Apparatus, method and computer readable storage medium with recorded program for managing files with alteration preventing/detecting functions

Abstract

By storing an authenticator created from a data file in a secure area usually unaccessible, the alteration of the data file can be detected. Furthermore, by designating the data file as a main-file and creating authenticators from various kinds of sub-files related to the main-file, the size of the secure area where the authenticators are stored, can be reduced.

1 - 4 . (canceled) 
   
   
       5 . A system for managing files, comprising:
 main-file storing means for storing a main-file;   sub-file storing means for storing at least one sub-file to which the main-file authentication information is related;   authentication information creating means for creating main-file authentication information to be used to verify the main-file/sub-file authentication information to be used to verify the sub-files; and   system file storing means for storing a system file to which the sub-file authentication information is related.   
   
   
       6 . The system for managing files according to  claim 5 , wherein said main-file, said sub-files and said system files are stored in a non-secure area usually accessible. 
   
   
       7 . The system for managing files according to  claim 5 , wherein said main-file, and said sub-files and said system files are stored in a non-secure area usually accessible and a secure area usually unaccessible, respectively. 
   
   
       8 . The system for managing files according to  claim 5 , wherein said main-file and said sub-files, and said system files are stored in a non-secure area usually accessible and a secure area usually unaccessible, respectively. 
   
   
       9 . The system for managing files according to  claim 6 , further comprising a computer and a storage unit, wherein
 the computer comprises
 reciprocal authenticating means for reciprocally authenticating the computer with the storage unit and when the computer and the storage unit are reciprocally authenticated, creating access allowing keys; 
 access allowing key storing means for storing the access allowing keys; and 
 file accessing means for sending an access request together with the access allowing key, 
   the storage unit comprises
 reciprocal authenticating means for reciprocally authenticating the storage unit with the computer and when the computer and the storage unit are reciprocally authenticated, creating access allowing keys; 
 access allowing key group storing means for storing all the access allowing keys; and 
 access allowing key identification means for identifying if the access allowing key sent from the file accessing means and stored in the access allowing key storing means and at least one access allowing key stored in the access allowing key group storing means, are the same; and 
 secure area accessing means for accessing a secure area usually unaccessible, and 
   the authentication information creating means reads a medium ID peculiar to the medium stored in the secure area, and uses the medium ID to create the main-file authentication information and the sub-file authentication information after the computer and the storage unit are reciprocally authenticated.   
   
   
       10 . The system for managing files according to  claim 7 , further comprising a computer and a storage unit, wherein
 the computer comprises
 reciprocal authenticating means for reciprocally authenticating the computer with the storage unit and when the computer and the storage unit are reciprocally authenticated, creating access allowing keys; 
 access allowing key storing means for storing all the access allowing keys; and 
 file accessing means for sending an access request together with the access allowing key, 
   the storage unit comprises
 reciprocal authenticating means for reciprocally authenticating the storage unit with the computer and when the computer and the storage unit are reciprocally authenticated, creating access allowing keys; 
 access allowing key group storing means for storing all the access allowing keys; and 
 access allowing key identification means for identifying if the access allowing key sent from the file accessing means and stored in the access allowing key storing means and at least one access allowing key stored in the access allowing key group storing means, are the same; and 
 secure area accessing means for accessing a secure area usually unaccessible, and 
   the authentication information creating means reads a medium ID peculiar to the medium stored in the secure area, and uses the medium ID to create the main-file authentication information and the sub-file authentication information after the computer and the storage unit are reciprocally authenticated.   
   
   
       11 . The system for managing files according to  claim 8 , further comprising a computer and a storage unit, wherein
 the computer comprises
 reciprocal authenticating means for reciprocally authenticating the computer with the storing unit and when the computer and the storage unit are reciprocally authenticated, creating access allowing keys; 
 access allowing key storing means for storing the access allowing key; and 
 file accessing means for sending an access request together with the access allowing key, 
   the storage unit comprises
 reciprocal authenticating means for reciprocally authenticating the storage unit with the computer and when the computer and the storage unit are reciprocally authenticated, creating access allowing keys; 
 access allowing key group storing means for storing all the access allowing keys; and 
 access allowing key identification means for identifying if the access allowing key sent from the file accessing means and stored in the access allowing key storing means and at least one access allowing key stored in the access allowing key group storing means, are the same; and 
 secure area accessing means for accessing a secure area usually unaccessible, and 
   the authentication information creating means reads a medium ID peculiar to the medium stored in the secure area, and uses the medium ID to create the main-file authentication information and the sub-file authentication information after the computer and the storage unit are reciprocally authenticated.   
   
   
       12 . The system for managing files according to  claim 9 , wherein the reciprocal authenticating means provided in said computer and said file accessing means are implemented by means of hardware. 
   
   
       13 . The system for managing files according to  claim 9 , wherein the medium ID is a card ID. 
   
   
       14 . The system for managing files according to  claim 9 , wherein the medium ID is a master ID. 
   
   
       15 . The system for managing files according to  claim 9 , wherein said authentication information is created for each record of a file. 
   
   
       16 . The system for managing files according to  claim 10 , wherein said authentication information is created for each record of a file. 
   
   
       17 . The system for managing files according to  claim 11 , wherein said authentication information is created for each record of a file. 
   
   
       18 - 39 . (canceled) 
   
   
       40 . A method of managing files, comprising:
 storing a main-file;   storing at least one sub-file to which main-file authentication information is related;   creating main-file authentication information to be used to verify main-file/sub-file authentication information to be used to verify the sub-files; and   storing a system file to which the sub-file authentication information is related.   
   
   
       41 - 48 . (canceled) 
   
   
       49 . A computer readable storage medium having a recorded file management program that when executed by a computer caused the computer to perform a method comprising:
 storing a main-file;   storing at least one sub-file to which main-file authentication information is related;   creating the main-file authentication information to be used to verify the main-file/sub-file authentication information to be used to verify the sub-files; and   storing a system file to which the sub-file authentication information is related.   
   
   
       50 - 54 . (canceled)