WO2000067130A1

WO2000067130A1 - File managing system

Info

Publication number: WO2000067130A1
Application number: PCT/JP1999/002324
Authority: WO
Inventors: Jun Kamada; Etsuo Ono; Bintatsu Noda
Original assignee: Fujitsu Limited
Priority date: 1999-04-30
Filing date: 1999-04-30
Publication date: 2000-11-09
Also published as: JP3866519B2

Abstract

A non-rewritable medium ID (2) recorded in a specific area of a medium (1) is read by a medium ID read section (5) of a drive (4) when the medium (1) is formatted, and the medium ID (2) is transmitted to a medium ID read section (7) included in a formatter (10) installed in a computer (11) through a medium ID transfer section (6). The medium ID is inputted into a storage destination determining section (8). According to the medium ID, the number of the block where management information to be written in a readable/writable area (3) of the medium (1) in a logical format is found by calculation. The block number is sent to readable/writable area access sections (9, 12), and management information is stored in a determined storage destination of the readable/writable area (3). In place of the medium ID, the ID of the drive (4) or the ID of the computer (11) can be used.

Description

Details

Technical field

The present invention relates to a storage medium format and a storage medium file management system. Background art

Today, with the progress of the information society, the ability to exchange information with each other has become increasingly important. For the exchange of such information, data transfer via networks, such as LAN, is frequently used nowadays. However, in some cases, it takes too much time to send a large amount of data via a network, and information exchange in the form of recording and transporting on floppy disks is also actively used. . Also, when selling software products such as programs, a method is often adopted in which the software is stored in a CD-ROM or the like and the user installs it on his or her personal computer. In recent years, not only distribution of programs running on computers, but also various kinds of software such as images, audio, music, and movies have been distributed by MD, music CD, and DVD. Portable media typified by floppy disks and magneto-optical disks such as M〇, which have recently attracted attention, have the feature that files can be easily exchanged between multiple computers. There is a problem that the information you want to access is easily accessed on other computers.

Conventionally, as a method for enhancing confidentiality when exchanging information with a portable medium, a method of encrypting a file stored in the portable medium has been adopted. This is currently the common practice, but file management information such as directories is encrypted. Since the file is not deleted, the existence of the file is known, and there are problems such as intentional overwriting and deletion. For more information on how to encrypt and store traditional files to increase confidentiality, see Microsoft's Windows NT Server, 1998.

In addition, the conventional technology has a problem that, when confidentiality is not required so much, processing load is too heavy to encrypt each file, which is inconvenient in actual use.

Therefore, in the present invention, based on the medium ID unique to the medium, the drive device ID unique to the drive device, the computer ID unique to the computer, etc., the storage destination of the file management information of the file on the medium (the block number on the medium) ), And encrypting management information based on these IDs provides a method that allows access to the file only on a specific medium, a specific drive, or a specific computer. I do. Disclosure of the invention

Therefore, an object of the present invention is to provide a confidential data storage method that can access required data only by using a specific medium or a specific device.

The device of the present invention is a device for formatting a recording medium or accessing a file recorded on the recording medium, and reads an identifier of the recording medium or the device, and reads the identifier based on the identifier. Confidentiality imparting / cancelling means for imparting confidentiality to the recording medium, or canceling confidentiality of the recording medium; and when imparting the confidentiality to the recording medium, or confidentiality of the recording medium. And recording medium access means for accessing the recording medium when is released.

The method of the present invention comprises the steps of: formatting a recording medium or recording on the recording medium (A) reading an identifier of the recording medium or the device and giving the recording medium confidentiality based on the identifier, or Removing the confidentiality of the medium; and (b) accessing the recording medium when the confidentiality is given to the recording medium or when the confidentiality of the recording medium is released. It is characterized by having. According to the present invention, it is possible to impart confidentiality to a recording medium from which data is to be read or an identifier unique to the device, so that data is read from a specific recording medium. In other words, the data cannot be accessed except by reading the data overnight using a specific device. In particular, as a method of imparting confidentiality to a recording medium, for example, it is conceivable to move management information such as a file in accordance with an operation based on the above-mentioned identifier, or to encrypt using the identifier. In this case, it is preferable that the identifier is not rewritable by an ordinary method, and furthermore, it is set so that it cannot be read by an ordinary method. This makes it possible to prevent the identifier from being copied even if the contents of the recording medium are illegally copied, thereby preventing unauthorized use of the data. Moreover, since the processing required to provide confidentiality is simple, confidentiality can be imparted to the recording medium with faster and lighter processing than the conventional method. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram showing a typical layout of files and file management information on a medium.

FIG. 2 is a configuration diagram of the device according to the first embodiment of the present invention.

FIG. 3 is a flowchart showing the flow of the format process of FIG. FIG. 4 is a configuration diagram of an apparatus according to the second embodiment of the present invention.

FIG. 5 is a flowchart showing the flow of processing of the file system of FIG. FIG. 6 is a diagram showing a layout of a storage medium on which a logical format is performed in a format according to the first embodiment.

FIG. 5 is a configuration diagram of an apparatus according to a third embodiment of the present invention.

FIG. 8 is a flowchart showing a processing flow in the third embodiment. FIG. 9 is a configuration diagram of the device according to the fourth embodiment of the present invention.

FIG. 10 is a flowchart showing the flow of processing in the fourth embodiment. FIG. 11 is a configuration diagram of an apparatus according to a fifth embodiment of the present invention.

FIG. 12 is a flowchart showing the flow of processing in the fifth embodiment. FIG. 13 is a configuration diagram of an apparatus according to a sixth embodiment of the present invention.

FIG. 14 is a flowchart showing the flow of processing in the sixth embodiment. FIG. 15 is a configuration diagram of an apparatus according to the seventh embodiment of the present invention.

FIG. 16 is a configuration diagram of the device according to the eighth embodiment of the present invention.

FIG. 17 is a configuration diagram showing an apparatus according to a ninth embodiment of the present invention.

FIG. 18 is a configuration diagram showing an apparatus according to a tenth embodiment of the present invention.

FIG. 19 is a flowchart showing a processing flow according to the eleventh embodiment of the present invention.

FIG. 20 is a flowchart showing a processing flow according to the 12th embodiment of the present invention.

FIG. 21 is a flowchart showing a processing flow according to the thirteenth embodiment of the present invention.

FIG. 22 is a diagram showing a configuration diagram of the device according to the fourteenth embodiment of the present invention.

FIG. 23 is a flowchart showing a processing flow in the fourteenth embodiment of the present invention.

FIG. 24 is a configuration diagram showing a device configuration of the fifteenth embodiment of the present invention.

FIG. 25 is a flowchart showing a processing flow in the fifteenth embodiment. You.

FIG. 26 is a diagram illustrating an example of the encryption / decryption circuit in the fourteenth and fifteenth embodiments.

FIG. 27 is a diagram showing a layout on a medium logically formatted by the format according to the fourteenth embodiment.

FIG. 28 is a diagram showing a configuration diagram of the device according to the sixteenth embodiment of the present invention.

FIG. 29 is a configuration diagram of an apparatus according to a seventeenth embodiment of the present invention.

FIG. 30 is a diagram showing a hardware configuration required when the embodiment of the present invention is realized by a program. BEST MODE FOR CARRYING OUT THE INVENTION

The section management information manages the start B N (Block Number: section start position) of the section, which is a continuous area, and its length (section length). The volume management information manages which partitions constitute a volume that can be used by the user (list of used partitions), and has a link to the root directory management information in the volume. In this example, a volume is composed of one partition.

The root directory management information has a list of block numbers of the root directory that exists fragmented on the medium (a list of used blocks). In this example, the root directory is fragmented into three. In the root directory, there is a file name of the file and a link to the file management information, and if there is a subdirectory, a subdirectory name and a link to the subdirectory management information. The file management information has, as a list, the block numbers of the files that are fragmented on the medium. In this example, the file is fragmented into three Is becoming Like the root directory management information, the subdirectory management information has a list of used blocks used by the subdirectory. The subdirectory stores the names of the files stored in the subdirectory and the file management. Has links to information. Of course, if the subdirectory includes a lower subdirectory, the name of the lower subdirectory and a link to management information are stored.

Normally, management information outside the plot is placed in a fixed location. In this example, the partition management information is located at B N = i, and the volume management information is located at B N = j '. Therefore, when accessing a file on a medium having a data format as shown in the figure, the partition management information and volume management information existing at a predetermined fixed position are read, and the block in which the file exists is read. Identify the block number (block number).

Therefore, in the present embodiment, the storage destinations of the partition management information and the volume management information, which are management information outside the partition, are defined as a medium ID (medium identifier), a device ID (device identifier), and a computer ID ( By changing the ID according to the computer identifier, or encrypting the management information using these IDs as keys, file hair access on the medium cannot be easily performed.

The medium 1 has a non-rewritable medium ID 2 and a read / write area 3. The drive device 4 includes a medium ID reading section 5 for reading the medium ID 2, a medium ID transfer section 6 for transferring the medium ID 2 read by the medium ID reading section 5 to the computer 11, and a readable / writable area. There is an access unit 12. The format 11 operating on the computer 11 includes a medium ID reading unit 7 that receives the medium ID 2 transferred from the medium ID transferring unit 6 and a medium ID 2 read by the medium ID reading unit 7. Determine the block number (block number) for storing the management information There is a storage destination determining unit 8 for storing the management information in a block having the block number determined by the storage destination determining unit 8.

The non-rewritable medium ID 2 is recorded in a different area from the normal readable / writable area 3 on the medium 1 and at a position on the medium 1 which can be read only by a special method. This is because if the medium ID 2 is written in the same part as the normal readable / writable area 3, for example, even if write protection is performed, it will be rewritten by some method, and only the rewritten person will write the file. It will be possible to make it accessible. Therefore, if the medium ID 2 of a file that should be accessible only by the owner of the medium 1 has been rewritten, the owner will not be able to access the file, and the medium ID 2 will be changed. Only the rewritten person can access the file. Therefore, a malicious user can illegally access the owner's medium 1 and change the medium ID 2 so that only the user can access the file. In addition, if the medium ID 2 is stored in a readable area by a normal access method, the medium ID 2 is easily stolen, and confidentiality cannot be maintained.

Therefore, the drive device 4 is specially provided with a medium ID reading unit 5 for reading the medium ID 2. The medium ID 2 read by the medium ID reading unit 5 is sent to the medium ID transfer unit 6 and sent to the computer 11 to which the drive device 4 is connected. In the computer 11, the medium ID reading unit 7 of the formatter 10 operating on the computer 11 receives the medium ID 2 and sends it to the storage destination determining unit 8. The storage destination determination unit 8 determines the number of the block in which the partition management information and the poly- ume management information are to be stored, using the transmitted medium ID 2 or a number corresponding to the medium ID 2 on a one-to-one basis. Then, it instructs the readable / writable area access unit 9 to write the partition management information and the volume management information. Formatter 1 The instruction from the readable / writable area access unit 9 of 0 is passed to the readable / writable area access unit 12 of the drive device 4, and the above instruction of the readable / writable area 3 on the medium 1 is given by the readable / writable area access unit 12. Partition management information and volume management information are written in the block having the block number.

FIG. 3 is a flowchart showing the flow of the format 10 process of FIG.

When the formatter 10 starts processing, it reads out the medium ID 2 (step S 1; for example, in the case of the figure, the medium ID is “1 2 3 4 5”). Next, the BN (block number) of the block in which the partition management information is to be stored is determined based on the medium ID2 (step S2). In this example, BN is set to a value obtained by adding the modulo 64 of the medium ID2 to the base (offset block number) BN = 512. Here, the notation “ID% 64” indicates a remainder obtained by dividing the medium ID2 by 64. However, the method of determining the block number (B N) for storing the block management information is not limited to the above method, and should be appropriately determined by a person skilled in the art in order to further increase confidentiality. Then, the block management information is written in the block number determined above (step S3). Next, the block number of the storage destination of the volume management information is determined in the same manner as the partition management information (step S4), and this is written in the block (step S5). In the figure, the storage destination block number of the volume management information is determined by adding the remainder obtained by dividing the medium ID 2 by 64 to 5 13. However, as described in the case of the partition management information, the method of determining the storage destination block number is not limited to this method.

FIG. 4 is a configuration diagram of an apparatus according to the second embodiment of the present invention.

In this figure, the same components as those in FIG. 2 are denoted by the same reference numerals. The medium 1 has a non-rewritable medium ID 2 and a read / write area 3. The drive device 4 calculates the medium ID reading unit 5 and the read medium ID 2 There is a medium ID transfer unit 6 for transferring data to the device 11 and a read / write area access unit 12. The file system 15 on the computer 11 has a medium ID reading unit 7, a storage unit that determines the number of a block for storing management information based on the read medium ID 2, and a read destination determining unit 8, which has been determined. There is a read / write area access unit 9 'that accesses the block with the block number. The file system 15 performs processing in response to a medium use request from the application 16.

The application 16 may be a professional software, a file management tool, or various other applications. That is, all applications that have the function of accessing the medium 1 are applicable. In the figure, a medium ID reading section 5, a medium ID transfer section 6, a medium ID reading section 7, and a readable / writable area access section 12 have the same functions as in FIG. The storage Z read destination determining unit 8 ′ does not specify the block number to store the partition management information and the volume management information, as shown in format 10 in FIG. In response to an access request to the above file, the block number storing the partition management information and the volume management information of the accessed file is calculated from the medium ID 2, and the calculated block number is used as the read / write area access unit. 9 '. The readable / writable area access unit 9 ′ writes and reads a file to / from the medium 1 in accordance with a medium use request from the application 16. In this case, the application 16 is a formatter 10 as shown in FIG. 2 or an application having the function, and performs a logical format together with a physical format. It also includes the task of writing information and volume management information to the medium 1. FIG. 5 is a flowchart showing a processing flow of the file system 15 in FIG.

File system 15 is activated by media usage request from application 16 Start the mounting process (preparation of medium 1 in drive device 4 and preparation for reading data of medium 1). Next, the medium ID 2 is read (step S 10, ID = 1 2 345 in the case of the figure). Next, the BN (block number) in which the partition management information is stored is determined based on the medium ID 2 (step S11). In the example shown in the figure, a value obtained by adding the modulo 64 of the medium ID to the base value Basel (BN 5 12 if the same as in FIG. 3) is used. As described above, Basel is appropriately determined by those skilled in the art using the present embodiment, and the processing form of adding the remainder obtained by dividing the medium ID by 64 to Basel should also be appropriately changed. It is. Next, the partition management information is read from the determined block number (step S12), and the storage location of the volume management information is determined in the same manner as the partition management information (step S13), and this is determined. Read (step S14). In this figure, the storage location of the volume management information is calculated by adding the value obtained by dividing the medium ID by 64 to Base 2 (5 13 in FIG. 3). The method of determining the storage destination of the file should be appropriately changed by those skilled in the art using the present embodiment.

FIG. 6 is a diagram illustrating a layout of a storage medium on which a logical format is performed in a format according to the first embodiment.

Assuming that the medium ID is “1 2345” according to the calculation formula in FIG. 3, the partition management information is arranged in the block of block number 569, and the volume management information is arranged in the block of block number 570. As described in FIG. 1, the section management information records the start position and the section length of the section, and the volume management information records a list of used sections and a link to the root directory management information. The root directory stores file names and links to file management information, subdirectory names and links to subdirectory management information.

If the method according to the first and second embodiments is used, the partition management information and volume Since the recording position of the space management information moves as the medium ID 2 changes, if the data recorded on the medium 1 is copied to another medium and the medium ID 2 is not copied, the other It is no longer possible to read the data from the medium, and the confidentiality of the information can be obtained. Preferably, the method of determining the recording positions of the partition management information and the volume management information is changed, and even if the method of calculating the recording position of either the partition management information or the volume management information is known, the method of calculating the other recording position is preferable. Not understand. However, in this case, it is necessary that the recording positions of the block management information and the volume management information do not overlap.

FIG. 7 is a configuration diagram of an apparatus according to the third embodiment of the present invention.

In the present embodiment, the drive device ID on the drive device 4 'is used without using the medium ID on the medium. The ID of the drive device 4 ′ is stored in the device ID storage unit 17. Actually, for example, the device ID is written in a part of the firmware written in the ROM (not shown) of the drive device 4 ′, and can be read as needed. The device ID stored in the device ID storage unit 17 is read out by the device ID transfer unit 6 and passed to the device ID reading unit 7 of the format server 1OA that operates on the computer 11. Then, the device ID is passed from the device ID reading unit 7 to the storage destination determining unit 8, and the storage location determining unit 8 determines the storage location of the partition management information / polyume management information as in the first embodiment. Determined and passed to the readable / writable area access unit 9. The readable / writable area access unit 9 issues an instruction to the readable / writable area access unit 12 of the drive device 4 ′, and stores partition management information and volume management information in the readable / writable area 3 ′ of the medium 1 ′.

In the present embodiment, the medium 1 ′ does not need to record the medium ID, but the medium ID is recorded on the medium 1 ′ as in the first embodiment, as in an embodiment described later. If necessary, combine the device ID and media ID, and set the partition management information. When calculating the recording position of the information and the recording position of the volume management information, the medium ID and the device ID may be used.

FIG. 8 is a flowchart showing a processing flow in the third embodiment. In the steps shown in the figure, the same steps as those in FIG. 3 are denoted by the same step symbols.

In step S 1 ′, the device ID is read. In the example of the figure, it is ID-1 2 3 4 5. Next, the storage location of the partition management information is determined (step S2). In this figure, the storage destination B N (partition management information storage destination B N) is obtained by adding the remainder obtained by dividing the device ID by 64 to Base l. The partition management information is stored in the storage location determined in step S2 (step S3). Next, in step S4, the storage destination of the volume management information is determined. Here, the storage destination BN is obtained by adding the remainder obtained by dividing the device ID by 64 to Base2. Then, the volume management information is stored in the storage location determined in this way (step S5), and the format processing ends. As described above, Basel and Base2 are values to be set arbitrarily, and the method of obtaining the storage destination BN is not limited to this embodiment.

FIG. 9 is a configuration diagram of the device according to the fourth embodiment of the present invention.

In the figure, the same components as those in the second and third embodiments are denoted by the same reference numerals.

The configuration shown in the figure shows a case where the computer 11 accesses the medium 1 ′ using the application 16 and the file system 15 in the third embodiment. A variety of applications 16 are conceivable, but examples include word processors, spreadsheet software, and drawing software. However, the present invention is not limited to these, and as described above, anything may be used as long as it writes data on the medium 1 ′ and reads data from the medium 1 ′. The media use request from the application 16 is sent to the readable / writable area of the file system 15A. Sent to area access unit 9 '.

On the other hand, the device ID of the drive device 4 ′ is read from the device ID storage unit 17, and is transferred by the device ID transfer unit 6 to the device ID read unit 7 of the file system 15 A operating on the computer 11. You. The device ID obtained by the device ID reading unit 7 is sent to the storage Z read destination determining unit 8 ′, and the storage Z read destination determining unit 8 ′ stores or blocks the partition management information and the volume management information. BN is determined. The BN determined by the storage Z read destination determining unit 8 ′ is sent to the readable / writable area access unit 9 ′, and an instruction to access the medium 1 ′ is output from the readable / writable area access unit 9 ′ to the drive device 4 ′. . The read / write area access unit 12 of the drive device 4 'that has received the instruction to access the medium 1' accesses the read / write area 3 'of the medium 1' based on the acquired BN. FIG. 10 is a flowchart showing the flow of processing in the fourth embodiment. In this figure, the same steps as those in FIG. 5 are denoted by the same step numbers. First, in step S10 ', the device ID is read. In the figure, ID = 12345. Next, the storage location of the partition management information is determined (step S11). The method of calculating the storage destination BN is the same as in FIG. When the storage destination BN is determined, the position where the block management information is stored can be known, and the block management information is read in step S12. In step S13, the BN for storing the volume management information is determined. Then, in step S14, the volume management information is read from the volume management information storage destination BN.

FIG. 11 is a configuration diagram of an apparatus according to a fifth embodiment of the present invention.

In the figure, the same components as those in FIG. 7 are denoted by the same reference numerals. In the present embodiment, the computer ID on the computer 11 'is used without using the medium ID on the medium 1'. As the computer ID, the computer 11 1 ′ is uniquely identified, such as the CPU ID, the ID assigned to dedicated hardware inserted in the expansion slot, etc. Any ID can be used.

When the media 10B installed on the computer 1 1 'formats the medium 1', first, the medium 1 'is physically formatted, and then the computer ID reading unit 19 stores the computer ID in the computer ID storage unit. The computer ID read from _c is input to the storage location determination unit 8 and is used to determine the storage location BN of the partition management information and the volume management information. The storage destination BN determined by the storage destination determination unit 8 is input to the readable / writable area access unit 9 and sent to the readable / writable area access unit 12 of the drive device 4 ″ together with an instruction to access the medium 1 ′. The read / write area access unit 12 of the drive device 4 ″ that has received the access instruction to the medium 1 ′ refers to the received storage destination BN, and writes the block indicated by the storage destination BN of the read / write area 3 ′ Partition management information ゃ Volume Write the management information and end the logical format.

FIG. 12 is a flowchart showing a processing flow in the fifth embodiment. In this figure, the same steps as those in FIG. 3 are denoted by the same step numbers.

First, in step S 1 ″, the computer ID is read. Next, in step S2, the BN of the partition management information storage destination is determined, and in step S3, the partition management information is stored. As shown in the figure, the partition management information storage destination BN may be determined by adding a remainder obtained by dividing the computer ID by 64 to a predetermined value, Base 1, or by another method. Next, in step S4, the BN for storing the volume management information is determined. In the figure, the BN is obtained by adding a remainder obtained by dividing the computer ID by 64 to a predetermined value Base2, but other methods may be used. Then, the volume management information is stored in the block having the determined storage destination BN on the medium 1 '(step S5), and the logical format is terminated.

FIG. 13 is a configuration diagram of an apparatus according to a sixth embodiment of the present invention. In this figure, the same components as those in FIGS. 9 and 11 are denoted by the same reference numerals.

In the present embodiment, a case is shown in which the medium 1 ′ formatted based on the fifth embodiment is accessed via the file system 15 B and the application 16. The computer ID may be anything such as a CPU—ID or an ID provided in a dedicated hardware inserted in an expansion slot.

When the medium use request is output from the application 16, the request is received by the read / write area access unit 9 ′ of the file system 15 B. On the other hand, the computer ID reading section 19 reads the computer ID from the computer ID storage section 18 and outputs it to the storage Z reading destination determining section 8 '. The storage Z read destination determination unit 8 ′ uses a computer ID to identify the storage location of the partition management information and the policy management information on the medium 1 ′ by a predetermined method, and sends it to the readable / writable area access unit 9 ′. give. The read / write area access section 9 ′ receives the input of the storage position and the medium use request from the application 16, and sends the medium 1 ′ to the read / write area access section 12 of the drive 4 ′. To access the read / write area 3 'of the Since the readable / writable area access unit 12 can acquire the storage locations of the partition management information and the volume management information specified by the storage Z read destination determination unit 8 ′, the location in the readable / writable area 3 ′ You can see if you can read it, and you can read the data or file normally. The same applies when writing files and data to the medium 1 '.

FIG. 14 is a flowchart showing the flow of processing in the sixth embodiment. In this figure, the same steps as those in FIG. 5 are denoted by the same step numbers.

First, the computer ID is read in step S 10 ′ ″. Here, the ID is set to 1 2 3 4 5. Next, in step S 11, B in the storage destination of the partition management information Determine N. Here, the remainder of the computer ID divided by 64 is added to the predetermined value Base 1 to obtain the storage destination BN, but the present invention is not necessarily limited to this. When the storage destination BN is determined, it is known that the partition management information has been written at the position indicated by the storage destination BN. Therefore, in step S12, the partition management information is read. Next, in step S13, the BN for storing the volume management information is determined. Here, the value obtained by adding the remainder obtained by dividing the computer ID by 64 to the predetermined value Base 2 is obtained, but is not necessarily limited to this. When the BN of the volume management information storage destination is specified, the volume management information is read from this storage destination on the medium 1 '(step S14). As a result, the data necessary for reading the data on the medium 1 'are prepared, so that data such as a file can be read or written in the same manner as a normal medium.

The data format of the medium 1 'in the third to sixth embodiments is the same as that shown in FIG.

FIG. 15 is a configuration diagram of an apparatus according to the seventh embodiment of the present invention.

In the figure, the same components as those in FIG. 11 are denoted by the same reference numerals. In the present embodiment, an external ID is used without using a medium ID on a medium or an ID attached to another device to be used. The external ID can be input to the computer 11 ', such as the ID given by the application, the ID given by the user, or the ID in the PC card inserted in the PC card slot, for example. Any ID will do.

When formatting the medium 1 ′, the formatter 10C first obtains an external ID. This is read by the external ID reading unit 20. The read external ID is used for calculation in the storage destination determination unit 8. The storage destination determining unit 8 determines in which position of the readable / writable area 3 ′ on the medium 1 ′ the partition management information and the volume management information are to be written by a predetermined method using the external ID. Decision The stored storage destination is input to the readable / writable area access unit 9 and is passed as a part of the access instruction to the readable / writable area access unit 12 of the drive device 4 ". The readable / writable area access unit of the drive device 4 '" 1 2 accesses the medium 1 ′ based on an access instruction from the readable / writable area access unit 9 of the formatter 10 C, and stores partition management information and volume management information in the determined storage position in the readable / writable area 3 ′. Write and terminate the logical format.

The flow of processing based on the present embodiment is clear from the description of the above-described embodiment, and thus the description will be omitted.

In the figure, the same components as those in FIGS. 13 and 15 are denoted by the same reference numerals.

This figure shows a case where the medium 1 'is accessed via the application 16 and the file system 15C in the seventh embodiment. The medium use request of the application 16 is input to the read / write area access unit 9 'of the file system 15C. Further, the external ID is read by the external ID reading unit 20 as an output of another application or a manual input by the user. The external ID is passed to the storage / readout destination determining unit 8 ', and the BN of the readable / writable area 3' in which the partition management information and the volume management information are stored is calculated. The calculated BN is input to the readable / writable area access unit 9 '.

The read / write area access section 9 ′ of the file system 15, according to the medium use request from the application 16 and the BN input from the storage / read destination determination section 8 ′, can read and write the drive apparatus 4 ′ ′. An instruction to access medium 1 ′ is output to access section 12. Based on the instruction, the read / write area access unit 12 reads the partition management information and the partition management information stored in the read / write area 3 ′ on the medium 1 ′. Reads volume management information and reads and writes files.

Note that the flow of the process of this embodiment is the same as that of the above-described embodiment, and a description thereof will be omitted. In the case of the present embodiment, the ID reading step is an external ID reading step.

The same components as those in FIGS. 2 and 15 are denoted by the same reference numerals.

In the present embodiment, instead of using the medium ID or the external ID as it is to calculate the storage position of the partition management information or the volume management information, the storage position is determined by using both. Is what you want.

First, when the formatter 10 D of the computer 11 ′ ″ is started, the external ID is read by the external ID reading unit 20. Then, the read external ID is input to the ID conversion unit 21. On the other hand, the medium ID reading section 5 of the drive device 4 reads the medium ID 2 from the medium 1 and sends it to the medium ID reading section 7 of the formatter 10 ′ via the medium ID transfer section 6. The medium ID reading unit 7 outputs the received medium ID 2 to the ID conversion unit 21. The ID converter 21 combines the external ID and the medium ID 2 to generate a new code. For example, a new code with the external ID as the upper part of the code and the medium ID 2 as the lower part is generated. This new code is sent to the storage destination determining unit 8, and the storage destination determining unit 8 determines the storage destination of the partition management information and the volume management information. When the storage destinations are determined, these storage destinations are input to the read / write area access unit 9 of the format 10D. The readable / writable area access unit 9 outputs an access instruction including the storage destination information to the medium 1 to the readable / writable area access unit 12 of the drive device 4. In response to this instruction, the read / write area access unit 12 of the drive device 4 accesses the read / write area 3 of the medium 1 and stores the partition management information and the volume in the storage destination determined by the storage destination determination unit 8. Stores management information. And Format the other partition and end the logical format.

In this figure, the same components as those in FIGS. 16 and 17 are denoted by the same reference numerals.

In the present embodiment, the medium 1 is accessed via the application 16 and the file system 15C instead of the formatter in the embodiment of FIG.

When a medium use request is generated from the application 16 running on the computer 11C, this is input to the read / write area access unit 9 of the file system 15C also running on the computer 11C. You. The readable / writable area access unit 9 waits for the input of the storage position of the partition management information and the volume management information from the storage Z read destination determination unit 8 '. The medium ID reading unit 5 of the drive device 4 reads the medium ID 2 of the medium 1 and transmits the medium ID 2 to the medium ID reading unit 7 of the file system 15C via the medium ID transfer unit 6. Upon receiving the medium ID, the medium ID reading unit 7 outputs this to the ID conversion unit 21. On the other hand, the external ID reading section 20 receives the external ID and inputs the same to the ID conversion section 21 again.

The ID conversion unit 21 performs the same processing as that performed by the formatter 10D in the ninth embodiment on the medium ID 2 and the external ID, and generates a new code. For example, a new code is generated that has an external ID in the upper part of the code and a medium ID 2 in the lower part. This new code should be the same as used at the time of formatting. If the same code cannot be obtained, the medium 1 cannot be accessed.

The new code generated by the ID conversion unit 21 is input to the storage Z read destination determination unit 8 ', and the storage destination of the partition management information and the volume management information is determined. The same method used for formatting is used in the storage Determine the storage destination using the same method. If the storage destination is obtained using a different method, the storage destination obtained at the time of formatting is not reproduced, and the medium 1 cannot be accessed. These things are the same also about the above-mentioned embodiment. The storage destination determined by the storage / readout destination determination unit 8 ′ is input to the read / write area access unit 9 of the file system 15 C, and the medium access instruction is sent to the read / write area access unit 12 of the drive device 4. Sent with The readable / writable area access unit 1 2 of the drive 4 accesses the readable / writable area 3 of the medium 1 based on the received storage destination and reads the partition management information and the volume management information, thereby enabling reading / writing of the medium 1 Writes a file to area 3 or reads a file.

It should be noted that the flow of processing in this embodiment is clear from the above-described embodiment, and a description thereof will be omitted.

FIG. 19 is a flowchart showing a processing flow according to the first embodiment of the present invention.

In the first embodiment, only a selection unit for selecting one of a plurality of IDs is provided. Other configurations are basically the same as those of the above-described first to eighth embodiments. Since the configuration can be realized with the same configuration, illustration and description of the device configuration are omitted.

The flow of the processing of the formatter in the present embodiment will be described. First, in step S20, information indicating the type of ID to be used is obtained from the application. Next, in step S21, it is determined which ID is to be used based on the acquired information. If the medium ID is used, proceed to step S22 to read the medium ID. When the ID of the drive device is used, the process proceeds to step S23 to read the device ID. When using the computer ID, it is stored in the computer, for example, the ID of the processor or a dedicated board inserted in the expansion slot. In step S24 or step S25, one of the above IDs is read.

Then, in step S26, the storage destination of the partition management information BN is determined based on the read ID, and in step S27, the partition management information is stored in the storage destination on the medium. Next, in step S28, based on the read ID, the storage location BN of the volume management information is determined. In step S29, the volume management information is stored in the storage location on the medium, and the logical format is set. To end. Here, the BN of the storage location of the partition management information is obtained by adding the remainder obtained by dividing the read ID by 64 to 5 12, and the storage location of the volume management information is 5 13 The remainder is obtained by dividing the read ID by 64.

In this figure, the same steps as those in FIG. 19 are denoted by the same step numbers.

The processing in the figure is the processing performed by the file system. First, in step S20, information indicating which ID is to be used is obtained from the application, and in step S21, which ID is to be used is determined. When the medium ID is used, the process proceeds to step S22 to read the ID from the medium. When using the ID of the drive device, the device ID is read in step S23. When using any one of a plurality of IDs set for calculation, the selected ID is read out in step S24 or step S25.

Then, based on the selected ID, the BN (position) of the storage location of the partition management information is determined (step S26), and in step S30, the partition management information is stored from the storage location on the medium. To read Next, in step S28, the BN of the storage destination of the volume management information is determined based on the selected ID. Then, in step S31, The volume management information is read from the storage destination on the medium. Here, in determining the storage destination in steps S26 and S28, the BN of the storage destination is determined by the same method as that used at the time of formatting.

In this figure, the same steps as those in FIG. 5 are denoted by the same step numbers.

This embodiment is a diagram for explaining the operation of a tool for removing a fragment of a medium formatted in the format of the above embodiment. Note that the process for performing fragment disassembly is known as "defragmentation" included as a tool in, for example, Windows 95 or the like, which is a product of Microsoft Corporation, and thus a detailed description thereof will be omitted.

First, in step S10, ID reading is performed. Here, the ID may be any of a medium ID stored in a medium, a device ID of a drive device, a computer ID given to a computer, or an external ID input from an application or a user. . Further, as in the ninth and tenth embodiments, an arbitrary plurality of IDs may be selected and read. In step S11, the storage destination BN of the partition management information is determined from the read ID. Here, 5 1 2 is added to the remainder obtained by dividing the read ID by 64. Immediately before step S11, a plurality of read IDs may be combined to create a new code, and the storage location of the partition management information may be determined based on the new code.

Then, referring to the BN of the storage destination determined in step S11, the partition management information is read from the storage destination in step S12. Next, based on the ID read in step S35, the BN for storing the volume management information is determined. Here, we divide the ID by 6 4 and add 5 1 3 to obtain the force ^ Combining multiple IDs In addition, a new code may be generated, and the BN for storing the volume management information may be determined based on the new code. In step S14, the volume management information is read from the storage destination with reference to the BN of the storage destination of the determined volume management information. Thus, access to the medium becomes possible. Next, in step S36, after reaching the target file management information via the root directory from the partition management information and the volume management information, a known defragmentation process is executed based on the management information.

In this figure, the same components as those in FIG. 2 are denoted by the same reference numerals. The medium 1 has a non-rewritable medium ID 2 and a readable / writable area 3. The drive device 4 includes a medium ID reading unit 5, a medium ID transfer unit 6, and a readable / writable area access unit 12. The formatter 10 E operating on the computer 11 includes a medium ID reading unit 7, a management information encryption unit 30 that encrypts management information using the medium ID read by the medium ID reading unit 7 as a key, There is a readable / writable area access unit 9 for storing the encrypted management information.

The medium ID reading unit 5 of the drive device 4 reads the medium ID 2 of the medium 1 and outputs the medium ID 2 to the medium ID transfer unit 6. The medium ID transfer unit 6 transmits the read medium ID to the medium ID reading unit 7 of the formatter 10E of the calculator 11. The medium ID reading unit 7 outputs the received medium ID to the management information encryption Z storage destination determination unit 30. The medium ID management information encryption Z storage destination determination unit 30 encrypts management information such as partition management information and volume management information using the input medium ID as a key, and calculates the storage destination BN of the management information. And outputs them to the readable / writable area access unit 9. The above-mentioned encryption method may use a conventionally known DES (Data Encryption on Standard) or the like.The encryption method is not particularly limited, and a code corresponding to the medium ID one-to-one is used. If you encrypt using It is not necessary to use the medium ID itself as a key.

Further, the ID to be used is not limited to the medium ID, and it is also possible to use a computer ID, a drive device ID, or a combination thereof.

Further, in the present embodiment, in addition to encrypting the management information, the storage location of the management information is movable by the medium ID, but the storage location of the management information may be fixed. Further, in the present embodiment, the root directory that encrypts only the management information, the management information included therein, and the file and the management information thereof may be encrypted together. The root directory or file may or may not be encrypted using the media ID. Particularly, files are encrypted using a known encryption method, and the media ID is known to a third party. However, even when the medium 1 becomes accessible, the file may be kept confidential. Upon receiving the management information storage location and the encrypted management information, the readable / writable area access section 9 transmits these to the readable / writable area access section 12 of the drive device 4 and reads / writes the read / write area of the medium 1. Record in 3. In this way, a more confidential logical format of the medium 1 can be performed.

When the process starts, the formatter 10E in FIG. 22 reads out the medium ID 2 from the medium 1 (step S40). Next, the partition management information is encrypted using the medium ID 2 as a key (step S41). Next, the storage location of the partition management information is obtained (step S42), and the encrypted partition management information is written to the storage location (step S43). Further, like the partition management information, the volume management information is encrypted (step S44), the storage destination of the volume management information is obtained (step S45), and the encrypted management information is stored in the storage destination. (Step S46). FIG. 24 is a configuration diagram showing a device configuration of the fifteenth embodiment of the present invention.

The same components as those in FIGS. 4 and 22 are denoted by the same reference numerals.

In the present embodiment, the medium formatted in the fourteenth embodiment is accessed, and file writing and reading are performed.

Medium 1 has a non-rewritable medium ID 2 and a read / write area 3. The drive device 4 includes a medium ID reading unit 5, a medium ID transfer unit 6 that transfers the medium ID 2 read by the medium ID reading unit 5 to a computer, and a readable / writable area access unit 12. The file system 15D on the computer 11 has a medium ID reading unit 7, a readable / writable area access unit 9, a management information decryption unit that decrypts the read management information using the medium ID 2 as a key, and a Z storage destination determination unit 30. There is. Further, the file system 15 D performs processing by inputting a medium use request from the application 16.

The medium use request from the application 16 is input to the readable / writable area access unit 9. The medium ID 2 is read from the medium ID reading unit 5 of the drive device 4 and sent to the medium ID reading unit 7 included in the file system 15 D of the computer 11 by the medium ID transfer unit 6. The medium ID reading unit 7 outputs the received medium ID 2 to the management information decryption data storage destination determination unit 30. The management information decryption Z storage destination determination unit 30 determines the storage destination of the management information from the received medium ID 2 and gives the information to the readable / writable area access unit 9. The readable / writable area access unit 9 issues a read command to the readable / writable area access unit 12 of the drive device 4 based on the received storage destination. The encrypted management information read from the readable / writable area 3 of the medium 1 by the readable / writable area access unit 12 is decrypted into the management information via the readable / writable area access unit 9 of the file system 15D, and is stored in the Z. The information is input to the destination determining unit 30 and decrypted by the management information 7 storage destination determining unit 30. Access to the medium 1 is performed based on the decrypted management information. It is.

As can be easily understood, the decoding process in the management information decoding Z storage destination determining unit 30 needs to correspond to the encoding process performed at the time of formatting in the 14th embodiment.

FIG. 25 is a flowchart showing the flow of processing in the fifteenth embodiment.

In the figure, the same steps as those in FIG. 23 are denoted by the same step numbers.

The file system 15 D in FIG. 24 starts mounting processing in response to a medium use request of the application 16. That is, first, the medium ID2 is read (step S40). Next, the storage location of the partition management information is obtained from the medium ID 2 (step S42), the partition management information is read from the storage location (step S50), and this is decrypted using the medium ID 2 as a key. (Step S51). Next, the storage location of the volume management information is obtained in the same manner as the partition management information (step S45), and the volume management information is read from the storage location (step S52). Decrypt (step S53).

In the fourteenth and fifteenth embodiments, the case where the storage location of the management information is determined, and the encryption and decryption are performed by reading the medium ID 2 has been described. In addition to the ID, it is also possible to use the device ID of the drive device or the computer ID. In addition, these read IDs do not have to be used as they are as encryption keys, and a plurality of IDs may be combined to generate a new code, which may be used for encryption and decryption. Alternatively, a code corresponding to one or a plurality of IDs on a one-to-one basis may be prepared in advance, and this may be used for encryption / decryption, or may be used for determining a storage destination.

FIG. 26 shows an example of the encryption / decryption circuit in the fourteenth and fifteenth embodiments. FIG.

The figure is 055. 8 shows an encryption / decryption circuit using Cipher Block Chaining mode. Writing and reading of data to / from the medium 2 is performed in 512-bit units, but encryption and decryption by DES shown in the figure are performed in 64-bit units. The data is divided into 64 bits such as Ml to Mn and input to the encryption / decryption circuit 52. First, the data M 1 is input to the DES processing section 50-1. The data encrypted by the DES processing unit 50-1 is output as encrypted data E1. Next, data M2 is input. This is added to the encrypted data Ml (= El) in the exclusive OR circuit 51-1, input to the DES processing unit 50-2, and encrypted by the DES processing unit 50-2. And output as encrypted data E2. Hereinafter, in the same procedure, the encryption proceeds with the previous block affecting the data of the next block, and when the last encrypted data En (n = 8) is output, the data is transferred to the medium 2 Since data of 512 bits, which is a writing unit, is completed, an encrypted data consisting of E1 to En is written to the medium 2. The encryption key used in the above encryption is input to each of the DES processing units 50-1 to 50-n. The encryption key is, for example, the medium ID.

In the case of decryption, the encrypted data is input to the shaded portion in the figure, and is divided into 64 bits. Then, it is input to the DES processing units 50-1 to 50-n together with the encryption key. In this case, the decoding process is performed from the data E1 toward the data En. The decoded data M 1 output from the DE processing unit 50-1 is subtracted from the decoded data of E 2 output from the DE processing unit 50-2 in the exclusive OR circuit 51-1. Then, decryption data M2 is obtained. Hereinafter, similarly, when all of the input encrypted data 512 bits have been processed, one decryption process is completed. FIG. 27 is a diagram showing a layout on the medium 1 logically formatted by the format 10E of the fourteenth embodiment.

In the figure, the hatched portion is encrypted by the medium ID 2 in units of management information. Although the management information is encrypted in the 14th embodiment, a specific area may be defined as a management information-dedicated area, and the entire area may be encrypted. This can be used when the management information storage destination is fixed.

Further, as described in the description of the fourteenth embodiment, the data in the section in which the root directory and the like are stored may be encrypted in the same manner as the management information. By performing such encryption as described above, it is possible to further enhance the confidentiality by performing encryption different from the encryption of the management information, the root directory, and the management information.

FIG. 28 is a diagram showing a configuration diagram of a drive device according to the sixteenth embodiment of the present invention.

In this figure, the same components as those in FIG. 2 are denoted by the same reference numerals. Here, the computer 61 does not have to be a computer for personal or office use such as a so-called “personal computer” or “workstation”, but is mounted on a home appliance equipped with a microprocessor and flash memory for storing firmware. It may be something like a “computer for embedded devices”. Furthermore, a configuration using hardware that is connected and logically possible is also possible. In addition, the drive device 60 includes a player dedicated to DVDs and music CDs, and the like. When the medium 1 is formatted, the medium ID reading unit 5 reads the medium ID 2 from the medium 1. Then, the medium ID transfer unit 6 transfers the medium ID to the medium ID reading unit 7 of the formatter 62 which operates on the computer 61 inside the drive device 60. The medium ID reading unit 7 sends the received medium ID 2 to the storage destination determining unit 8. The storage destination determining unit 8 determines the storage destination of the management information using the received medium ID 2, and This is transmitted to the readable / writable area access unit 9. The readable / writable area access unit 9 issues an access instruction to the medium 1 to the readable / writable area access unit 12 of the drive device 60 based on the received storage destination information. The read / write area access unit 12 having received the access instruction accesses the read / write area 3 of the medium 1 and stores the management information in the storage destination determined by the storage destination determination unit 8. The method for determining the storage destination in the storage destination determining unit 8 is, for example, the method described in the first embodiment.

The ID to be used is not limited to the medium ID, and the device ID of the drive device 60 may be used. Alternatively, the computer 61 incorporated in the drive device 60 may have an ID different from that of the drive device 60. If is attached, the computer ID may be used.

Furthermore, as described in the fourteenth and fifteenth embodiments, management information and the like may be stored after being encrypted. In the case of encryption, the storage location of the management information can be a fixed position that does not depend on the read ID.

In this figure, the same components as those in FIG. 4 are denoted by the same reference numerals. This embodiment corresponds to the sixteenth embodiment, and the meaning of the computer 61 and the drive device OA is as described above.

When the computer 61 is a PC card having a microprocessor and a memory, all or a part of the functions of the drive device 60 can be executed on the PC card side. This is the same in the sixteenth embodiment.

The medium ID reading unit 5 of the drive device 60A reads the medium ID 2 of the medium 1 and transmits this to the medium ID transfer unit 6. The medium ID transfer unit 6 inputs the received medium ID to the storage Z read destination determination unit 8 ′ via the medium ID read unit 7 included in the file system 63 of the computer 63. Storage Z read destination determination unit 8 ′ determines the storage location of the management information from the received medium ID 2 and outputs it to the read / write area access unit 9 ′ of the file system 63. Upon receiving the management information storage destination and the medium use request from the application 16, the readable / writable area access unit 9 ′ issues an access instruction to the medium 1 to the readable / writable area access unit 12 of the drive unit 6 OA. put out. Upon receiving the instruction, the readable / writable area access unit 12 accesses the readable / writable area 3 of the medium 1, reads management information from the medium 1, and enables file access to the medium 1.

As described in the description of the sixteenth embodiment, the ID to be used is not limited to the medium ID, and a device ID of the drive device 6OA and a computer ID of the computer 61 can be used. Also, encryption may be performed together as in the fourteenth and fifteenth embodiments.

In the description of each of the above embodiments, the medium ID, the device ID, and the computer ID are used as the IDs. However, it is also possible to use the ID given to the application. . According to this, only the user who accesses the medium using a specific application can operate the contents of the medium.

FIG. 30 is a diagram illustrating a hardware configuration required when each of the above embodiments of the present invention is implemented by a program.

The CPU 71 exchanges data with other components via the bus 70, and executes a program for realizing each embodiment of the present invention. The program is recorded on a ROM 73, an external recording device 77 such as a hard disk, or a portable recording medium 79. The program stored in the portable recording medium 79 is read into the RAM 72 via the drive device 78 on which the portable recording medium 79 is mounted. The program recorded in the ROM 73 or the external recording device 77 is directly read into the RAM 72. CPU 71 is loaded into RAM 72 in an executable state. Execute the program. The input of the ID from the user and the output of the processing result are performed by the input / output device 80. The input / output device 80 includes a keyboard, a mouse, a display and the like. The communication interface 74 accesses the information provider 76 via the network 75, downloads a program for realizing the embodiment of the present invention from the information provider 76 to the external recording device 77, etc. It is a network connection device that enables the CPU 71 to execute on a low-powered computer. Alternatively, the information provider 76 executes the program, and the communication interface 74 receives only the execution processing result from the information provider 76 via the network # 5. Embodiments of the invention can be implemented by remote access. Industrial applicability

By making the storage location of the management information on the medium movable based on information unique to the medium and the device used, even if all data on the medium is illegally copied to another medium, The storage location of the management information cannot be obtained from the information unique to the copy destination medium or device, and unauthorized access to the file can be prevented. A similar effect can be obtained by encrypting the management information using such unique information as a key.

As described above, the range in which a file stored on a medium can be correctly accessed can be limited according to the confidentiality level of the file.

Claims

The scope of the claims

1. A device for formatting a recording medium or accessing a file recorded on the recording medium,

Reading the identifier of the recording medium or the device, and imparting confidentiality to the recording medium based on the identifier, or confidentiality imparting Z releasing means for releasing confidentiality of the recording medium,

A recording medium accessing means for accessing the recording medium when the confidentiality is given to the recording medium or when the confidentiality of the recording medium is released.

2. The apparatus according to claim 1, wherein the confidentiality imparting Z release means is included in a computer, and the recording medium access means is included in a drive device of the recording medium.

3. The apparatus according to claim 2, wherein the confidentiality is provided by moving a storage location of management information on a file stored in the recording medium.

4. The storage destination according to claim 3, wherein the storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the recording medium. The device according to item.

5. The storage location is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the drive device. The apparatus according to claim 3, wherein

6. The storage location is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the computer. An apparatus according to claim 1.

7. The storage destination is determined using position information on the recording medium obtained by an operation based on an identifier externally input to the computer. The device according to item 3.

8. The storage location is a position on the recording medium obtained by an operation based on a code generated by combining identifiers uniquely given to the recording medium, the drive device, and the computer, respectively. The device according to claim 3, wherein the determination is performed using information.

9. The confidentiality is released by specifying a position where the management information is stored, and reading the management information from the specified position normally. The apparatus of claim 3 wherein:

10. The apparatus according to claim 1, wherein the confidentiality is given by moving a storage location of management information such as a file stored in the recording medium.

11. The storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the recording medium. The apparatus according to claim 10, wherein:

12. The storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the device. Device according to paragraph 0.

13. The storage destination uses position information on the recording medium obtained by an operation based on a code generated by combining identifiers uniquely given to the recording medium and the device. Apparatus according to claim 10, characterized in that it is determined.

14. The release of the confidentiality is performed by specifying a position where the management information is stored and reading the management information normally from the specified position. Item 10. The apparatus according to Item 10.

15. The apparatus according to claim 1, wherein the confidentiality is given by encrypting management information about the file, Z, or the file itself. 15.

16. The apparatus according to claim 15, wherein the encryption is performed using an encryption key corresponding to an identifier given to the device or the recording medium.

17. The encryption according to claim 15, wherein the encryption uses a combination of identifiers given to the device or the recording medium as an encryption key.

18. The apparatus according to claim 15, wherein said confidentiality imparting / cancelling means is included in a computer, and said recording medium access means is included in a drive device of said recording medium.

19. The claim according to claim 18, wherein the encryption is performed using an encryption key corresponding to an identifier uniquely given to the computer, the drive device, or the recording medium. apparatus.

20. The apparatus according to claim 18, wherein the encryption uses a combination of identifiers given to the computer, the drive device, or the recording medium as an encryption key.

21. The apparatus according to claim 1, wherein said confidentiality imparting Z canceling means is included in a format for formatting said recording medium.

22. The apparatus according to claim 1, wherein the confidentiality imparting / releasing means is included in a file system for accessing the recording medium.

23. The method according to claim 1, wherein the confidentiality imparting κ canceling means is included in a system for performing a defractionation process on the recording medium.

2 4. A driver that reads from or writes to a recording medium. A recording medium used in a system having at least an electronic device, wherein an identifier uniquely assigned to the drive device or a position on the recording medium calculated based on an identifier uniquely assigned to the recording medium is provided. A recording medium characterized by recording management information on a file to be recorded on the recording medium.

25. The system further includes a calculator,

3. The method according to claim 2, wherein the management information is recorded in an identifier uniquely given to the computer or in a storage location calculated based on an identifier input from the outside. The recording medium according to item 4.

26. A recording medium used in a system having at least a drive device for reading from or writing to the recording medium, based on an identifier uniquely given to the drive device or the recording medium. Recording information obtained by encrypting management information on files recorded on the recording medium.

27. The system further includes a calculator,

27. The recording medium according to claim 26, wherein management information such as a file recorded on said recording medium is encrypted based on an identifier uniquely given to said computer.

28. A method of formatting a recording medium or accessing a file recorded on the recording medium,

(a) An identifier is read into the recording medium or the device, and based on the identifier, And giving the recording medium confidentiality, or canceling the confidentiality of the recording medium,

(b) accessing the recording medium when the confidentiality is given to the recording medium or when the confidentiality of the recording medium is released;

A method comprising:

29. The method according to claim 28, wherein the step (a) is performed by a computer, and the step (b) is performed by a drive device of the recording medium.

30. The method according to claim 29, wherein the confidentiality is provided by moving a storage location of management information such as a file stored in the recording medium.

31. The storage device according to claim 30, wherein the storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the recording medium. The method described in the section.

32. The storage device according to claim 3, wherein the storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the drive device. The method according to item 0.

33. The storage device according to claim 3, wherein the storage location is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the computer. The method according to item 0.

34. The storage destination is determined using position information on the recording medium obtained by an operation based on an identifier externally input to the computer. 30. The method according to claim 30.

35. The storage destination stores position information on the recording medium obtained by an operation based on a code generated by combining identifiers given to the recording medium, the drive device, and the computer, respectively. 31. The method of claim 30 wherein the method is used to determine.

36. The release of the confidentiality is performed by specifying a position where the management information is stored and reading the management information normally from the specified position. The method according to paragraph 30.

37. The method according to claim 28, wherein the confidentiality is provided by moving a storage location of management information regarding a file stored in the recording medium.

38. The storage destination according to claim 37, wherein the storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the recording medium. The method described in the section.

39. The storage destination is determined using position information on the recording medium obtained by an operation based on an identifier uniquely given to the device. 7. The method according to item 7.

40. The storage destination is obtained by using position information on the recording medium obtained by an operation based on a code generated by combining identifiers uniquely given to the recording medium and the device. 38. The method of claim 37, wherein the determining is performed.

41. The confidentiality release is performed by specifying a position where the management information is stored and reading the management information normally from the specified position. 37 Method according to clause 7.

42. The method according to claim 28, wherein the confidentiality is provided by encrypting management information about the file, Z, or the file itself.

43. The method according to claim 42, wherein the encryption is performed using an encryption key corresponding to an identifier given to the device or the recording medium.

44. The method according to claim 42, wherein the encryption uses a combination of identifiers given to the device or the recording medium as an encryption key.

45. The method according to claim 42, wherein the step (a) is performed by a computer, and the step (b) is performed by a drive device of the recording medium.

46. The method according to claim 42, wherein the encryption is performed using an encryption key corresponding to an identifier given to the computer, the drive device, or the recording medium.

47. The method according to claim 42, wherein said encryption uses a combination of an identifier given to said computer, said drive device, or said recording medium as an encryption key.

48. The method according to claim 28, wherein said step (a) is performed in a format for formatting said recording medium.

49. The method according to claim 28, wherein said step (a) is performed in a file system for accessing said recording medium.

50. The method according to claim 28, wherein said step (a) is performed by a system for performing a defractionation process on said recording medium.

51. A recording medium which records a program for causing a computer to format a recording medium or execute a process of accessing a file recorded on the recording medium,

The processing is

(a) Read the identifier of the recording medium or the device and make the recording medium confidential or release the confidentiality of the recording medium based on the identifier. Steps to

A recording medium comprising: