JP2002207663A - Information management system, access managing method in it and storage medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a person to access data easily without losing secrecy only if the person is permitted by a registered user though he/she is not a registered user. SOLUTION: The first client 1a requests an access key to a server 2 (a), next obtains the access key from the server 2 (b), transmits an access key K to the second client 1b through the server 2 (c). Next, the client 1b transfers the using command of an access right to the server 2 (d) and obtains a requested matter from the server 2 (e). Next, the server 2 refers to charge information and in the case of 'there is charge setting', the server sends a bill to the first client 1a (f). After then, the first client la pays a charge to the server 2 (g), which sends a demo key to the client 1b (h).

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing system, an access management method in the information management system, and a storage medium, and more particularly, to an information processing system in which a server device and a plurality of client devices are connected on a network. And an access management method in an information management system for managing an access right and a charging target when a client device accesses a server device, and a computer-readable storage medium storing an operation procedure for managing the access right and the charging target About.

[0002]

2. Description of the Related Art Conventionally, in an information management system in which a server device and a plurality of client devices are connected to a network, a user who can access document information stored in the server device is registered as a user and has access to the document information. , And the user is usually charged for the user who has registered.

[0003] Therefore, if an unregistered user who has not been registered as a user wants to access the document information, the user must register a new user or lend the user ID of the registered user. In order to allow a person who does not have access to the document to access the specific document, it is necessary to newly grant an access right or obtain an access ID that can be used by the entire group in advance. In order to charge other registered users other than the person who accessed the specific document, the billing settings had to be changed, which was inconvenient.

[0004] On the other hand, various technologies related to application service providers (hereinafter referred to as "ASPs") have already been developed.

For example, in Japanese Patent Application Laid-Open No. Hei 8-263438, "Distribution and Use Control System of Digital Work and Method of Controlling Access to Digital Work", a specific repository is used as a digital ticket with a right to use and a charging condition, and a specific member is used. A method for sharing a document link pointer between different document management systems is disclosed in JP-A-11-120053.

[0006]

However, according to the above-mentioned prior art, it is not possible to allow any one person inside or outside the system to refer to a specific document in the information management system, and to flexibly set the billing in that case. Was.

On the other hand, an ASP based on a document management system on the Internet, which will increase in the future,
It is thought that a mechanism that makes it easy to use with certain operations while setting strict access rights and charging settings is required.

The present invention has been made in view of such circumstances, and even if a person other than a registered user is an authorized person of the registered user, the data can be easily accessed without impairing confidentiality. An object of the present invention is to provide an information management system capable of performing the above, an access management method in the information management system, and a storage medium.

[0009]

In order to achieve the above object, an information management system according to the present invention is an information management system including a plurality of client devices and a server device for managing the plurality of client devices. Wherein the first client device comprises: first access means for accessing data; and access key creation means for creating an access key including an access right for the data accessed by the access means. A transfer unit that transfers the access key to a second client device, wherein the second client device accesses the data using the access key transferred by the transfer unit. It is characterized by having.

[0010] Also, an access management method in an information management system according to the present invention includes a plurality of client devices,
An access management method in an information management system including a server device that manages the plurality of client devices, wherein a first client device accesses a data in a first access step; An access key creating step of creating an access key including an access right for the accessed data, wherein the server device includes a transfer step of transferring the access key to a second client device, wherein the second client device Includes a second access step of accessing the data using the access key transferred in the transfer step.

A storage medium according to the present invention is a computer-readable storage medium storing a control procedure for controlling access to another client apparatus by taking in an access key including charging information and access right created in the client apparatus. A storage medium, an encryption procedure for encrypting an access key created by the client device, a storage procedure for copying and storing the access key encrypted by the encryption procedure, and the other client A transfer procedure for transferring the encrypted access key to the device, a billing party determining procedure for determining a billing party based on the billing information, and the billing party determined by the billing party determining means creates an access key. In the case of a second client device other than the first client device, the second client device is provided with data for system trial use. Demo key delivery procedure for delivering keys is characterized in that it is stored.

The other features of the present invention will be apparent from the following description of embodiments of the present invention.

[0013]

Next, an embodiment of the present invention will be described in detail with reference to the drawings.

FIG. 1 is a system configuration diagram showing an embodiment of an information management system according to the present invention. The information management system includes two client devices (first and second client devices) used by a plurality of users. Client devices 1a, 1b)
And the server device 2 that manages the document information are LA
N, which is connected via a network 3 such as N, and transfers an access key K created by one client device to the other client device via the server device 2 to access the other client device. Is provided.

FIG. 2 is a block diagram showing the internal details of the information management system. Since the first and second client devices 1a and 1b have the same configuration, the client device is simply indicated by reference numeral 1 in FIG.

The client device 1 includes an input device 4 for performing an operation for a user to access desired document information, a memory unit 5 for storing a predetermined calculation program and calculation data and used as a work area, and a hard disk. (HD) or a flexible disk (FD), and an external storage device 6 such as an LCD or C for displaying an access result.
A network interface 8 for controlling an interface operation between the display device 7 such as an RT and the network 3
And a central processing unit 9 connected to these components to control the entire apparatus.

The server device 2 includes a network interface 10 for controlling an interface operation with the network 3 and a memory unit 1 for storing a predetermined arithmetic program and arithmetic data and used as a work area.
1, an external storage device 12 such as an HD or FD, and a central processing unit 13 connected to each of these components to control the entire device.

FIG. 3 shows a main display screen of the display device 7. The main display screen includes an object display area 14 for displaying an object, a display format selection button 15 for selecting a display format of the object, and a memory. A storage area selection button 16 for changing selection of various data stored in the unit 6 or the external storage device 7 and an icon display area 18 for displaying an access key creation icon 17 are provided.

The display format selection button 15 includes a thumbnail display button 15a and a list display button 15b. The storage area selection button 16 includes a storage area α selection button 16a, a storage area β selection button 16b, and a storage area γ.
A selection button 16c is provided.

In FIG. 3, the thumbnail display button 15a and the storage area α selection button 16a are operated, and two objects (object A and object B) stored in the storage area α are displayed in the object display area 14 as thumbnails. It is displayed in the format.

Then, as shown by an arrow X, when the object A is dragged to the access key creation icon 17 and dropped, an access key setting screen as shown in FIG. 4 is displayed.

In FIG. 1, a charge setting display section 19 sets whether or not to charge. Specifically, to charge the user of the first client 1a operating the access key setting screen (hereinafter referred to as “user A”), select “with charging setting” and access from user A. To charge the user of the second client 1b (hereinafter, referred to as “user B”) accessing the document information with the key K, “no charging setting” is selected.

The access right display section 20 allows the user A to set the access right to the document, and can select any of "edit / print", "read / print", and "read" ( In the present embodiment,
The figure shows a case where “edit / print” is selected).

The password input unit 21 prevents the access key ID from being stolen, because when the "charge setting is selected" on the charge setting display unit 19, the creator (user A) of the setting screen is charged. Prompt the creator to enter a password

The charging limit setting input section 22 is for preventing the user B from accessing beyond the budget limit, and has an access key K by setting such a charging limit. Even if a correct password is input, access is prohibited if the usage frequency increases and the amount exceeds a limit.

The expiration date input section 23 inputs the expiration date of the access key K, so that anyone can access only within the expiration date.

The OK button 24 is operated when the setting contents of the access key setting screen are "OK", and the cancel button 25 is operated when canceling the setting contents of the access key setting screen.

FIG. 5 is a format diagram of an access key file. The access key file includes an access key ID for identifying it from other access keys, charging settings, access right, charging limit, and expiration date. , And the absolute position of the dropped document in the storage area. Then, the access key file is encrypted and passed to the user of the second client device 1b, and is copied and stored in the server device 2.

As described above, all information necessary for accessing a specific document is set on the access key setting screen.

FIG. 6 is a flowchart of an access key acquisition routine.
Is executed by the CPU 9.

Hereinafter, the operation procedure of this program will be described for the case where the user A of the first client device 1a acquires the access key of the object A displayed as a thumbnail.

First, when the user A operates the mouse (not shown) and drags and drops the object A displayed on the main display screen to the access key creation icon 17,
In step S1, the absolute position of the document is obtained. In step S2, the access right of the document is obtained. In step S3, an access key setting screen (FIG. 4) is displayed on the display device 7 of the first client device 1a. Enter the access key creation conditions. That is, step S
In step 2, any access right of “reading”, “reading / printing” or “editing / printing” is acquired, and in step S3, various access key creation conditions are input within the acquisition range of the access right. For example, when the access right of the document acquired in step S2 is “read”, “read / print” and “edit / print” of the access right 20 on the access key setting screen are grayed out and cannot be selected. .

Next, in step S4, it is determined whether or not the OK button 24 has been selected by the user A on the access key setting screen. If the answer is negative (No), that is, if the cancel button 25 is selected, the process is terminated as it is, while if the answer is affirmative (Yes), the process proceeds to step S5, where the content is checked, and the input is incomplete. If there is, the process returns to step S3 to repeat the above processing.

If it is determined in step S5 that there is no input deficiency, the process proceeds to step S6, where the access key K is encrypted to create an access key file, and in step S7, the encrypted access key K is stored. The file having the same content as the access key K is copied and stored in the memory unit 11. In the subsequent step S8, the access key K created in step S6 is transferred from the first client device 1a to the second client device 1b via the LAN 3. Transfer to

Thus, the user B of the second client 1b receives the access key K from the user A,
As shown by the arrow Y in FIG. 7A, when the user drags and drops the object onto the object display area 14 'of the display device 7 (main display screen) in the second client device 1b,
The database is accessed based on the information stored in the access key K, and the document A of the storage area α selection button 16a 'is displayed as shown in FIG.
The print function becomes operable.

FIG. 8 is a flowchart of a charging process routine. This program is executed by the CPU 13 of the server device 2.

In step S11, the access key file is received from the second client device (user B),
Next, in step S12, the contents of the access key K are checked. That is, it is checked whether the compression can be normally decompressed, the format is normal, the access key K having the same access key ID exists, and whether or not all the file contents match. In the case of No), the process proceeds to step S13, an error message is displayed, and the process ends.

On the other hand, if the answer in step S12 is affirmative (Ye
In the case of s), the process proceeds to step S14, and it is determined whether or not the expiration date is reached.
, An error message is displayed, and the processing is terminated. On the other hand, if the answer is affirmative (Yes), it is determined whether or not “charge setting is set” is set.

If the answer is affirmative (Yes), the flow advances to step S16 to prompt the user A to enter a password. If the password matches the password stored in the server device 2 in step S17, the flow advances to step S20. If not, an error message is displayed in step S13, and the process ends.

In step S15, "no charge setting"
Is set to, that is, when the user B who accesses using the access key K is charged, the process proceeds to step S17 to display a login screen (not shown),
In step S19, it is determined whether or not the login is successful. If the answer is negative (No), an error message is displayed in step S13, and the process ends. On the other hand, if the answer is affirmative (Yes), Proceed to step S20.

Then, in step S20, charging is started, and in the following step S21, the corresponding document is read from the database based on the absolute position of the document obtained from the access key K, and in step S22, thumbnails are displayed and functions available (this embodiment) In the embodiment, "editing" and "printing" are enabled, and then, in a step S23, it is determined whether or not a processing operation command is issued by the user B.

If the answer is affirmative (Yes), the flow advances to step S24 to execute each operation (editing / printing), and then returns to step S23.

On the other hand, if each operation is completed and the answer to step S23 is negative (No), the process proceeds to step S25 to end charging, and in subsequent step S26, the access key K is set to "charged" again. It judges whether or not the answer is affirmative (Yes), sends an invoice to the user A who created the access key K, acquires a fee, and sends a "demo key" to the user B in step S28. To end the processing. That is, a "demo key" that allows the system to be used for a certain period of time is sent to the user B who has been introduced by the user A, and the user B is given an opportunity to consider whether to perform user registration for a certain period of time.

On the other hand, the answer in step S26 is negative (No).
In the case of, the user B is charged, so a bill is sent to the user B, a fee is acquired, and the process is terminated.

FIG. 9 is a sequence diagram in the case where the user A creates the access key K and is charged to the user A, and also causes the user B to edit / print a document.

First, when the user A of the first client device 1a requests the access key K for the document A, the user drags the document A by operating the mouse (not shown) as shown by an arrow X in FIG. , Drag the access key creation icon 17 to make an access key request (a). Then, after the first client 1a obtains the access key from the server device 2 (b), the first client 1a sends the access key K to the The data is transmitted to the second client device 1b via the server device 2 (c).

Next, the second client device 1b transfers a command for exercising an access right such as editing / printing to the server device 2 to the server device 2 (d), and obtains a request from the server device 2 by exercising (d). e).

Next, the server device 2 refers to the billing information in the access key K, and if "billing is set", the server device 2 sends a bill to the first client device 1a (f), and The fee is paid to the device 2 (g), and the server device 2 sends the demo key to the second client device 1b (h).

As described above, according to the present embodiment, since the access key K in which the storage position of the document and the access right are written can be transmitted from the user A to the user B, the registration key registered in the system can be transmitted. A person other than the user or a registered user who has no access right can easily display a desired document based on the received access key K, and can edit and print.

Further, since the creator of the access key can also set the billing setting when accessing the document, the person who lent the access key is not charged unfairly and unexpectedly. Spending can be avoided.

Further, when the access key K is given to a person other than the registered user to give the access right to the document, the access key creator is charged while the person who has lent the access key K is charged. By sending a demo key, you can get more customers with less investment.

The present invention is not limited to the above embodiment. In the present embodiment, the thumbnail display button 15a is selected in FIG. 3 to display a thumbnail in the object display area 14. However, it is also preferable to select the list display button 15b. In this case, for example, the storage area α The stored objects are displayed in a list format, and by dragging and dropping the object A to the access key creation icon 17 in the icon display area 18, an access key setting screen is displayed as described above.

In this embodiment, the access key K is created for one specified document.
An access key K that gives similar rights to a specific storage area (folder) can also be created.

Further, in the present embodiment, the selected document information is compressed and then stored in the access key K and transmitted. However, information necessary for access is stored in the server device 2 and only the password is stored in the user A. And if the passwords match, access may be made using the contents of the access key K.

A program for executing this operation procedure may be stored in the ROM of the memory unit 11 in advance, or may be stored in the external storage device 12 such as an FD or an HD. From storage device 12 to R in memory unit 11
The program may be loaded into the AM and executed by the CPU 13.

Further, the above-described operation procedure may be stored in a storage medium such as a CD-ROM and installed in the server device 2.

[0057]

As described above in detail, according to the present invention, an access key such as a data storage position and an access right can be transmitted to another person. Even a registered user who does not have access right can easily display a desired document based on the received access key, and can perform editing and printing.

Also, the charge setting for accessing the document can be set by the creator of the access key at the creation stage, so that the person lent the access key to the access key is not charged unduly. Unexpected expenses can be avoided.

Further, when an access key is given to a person other than the registered user to give an access right to the document, the access key creator is charged, while a demo key is given to the person who has lent the access key K. By sending more customers with less investment.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram showing an embodiment of an information management system according to the present invention.

FIG. 2 is a block diagram showing details of the information management system.

FIG. 3 is a main display screen of the display device.

FIG. 4 is a diagram showing an example of an access key setting screen.

FIG. 5 is a format diagram of an access key file.

FIG. 6 is a flowchart of an access key acquisition routine.

FIG. 7 is an example of a display screen displayed on a display device of a client device that has received an access key from an access key creator.

FIG. 8 is a flowchart of a billing process routine.

FIG. 9 is a sequence diagram showing an operation procedure of the information management system.

[Explanation of symbols]

 1a first client device 1b second client device 2 server device 7 display device 8 network interface 9 central processing unit 10 network interface 13 central processing unit

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G06F 17/60 302 G06F 17/60 302E 318 318G 332 332 512 512

Claims (11)

[Claims] 1. An information management system comprising: a plurality of client devices; and a server device for managing the plurality of client devices, wherein a first client device accesses a first data device.
Access means, and access key creation means for creating an access key including an access right for data accessed by the access means, wherein the server device transfers the access key to a second client device An information management system, comprising: a second access unit that accesses the data using the access key transferred by the transfer unit. 2. The server according to claim 1, wherein the access key includes billing information, and the server device has billing destination determining means for determining a billing destination based on the billing information. Information processing system. 3. The server device, if the billing destination determined by the billing destination determining means is the second client device, sends a demo key for system trial use to the second client device. 3. The information management system according to claim 2, further comprising means. 4. The information management system according to claim 1, wherein an absolute position in the storage area where the data is stored is written in the access key. . 5. The access right includes “read”, “edit / edit”
5. The information management system according to claim 1, wherein a plurality of modes including "printing" and "reading / printing" are set. Claims 6 to 11 are also requested to be corrected as described above. 6. An access management method in an information management system including a plurality of client devices and a server device managing the plurality of client devices, wherein a first client device accesses a first data device.
And an access key creating step of creating an access key including an access right for the data accessed in the first access step, wherein the server device transfers the access key to a second client device An information management system, comprising: a second access step in which the second client device accesses the data using the access key transferred in the transfer step. Access management methods in 7. The information according to claim 6, wherein the access key includes accounting information, and the server device includes an accounting destination determining step of determining an accounting destination based on the accounting information. Access control method in the management system. 8. A demo key transmission for transmitting a demo key for system trial to the second client device when the charging destination determined in the charging destination determination step is the second client device. The access management method in an information management system according to claim 7, comprising a step. 9. The information management system according to claim 6, wherein an absolute position in a storage area where data is stored is written in the access key. Access control method. 10. The access right is set in a plurality of modes including “reading”, “editing / printing”, and “reading / printing”. An access management method in the information management system according to Item 1. 11. A computer-readable storage medium storing a control procedure for controlling access to another client device by capturing an access key including access information and accounting information created by the client device. An encryption procedure for encrypting an access key created by the client device; a storage procedure for copying and storing the access key encrypted in the encryption procedure; A transfer procedure for transferring the access key, a billing party determining procedure for determining a billing party based on the billing information, and a billing party determined by the billing party determining means other than the first client device that created the access key. In the case of the second client device of
A demo key sending procedure for sending a demo key for system trial use to the client device.