JP2010160577A - Retrieving device, control method therefor, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To achieve high speed retrieval by taking into consideration access right, and to propose a retrieval system in which change of an access right is quickly reflected. <P>SOLUTION: This retrieving device is provided with: a document; a document database for storing access right information related with the access rights of one or more user groups consisting of one or more users with respect to each document; a retrieval index table for registering a retrieval index for retrieving the document database in association with each document; an acceptance means for accepting a retrieval instruction; a determination means for determining whether access right information has been changed; and a retrieval means for retrieving a document based on the determination result of the determination means by using the retrieval index table. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a search device, a control method thereof, and a computer program.

  In recent years, the number of documents to be stored has increased with an increase in the capacity of storage media, and the demand for searching for documents in the office has increased.

  Searches on the Internet are also becoming increasingly important in recent years, where documents are usually widely disclosed to the public, and strict access right management is not usually considered. For example, finding a document that you do not have access to is not a big problem.

  On the other hand, when searching for documents in the office, access right management is strictly applied, and a situation in which a document without access right is displayed in the search result, that is, the presence of a document that is not permitted to be accessed is detected. That must be avoided. For this reason, in the search for documents in the office, it is extremely important to realize a search considering the access right.

  Conventionally, various efforts have been made to realize search in consideration of access rights. For example, in Patent Document 1, a large number of search indexes are arranged for each access right, and a document without access right is prevented from being searched by changing the index to be referred to according to the user's access right.

  In Patent Document 2, after performing a normal search (without considering the access right) so that a document without an access right is not included in the search result, the access right of the document as a search result is checked and removed. Is disclosed.

Japanese Patent Application Laid-Open No. 2004-228561 proposes a technique that makes it possible to determine access rights at high speed by configuring information related to access rights in a search index.
JP 2004-164555 A JP 2004-110664 A JP 2001-344245 A

  Each of these past proposals has their merits and demerits. In the method of Patent Document 1, there is a problem that indexes that differ by the number of types of access authority must be prepared, complicated access right setting is virtually impossible, and operation is forced by a simple access right policy. is there.

  In the method of Patent Document 2, access rights are checked one document after a normal search. When a large number of documents are hit, access right processing becomes a bottleneck, and the search speed is increased. Has the disadvantage of not going up.

  Although the method of Patent Document 3 shortens the search time, the processing time when changing the access right cannot be ignored. In the first place, creating a search index (compared to the search itself) is an extremely time-consuming process. Therefore, even after document registration, the time lag until creation of the search index (cannot be searched even if the document is registered) There are many systems that allow (period). For ordinary search indexes, this situation can be allowed to some extent, but the access right cannot be considered in the same way. This is because the access right is revoked in the case where it is difficult to get access, and if unauthorized access is permitted even for a while, control cannot be taken. As described above, in the proposals so far, all methods have drawbacks and there is no decision.

  The present invention is based on the above circumstances, and proposes a search method that performs a high-speed search in consideration of the access right and that is quickly reflected even when the access right is changed.

The present invention for achieving the above object is a search device,
A document database that stores documents and access right information relating to access rights of one or more user groups comprising one or more users for each document;
A search index table for registering a search index for searching the document database in association with each of the documents;
A receiving means for receiving a search instruction;
Determining means for determining whether or not there is a change in the access right information;
Search means for searching for a document based on the determination result of the determination means using the search index table is provided.

  According to the present invention, a high-speed search is performed in consideration of the access right, and a search method that quickly reflects even when the access right is changed is proposed.

  DESCRIPTION OF EMBODIMENTS Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

<First Embodiment>
FIG. 1 is a block diagram showing an example of a configuration of a search device corresponding to an embodiment of the invention. In the configuration of the search device 100 shown in the figure, the CPU 101 is a microprocessor that performs operations such as document registration processing, access right change processing, search processing, and display processing, logical determination, and the like, and transfers to the bus 115 via the bus 115. Control each connected component.

  The bus 115 transfers an address signal and a control signal for instructing each component to be controlled by the CPU 101. In addition, data transfer between each component is performed.

  The input device 102 is a user interface such as a button or a touch panel. The input device 102 also functions as an operation unit for receiving a search instruction for instructing execution of a search process corresponding to the present embodiment. The display device 103 is a display device for performing screen display, and includes, for example, a liquid crystal display, a CRT, and the like. The communication device 104 is a communication device for exchanging data with the outside via a communication line.

  The ROM 105 is a read-only nonvolatile memory. A boot program executed by the CPU 101, a control program 106, initial data 107 used in various processes, and the like are stored. The boot program loads initial data 107 into the RAM 108 when the system is started, and causes the CPU 101 to execute the control program 106. The processing using the control program 106 will be described in detail later with reference to a flowchart.

  A RAM 108 is a readable / writable random access memory, and is used for primary storage of various data from each component. Various data such as a buffer for temporarily storing data existing on the HD 109 for high speed is stored.

  The HD 109 is a hard disk that stores various processing programs executed by the CPU 101, data to be permanently stored and managed, and the like. If necessary, it is loaded into the main memory shown in the RAM 108 and referenced. The data on the HD 109 is temporarily stored and controlled in a buffer memory on the RAM 108 for speeding up. In this embodiment, a document database 110, folder structure information 111, user structure information 112, a search index table 113, access right change difference information 114, and the like are stored in the HD 109. The document database 110, folder structure information 111, user structure information 112, search index table 113, and access right change difference information 114 may be stored in independent storage devices. In that case, each storage device may be connected to the search device 100 via a network.

  The search device 100 composed of such components operates in response to various events from the input device or the like. When an interrupt from an input device or the like is supplied, a signal is sent to the CPU 101, an event is generated accordingly, and the CPU 101 reads various commands stored in the ROM 105 or the RAM 108 according to the event, Control is performed.

  FIG. 2 is a diagram showing a display example of search results corresponding to the embodiment of the invention. FIG. 2A shows the search screen 200 of the user 1. In the search screen 200, the searcher 201 field indicates that the searcher who instructs the search is the user 1. In this embodiment, it is assumed that the user 1 is in charge of personnel-related work and is given a document access right corresponding to it. A query 202 indicates a search query (search keyword or search index), and FIG. 2A shows a case where the word “evaluation” is designated. A search result 203 indicates a result of a full-text search of documents in the document database 110 using “evaluation” as a search query. The search result 203 displays a document that includes the word “evaluation” somewhere in the text and is accessible to the user 1. Since user 1 has personnel-related authority, personnel-related documents are displayed as search results.

  FIG. 2B shows a search screen 210 when the searcher is the user 2. In the search screen 210, the searcher 201 field indicates that the searcher who instructs the search is the user 2. Here, it is assumed that the duties of the user 2 are not human resources but quality management relations. The search query 202 is “evaluation” as in the case of FIG. 2A, but unlike the case of FIG. 2A, the search result 203 does not display any personnel-related documents and does not display quality evaluation-related documents. Are only displayed as search results.

  As described above, in the present embodiment, only the documents for which the user who issues the search instruction has access rights are included in the search results.

  Next, a document access right setting method corresponding to the present embodiment will be described with reference to FIG. FIG. 3 is a diagram for explaining a document access right setting method corresponding to the embodiment of the invention.

  In this embodiment, documents are managed in a hierarchical folder structure. A folder 301 stores documents or (sub) folders therein. The document 302 is stored in the folder 301. In FIG. 3A, folder 1, folder 2, and folder 3 are described as the folder 301, and folder 2 and folder 3 are subfolders of folder 1. The document 302 includes a document 1, a document 2, a document 3, a document 4, a document 5, a document 6, and a document 7. Among these, the documents 1 to 3 are stored in the folder 2, the documents 4 and 5 are stored in the folder 3, and the documents 6 and 7 are stored in the folder 1.

  In this embodiment, access rights are set for the folder 301 and the document 302, respectively. The target of permission / denial of the access right is a single user or a user group in which users are collected. Hereinafter, the user group may be simply abbreviated as a group. Users or user groups are managed in a hierarchical structure as shown in FIG. A single user 304 or a (sub) user group belongs to the user group 303. Each user 304 belongs to a user group 303. In FIG. 3B, group 1, group 2, and group 3 are described as the user group 303, and group 2 and group 3 are subgroups of group 1. The user 304 includes a user 1, a user 2, a user 3, a user 4, a user 5, a user 6, and a user 7. Among these, the users 1 to 3 belong to the user group 2, the users 4 and 5 belong to the user group 3, and the users 6 and 7 belong to the user group 1. In addition, when a group exists, the number of groups should just be one or more, and the number of users contained in one group may be one.

  Next, the access right given to each folder 301 or document 302 will be described. Access rights 305, 306, and 307 indicate access rights assigned to folder 1, folder 2, and document 1, respectively.

  The access right 305 indicates that the user 304 who can access the folder 1 is “user 1” and the user group 303 is “group 3”. The access right 306 defines the user 304 and the user group 303 that can access the folder 2, but nothing is described here, so that there is no access right person as the folder 2 alone. However, in this embodiment, since the access right to the upper folder is inherited by the lower folder, the access right of the folder 1 is inherited by the folder 2 and eventually has the same access right as the folder 1.

  The access right 307 indicates that the user 304 who can access the document 1 is “user 3” and the user group is “group 3”. Here, since document 1 belongs to the lower level of folder 1, the access right of folder 1 is also set. Eventually, the access right holders of the document 1 are users 1, 3, 4, 5, and 6 together with the access right holders of the access rights 305 and 306.

  Next, the configuration of the document database 110 corresponding to this embodiment will be described with reference to FIG. FIG. 4 is a diagram showing an example of the configuration of the document database 110 corresponding to the embodiment of the invention.

  In the document database 110, the document ID field 401 stores a document identifier (document ID) for uniquely identifying a document registered in the document database 110. In the document database 110, not only document information but also folder information is managed in the same manner, and a folder identifier (folder ID) for uniquely identifying a folder is also stored.

  The access right information field 402 describes who is a user or user group who can access the corresponding document or folder. In this embodiment, 1 bit is assigned to each user and user group. As shown in the lower part of FIG. 4, 1 is stored for an accessible user or user group, and 0 is stored for an inaccessible user.

  The metadata information field 403 stores metadata regarding the corresponding document or folder. The metadata in this embodiment includes, for example, creator, creation date, update date, title, keyword, organization, related product, development stage, and the like. The link field 404 is a link to the corresponding document content, and the document content of the corresponding document is stored in the link destination. There is no link for folders.

  Next, the folder structure information 111 corresponding to this embodiment will be described with reference to FIG. FIG. 5 is a diagram showing an example of the folder structure information 111 corresponding to the embodiment of the invention.

  In the folder structure information 111, the folder ID 501 stores an identifier of each folder existing in the document database 110. In the lower document ID / lower folder ID 502, identifiers of documents and folders (subfolders) belonging to the corresponding folder are stored. Note that the information stored in the lower document ID / lower folder ID 502 is for one layer. For example, the folder 3 is stored for the folder 1, but the documents 4 and 5 belonging to the folder 3 are not managed in relation to the folder 1.

  Next, the user structure information 112 corresponding to this embodiment will be described with reference to FIG. FIG. 6 is a diagram showing an example of the user structure information 112 corresponding to the embodiment of the invention.

  In the user structure information 112, the group ID 601 stores a user group identifier. Further, the lower user / lower group ID 602 stores an identifier of a user or user group belonging to the corresponding user group. The information stored in the lower user ID / lower group ID 602 is for one layer. For example, group 3 is stored in group 1, but users 4 to 6 belonging to group 3 are not managed in relation to group 1.

  Next, the search index table 113 corresponding to this embodiment will be described with reference to FIG. FIG. 7 is a diagram showing an example of the search index table 113 corresponding to the embodiment of the invention.

  In the search index table 113, a keyword / user / group 701 stores any one of a search keyword, a user, and a user group. In the document ID 702, an identifier of a document related to contents registered in the keyword / user / group 701 is registered. That is, in the case of a keyword, a document including the keyword is registered. For example, documents including “XYZ” as a keyword include document 1, document 2, and document 4. In the case of a user or user group, a document accessible by the user or group is registered. For example, in the case of the user 1, there are document 1, document 2, and document 3 as accessible documents. Similarly, in the case of the user group 1, the document 9 is an accessible document.

  By using the search index table 113, it is possible to narrow down documents by combining a plurality of keywords, user, and user group conditions. For example, a document containing both "XYZ" and "EFG" can be easily obtained with (XYZ line) AND (EFG line). Documents that include "XYZ" and that can be accessed by user 1 are that user 1 belongs to group 1 and group 2 from the user structure information, so (XYZ row) AND ((user 1 row) OR (group 1 Line) OR (Group 2)). When a certain user instructs a search, these search expressions are generated and the search results are listed.

  The search index table 113 is a copy of the access right information field 402 of the document database 110 in terms of content, but there is no description of folders, and each folder is expanded into a specific list of documents. Also, the relationship between rows and columns is transposed. Therefore, it generally takes a considerable time to create the search index table 113, and it is almost impossible to reflect it immediately.

  Therefore, in the present embodiment, it is possible to immediately cope with the change of the access right by using the access right change difference information 114 as described with reference to FIG. FIG. 8 is a diagram showing an example of the access right change difference information 114 corresponding to the embodiment of the invention. It is difficult to create the search index table 113 shown in FIG. Therefore, when the access right of the document or folder is changed, this access right change difference information 114 is created until the change is reflected in the search index table 113. This information can be created with a slight processing load because the relationship between the rows and the columns in the document database 110 matches.

  The ID 801 stores a document ID or a folder ID. The added list 802 lists users or user groups to which access permission has been added as a result of changing access rights. The deletion list 803 lists users or user groups whose access permission has been revoked as a result of the access right change. This access right change difference information 114 is not suitable for a search specifying a user. This is because, in order to search for a document from user information, it is necessary to scan all lines and extract a corresponding document. However, it is easy to create.

  Next, processing in the search device 100 corresponding to the embodiment of the invention will be described. FIG. 9 is a flowchart showing an example of the overall operation of the search device 100 corresponding to the embodiment of the invention. The processing is realized by the CPU 101 executing a corresponding processing program stored in the control program 106 of the ROM 105 or the HD 109.

  First, in step S901, a system initialization process is executed to initialize various parameters, display an initial screen, and the like. In the subsequent step S902, it waits for an event to occur from the input device 102 such as a mouse click or a button touch. Timer interruption is a kind of event.

  When an event occurs, the type of event is determined in step S903, and the process branches to various processes according to the type of event. A plurality of branch destination processes corresponding to various events are collectively expressed in the form of step S904. The processing performed here includes document registration processing detailed in FIG. 10, access right change processing detailed in FIG. 11, access right reflection processing detailed in FIG. 12, search detailed in FIG. 13 and FIG. Processing is included. As other processing, details are not described, but there are processing such as menu change processing and document editing processing.

  In the subsequent step S905, the result of each process and the end of the process are notified, and the screen is displayed according to the instruction of each process. This is a process that is normally performed widely, such as displaying an error when there is an error, and reflecting display data that is set when normal processing is performed on the screen display. Further, for example, when a search process is performed in FIGS. 13 and 14 to be described later, a search result is displayed.

  Next, a document registration process will be described with reference to FIG. 10 as an example of various event handling processes in step S904 in FIG. FIG. 10 is a flowchart showing an example of a document registration process corresponding to the embodiment of the invention.

  10, in step S1001, the designated document is registered in the document database 110. In step S1002, the access right of the new document is registered in the access right change difference information 114. At this time, the document ID of the new document is added to the ID 801, and users and user groups having access rights to the new document are added to the addition list 802. In the case of new registration, the deletion list 803 is left blank.

  In the following step S1003, a start timer for access right reflection processing is set. As a result, the access right reflection process is started at predetermined time intervals, and the contents of the access right change difference information 114 are reflected in the search index table 113. As a result, when a predetermined period set by the activation timer elapses, an access right reflection process as shown in FIG. 12 is executed.

  Next, an access right changing process will be described as an example of the various event handling process in step S904 in FIG. 9 with reference to FIG. FIG. 11 is a flowchart showing an example of the access right changing process corresponding to the embodiment of the invention.

  In FIG. 11, in step S <b> 1101, an access right change operation is accepted and the change content is acquired. Specifically, when the access right information field 402 for the document or folder is changed, the access right information field 402 before and after the change is acquired.

  In step S1102, the difference of the user or user group whose access right has been changed for each document and folder is extracted from the access right information field 402 before and after the change. In the subsequent step S1103, the extracted user and user group information is registered in the access right change difference information 114. In step S1104, an activation timer for access right reflection processing is set. As a result, when a predetermined period set by the activation timer elapses, an access right reflection process as shown in FIG. 12 is executed.

  Next, an access right reflection process will be described as an example of the various event handling process in step S904 in FIG. 9 with reference to FIG. FIG. 12 is a flowchart showing an example of the access right reflecting process corresponding to the embodiment of the invention. The access right reflection process is received if a user or user group is designated.

  In FIG. 12, in step S1201, it is determined whether or not a user or user group is specified. If no user or user group is designated, the process proceeds to step S1203. If there is a designation, the process proceeds to step S1202. In step S1202, one user or user group having a difference is extracted from the access right change difference information 114, and the process advances to step S1203.

  In step S1203, with reference to the access right change difference information 114, a document or folder having a difference is acquired for the specified user or user group. Speaking of the example of the user 1 in FIG. 8, the document 1 (addition), the document 3 (deletion), and the folder 3 (addition) correspond.

  In step S1204, the folder structure information 111 is referred to, and the folder is expanded into a document to create a list of documents that may be changed. For example, according to the example of FIG. 5, the folder 3 is expanded into documents 4 and 5, and a list of {document 1, document 3, document 4, document 5} is created together with the previous documents 1 and 3. .

  In step S 1205, the access right information field 402 of the user or user group designated for each listed document is extracted from the document database 110. In step S1206, the extracted information is reflected as information on the designated user or user group in the search index table 113. In step S1207, the information on the designated user or user group is deleted from the access right change difference information 114, and this process ends.

  Next, a search process will be described as an example of the various event handling process in step S904 in FIG. 9 with reference to FIG. FIG. 13 is a flowchart showing an example of a search process corresponding to the embodiment of the invention. The search process is a process when the user actually starts a search.

  In FIG. 13, in step S1301, the user information of the user who has performed the search formula and the search instruction is acquired. The user information is, for example, a user ID. In step S1302, the user groups to which the user belongs are listed and listed. It is determined whether there is the access right change difference information 114 for the user or user group listed in step S1303.

  If there is no access right change difference information 114 in the determination result (“NO” in step S1303), the process proceeds to step S1305, but if there is (“YES” in step S1303), the process proceeds to step S1304. In step S1304, the enumerated user or user group is specified and the access right reflection process detailed in FIG. 12 is executed. That is, the present embodiment is characterized in that only the information related to the user who performs the search among the information registered in the access right change difference information 114 is reflected in the search index table 113. As a result, it is possible to avoid a delay in the search process while minimizing the load of the update process of the search index table 113 during the search execution. Note that the access right change difference information 114 that has not been reflected during the search process is automatically reflected in the search index table 113 at the time set by the timer.

In the subsequent step S1305, a search expression is generated by adding the specified search expression to the OR of the specified user and user group (a plurality if there are a plurality of user groups) using an AND condition. That is, the generated search expression is as follows.
(Search formula) = (Designated search formula) AND ((User) OR (User group belonging to) OR...) In step S1306, a search based on the generated search formula is executed. Thereafter, the search result is displayed in step S905 of FIG. A display example of the search result is as shown in FIG.

  As described above, according to the present invention, since the access right information is indexed as a search index, the access right determination can be speeded up, and a high-speed document search considering the access right can be realized. Further, when changing the access right, the difference information can be created quickly, so that it can be processed at high speed. As a result, a high-speed search system with an access right with high operability can be realized in an office where security is important.

<Second Embodiment>
Note that the present invention is not limited to the above-described embodiment, and can be appropriately changed without departing from the gist of the present invention. In the first embodiment, the method of correcting the search result by correcting the search index table 113 for the amount used before the search is shown. There is also a method of correcting by adding / deleting search results without changing search creation. In this case, the search process can be executed according to the flowchart of FIG. FIG. 14 is a flowchart showing an example of search processing corresponding to the second embodiment of the invention.

  Hereinafter, a search process corresponding to the second embodiment of the invention will be described as an example of the various event response process in step S904 of FIG. 9 with reference to FIG. FIG. 14 is a flowchart showing an example of search processing corresponding to the second embodiment of the invention.

  In step S1401 of FIG. 14, the search formula and the user information instructing the search are acquired. The user information is, for example, a user ID. In step S1402, a user group to which the user belongs is listed. In step S1403, a search using a search formula is executed, and a search result is acquired. In step S1404, it is determined whether there is access right change difference information 114 for the listed users or user groups. If there is no access right change difference information 114 in the determination result (“NO” in step S1404), the search process is terminated as it is. If there is the access right change difference information 114 (“YES” in step S1404), the process proceeds to step S1405, the search result correction process is executed, and the search process ends. Thereafter, the search result is displayed in step S905 of FIG. A display example of the search result is as shown in FIG.

  Here, with reference to FIG. 15, the search result correction processing in step S1405 of FIG. 14 will be described. FIG. 15 is a flowchart showing an example of a search result correction process corresponding to the second embodiment of the invention.

  In step S1501 in FIG. 15, user information such as a user and a user group to which the user belongs is acquired. In step S1502, the addition list 802 of the access right change difference information 114 is referred to, a document related to the user information is extracted, and listed as a document candidate (additional document) to be added to the search result. In step S1503, it is checked whether the previous additional document satisfies the search expression condition, and only documents satisfying the condition are narrowed down.

  In step S1504, the narrowed-down additional document is actually added to the search result. In step S1505, the deletion list 803 of the access right change difference information 114 is referred to, a document related to the user information is extracted, and is listed as a document candidate (deleted document) to be deleted from the search result.

  In step S1506, the list of previous deleted documents is narrowed down to only those having no access right for the corresponding user information by checking the access right information field 402 of the document database 110. In step S1507, the narrowed deleted document is actually deleted from the search result.

  In addition to the above, the configuration can be changed as appropriate without departing from the spirit of the present invention.

  As described above, according to the present embodiment, it is possible to exclude a document for which a search execution user does not have access rights from a search result based on a difference information deletion list. Thereby, since the search result can be corrected in consideration of the change of the access right even in the search until the change of the access right is reflected in the search index table 113, a correct search result can be obtained in real time.

[Other Embodiments]
The object of the present invention can also be achieved by supplying a storage medium storing a computer program code for realizing the above-described functions to the system, and the system reading and executing the computer program code. In this case, the computer program code itself read from the storage medium realizes the functions of the above-described embodiments, and the storage medium storing the computer program code constitutes the present invention. In addition, the operating system (OS) running on the computer performs part or all of the actual processing based on the code instruction of the program, and the above-described functions are realized by the processing. .

  Furthermore, you may implement | achieve with the following forms. That is, the computer program code read from the storage medium is written into a memory provided in a function expansion card inserted into the computer or a function expansion unit connected to the computer. Then, based on the instruction of the code of the computer program, the above-described functions may be realized by performing a part or all of the actual processing by the CPU or the like provided in the function expansion card or function expansion unit.

  When the present invention is applied to the above-described storage medium, the computer program code corresponding to the flowchart described above is stored in the storage medium.

It is a block diagram which shows an example of a structure of the search device corresponding to embodiment of invention. It is the figure which showed the example of a display of the search result corresponding to embodiment of invention. It is a figure for demonstrating the setting method of the access right of the document corresponding to embodiment of invention. It is a figure which shows an example of a structure of the document database corresponding to embodiment of invention. It is the figure which showed an example of the folder structure information corresponding to embodiment of invention. It is the figure which showed an example of the user structure information corresponding to embodiment of invention. It is the figure which showed an example of the search index table corresponding to embodiment of invention. It is the figure which showed an example of the access right change difference information corresponding to embodiment of invention. It is a flowchart which shows an example of the whole operation | movement of the search device 100 corresponding to embodiment of invention. It is a flowchart which shows an example of the document registration process corresponding to embodiment of invention. It is a flowchart which shows an example of the access right change process corresponding to embodiment of invention. It is a flowchart which shows an example of the access right reflection process corresponding to embodiment of invention. It is a flowchart which shows an example of the search process corresponding to the 1st Embodiment of invention. It is a flowchart which shows an example of the search process corresponding to 2nd Embodiment of invention. It is a flowchart which shows an example of the search result correction | amendment process corresponding to the 2nd Embodiment of invention.

Claims (7)

A document database that stores documents and access right information relating to access rights of one or more user groups comprising one or more users for each document;
A search index table for registering a search index for searching the document database in association with each of the documents;
A receiving means for receiving a search instruction;
Determining means for determining whether or not there is a change in the access right information;
A search device comprising: a search unit that uses the search index table to search for a document based on a determination result in the determination unit. The search index table further manages document information accessible to each of the one or more user groups,
The search means includes, in the search results, only documents that a user who issues a search instruction has access rights based on information on documents accessible by each of the one or more user groups managed by the search index table,
The determination means includes
Generating means for generating difference information of the access right information before and after the change when the access right information is changed;
The search apparatus according to claim 1, further comprising: update means for updating information on documents accessible to each of the one or more user groups in the search index table based on the difference information. The update means, when the search means tries to execute a search based on the search instruction, the one or more user groups of the search index table based on difference information related to a user who has made the search instruction Update the information in the documents accessible to each
The search means executes a search so that only documents for which the user who has given the search instruction has access rights are included in the search results by executing a search using the search index table updated by the update means. The search device according to claim 2. The search means deletes, from the document included in the result of the search performed based on the search instruction, a document for which the user who performed the search instruction does not have access rights based on the difference information, The search apparatus according to claim 2, wherein the search is executed so that only a document for which the user who has performed the access has an access right is included in the search result.   5. The search device according to claim 2, wherein the update unit performs the update after a predetermined period has elapsed after the difference information is generated. A document database that stores documents and access right information relating to access rights of one or more user groups comprising one or more users for each document;
A search apparatus control method comprising a search index table for registering a search index for searching the document database in association with each of the documents,
A reception process for receiving a search instruction;
A determination step of determining whether or not there is a change in the access right information;
And a search step of searching for a document based on a determination result in the determination step using the search index table.   A computer program for causing a computer to operate as the search device according to any one of claims 1 to 5.

Images