even in a connection environment different from that during normal use, so for users who have given passwords, Users cannot prevent unauthorized operations! /, And have problems!

[0008] In order to deal with these issues, every time an authorized user takes out a computer due to a regular user's business trip without issuing a password or an input operation, an approval authority such as a supervisor It is preferable to provide a mechanism that enables the use of the computer in an unusual network environment after confirming the circumstances.

[0009] The present invention has been made to cope with such a problem, and in order to maintain information that can be acquired from a computer when the computer is used in an environment different from a normal network environment, This is an information security program, information security method, and information security system that enables the computer to operate only when approval from the approver is obtained in advance. Password issuing and input operations are required. The purpose is to provide something that is not bad.

Means for solving the problem [0010] A first invention for solving the problems that are important to the present application is an information maintenance program for protecting information that can also acquire computer power when the computer is used in an environment different from a regular network environment. While the computer is being used in a regular network environment, the computer is designated as the destination for the approver stored in the computer, and the borrowing period during which the computer is used outside the regular environment is designated. Transmitting an application notification for approval for taking out the application with an application ID for identifying the application notification, and application information including at least the application ID, the approver, and the export period to the computer. And storing the application ID and the approval result for the application notification transmitted by the approver who has received the application notification. Receiving an approval notification including at least one, identifying application information corresponding to an application ID included in the approval notification, and determining whether a sender of the approval notification is an approver included in the application information When the step and the sender correspond to the approver and the approval result approves the export, the export period included in the application information is set as the export approval period. Storing the setting information in the computer, and at the time of starting the computer, the step of determining whether the computer is connected to a normal network environment when the computer is started up; and If it is determined that the computer is not connected to the environment, check whether the export approval period is stored in the setting information of the computer. And if it is confirmed that the take-out approval period is stored, the step of determining whether the startup time of the computer is within the period of the take-out approval period, and the take-out approval period When it is confirmed that the computer is not stored, or when it is determined that the startup time of the computer is not within the period of the export approval period, the computer is stopped, and the operation system stored in the computer Or at least one of a process for prohibiting activation of at least a part of the application program, a process for erasing at least a part of data stored in the computer, and a process for prohibiting an instruction to an external device connected to the computer. An information storage program characterized by executing a step of starting two processes. .

[0011] A second invention for solving the problems that are relevant to the present application is that a computer is connected to a regular network environment. An information security program for protecting information that can also be obtained by a computer when used in an environment different from the above, wherein the address of the approver is given to the computer while the computer is being used in a regular network environment. Designating and sending an application notification for export approval with a specified export period in which the computer is used outside the normal environment, with an application ID identifying the application notification; Storing at least the application information including at least the application ID and the export period in the computer, and the approval result for the application ID and the application notification transmitted by the approver who has received the application notification. A step of receiving an approval notification including: a sender power of the approval notification; and determining whether the approval notification is stored in the computer. And when the sender corresponds to the approver and the approval result approves the export, the application information corresponding to the application ID included in the approval notification is specified, and Storing the take-out period included in the application information in the setting information of the computer as a take-out approval period. When the computer is started, the computer is connected to a regular network. A step of determining whether the computer is connected to the environment, and if it is determined that the computer is connected to a normal network environment and the computer is determined to be non-compliant, the export approval period is stored in the setting information of the computer and V ヽAnd if it is confirmed that the export approval period is stored, the startup time of the computer is the export approval time. A step of determining whether or not the export approval period is not stored, or it is determined that the startup time of the computer is not within the period of the export approval period. In the event of a failure, the computer is stopped, the operation system or application program stored in the computer is prohibited from starting, or the data stored in the computer is deleted. And a step of starting at least one process of prohibiting an instruction to an external device connected to the computer.

In the present invention, when a computer operator is connected to a regular network environment, the take-out period is specified for using the computer outside the regular environment by e-mail or the like to the authorized person. Sent the application notification and returned from the approval authority. The take-out approval period approved by the approval notification is a computer setting information. When the computer is used outside the normal environment, it is checked whether the export approval period is stored in the setting information, and if it is within the export approval period, the computer can be used as it is. In other cases, predetermined processing for preserving computer information is performed. In the first invention, the address of the application notification is designated in advance from an approver list having approval authority, whereas in the second invention, the sender of the approval notification is added to the approver list having approval authority. Judge whether or not applicable.

In the present invention, the time of starting the computer for determining the connection environment is not limited to the time of starting the computer after the power is turned off, but includes the time of restarting the computer, the time of power recovery from the power saving state, and the like. It may be. In addition, the determination of the connection environment is not limited to the startup of the computer. In addition to the startup, if the check is performed at a predetermined timing such as every hour even during startup, it is taken out during startup. It becomes possible to cope with such cases.

[0014] In the present invention, in the step of determining whether or not the computer is connected to a regular network environment, the step of acquiring, in the computer, first environment information related to the network environment to which the computer is connected. And comparing the first network environment information with second environment information related to a regular network environment stored in advance in the computer, wherein the first environment information is the second environment information. If the information does not match, it may be characterized that the computer is connected to a regular network environment and is judged to be! /!

[0015] Further, the present invention provides a step of determining whether or not the computer is connected to a regular network environment by transmitting a ping to the computer and an authentication server connected to the computer through a network; And confirming whether or not there is a reply to the ping from the authentication server, and confirming that there is no reply to the ping, the computer is connected to a regular network environment and V, It is characterized by judging.

In the present invention, the method for determining whether or not the environment in which the computer is started is a regular network environment is not particularly limited. It is possible to judge the network environment.

[0017] The information maintenance program according to the present invention having such features can be specified as an information maintenance method for maintaining information that can be acquired by a computer, which is executed by these information maintenance programs. It can also be configured as an information maintenance system equipped with these information maintenance programs.

[0018] That is, the information maintenance system corresponding to the first invention is provided in the computer to maintain information that can be acquired from the computer when the computer is used in an environment different from the regular network environment. It is a blueprint maintenance system, and is used in an authorized network environment, and an approver storage means for storing an address of an approver who has the authority to carry out export approval when the computer is used outside the authorized environment. The approver stored in the approver storage means is designated as the destination, and the application notification for the export approval for which the export period is specified is assigned to the application ID for identifying the application notification. An application notification transmitting means for transmitting the application information, an application information storage means for storing application information including at least the application ID, the approver, and the export period, and the application notification. An approval notification receiving means for receiving an approval notification including at least the application ID and an approval result for the application notification transmitted by the approver, and application information corresponding to the application ID included in the approval notification is stored in the application information. And approver determination means for determining whether or not the sender of the approval notification is an approver included in the application information, and the sender corresponds to the approver and the approval result has. In the case of approving the delivery, the take-out approval period storage that reads out the take-out period included in the application information from the application information storage means and stores it in the setting information of the computer as the take-out approval period Means, a connection environment determination means for determining whether the computer is connected to a normal network environment at the time of starting the computer, and a connection to a normal network environment. If it is determined that the export approval period is stored in the setting information, it is confirmed that the export approval period is stored in the setting information. Is a take-out approval period determination means for determining whether the start-up time of the computer is within the period of the take-out approval period, and when it is confirmed that the take-out approval period is not stored, or the computer If it is determined that the activation time is not within the period of the export approval period, Computer stop processing, processing for prohibiting activation of at least part of an operation system or application program stored in the computer, processing for erasing at least part of data stored in the computer, connection to the computer And an information maintenance means for starting at least one of the processes for prohibiting a command to the external device.

The information maintenance system corresponding to the second invention is a blueprint maintenance system provided in a computer for maintaining information that can also be obtained by a computer when the computer is used in an environment different from a normal network environment. An approver storage means for storing an approver who has the authority to perform a take-out approval to use the computer outside the normal environment, and an approver as a destination while being used in a normal network environment. An application notification transmission means for transmitting an application notification for approval of the export with a specified export period, with an application ID for identifying the application notification, and at least the application ID and the export period The application information storage means for storing the application information including the application ID and the approval result transmitted by the approver who has received the application notification are displayed. An approval notification receiving means for receiving at least an approval notification, and an approver for judging whether the approver who has transmitted the approval notification is an approver having the authority to carry out take-out approval stored in the approver storage means In the case where the determination means corresponds to an approver having the authority of the approver to carry out take-out approval, and the approval result approves take-out, the take-out period included in the application information is Read out from the application information storage means and store it in the setting information of the computer as a take-out approval period, and whether the computer is connected to a regular network environment when the computer is started. A connection environment determination means for determining whether or not it is not connected to a regular network environment. A confirmation period confirmation means, and if it is confirmed that the take-out approval period is stored, a take-out approval period determination means for determining whether the startup time of the computer is within the period of the take-out approval period; If the export approval period is memorized and it is confirmed that the computer is not active, or if it is determined that the startup time of the computer is not within the export approval period, the computer is stopped. Processing, operation system or application stored in the computer At least one process of prohibiting activation of at least a part of a program, erasing at least a part of data stored in the computer, and prohibiting an instruction to an external device connected to the computer And an information storage means for activating the information storage system.

The invention's effect

[0020] According to the present invention, when a computer is used in an environment different from a regular network environment, the computer can be used only when it has been approved by the approver in advance. If the information is not received, it is possible to maintain the information that can be acquired by the computer by suppressing the information leakage from the inside by configuring the information maintenance process. Since no password issuance or input operation is required, the operational burden when using a computer is reduced.

BEST MODE FOR CARRYING OUT THE INVENTION

[0021] The best mode for carrying out the present invention will be described below in detail with reference to the drawings. In addition, regarding the format of the application email, etc., the method for determining the connection environment, the method for storing information, etc. in the following explanation, these deviations are examples of embodiments for carrying out the present invention. The invention is not limited to the powerful embodiments.

FIG. 1 is a diagram showing an outline of an embodiment of an information maintenance system according to the present invention. FIG. 2 is a block diagram showing a configuration of an information maintenance system that is effective in the present invention. FIGS. 3 to 7 are FIGS. 1 to 5 showing a first operation flow of the information maintenance system according to the present invention, respectively. FIGS. 8 to 12 are FIGS. 1 to 5 showing a second operation flow of the information maintenance system according to the present invention, respectively. FIG. 13 and FIG. 14 are flowcharts showing the first and second flows for setting the export approval period according to the information maintenance program according to the present invention, respectively. FIGS. 15 to 18 are flowcharts showing first to fourth flows, respectively, for checking whether or not information maintenance is possible by checking the connection environment of the computer by the information maintenance program according to the present invention.

An outline of an embodiment of the information maintenance system according to the present invention will be described with reference to FIG. In FIG. 1, the information maintenance system according to the present invention is provided in terminal A that is used by connecting to an in-house LAN. The boss, etc. of the applicant who uses terminal A, Terminal B, which is operated by an approver who has the authorization to approve temporary take-out of A, is also connected to the same corporate LAN.

[0024] Terminal A checks the connection environment to the network at startup, and if it is detected that the connection environment is not normal, the operation of terminal A is stopped and the operation system and application program of terminal A are stopped. A program is installed in advance to execute processing for information protection, such as prohibition of activation, erasure of data in terminal A, and prohibition of a write command to an external device connected to terminal A. As long as terminal A is connected to the corporate LAN, which is a legitimate environment, these processes are not performed, so it is possible to use terminal A as usual. If it is detected that the connection environment is not legitimate, information security processing is executed and terminal A cannot be used normally.

[0025] Here, when an applicant who uses terminal A wants to take terminal A out of the office on a business trip or the like, the applicant transmits an application mail specifying a take-out period to the approver. After confirming the application mail, the approver determines whether it can be taken out and sends an approval mail from terminal B to the applicant. When a take-out application is approved, the take-out approval period is set as the setting information for terminal A, and the applicant must take terminal A with the take-out approval period set off from the internal LAN and take it outside. become.

[0026] As described above, terminal A is taken out with the export approval period set as the setting information. Therefore, when the use time falls under the export approval period, it differs from the normal environment. Even if it is a connection environment, it is possible to configure the information security processing to be performed only in the case of illegal take-out by setting the information security processing to be permitted in advance so that the information security processing is not performed.

[0027] If the export approval period is set as the setting information on terminal A and it is connected to the corporate LAN, which is the normal environment, within the time corresponding to the export approval period, The possibility of different incorrect behavior is detected. In other words, even when starting up in a regular environment, it is checked whether the export approval period is set and whether it corresponds to the export approval period. If it is detected, it is possible to further enhance the security of information storage by configuring it so that connection to the corporate LAN is not established. [0028] Fig. 2 shows the configuration of an information maintenance system according to the present invention. The operation of the information maintenance system according to the present invention will be described in detail below, together with an example of the operation flow shown in FIGS. 3 to 7 and FIGS. 8 to 12.

In FIG. 2, the information maintenance system according to the present invention is provided in the applicant terminal 10, and a predetermined function is executed by a program or the like stored in the applicant terminal 10. In the applicant terminal 10, in order to execute a predetermined process by a program stored in the HDD 14, various basic programs for hardware control such as input control and output control stored in the ROM 13 are started. The CPU 11 executes arithmetic processing while the RAM 12 functions as the work area of the program that also reads the HDD 14 power. In addition, data transmission / reception to / from other computers such as the approver terminal 20 and the monitoring server 30 through the company LAN is performed via the NIC 15.

[0030] As a premise of providing an information maintenance system that is relevant to the present invention, the HDD 14 of the applicant terminal 10 needs to store an information maintenance program 142. The information maintenance program 142 detects the network environment to which the applicant terminal 10 is connected from the NIC 15 and compares it with the regular network environment information stored in the ROM 13 or HDD 14 in advance, so that the environment is different from the regular network environment information. If it is determined that it is connected, the operation of the applicant terminal 10 is stopped, the operation system or application program is prohibited from starting, the predetermined data stored in the HDD 14 or RAM 12 is deleted, and the applicant terminal 10 is connected. Processing power for information protection such as prohibition of writing commands to external devices, etc. In the following, the information conservation program that is relevant to the present invention is confirmed by the approval application program 141 that sets the export approval period after receiving approval from the approver, and the information environment is confirmed by checking the network environment at the time of startup. Ability to explain by dividing into information maintenance program 142 for processing The information maintenance program according to the present invention includes both the approval application program 141 and the information maintenance program 142.

[0031] The timing for starting the information maintenance program 142 and the timing for confirming the network environment are not particularly limited. The information protection program 142 is normally started when the applicant terminal 10 is started up after the power is turned off, but is started when the applicant terminal 10 is restarted or when power is restored from the power saving state. It may be moved. Regarding the timing to check the network environment, it is normal to check at the time of starting the information protection program 142. Considering temporary movement within the company, etc. After the elapse of time, re-checking may be performed, and information integrity processing may be performed when it is confirmed that the network environment is not normal. Even if it is confirmed that the network environment is legitimate at the time of activation, it is taken out while the applicant terminal 10 is activated by re-checking at a predetermined timing such as every hour. It is possible to cope with the case.

[0032] Further, the information maintenance program 142 is read at the timing when the applicant terminal 10 is started up, and is started in synchronism with the operating system (OS) of the computer. Regarding the relationship between the information integrity program 142 and the OS, several patterns can be set as follows.

[0033] The first is a pattern in which the information maintenance program 142 is stored not in the HDD 14 but in the ROM 13 and executed as a program independent of the OS. When the applicant terminal 10 is turned on, the basic program for hardware control such as input control and output control is read from the ROM 13 and the computer is started. Program 142 is also started before the OS is started as part of it, acquires information about the network environment to which applicant terminal 10 is connected from NIC 15, and stores the network environment information stored in ROM 13 or HDD 14 in advance. In contrast to this, it is determined whether or not the connected environment is normal.

The second is a pattern in which the information integrity program 142 is stored in the boot sector of the HDD 14 and read and executed by the RAM 12 before the OS is started. When the power of the applicant terminal 10 is turned on, various programs for hardware control such as input control and output control are read from the ROM 13 and the computer is started up. After that, the boot sector force is also read, and a determination is made as to whether or not the connected environment is normal before the processing by the OS is started.

[0035] Third, the information maintenance program 142 is stored in the HDD 14 as a program operating on the OS, and when the OS is started, it is read out and executed as a part of the processing in the RAM 12. Pattern. When the power of the applicant terminal 10 is turned on, various basic programs for hardware control such as input control and output control are read from the ROM 13, the computer is started, the OS is started, and the domain is started. When the network environment information such as the name is specified, the information maintenance program 142 uses the powerful information to determine whether or not the connected environment is normal.

[0036] Fourthly, the information maintenance program 142 is stored in the ROM 13 and also stored in the HDD 14 as a program operating on the OS, and the program stored in each is read out to the RAM 12 before and after the OS is started. In this pattern, information is exchanged while determining whether or not the connected environment is normal.

[0037] In addition, the method for determining whether the connected environment is valid or not is based on the current network environment information acquired from the NIC 15 and the regular network environment information stored in the ROM 13 or HDD 14. For example, it may be possible to judge the network environment by sending a ping from the applicant terminal 10 to the monitoring server 30 that can be accessed via the corporate LAN, and whether or not there is a reply to the ping. .

[0038] As described above, the applicant terminal 10 determines whether or not the connected environment is normal, and is not a normal environment! An information maintenance program 142 for executing processing is stored. Therefore, when the applicant terminal 10 is disconnected from the corporate LAN, taken outside and used in a different environment, the operation of the applicant terminal 10 is restricted by the information protection program 142.

[0039] Here, the present invention! / Is the first method shown in FIGS. 3 to 7 or the second method when connected to an in-house LAN which is a regular network environment. By performing the processing described with reference to FIGS. 8 to 12, the applicant terminal 10 can be operated as usual even when used in an environment other than a regular network environment.

[0040] If the applicant (employee code A101 in the example of Fig. 3) takes his / her terminal out of the office on a business trip, etc., in order to obtain approval from the approver who has authority to take out Then, the approval application program 141 is read into the RAM 12 and started on the applicant terminal 10. The applicant terminal 10 displays a predetermined application e-mail form and is given an application ID that is automatically assigned by application unit to identify the application content (1001 in the example of Fig. 3). -Numbered 01). The applicant inputs the take-out period etc. for which he / she wants to take out the terminal, and selects the approver such as the supervisor and designates it as the destination in the approval authority list stored in the approver information storage unit 143 (see FIG. 3). In the example, employee code A001 is specified).

[0041] The format of the approval authority list is not particularly limited. For example, as shown in Fig. 3, the presence / absence of export approval authority is registered as one item of a general-purpose employee list. When specifying the address of the user, a list of authorized users registered as authorized from the employee list may be created and displayed in the pull-down menu. The number of approvers to be specified is not particularly limited. When multiple approvers are designated as recipients and approval is obtained from all approvers, or when approval is obtained from at least one approver. In the meantime, it would be possible to take it out.

[0042] In order to ensure that the approval of the person having the approval authority is obtained, as described above, the address of the application mail including the person having the approval authority in the approval authority list is registered in advance. However, as a second method, the approver does not check the approval authority in the application mail, and after the approval mail of the approver is replied, the approver It is also possible to confirm whether the person has the approval authority registered in. In this case, the application mail is sent in the format shown in the example of FIG.

[0043] As described above, in the application email sent to the approver, the address of the approver (A001) is specified as the destination, and the sender (applicant: A101), application ID (1001-01) , At least information about the export period (October 1, 2005 to October 11, 2005) will be included. In addition, it is good also as adding the information regarding a take-out reason etc. Along with the transmission of the application mail, the application information storage unit 144 of the applicant terminal 10 stores the application information capability regarding the application contents for the export approval as shown in the example of FIG. In the example of Figure 4, the application information includes information on the application ID, approver, and the requested export period, but the second approver confirms the approver's approval authority after the approval email is returned. In the case of the method, as shown in the example of Fig. 9, it is possible not to include information on the approver. The application information storage unit 144 may use a mailer's sent folder if application mail or approval mail is sent and received using a mailer. As an area setting, too. [0044] In the approver terminal 20 that has received the application mail, the approver having the authorization authority confirms the application content and determines whether or not the application can be taken out. As for the approval result, an approval email as shown in the example of Fig. 5 is created and sent back to the applicant. In the approval mail, the address of the applicant (A1 01) is specified as the destination, the sender (approver: A001), the application ID that identifies the application mail and the application contents (1001-01), and the approval result (OK or NG) at least. In addition to this, when approving after changing the take-out period, information on the take-out period after the change may be added, and information on the reason for approval, incidental conditions of take-out, etc. may be added. Note that the approval mail in the second method also has the same format as shown in the example of FIG.

When the approval mail is received at the applicant terminal 10, as shown in the example of FIG. 6, corresponding application information is specified in the application information storage unit 144 using the application ID as a key. The application information includes information about the approver who has the authorization authority specified by the applicant, so if you confirm that it matches the sender of the approval mail, It can be confirmed that this is the result of approval. If it does not match the sender of the approval email, error processing such as displaying an error message is performed.

[0046] In the case of the second method in which the address of the approver is specified without confirming the approval authority at the time of sending the application mail, the approver who sent the approval mail at this stage will see the approval authority list. Check if it falls under the registered approval authority. In other words, as shown in the example of FIG. 11, it is confirmed whether the sender of the approval mail is registered as an authorized person in the approval authority list stored in the approver information storage unit 143. .

[0047] When it is confirmed that the result is an approval result from an approver having an approval authority, if the approval result is NG, a message indicating that the applicant terminal 10 has not been allowed to take out. Is displayed. If the approval result is OK, obtain information on the take-out period for which the application for approval was stored, which is stored as application information, and approve the specified take-out period as shown in the example in Figure 7. As a period (October 1, 2005 to October 11, 2005), it is stored as setting information in the registry of the applicant terminal 10. This operation is the same for the second method shown in the example of FIG. If the export approval period has been changed in the approval email, get the approval email method for the method related to the changed period, It is stored as setting information in the registry of the applicant terminal 10.

[0048] As described above, when the export approval period is set in the registry setting information, the network environment is not confirmed in the normal network environment in the confirmation of the network environment at the time of starting the applicant terminal 10 described above. If it is confirmed that there is a problem, the information preservation process is not performed immediately. If the setting information in the registry is checked and the export approval period is set, the activation time is included in the export approval period. Determine whether or not. If it is included in the take-out approval period, it means that it has been approved for take-out, so information security processing is not performed. If the export approval period is not set, or if it is not included in the export approval period, information security processing will be performed in principle. It is also possible to use authentication or the like together.

A flow for setting a take-out approval period by the information maintenance program according to the present invention will be described using the flowcharts of FIGS. 13 and 14. FIG. 13 shows the flow in the first embodiment for confirming the approval authority of the approver when sending the application mail. FIG. 14 shows a flow in the second embodiment in which the approval authority of the approver is confirmed when the approval mail is received.

[0050] In the first embodiment of FIG. 13, when an approval mail from the approver is received as a reply to the application mail (S01), the application ID for identifying the application content included in the approval mail is read (S02). ), The application information stored in the computer when sending the application mail is specified and read out using the application ID as a key (S03).

[0051] In the first embodiment, the approval authority of the approver is confirmed when the application email is sent, and information on the approver with the approval authority is stored in the application information. It is confirmed whether the sender is an approver included in the application information (S04). If it does not match the approver, the approval mail from the approver with the approval authority is not accepted, so an error message is displayed (S08).

[0052] If it matches with the approver, it is checked whether the approval result in the approval mail is OK to take out (S05). If it is NG, the NG message is displayed (S09), assuming that the computer is not allowed to be taken out. If export is OK, read the export period specified when sending the application email included in the application information (S06) The taken-out period is recorded in the computer registry setting information as a take-out approval period (S07).

In the second embodiment of FIG. 14, when an approval mail from the approver is received as a reply to the application mail (S11), the application ID identifying the application content included in the approval mail and the information on the sender (S12), using the application ID as a key to identify and read out the application information stored in the computer when sending the application email, and also read out the approver list storing information about the approvers with approval authority ( S 13).

[0054] In the second embodiment, the approval authority of the approver is confirmed when the application mail is sent. Therefore, the sender of the application mail is registered as an authorized person in the approver list here. (S14). If the user does not have approval authority, an error message is displayed (S18).

[0055] If the user has approval authority, it is confirmed whether the approval result in the approval mail is OK (S15). If it is NG, an NG message is displayed (S19), assuming that the computer is not allowed to be taken out. If the export is OK, read the export period specified when sending the application email included in the application information (S16), and record the read export period in the computer registry setting information as the export approval period. (S 17).

A flow for determining whether or not information maintenance is possible by checking the connection environment of the computer by the information maintenance program according to the present invention will be described with reference to the flowcharts of FIGS. Figures 15 to 17 show the case where the network environment is determined based on whether the network environment acquired by the computer matches the pre-registered environment information. Figure 15 shows the pattern and diagram for starting the information maintenance program before the OS. Figure 16 shows the pattern of starting the information integrity program on the OS, and Fig. 17 shows the flow of the pattern in which the information integrity program is activated before the OS and also on the OS. Figure 18 shows the flow for determining the network environment by sending a ping to the monitoring server.

[0057] First, in the flow of Fig. 15 in which the information integrity program is started before the OS, when the terminal is turned on (S21), the information integrity program is read and started by reading the boot sector power of the ROM or HDD. (S22). Information preservation program, network interface Information on the network environment connected to the terminal detected in step 1, for example, IP address or MAC address is acquired (S23), and it is originally specified in comparison with the regular network environment stored in advance in the HDD of the terminal. To check whether it is connected to the connected network (S 24). If it is determined that it is connected to the specified network, if the OS is not started, OS startup processing is executed (S28, S30), and thereafter, normal use of the terminal is permitted (S29). ).

If it is determined that the network is not connected to the designated network, the setting information power of the registry is also read out the export approval period (S25). Check if the export approval period is recorded and the current time falls within the period specified as the export approval period (S26), and if it falls within the export approval period, If the OS has been started and is in a bad state, the OS startup process is executed (S28, S30), and then the normal use of the terminal is permitted (S29).

[0059] On the other hand, if the export approval period is not recorded, or if the current time does not fall within the period specified as the export approval period, the terminal stop process, the OS or application stored in the terminal For information conservation, such as the process of prohibiting program startup, the process of erasing data stored in the terminal, and the process of prohibiting commands to external devices connected to the terminal (printout, writing to an external disk, etc.) Processing is executed (S27).

[0060] Even if it is determined that the terminal is connected to the specified network, the terminal may be moved afterwards to be used in an unauthorized environment. It is preferable to reconfirm the network environment at a predetermined timing. If it is determined that the terminal is still connected to the specified network in the confirmation after the operation of such a terminal is started, or if it is confirmed that it falls within the export approval period, the OS is already started. Therefore, normal use is permitted as it is, and processing continues (S28, S29).

[0061] In FIG. 15, when it is confirmed that the network is connected to the specified network in step 24, the OS is booted as it is. Even if it exists, the presence or absence of the export approval period may be confirmed, and if it falls within the export approval period, a predetermined information maintenance process may be performed. As information preservation processing, Processing to stop the terminal, processing to prohibit startup of the OS or application program stored in the terminal, processing to erase data stored in the terminal, instructions to the external device connected to the terminal (printout or to external disk) In addition to the process of prohibiting the writing of data, etc.), the process of stopping the terminal's connection to the network is performed.

[0062] It should be noted that the order of confirming whether it is connected to the specified network and confirming whether or not the export approval period is set is not particularly limited. After confirmation, in any case, it may be possible to confirm whether or not a take-out approval period has been set, or first check whether a take-out approval period has been set and set a take-out approval period. If it is confirmed that it is not connected and connected to a legitimate network, OS startup processing etc. may be performed.

[0063] Next, in the flow of FIG. 16 for starting the information maintenance program on the OS, when the terminal is turned on (S31), the OS also reads the HDD power and executes the startup process (S32). . The information maintenance program is also read and started by the HDD as part of the OS (S33), and the application interface (API) also acquires information about the network environment such as the domain name and IP address specified by the OS. (S34), it is checked whether or not it is connected to the originally designated network in comparison with the regular network environment stored in advance in the HDD of the terminal (S35). If it is determined that it is connected to the specified network, use of the terminal as usual is permitted (S39).

If it is determined that the network is not connected to the designated network, the setting information power of the registry is also read out the export approval period (S36). Check if the export approval period is recorded and the current time falls within the period specified as the export approval period (S37). Use of the terminal is permitted (S39).

[0065] On the other hand, if the export approval period is not recorded, or if the current time does not fall within the period specified as the export approval period, the terminal stop process, the OS or application stored in the terminal For information conservation, such as the process of prohibiting program startup, the process of erasing data stored in the terminal, and the process of prohibiting commands to external devices connected to the terminal (printout, writing to an external disk, etc.) Processing is executed (S38). [0066] Also in FIG. 16, if it is confirmed that the network is connected to the specified network in step 35, it is the case that the normal use is permitted as it is, and the case is connected to the normal environment. However, it is also possible to check whether or not a take-out approval period is set, and to perform predetermined information maintenance processing if it falls within the take-out approval period. Information preservation processing includes terminal termination processing, processing for prohibiting startup of the OS or application program stored in the terminal, processing for erasing data stored in the terminal, and instructions for external devices connected to the terminal ( In addition to the process of prohibiting printout and writing to an external disk, etc., the process of stopping the terminal's connection to the network is performed.

[0067] Note that there is no particular limitation on the order of confirming whether or not the connection to the specified network is being established, and whether or not the export approval period has been set. After confirmation, in any case, it may be possible to confirm whether or not a take-out approval period has been set, or first check whether a take-out approval period has been set and set a take-out approval period. If it is confirmed that it is not connected and connected to a regular network, normal use may be permitted.

Next, when the information maintenance program is started before the OS and is also started on the OS, a flow like the example of FIG. 17 is executed. In the example of Fig. 17, the confirmation at the time of starting the terminal is performed in the same flow as in Fig. 15, and the reconfirmation after the activation of the OS is permitted is performed in the same flow as in Fig. 16.

[0069] That is, when the terminal is turned on (S41), the information maintenance program is activated by reading out the boot sector power of the ROM or HDD (S42). The information maintenance program acquires information related to the network environment to which the terminal detected by the network interface is connected (S43), and is originally specified in comparison with the regular network environment stored in advance in the HDD of the terminal. It is confirmed whether or not it is connected to the network (S44). If it is determined that it is connected to the specified network, OS startup processing is executed (S47).

[0070] If it is determined that the network is not connected to the specified network, the setting information power of the registry is also read out the export approval period (S45). Check if the export approval period is recorded and the current time falls within the period specified as the export approval period (S46), and if it falls within the export approval period, start the OS Processing is executed (S47). [0071] On the other hand, if the export approval period is not recorded, or if the current time does not fall within the period specified as the export approval period, the terminal stop process, the OS or application stored in the terminal For information conservation, such as the process of prohibiting program startup, the process of erasing data stored in the terminal, and the process of prohibiting commands to external devices connected to the terminal (printout, writing to an external disk, etc.) Processing is executed (S54).

[0072] When the OS is started (S47), the information integrity program is read and started as a part of the OS (S48), and the application interface is used to obtain information about the network environment specified by the OS. (S49), it is checked whether or not it is connected to the originally designated network in comparison with the regular network environment stored in advance in the HDD of the terminal (S50). If it is determined that it is connected to the specified network, use of the terminal as usual is permitted (S53).

If it is determined that the network is not connected to the designated network, the setting information power of the registry is also read out the export approval period (S51). Check if the export approval period is recorded and the current time falls within the period specified as the export approval period (S52). Use of terminal is allowed (S53

) o

[0074] On the other hand, if the export approval period is not recorded, or if the current time does not fall within the period specified as the export approval period, the terminal stop process, the OS or application stored in the terminal For information conservation, such as the process of prohibiting program startup, the process of erasing data stored in the terminal, and the process of prohibiting commands to external devices connected to the terminal (printout, writing to an external disk, etc.) Processing is executed (S54).

In the flow of FIG. 17, it is preferable to reconfirm the network environment at a predetermined interval even after the normal use is permitted, as in the case of FIG.

[0076] In FIG. 17, when it is confirmed that the network is connected to the specified network in Step 44, the OS is started as it is, and it is confirmed that the network is connected to the specified network in Step 50. Normal use is allowed as it is. However, even when connected to a regular environment, the presence / absence of a take-out approval period may be confirmed, and if it falls within the take-out approval period, predetermined information maintenance processing may be performed. Information preservation processing includes terminal stop processing, processing for prohibiting activation of the OS or application program stored in the terminal, processing for erasing data stored in the terminal, instructions for external devices connected to the terminal ( In addition to processing that prohibits printouts and export to external disks, etc., processing to stop the terminal's connection to the network is performed.

[0077] There is no particular limitation on the order of checking whether the network is connected to the specified network and checking whether the export approval period is set. Check whether the network is connected. After confirmation, in any case, it may be possible to confirm whether or not a take-out approval period has been set, or first check whether a take-out approval period has been set and set a take-out approval period. If it is confirmed that it is not connected and connected to a legitimate network, the OS boot process and normal use may be permitted.

Next, a flow for determining a network environment by sending a ping to the monitoring server will be described with reference to FIG. In this flow, a ping is sent to a monitoring server that can send and receive data in a legitimate network environment, and it is checked whether the power is a legitimate environment based on the presence or absence of a reply.

[0079] When the terminal is turned on (S61), the information integrity program is read and activated by the boot sector power of the ROM or HDD (S62). The information integrity program sends a ping to the monitoring server connected to the same network such as the LAN in the normal environment (S63). Whether the terminal is connected to the normal network environment is checked. Whether or not there is a response to the ping from the monitoring server (S64) is judged from this. If there is a reply, it is determined that the device is connected to the regular network environment, and the OS is started. If not, the OS is started (S68, S70), and then the normal terminal Use is permitted (S69).

[0080] If the ping is not returned, the terminal is determined to be in an environment different from the normal network environment, and the setting information capability take-out approval period in the registry is read (S65). The export approval period is recorded, and the current time is within the period specified as the export approval period. (S66), if it falls within the export approval period, if the OS has not been started, execute OS startup processing (S68, S70), and then continue normally Use of the terminal is permitted (S69).

[0081] On the other hand, if the export approval period is not recorded, or if the current time does not fall within the period specified as the export approval period, the terminal stop process, the OS or application stored in the terminal For information conservation, such as the process of prohibiting program startup, the process of erasing data stored in the terminal, and the process of prohibiting commands to external devices connected to the terminal (printout, writing to an external disk, etc.) Processing is executed (S67).

[0082] It should be noted that it is preferable to reconfirm the network environment at a predetermined timing even after it is determined that the network is connected to the designated network and normal use is permitted, as in FIG. is there. If it is determined that the terminal is still connected to the specified network in the confirmation after the operation of such a terminal is started, or if it is confirmed that it falls within the export approval period, the OS has already started. Therefore, normal use is permitted as it is, and processing continues (S68, S69).

[0083] In FIG. 18, when it is confirmed in step 64 that a ping reply has been received, the OS is started as it is, but this is a case where a normal environment is connected. Therefore, it is also possible to check whether or not a take-out approval period is set, and to perform predetermined information maintenance processing if it falls within the take-out approval period. Information preservation processing includes terminal stop processing, processing for prohibiting activation of the OS or application program stored in the terminal, processing for erasing data stored on the terminal, and instructions for external devices connected to the terminal. In addition to the process of prohibiting printouts, writing to external disks, etc., the process of stopping the terminal's connection to the network is performed.

[0084] It should be noted that the order of confirmation of ping reply acceptance and confirmation of whether or not the export approval period is set! In any case, after confirming the acceptance of the ping reply, it is possible to check whether or not the export approval period has been set, or to set the export approval period. If it is confirmed that there is no export approval period, and if it is confirmed that a ping has been returned, the OS startup process will be performed. [0085] As for the embodiment for determining the network environment by sending a ping to the monitoring server, FIG. 18 describes the pattern in which the information maintenance program is started before the OS. In the same way, it is possible to apply either the pattern for starting the information maintenance program on the OS, the information protection program starting before the OS, and the pattern for starting on the OS.

Brief Description of Drawings

FIG. 1 is a diagram showing an outline of an embodiment of an information maintenance system according to the present invention.

FIG. 2 is a block diagram showing a configuration of an information maintenance system according to the present invention.

FIG. 3 is a first diagram showing a first operational flow of the information maintenance system according to the present invention.

FIG. 4 is a second diagram showing a first operational flow of the information maintenance system according to the present invention.

FIG. 5 is a third diagram showing a first operational flow of the information maintenance system according to the present invention.

FIG. 6 is a fourth diagram showing a first operational flow of the information maintenance system according to the present invention.

FIG. 7 is a fifth diagram showing a first operational flow of the information maintenance system according to the present invention.

FIG. 8 is a first diagram showing a second operational flow of the information maintenance system according to the present invention.

FIG. 9 is a second diagram showing a second operational flow of the information maintenance system according to the present invention.

FIG. 10 is a third diagram showing a second operational flow of the information maintenance system according to the present invention.

FIG. 11 is a fourth diagram showing a second operational flow of the information maintenance system according to the present invention.

FIG. 12 is a fifth diagram showing a second operational flow of the information maintenance system according to the present invention.

FIG. 13 is a flowchart showing a first flow for setting a take-out approval period by the information maintenance program according to the present invention.

FIG. 14 is a flowchart showing a second flow for setting a take-out approval period by the information maintenance program according to the present invention.

FIG. 15 is a flowchart showing a first flow of determining whether or not information maintenance is possible by checking a computer connection environment by the information maintenance program according to the present invention.

FIG. 16 is a flowchart showing a second flow of determining whether or not information maintenance is possible by checking the connection environment of the computer by the information maintenance program according to the present invention.

FIG. 17 is a flowchart showing a third flow in which the information maintenance program according to the present invention checks the computer connection environment and determines whether or not information maintenance is possible. [18] FIG. 18 is a flowchart showing a fourth flow in which the information maintenance program according to the present invention checks the connection environment of the computer and determines whether or not information maintenance is possible.

Explanation of symbols

10 Applicant terminal

11 CPU

12 RAM

13 ROM

14 HDD

141 Approval application program

142 Information Conservation Program

143 Approver information storage

144 Application information storage

145 Takeout period storage

15 NIC

20 Approver terminal

30 Monitoring server

Claims

The scope of the claims

An information security program for preserving information that can be obtained by a computer when the computer is used in an environment different from a normal network environment, wherein the computer is used while the computer is being used in a normal network environment. In addition,

An application for identifying the application notification, an application notification for carrying-out approval in which the approver stored in the computer is designated as a destination and the computer is used in a non-regular environment and a period for carrying out is specified. Sending with an ID, and

Storing the application information including at least the application ID, the approver, and the export period in the computer;

Receiving an approval notification transmitted by the approver who has received the application notification, including at least the application ID and an approval result for the application notification; and

Identifying the application information corresponding to the application ID included in the approval notification and determining whether the sender is an approver included in the application information, and determining whether the sender is the approver And if the approval result approves the export, the step of storing the export period included in the application information as the export approval period in the setting information of the computer is executed. Let

At startup of the computer, the computer

A step of determining whether the computer is connected to a regular network environment; and when it is determined that the computer is not connected to a regular network environment, a take-out approval period is stored in the setting information of the computer. Step to check if

If it is confirmed that the export approval period is stored, the step of determining whether the startup time of the computer is within the export approval period; and

If the take-out approval period is stored and it is confirmed that the take-out approval period is correct, or if it is determined that the start-up time of the computer is not within the period of the take-out approval period, the computer stop process, Operation system or application stored in the computer At least one of a process for prohibiting activation of at least a part of a case program, a process for erasing at least a part of data stored in the computer, and a process for prohibiting an instruction to an external device connected to the computer Steps to start one process,

An information maintenance program characterized by causing

Specify the approver's address, and send out an application notification for export approval that specifies the export period in which the computer is used outside the normal environment, with an application ID that identifies the application notification. Steps,

Storing application information including at least the application ID and the take-out period in the computer;

Determining whether the sender of the approval notification is a predetermined approver stored in the computer;

When the sender corresponds to the approver and the approval result approves the export, the application information corresponding to the application ID included in the approval notification is specified, and the application information is included in the application information. Storing the taken-out period included in the setting information of the computer as a take-out approval period,

At startup of the computer, the computer

A step of determining whether the computer is connected to a regular network environment; and when it is determined that the computer is not connected to a regular network environment, a take-out approval period is stored in the setting information of the computer. Step to check if If it is confirmed that the export approval period is stored, the step of determining whether the startup time of the computer is within the export approval period; and

If the take-out approval period is stored and it is confirmed that the take-out approval period is correct, or if it is determined that the start-up time of the computer is not within the period of the take-out approval period, the computer stop process, A process for prohibiting activation of at least a part of the operation system or application program stored in the computer, a process for erasing at least a part of data stored in the computer, and an external device connected to the computer A step of starting at least one of the processes for prohibiting the command to

An information maintenance program characterized by causing

[3] In the step of determining whether the computer is connected to a regular network environment,

Obtaining first environment information relating to a network environment to which the computer is connected; and

Comparing the first network environment information with second environment information relating to a regular network environment stored in advance in the computer, and

When the first environment information does not match the second environment information, it is determined that the computer is connected to a regular network environment.

The information maintenance program according to claim 1 or 2, characterized by the above.

[4] In the step of determining whether or not the computer is connected to a regular network environment,

A step of pinging an authentication server connected to the computer through a network;

Checking whether there is a reply to the ping from the authentication server, and

When it is confirmed that there is no reply to the ping, the computer is determined to be connected to a normal network environment.

The information maintenance program according to claim 1 or 2, characterized by the above. An information security method for preserving information that can be acquired by a computer when the computer is used in an environment different from a regular network environment,

While the computer is being used in a regular network environment,

The computer designates an approver stored in the computer as a destination, and sends out an application notification for take-out approval in which a take-out period in which the computer is used outside the normal environment is designated. Transmitting with an application ID to be identified, and causing the computer to store application information including at least the application ID, the approver, and the export period;

The computer receives an approval notification that includes at least the approval result for the application ID and the application notification transmitted by the approver who has received the application notification; and the computer includes an application ID included in the approval notification. Identifying the application information corresponding to, and determining whether the sender of the approval notification is an approver included in the application information;

When the sender corresponds to the approver and the approval result approves the export, the computer uses the export period included in the application information as the export approval period. And storing it in the setting information of the computer! / When the computer starts up,

Determining whether the computer is connected to a legitimate network environment;

If it is determined that the computer power, the computer is not connected to a regular network environment, and whether the export approval period is stored in the setting information of the computer;

A step of determining whether the startup time of the computer is within the period of the export approval period when the computer confirms that the export approval period is stored;

If the computer confirms that the export approval period is not stored, or if it is determined that the startup time of the computer is not within the export approval period, the computer is stopped. , The operation stored in the computer A process for prohibiting activation of at least a part of a computer system or an application program, a process for erasing at least a part of data stored in the computer, and a process for prohibiting an instruction to an external device connected to the computer A step to start one process,

An information maintenance method characterized by comprising:

An information security method for preserving information that can be acquired by a computer when the computer is used in an environment different from a regular network environment,

While the computer is being used in a regular network environment,

The computer designates the approver's address and uses the computer in a non-regular environment. The application notification for the export approval is specified, and the application ID that identifies the application notification is added. And sending and

The computer causing the computer to consider application information including at least the application ID and the export period;

The computer receives an approval notification that includes at least the approval result for the application ID and the application notification transmitted by the approver that has received the application notification, and the computer transmits the approval notification. Determining whether it is a predetermined approver stored in the computer;

If the sender corresponds to the approver and the approval result approves the export, the computer specifies application information corresponding to the application ID included in the approval notification, and Storing the take-out period included in the application information in the setting information of the computer as a take-out approval period, and

At startup of the computer,

If the computer confirms that the export approval period has been stored, A step of determining whether the startup time of the computer is within the period of the export approval period;

If the computer confirms that the export approval period is not stored, or if it is determined that the startup time of the computer is not within the export approval period, the computer is stopped. , A process for prohibiting activation of at least a part of an operation system or application program stored in the computer

Starting at least one of a process for erasing at least a part of data stored in the computer and a process for prohibiting an instruction to an external device connected to the computer;

An information maintenance method characterized by comprising:

When a computer is used in an environment different from a regular network environment, the information security system provided in the computer to secure information that can be acquired by the computer,

Approver storage means for storing a destination of an approver having the authority to perform take-out approval to use the computer in a non-regular environment;

While being used in a regular network environment, the approver stored in the approver storage means is designated as the destination, and the application notification for the export approval with the export period specified is An application notification transmitting means for transmitting an application ID for identifying an application notification; an application information storage means for storing application information including at least the application ID, the approver, and the export period;

An approval notification receiving means for receiving an approval notification transmitted by the approver who has received the application notification, including at least the approval result for the application ID and the application notification;

Approver determination means for reading application information corresponding to the application ID included in the approval notification from the application information storage means and determining whether the sender of the approval notification is an approver included in the application information When,

When the sender corresponds to the approver and the approval result approves the export, the export period included in the application information is read from the application information storage means. A take-out approval period storage means for storing in the setting information of the computer as a take-out approval period;

A connection environment determination means for determining whether the computer is connected to a regular network environment at the time of startup of the computer;

When it is determined that it is connected to a regular network environment, a take-out approval period confirmation means for confirming whether a take-out approval period is stored in the setting information, and the take-out approval period is stored. If it is confirmed that the start-up time of the computer is within the period of the export approval period, the export approval period determination means and the export approval period are stored. Or when it is determined that the startup time of the computer is not within the period of the export approval period, the computer stop processing, the operation system or application stored in the computer A process for prohibiting the activation of at least a part of the program, a process for erasing at least a part of data stored in the computer, and an external connection to the computer An information protection means for starting at least one of the processes for prohibiting the command to the device,

An information maintenance system comprising:

Approver storage means for storing an approver having the authority to carry out approval for use outside the normal environment of the computer;

While being used in a regular network environment, the approver is designated as the destination, and the application notification for the export approval with the export period specified is attached with the application ID for identifying the application notification. An application notification sending means for sending

An application information storage means for storing application information including at least the application ID and the export period;

An approval notification receiving means for receiving an approval notification transmitted by the approver who has received the application notification, including at least the approval result for the application ID and the application notification; An approver determination unit that determines whether the approver who has transmitted the approval notification is an approver having the authority to perform the take-out approval stored in the approver storage unit;

When the approver corresponds to an approver having the authority to carry out take-out approval, and the approval result approves take-out, the take-out period included in the application information is set as the application information storage means. A take-out approval period storage means for reading out and storing in the setting information of the computer as a take-out approval period;

An information maintenance system comprising:

[9] The connection environment determination unit acquires first environment information related to a network environment to which the computer is connected, and the first network environment information is stored in the normal network environment stored in the computer in advance. When the first environmental information does not match the second environmental information as compared with the second environmental information regarding, the computer is determined to be connected to a normal network environment.

The information maintenance system according to claim 7 or 8, characterized in that.

[10] The connection environment determining means transmits a ping to an authentication server connected to the computer through a network, and the authentication server power also confirms whether or not there is a reply to the ping. If it is confirmed that there is no reply to the ping, it is determined that the computer is connected to a regular network environment.