JP2008052337A - Digital data file multi-attribute evaluation classification operation management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that since the inventory taking operation of a large amount of pieces of digital information for the purpose of the acquisition/update/periodic voluntary check or the like of a plurality of standard specifications (international standard or authenticated specification) is concentrated in each specific period in an organization such as an enterprise, a person in charge of the inventory taking operation has performed such an operation whose labor is large such as the list-up, evaluation classification and recording of storage file names with storage individuals as targets to a spread sheet or the like. <P>SOLUTION: A digital data file multi-attribute evaluation classification operation management program is provided to achieve the inventory taking operation of digital information as a daily operation based on a plurality of purposes by carrying out the end batch recognition of the storage of a plurality of information systems, the application and change of the file names of digital information and a plurality of pieces of the attribute information for property information (evaluation classification information of multi-attributes) (for example, for the purpose of compliance with an information security management international standard, personal information protection law, and enterprise reformation law with "confidential information", "personal information", and "financial information" as attribute information), and by providing two types of evaluation classification interfaces to a user "(1) wing display type" and "(2) fuselage enumeration representation type". <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a digital data file multi-attribute evaluation classification operation management program that supports efficient evaluation classification and management of digital data files on a storage of a plurality of information systems.

  In recent years, organizations such as corporations have been required to comply with multiple international standards and other standards such as information security management, personal information protection, privacy mark system, US and Japanese version of the Corporate Reform Act, which require the inventory (evaluation classification) of digital information within the organization. Acquisition, renewal, and periodic self-inspection of certification standards based on the standards.

In general, these large-scale digital information inventory operations are concentrated on occasions such as acquisition, renewal, and periodic self-inspection, since the standard standards (international standards and certification standards) differ from each other. In addition, a large amount of digital information to be inventoried is generally distributed to the storage of multiple information systems in the organization, but the person in charge of the inventory work can list the storage file name for each storage on a spreadsheet, etc. Work with a large effort of evaluation classification and recording is performed (for example, see Non-Patent Document 1, Non-Patent Document 2, and Non-Patent Document 3).
Information security management system conformity assessment system ISMS certification standard version 2.0 (issued in April 2003), Japan Information Processing Development Corporation Guidelines for creating a compliance program for personal information protection version 1.0 (issued in December 1999), Japan Information Processing Development Corporation (Privacy Mark Secretariat) Standards for evaluation and audit of internal control over financial reporting (exposure draft) (issued in July 2005), FSA Corporate Accounting Council

  The conventional digital information inventory work described above has the following three problems. In other words, (1) It is implemented individually for multiple purposes such as acquisition, renewal, and periodic self-inspection of multiple standards (international standards and certification standards), and (2) Targeting individual information system storage (3) It is a laborious task of visual listing, evaluation classification, and evaluation recording by humans, and these three issues make it difficult to create, use, and update digital information. Standards and certification standards) are being concentrated on specific periods such as acquisition, renewal, and periodic self-inspection.

  The present invention seeks to solve such problems in conventional digital information inventory work, integrates digital information inventory work for multiple purposes, and specifically targets storage in multiple information systems. In addition, in order to distribute the inventory work load, the purpose is to realize efficient digital data file evaluation classification and management as daily work.

  The present invention is, among the above objects, the first problem in the conventional digital information inventory work, “multiple objectives such as acquisition / update / periodic self-inspection of multiple standard standards (international standards and certification standards)”. In order to solve “individual implementation”, the inventory of digital information for multiple purposes is performed simultaneously by efficiently assigning multiple attribute information (multi-attribute evaluation classification information) to the file name and property information of the stored digital data It is possible to do.

  Next, the present invention provides an agent program in a plurality of information systems in order to solve the above-mentioned object, which is the second problem in the conventional digital information inventory work, which is “targeting storage of individual information systems”. , Which enables batch recognition of the storage and stored digital data files.

  Furthermore, the present invention solves the above-mentioned object of the third problem in the conventional digital information inventory work, which is “a work that requires a large amount of labor, such as listing, evaluation classification, and evaluation recording by human eyes”. Therefore, each user can use the two types of evaluation classification operation interfaces, “1. Wing display type”, “2. Fuselage display type”, and these multiple attributes simultaneous display on the “Evaluation classification operation screen”. It enables efficient evaluation and classification operations for a large amount of digital data files during creation, use, and update.

  Finally, the present invention complements the above-mentioned problem solving of the first, second and third, and efficient digital data file evaluation classification and management as daily work. The function of “authority setting” regarding the evaluation and classification operation of digital information and the function of “situation management” that enables understanding of the setting status and change status of the attribute information of the digital information are added.

  The operation of the first problem solving means is as follows. That is, as a plurality of attribute information (multi-attribute evaluation classification information) for the file name and property information of digital data to be stored, settings for evaluation classification work of digital information for a plurality of purposes, for example, “confidential information”, “personal By using information and financial information as attribute information, it is possible to simultaneously carry out an inventory of digital information related to compliance with international standards for information security management, personal information protection law, and corporate reform law.

  The operation of the above problem solving means 2 is as follows. That is, by introducing the agent program for recognizing this program into a plurality of information systems, and the batch recognition of digital data files stored and stored in all systems, the administrator can manage the work item from the management terminal for the administrator. In "Initial Settings", after recognizing storage of multiple information systems by "Initial Settings Function" via "Initial Settings Screen", the management work items "Initial Settings", "Attribute Settings", "Authority Settings", Since “status management” and “evaluation classification operation” can be performed from the operation terminal for the user, it is not necessary for the administrator and the user to log in to each information system individually, and the inventory work is efficient. It becomes the target.

  The operation of the above problem solving means 3 is as follows. In other words, each user can combine multiple digital data files with storage as a basic unit by using “1. Wing display type” and “2. Set and change the classifier (evaluation level). In addition, the user performs efficient evaluation and classification operations for a large number of digital data files, such as searching for a specific classifier (evaluation level) in an arbitrary attribute, digital data files with unrated classification, and batch change. . Further, when there is a specific folder (for example, a personal information folder) corresponding to a specific classifier (evaluation level) in an arbitrary attribute after the evaluation classification operation, the batch is moved there. These support functions free you from labor-intensive tasks such as visual listing, evaluation classification, and evaluation recording, and enable daily inventory work that does not concentrate for a certain period of time.

  The operation of the “authority setting” function for the administrator that complements the solution of the above problems 1, 2, and 3 is as follows. In other words, the administrator creates a user group via the “authority setting screen” in the “authority setting” management task item from the management terminal, and “attribute reference” using the storage of the target information system as a basic unit. Set the authority for “Change attribute” and “Move file” and register the user in each user group. By this work, it is possible to achieve consistency between the file operation policy that has been set for each information system and the internal policy for multiple information systems, and the internal policy can be reviewed based on requirements such as standards. As a result, it plays the role of management support for the inventory of digital information.

  The operation of the “situation management” function for managers that complements the above solution of the problems 1, 2, and 3 is as follows. That is, the administrator understands the setting status and change status of attribute information using the storage of the target information system as a basic unit via the “status management screen” in the “status management” management task item from the management terminal. Is possible. This is the role of management support for the inventory work of digital information by the administrator monitoring and counting the status of inventory work by each user, finding problems related to the inventory work, and using it as a material for reporting plans and reports to management. To fulfill.

  According to the present invention, digital data file evaluation classification and management are efficiently performed as daily work in order to integrate digital information inventory work for multiple information system storage and to distribute the inventory work load. be able to.

  Hereinafter, embodiments of the present invention will be described with reference to FIGS. In this embodiment, in the in-house management information system, for example, three types of digital information of “confidential information”, “personal information”, and “financial information” in compliance with international standards for information security management, personal information protection law, and corporate reform law. Assume that information inventory work is performed simultaneously. The information system to be evaluated and managed is an information system having a large-capacity storage shared within the company, that is, various servers.

  In FIG. 1, from the left, the embodiment is a “target” having a “program body” that is the main body of the present invention, a storage that stores the evaluation information of the program and digital information to be managed, from the “management operation terminal”. It shows three main areas of “information system”. Furthermore, there is an “interface” between “management operation terminal” and “program body”, and “special function section” and “specialized memory” inside “program body”. Part ".

  In FIG. 1, there are a management terminal 1 and an operation terminal 2 as management operation terminals, which are connected to this program through an in-house network.

The use of this program is performed through the respective interfaces of “initial setting”, “attribute setting”, “authority setting”, “status management” for the administrator, and “evaluation classification operation” for the user.

  The five usage stages of “initial setting”, “attribute setting”, “authority setting”, “situation management”, and “evaluation classification operation” start with the introduction of the server of the program, “Attribute setting” and “authority setting” are performed, and “assessment operation” is performed by the user, and modification and “situation management” in “attribute setting” and “authority setting” are performed by the administrator as appropriate. .

  The procedures in the five use stages are shown in FIGS. 2 to 6 and will be referred to in the description of each stage hereinafter.

  The management terminal 1 is used by the general manager of this program or an administrator who is partially responsible for any of “initial setting”, “attribute setting”, “authority setting”, and “status management”. Is used by employees who perform “evaluation classification operations” using this program. Both the management terminal 1 and the operation terminal 2 have a calculation function including input and output devices.

  In FIG. 1, this program uses the specialized function section in each of the five use stages of “initial setting”, “attribute setting”, “authority setting”, “situation management”, and “evaluation classification operation”. In “initial setting”, “initial information display function unit 21”, “initial setting function unit 22”, and in “attribute setting”, “attribute information display function unit 23”, “attribute setting function unit 24”, “authority” In “setting”, “authorization information display function unit 25”, “authority setting function unit 26”, and in “situation management”, “situation information totaling display function unit 27”, “output instruction function unit 28”, and by the user “Evaluation classification operation” includes “file attribute information display function unit 29” and “evaluation classification operation function unit 30”.

  In FIG. 1, this program has five storage units, “recognition system / storage information storage unit 31”, “attribute / classifier information storage unit 32”, “user authority information storage unit 33”, “status information display”. A format storage unit 34 "and a" file attribute information storage unit 35 ".

  In FIG. 1, this program allows an administrator and a user to use the corresponding specialized function units from the management terminal 1 and the operation terminal 2 in each use stage described above, and the above-described program. By referring to the corresponding data from the five storage units, it is possible to perform evaluation classification and management of digital data files using the functions of this program.

  In FIG. 1, a target information system 52 is assumed to be a system having a storage 51 specialized in storing a large amount of digital data files such as a plurality of file servers and database servers. In this program, the storage recognizes a logical drive unit as a basis, and performs evaluation classification and management of the digital data file in the storage.

  In FIG. 1, the program installs the server, designates the management terminal of the program, and then stores the agent program 53 for recognizing the program into a target information system, that is, a digital data file storage target for evaluation classification and management. Have each storage system administrator install it. Thereby, an administrator and a user of this program can access the storage of these multiple information systems through the management terminal 1 and the operation terminal 2. The above tasks correspond to S1-1 and S1-2 in FIG.

  In the “initial setting” stage, the administrator uses “initial information display function unit 21” and “initial setting function unit 22”, which are the corresponding specialized function units, and “recognition system storage information” among the five storage units. The storage unit 31 "is accessed and the storage of the recognized target information system is referred to. The above task corresponds to S1-3 in FIG.

  The administrator opens the “target storage registration screen” of the “initial setting screen” of FIG. 7 by using the “initial information display function unit 21”, selects the network address of the target information system that is the input location of 102, and stores the storage Recognize names and set and register each name. The storage registered here becomes a “storage selection button bar 101” that appears on each screen used in each use stage thereafter, and is subsequently selected on each screen in each use stage. The above task corresponds to S1-4 in FIG.

  When the setting is changed on the “initial setting screen”, the “recognition system / storage information storage unit 31” is updated through the “initial setting function unit 21”.

  In the “attribute setting” stage, the administrator uses “attribute information display function unit 23” and “attribute setting function unit 24”, which are corresponding specialized function units, and selects “attribute / classifier information” from the five storage units. Access the storage unit 32 ".

  In FIG. 8, the administrator opens the “attribute setting screen” by using the “attribute information display function unit 23”, selects the target storage from the “storage selection button bar”, and has the option number 111, the attribute name 112, the attribute as attribute information. Definition 113, classifier (evaluation level) 114, and classifier (evaluation level) definition 115 are input. Here, a plurality of attributes can be set. The above tasks correspond to S2-1 and S2-2 in FIG.

  Further, in FIG. 8, when selecting a “default classifier” in the case where evaluation classification is not performed, 116 is selected. In this case, an attribute information display for a file name or property to be described later is parenthesized as “[classifier number]” (for example, “[3]” is displayed in the case of 3), and the evaluation classification is completed. Can be distinguished from the same classifier. In the case of confidential information, this is a measure to prevent incorrect evaluations by making conscious of unset ones and basic classifiers. Further, 116 is not set, and the attribute information display of the unrated classification file can be set with any alphanumeric character in parentheses such as “[]” (for example, any alphanumeric character is set to “n”. Then, “[n]” is displayed.) This is used for batch display and batch setting of unevaluated classification files.

  After setting the attribute information in FIG. 8, in FIG. 9, the process proceeds to the “attribute information registration format setting screen” of the “attribute setting screen” in which the contents are set in the file name and / or the property. When the “property” button is selected in 121, the attribute information is displayed between the file name and the extension when the “file name” button is selected as the property information of the digital data file. The order in which the attribute information is displayed is set at 123 in the case of “property” and 124 in the case of “file name”. Here, the setting is such that “confidential information”, “personal information”, and “financial information” are displayed in this order. The above tasks correspond to S2-3 and S2-4 in FIG.

  When the setting is changed on the “attribute setting screen”, the “attribute / classifier information storage unit 32” is updated through the “attribute setting function unit 24”.

  At the “authority setting” stage, the administrator uses “authority information display function unit 25” and “authority setting function unit 26”, which are corresponding specialized function units, and stores “user authority information storage” among the five storage units. Section 33 "is accessed (FIG. 3).

  In FIG. 10, the administrator opens the “user group creation screen” of the “authority setting screen” using the “authority information display function unit 25”, registers the user group name at 131, and assigns the user group name to each user group. , While selecting the target storage and attribute from the “storage selection button bar”, the authority about “attribute reference”, “attribute change”, “file move”, etc. is given. The above tasks correspond to S3-1 and S3-2 in FIG.

  In FIG. 11, the administrator opens the “user registration screen” of the “authority setting screen” using the “authority information display function unit”, and selects the target storage from the “storage selection button bar”. The corresponding users are registered in each storage user group. The above task corresponds to S3-3 in FIG.

When the setting is changed on the “authority setting screen”, the “user authority information storage unit 33” is updated through the “authority setting function unit 26”.

  In the “situation management” stage, the administrator uses “situation information totaling display function unit 27” and “output instruction function unit 28”, which are the corresponding specialized function units, and selects “situation information display format” from the five storage units. Access the storage unit 34 ".

  The administrator opens the “situation management screen” by the “situation information totaling display function unit 27”, selects the target storage and totaling contents from the “storage selection button bar”, and requests the total output through the “output instruction function unit 28”. . The above task corresponds to S4-1 in FIG.

  Examples of the output instruction include a basic total output instruction and output in FIGS. 12 and 13 and a processing total output instruction and output in FIGS. 14 and 15. It is possible to output aggregated results that meet the purpose of inventory work, such as writing and listing the names of all attributes in each storage and classifiers that are highly evaluated, and the composition ratio, by concentrating and listing high-risk digital information. To do.

  The basic total output can be “screen output” and “file output” in 151 “output format selection”, and “file name only” and “with path” in “output file name format selection” 152. Select one of the following. Thus, 161 output is obtained in the case of “screen output”.

  The processed total output can be obtained by any combination of “total category selection”, “number display format selection”, and “graph selection” in “processing requirements” of 171. Thereby, in the case of “screen output”, an output of 181 is obtained. The above tasks correspond to S4-2 and S4-3 in FIG.

When tabulation is performed on the “situation management screen”, the “situation information display format storage unit 34” is updated through the “output instruction function unit 28”, and the same tabulation can be performed.

  At the “evaluation classification operation” stage, the user uses “file attribute information display function unit 29” and “evaluation classification operation function unit 30”, which are the corresponding specialized function units, and sets the “user” Based on the authority information storage unit 33 ”, the“ file attribute information storage unit 35 ”of the five storage units is accessed.

  In FIG. 16, the user opens the “evaluation classification operation screen” using the “file attribute information display function unit”, selects the target storage for storing the digital data file to be evaluated and classified in the “storage selection button bar”, and 191. In “Display format selection”, select either “1. Wing display type” or “2. Fuselage display type” which is the evaluation classification operation interface. This task corresponds to S5-1 and S5-2 in FIG.

  In FIG. 17, “1. Wing display type” includes a “body” portion 201 as a classifier (evaluation level) change source and a “wing” portion 202 as a classifier (evaluation level) change destination. The “body” displays the file structure, and the format can be either “directory hierarchy” or “file name full path display”. Reference numeral 203 denotes a display attribute name, and 204 denotes each classifier number.

  In FIG. 17, when the user wants to perform “attribute reference” of the digital data file, if the target classifier (evaluation level) is “wing”, he / she selects it and selects “body” In the same way, when the user wants to perform the reference and change the attribute, first select the entire body of the digital data file to be displayed from the window after referring to the fuselage, and select any of them. Move to the “wing” of the classifier (evaluation level) you want to change, as in (arrow). Thereby, attribute information is changed collectively.

  In FIG. 17, the “1. Wing display type” mode assumes the above three tasks “attribute reference”, “attribute change”, and “file move” by mouse operation. The angle can be changed freely in consideration of the right handed hand), left slant (generally the mouse handle is left handed), etc., and the "wing" part in consideration of operation accuracy The size of the “body” can be freely changed.

In FIG. 18, “2. fuselage display type”, like “1. wing display type”, “body” part as a classifier (evaluation level) change source and classifier (evaluation level) change destination as There is no distinction of the “wing” part, and all classifiers are displayed in the “body” part.
Since all are “body”, the file structure of all classifiers is displayed, and the format can be “directory hierarchy” or “file name full path display”. The "2. fuselage display type" form is a request for continuous change from any classifier to another classifier while confirming the contents and structure of the digital data file of multiple classifiers (evaluation levels) Is a response to 19, 20, 21, and 22 show the display states on the “evaluation classification operation screen”.

  For example, when the user wants to perform “file movement” of a digital data file in both “1. Wing display type” and “2. Body display type”, for example, the classifier “personal information ( If there is a folder dedicated to personal information, the digital data file that has become personal information as a result of the “attribute reference” and “attribute change” can be moved to the dedicated folder.

  20 and 22, both “1. wing display type” and “2. fuselage display type” are capable of “multiple attribute simultaneous display”. This function is, for example, digital file data that has a classifier “2: personal information (is)” in the attribute “personal information” or a classifier “2: financial information (is)” in the attribute “financial information”. All have a new policy of classifier “5: top secret” in attribute “confidential information”, select “multiple attribute simultaneous display” of these three attributes in “1. wing display type”, After the classifier of each attribute is the “body” part, the attribute is changed from the classifier “2: personal information (is)” in the attribute “personal information” to the classifier “5: top secret” in the attribute “confidential information”. It moves from the classifier “2: financial information (is)” in “financial information” to the classifier “5: top secret” in the attribute “confidential information”. As a result, “attribute reference” and “attribute change” are possible while maintaining the consistency of classifiers among a plurality of attributes. FIG. 23 shows a movement 213 from the classifier “2: personal information (is)” 211 in the attribute “personal information” to the classifier “5: highest secret” 212 in the attribute “confidential information”.

When the attribute information of the digital file data is changed by the “evaluation classification operation function unit” on the “evaluation classification operation screen”, the “file attribute information storage unit” is updated.

Schematic diagram of the entire program. “Processing procedure diagram” (by administrator) in “Initial setting”. “Processing procedure diagram” in “Attribute setting” (by the administrator). “Processing procedure diagram” in “Authority setting” (by administrator). “Processing procedure diagram” in “Status management” (by the administrator). “Processing procedure diagram” (by user) in “Evaluation classification operation”. State of “target storage registration” on the “initial setting screen” (by the administrator). The state of “attribute setting” on the “attribute setting screen” (by the administrator). The state of “attribute information registration format setting” on the “attribute setting screen” (by the administrator). State of "Create user group" on "Authority setting screen" (by administrator). “User registration” on the “Authority setting screen” (by the administrator). State of "basic tabulation output instruction" on the "status management screen" (by the administrator). The state of the output result of “Basic total output instruction” on the “Status management screen” (by the administrator). “Processing summary output instruction” on the “status management screen” (by the administrator). The output result of “Processing Total Output Instruction” on the “Status Management Screen” (by the administrator). The state of the “call screen” on the “evaluation classification operation screen” (by the user). A description of the state and mechanism of the “Evaluation Classification Operation Interface (1. Wing Display Type)” on the “Evaluation Classification Operation Screen” (by user). “Evaluation classification operation interface (2. fuselage display type)” on the “Evaluation classification operation screen” (by the user). Single attribute (confidential information) display of “1. Wing display type” on the “Evaluation classification operation screen” (by user). Multi-attribute display of "1. Wing display type" on "Evaluation classification operation screen" (by user). Single attribute (confidential information) display of “2. Body list display type” on the “Evaluation classification operation screen” (by user). Multi-attribute display of “2. Torso list type” on the “Evaluation classification operation screen” (by user). A state of evaluation adjustment between two attributes on the “evaluation classification operation screen” (attribute: classifier of personal information: all personal information is attribute: classifier of confidential information: highest confidential, depending on the user).

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Management terminal 2 Operation terminal 51 Storage 52 Information system

Claims (6)

  Multiple attribute information (multi-attribute evaluation classification information) for file name and property information of digital data stored in information system storage (logical drive units such as hard disks and connected storage media recognized by each target information system) ) Digital data file multi-attribute evaluation and classification operation management program that supports general information asset management including confidential information, personal information, and financial information by efficiently assigning and changing).   In order to recognize the storage of multiple information systems and digital data files to be stored, an agent program is installed in all of these target information systems, and the administrator selects “initial settings” from the management terminal in the “initial settings” management task item. After recognizing the storage of the target information system via the “screen”, the management work items “initial setting”, “attribute setting”, “authority setting”, “status management”, and the user 2. The digital data file multi-attribute evaluation classification operation management program according to claim 1, wherein the “evaluation classification operation” is performed.   The administrator uses an arbitrary multiple attribute name and attribute classifier (evaluation level) to be used as attribute information of the digital data file from the management terminal via the “attribute setting screen” in the “attribute setting” that is the management work item. 2. The digital data file multi-attribute evaluation and classification operation management program according to claim 1, which sets, changes and deletes names and their definitions, and sets, changes and deletes the registration format in the file name and property information of this attribute information.   The administrator creates a user group via the “authority setting screen” in the “authority setting” management task item from the management terminal, and “attribute reference”, “storage of the target information system as a basic unit” 2. The digital data file multi-attribute evaluation and classification operation management program according to claim 1, wherein authority for “attribute change” and “file move” is set and user registration is performed for each user group.   The administrator grasps and monitors the setting status and change status of attribute information using the storage of the target information system as a basic unit via the “status management screen” in the “status management” management task item from the management terminal. The digital data file multi-attribute evaluation classification operation management program according to claim 1.   Based on the “attribute setting” information described in claim 3 and the “authority setting” information described in claim 4 by the administrator, each user can perform two types of evaluation classification operations from the operation terminal via the “evaluation classification operation screen”. Efficient evaluation and classification operation of a large number of digital data files using the storage of the target information system as a basic unit by the interface "1. wing display type", "2. fuselage display type" and these multiple attribute simultaneous display, 2. The digital data file multi-attribute evaluation and classification operation management program according to claim 1, which performs “attribute reference”, “attribute change”, and “file move”.

Images