Abstract: An access right to a protected folder 31 is acquired, and when writing designated data contained in the protected folder 31 into a clipboard 22 provided within a main storage device 20, the data is encrypted by using an encryption key associated with the protected folder 31 and the encrypted data is written into the clipboard 22, while when pasting the encrypted data held in the clipboard 22 into a file stored within an auxiliary storage device 30, the encrypted data is decrypted and the decrypted data is pasted into the file. In this way, while retaining the convenience offered by the clipboard, it becomes possible to prevent the protected data from being taken outside the computer system via the clipboard.

Abstract: An apparatus for obtaining a write log when a file in a computer is written to a recording medium, includes an event detecting means for detecting an event of a file access, a reading means for reading file information by detecting that the file access is a read access to the file in the time from an open access to a close access when the event detecting means detects an event and a log obtaining means for outputting the file information read by the reading means to a memory area as a log when the file access is determined as a close access when the event detecting means detects an event. The apparatus for obtaining a write log prevents information in the computer from being written freely and directly to an external recording medium, not via an OS but via an original driver such as writing software, whereby information leakage can be managed.

Abstract: A management method for a computer system for simply and more reliably preventing an unauthorized use of an application has been disclosed. The management method of a computer system, which comprises hardware, an O/S, a DLL storing a plurality of DLL files, and a plurality of application programs that use the DLL files, prevents an unauthorized use of an application, the use of which is prohibited for some users. A set of prohibited DLL files required for identifying a prohibited application is determined, the set of the prohibited DLL files is stored in correlation with use conditions, use conditions are detected when the activation of an application program is requested, set of the DLL files to be used by the application program is detected, whether the detected set of the DLL files includes the set of the prohibited DLL files in correlation with the detected use conditions, and the application program is terminated when the set of the prohibited DLL files is judged to be included.

Abstract: Based on user permission information read from a write-protected portable medium, it is determined whether an application is permitted to use a resource. If the application is permitted to use the resource, the write protection of the portable medium is released, usage log information is written into the medium.