Confidential file protection method

Abstract

A method of protecting confidential files is provided to definitely protect business confidential files in accordance with a security policy. In the method of protecting confidential files, a management server registers in advance information of business applications to allow an access to confidential files and the information of such registered applications is distributed to each client as needed. When a business application refers to confidential files, it is judged (application is authenticated) at a starting-up time of a business application if the application is registered in advance in the server, and its own process information is registered in an I / O acquisition module only when the application is successfully authenticated. In the I / O acquisition module, the access to confidential information is permitted only in the case that a process is consistent with the registered process information, and any access is otherwise rejected.

Description

technical field [0001] The present invention relates to a method and a system for protecting business confidential files by controlling access to confidential information by business application programs in units of application programs or processes. Background technique [0002] In recent years, important personal information leaks such as customer information leaks have occurred frequently. For enterprises, the protection of customer information has become a matter of great concern. [0003] In addition, since April 2005, the personal information protection law has been fully implemented for private companies, so interest in security countermeasure applications has rapidly increased. [0004] In the security application program, it is important to protect the confidential information (data including personal information, etc.) that is not expected to be leaked to the outside in business, or the confidential information of the security application program itself (operation ...

AI Technical Summary

Problems solved by technology

[0012] First, since it is an external authentication method that captures API release events, communication processing between the filter module and the application authentication module that captures API release events, and communication processing between the application authentication module and the I / O monitoring module, existence and pass The problem of performance degradation compared to internal code installation

Even if it is assumed that the application is authenticated only when the API of the file OPEN is captured, the performance of the application cannot be avoided because the file OPEN is issued multiple times.

[0013] Secondly, there is a possibility that the contents of the hash management table registering application information that is authorized to access confidential files may be falsified

Images