JP2012185611A - Information management device, information management method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information management device, an information management method and a program that are capable of shortening update processing time of retrieval result cache while preventing occurrence of unconformity in member information of a group defined by retrieval conditions.SOLUTION: An information management device 100 comprises: a retrieval processing part 12 for retrieving a member of a group defined by retrieval conditions; a retrieval result storage part 20 for storing a retrieval result in the bitmap form as index information; a group attribute storage part 32 for storing an attribute associated with the definition as group attribute information, with respect to each group; and a retrieval result update processing part 33 for, when the attribute information of the member is changed, selecting a group associated with an attribute identical to an attribute of the changed attribute information, based on the group attribute information, and updating a portion corresponding to the selected group in the index information, in accordance with a result of determining whether or not the member whose attribute information is changed meets the definition of the selected group.

Description

  The present invention relates to an information management apparatus, an information management method, and a program for managing information related to resources existing on a network.

  In recent years, in a network system, many resources such as users, computers, and printers are distributed on the network. For this reason, a directory service is used as a mechanism for registering and retrieving information on resources distributed on the network. In many cases, Lightweight Directory Access Protocol (LDAP) is used as a protocol for accessing a database providing a directory service.

For LDAPv3, a group function is proposed in which members can be defined according to search conditions. This function is called a dynamic group in which member member conditions can be specified in the memberQueryURL attribute in the ldapURL format (query).
Reference: http://tools.ietf.org/html/draft-haripriya-dynamicgroup-02

For example, as shown in the following definition, if a group of a plurality of users whose positions are managers is defined under c = JP, users whose positions are managers can be searched.
(Definition) ldap: /// c = JP ?? sub? (Title = Manager)

  By the way, since a dynamic group is a group defined by a query, in order to acquire the members of the dynamic group, it is necessary to execute the query and perform a search each time. However, if the query is executed each time, the TAT (Turn Around Time) of the search decreases. Therefore, the search result by the query is cached as index-like information, and when the dynamic group member is acquired next, the member information is returned based on the information of the index, thereby speeding up the search. It is planned to make it easier.

  By the way, as the index information, for example, a bitmap index can be used. In bitmap index, query search results must be retained, so even if the query itself does not change, if the attributes of general entries (members) change, the retained search results are changed. There is a need. Therefore, in the bitmap index, how to efficiently update the search result of the cached query (hereinafter, “search result cache”) becomes a problem. In other words, there is a demand for improvement in update TAT.

  One method for solving the above problem is a method of periodically updating the search result caches of all dynamic groups. However, in the above method, when the attribute of the general entry is changed between the update of the search result cache of the dynamic group and the next update, information for specifying the member of the dynamic group (hereinafter, “ Another problem that inconsistency occurs in “member information”) occurs.

  As a solution to this another problem, a method of updating the search result cache of the dynamic group every update is conceivable. However, in this method, if the number of dynamic groups increases, it takes time to update the information in the search result cache, so that the TAT for the update decreases. After all, with this method, it is difficult to efficiently update the search result cache.

  On the other hand, Patent Document 1 discloses a technique for efficiently updating such a cache. Specifically, in the system disclosed in Patent Document 1, a search cache and an update difference cache (a cache of a difference generated by insertion, deletion, or update) are prepared. At the time of retrieval, data having the same tuple ID is merged between these two caches. Thereafter, the contents of the update difference cache are transferred to the search cache at an appropriate timing. Therefore, if the technique disclosed in Patent Document 1 is used for LDAP, it is considered that a decrease in TAT is suppressed even if the search result cache is updated every time the update is performed.

JP 2009-26334 A

  However, unlike the relational database protocol, LDAP defines a dynamic group by a query and does not support merge processing by specifying a tuple ID. For this reason, when performing the merge process using the technique disclosed in Patent Document 1 for LDAP, it is necessary to check all updates, and as a result, it is difficult to improve the TAT of the update.

  Even when the technique disclosed in Patent Document 1 is used for LDAP, when the attribute information of an entry is changed, it is basically necessary to update search result cache information for all dynamic groups. . Therefore, also from this point, it is difficult to improve the update TAT.

  An example of an object of the present invention is an information management that solves the above-described problem and can reduce the update processing time of the search result cache while suppressing the occurrence of inconsistency in the member information of the group defined by the search condition. An apparatus, an information management method, and a program are provided.

In order to achieve the above object, an information management apparatus according to one aspect of the present invention is an information management apparatus that manages attribute information of members existing on a network,
A search processing unit for searching for the member belonging to the group defined by the search condition;
A search result storage unit that stores the search results as index information in a bitmap format for each of the groups;
A group attribute storage unit that stores, as group attribute information, an attribute related to the definition of the group for each group;
When the attribute information of the member belonging to any group is changed, a group associated with the same attribute as the attribute information of the changed member information is selected based on the group attribute information And determining whether or not the member whose attribute information has been changed satisfies the definition of the selected group, and, depending on the determination result, a portion corresponding to the selected group in the index information. A search result update processing unit to update,
It is characterized by having.

In order to achieve the above object, an information management method according to one aspect of the present invention is a method for managing attribute information of members existing on a network,
(A) searching for the member belonging to the group defined by the search condition;
(B) storing the search results as index information in a bitmap format for each of the groups;
(C) storing, for each group, an attribute related to the definition of the group as group attribute information;
(D) When attribute information of the member belonging to any group is changed, the attribute information is related to the same attribute as the attribute information of the changed member based on the group attribute information Select a group, step,
(E) It is determined whether the member whose attribute information has been changed satisfies the definition of the group selected in the step (d), and the selected member in the index information is determined according to the determination result. Update the part corresponding to the group, and
It is characterized by having.

Furthermore, in order to achieve the above object, a program according to one aspect of the present invention is a program for managing attribute information of members existing on a network by a computer,
In the computer,
(A) searching for the member belonging to the group defined by the search condition;
(B) storing the search results as index information in a bitmap format for each of the groups;
(C) storing, for each group, an attribute related to the definition of the group as group attribute information;
(D) When attribute information of the member belonging to any group is changed, the attribute information is related to the same attribute as the attribute information of the changed member based on the group attribute information Select a group, step,
(E) It is determined whether the member whose attribute information has been changed satisfies the definition of the group selected in the step (d), and the selected member in the index information is determined according to the determination result. Update the part corresponding to the group, and
Is executed.

  With the above features, according to the information management apparatus, the information management method, and the program of the present invention, the search result cache update processing time can be reduced while suppressing the occurrence of inconsistency in the member information of the group defined by the search condition. Shortening can be achieved.

FIG. 1 is a block diagram showing a configuration of an information management apparatus according to an embodiment of the present invention. FIG. 2 is a diagram showing an example of index information used in the embodiment of the present invention. FIG. 3 is a diagram showing an example of group attribute information used in the embodiment of the present invention. FIG. 4 is a flowchart showing the overall operation of the information management apparatus in the embodiment of the present invention. FIG. 5 is a flowchart showing a member attribute information update process according to the embodiment of the present invention. FIG. 6 is a block diagram illustrating an example of a computer that implements the information management apparatus according to the embodiment of the present invention.

(Embodiment)
Hereinafter, an information management apparatus, an information management method, and a program according to an embodiment of the present invention will be described with reference to FIGS. Initially, the structure of the information management apparatus in this Embodiment is demonstrated using FIG. FIG. 1 is a block diagram showing a configuration of an information management apparatus according to an embodiment of the present invention.

[Configuration of information management device]
As shown in FIG. 1, the information management apparatus 100 according to the present embodiment includes an LDAP processing apparatus 10, a search result storage unit 20, and a search result update apparatus 30. With this configuration, the information management apparatus 100 manages the attribute information of members existing on the network (not shown in FIG. 1). The members include user objects and computer objects that exist on the network.

  In the present embodiment, the information management apparatus 100 is a server computer that functions as an LDAP server. When a user inputs an operation via a client computer (not shown in FIG. 1), the information management apparatus 100 provides a directory service corresponding to the operation. In the present embodiment, the LDAP processing device 10 and the search result update device 30 are constructed by a program incorporated in a server computer serving as the information management device 100.

  As shown in FIG. 1, the LDAP processing apparatus 10 mainly includes a search processing unit 20. The search processing unit 20 searches for members belonging to the group defined by the search condition. In the present embodiment, the search processing unit 20 executes a query specified by the user, and identifies a member of a group defined in the query. The search result storage unit 20 stores the search result as index information in a bitmap format for each group.

  Further, as shown in FIG. 1, the search result update device 30 mainly includes a group attribute storage unit 32 and a search result update processing unit 33. The group attribute storage unit 32 stores an attribute related to the definition of the group as group attribute information for each group.

  When the attribute information of a member belonging to any group is changed, the search result update processing unit 33 first identifies the attribute of the changed attribute information. Specifically, when the user updates (including addition and deletion) member attribute information (for example, job title, affiliation, ID, etc.) by operation, the search result update processing unit 33 is changed. Attribute information attributes (for example, job title, affiliation, login ID, etc.) are specified.

  Subsequently, the search result update processing unit 33 selects a group related to the same attribute as the attribute of the changed attribute information based on the stored group attribute information. Then, the search result update processing unit 33 determines whether the member whose attribute information has been changed satisfies the definition of the selected group, and corresponds to the selected group in the index information according to the determination result. Update the part you want.

  With such a configuration, in the information management apparatus 100 according to the present embodiment, even if the member attribute information is changed, it is not necessary to update the search result cache for all groups, and the update corresponds to the related group. Only part is enough. Therefore, according to the information management apparatus 100, it is possible to shorten the update processing time of the search result cache. In addition, this makes it possible to execute the update process every time the update is performed, thereby suppressing the occurrence of inconsistencies in the group member information.

  Here, the configuration of the information management apparatus 100 in the present embodiment will be described more specifically with reference to FIGS. 2 and 3. FIG. 2 is a diagram showing an example of index information used in the embodiment of the present invention. FIG. 3 is a diagram showing an example of group attribute information used in the embodiment of the present invention.

  As shown in FIG. 1, in the present embodiment, the LDAP processing apparatus 10 includes a protocol processing unit 11 and an update processing unit 13 in addition to the search processing unit 12. In the present embodiment, the search result update device 30 includes a group attribute update processing unit 31 in addition to the group attribute storage unit 32 and the search result update processing unit 33.

  In this embodiment, the index information is stored as a cache, and is also referred to as “search result cache” in the following description. Furthermore, in the present embodiment, the “group” is a “dynamic group” defined by LDAP, and will be referred to as a dynamic group in the following description.

  In the LDAP processing apparatus 10, the protocol processing unit 11 interprets the input operation when the user inputs an operation via the client computer, and the search processing unit 12 or the update processing unit 13 according to the interpretation result. Is instructed to execute the process. Specifically, when the operation input by the user is “search”, the protocol processing unit 11 causes the search processing unit 12 to search for members belonging to the input dynamic group. Further, when the operation input by the user is update (including addition and deletion), the protocol processing unit 11 notifies the search processing unit 12 and the update processing unit 13 to that effect.

  When the definition of any dynamic group is changed by the update, the update processing unit 13 causes the group attribute update writing unit 31 described later to execute the process. On the other hand, if the member attribute information is changed by the update, the update processing unit 13 causes the search result update processing unit 33 to execute the above-described processing.

  In the present embodiment, when the definition of any dynamic group is changed due to the update, the search processing unit 12 searches for a member again for the dynamic group whose definition has been changed. Then, the search processing unit 12 updates the index information stored in the search result storage unit 20 based on the search result. Here, the index information in the present embodiment will be described with reference to FIG.

  In the example of FIG. 2, the search result storage unit 20 stores index information by assigning 1-bit information corresponding to all members (all entries) for each dynamic group. Then, the search result storage unit 20 sets 1-bit information of members belonging to the dynamic group to 1, and sets 1-bit information of members not belonging to the dynamic group to 0. In the present embodiment, the index information is composed of a set of bits and indicates which dynamic group definition each member satisfies.

  Further, in the search result update device 30, when the definition of any dynamic group is changed and a notification to that effect is received from the update processing unit 13, the group attribute update processing unit 31 in the dynamic group whose definition is changed, Identify the attributes associated with the changed definition. And the group attribute update process part 31 updates the group attribute information memorize | stored in the group attribute memory | storage part 32 based on the specified attribute. Here, the group attribute information in the present embodiment will be described with reference to FIG.

  In the example of FIG. 3, the group attribute information specifies an attribute related to the definition of each dynamic group in a table format. In the example of FIG. 3, when the attribute is related to the definition of the dynamic group, 1 is set in the corresponding column of the column representing the dynamic group, and when the attribute is not related to the definition of the dynamic group, 0 is set in the corresponding column of the column representing the group. Specifically, the attribute related to the definition of group A is “position”. Attributes associated with the definition of group B are “affiliation” and “office ID”. Attributes related to the definition of group C are “position” and “office ID”. The attribute to which the definition of the group D is related is “office ID”.

  In the case where the group attribute information is the example of FIG. 3, for example, if the attribute information attribute of the changed member is “position”, the search result update processing unit 33 is related to “position”. A dynamic group, that is, group A and group C are selected. Then, the search result update processing unit 33 determines whether the member whose attribute information has been changed satisfies the definitions of the group A and the group C.

  In the present embodiment, as a result of the determination, for the member determined to satisfy the definition of the selected dynamic group, the search result update processing unit 33 corresponds to 1 bit corresponding to the index information shown in FIG. 1 (hereinafter referred to as “bit information”) is set to 1. On the other hand, as a result of the determination, for the member determined not to satisfy the definition of the selected dynamic group, the search result update processing unit 33 sets bit information corresponding to the index information shown in FIG.

[Operation of information management device]
Next, the operation of the information management apparatus 100 according to the embodiment of the present invention will be described using FIG. 4 and FIG. In this embodiment, the information management method is implemented by operating the information management apparatus 100. Therefore, the description of the information management method in the present embodiment is replaced with the following description of the operation of the information management apparatus 100.

[Overall operation]
First, the overall operation of the information management apparatus 100 will be described with reference to FIG. FIG. 4 is a flowchart showing the overall operation of the information management apparatus in the embodiment of the present invention.

  As shown in FIG. 4, first, when an operation is input from a user via a client computer, the protocol processing unit 11 interprets the input operation in the LDAP processing apparatus 10, and the input operation is updated. Is determined (step A1).

  As a result of the determination in step A1, if the input operation is not an update (in the case of a search in which a new dynamic group is input), the protocol processing unit 11 notifies the search processing unit 12 to that effect. The search processing unit 12 then searches for members belonging to the new dynamic group according to the definition of the new dynamic group (step A6).

  When step A6 is executed, the search processing unit 12 adds a bitmap indicating the search result for the new dynamic group to the search result cache stored in the search result storage unit 20. The search processing unit 12 returns the search result to the protocol processing unit 11. Thereafter, the protocol processing unit 11 transmits the search result to the user's client computer. Moreover, after execution of step A6, the process in the information management apparatus 100 is once complete | finished.

  On the other hand, if the input operation is an update as a result of the determination in step A1, the protocol processing unit 11 further determines whether the update is an update of the dynamic group itself (step A2).

  As a result of the determination in step A2, if the update is not an update of the dynamic group itself, that is, if the update is a change in attribute information of a certain member (ie, a change in the attribute of an entry), the protocol processing unit 11 This is notified to the update processing unit 13. Then, the update processing unit 13 causes the search result update processing unit 33 to update the bit information of the corresponding member in the search result cache (see FIG. 2) stored in the search result storage unit 20 (step A7). Step A7 will be described later with reference to FIG. Moreover, after execution of step A7, the process in the information management apparatus 100 is once complete | finished.

  On the other hand, if the result of determination in step A2 is that the update is an update of the dynamic group itself, that is, if the user redefines the dynamic group entry, the protocol processing unit 11 informs the search processing unit 12 To the update processing unit 13.

  As a result, the search processing unit 12 executes a query of the dynamic group that is the update target (step A3). Subsequently, the search processing unit 12 updates the search result cache of the dynamic group to be updated (step A4). Specifically, as shown in FIG. 2, since the search result cache is held in the bitmap format, in step A4, the entire bitmap corresponding to the dynamic group to be updated is updated.

  Next, the update processing unit 13 calls the group attribute update processing unit 31 and causes the group attribute update processing unit 31 to update the group attribute information (see FIG. 3) stored in the group attribute storage unit 32 (see FIG. 3). Step A4).

  Specifically, in step A4, the group attribute update processing unit 31 identifies an attribute related to the changed definition of the dynamic group that is the update target, and updates the group attribute information based on the identified attribute. To do. Step A4 may be executed simultaneously with step A2, or may be executed before step A2. Further, when steps A2 to A4 are executed, the processing in the information management apparatus 100 is temporarily terminated.

[Update of member attribute information]
Next, step A7 shown in FIG. 4 will be specifically described with reference to FIG. FIG. 5 is a flowchart showing the update process of member attribute information according to the embodiment of the present invention.

  As shown in FIG. 5, when the update by the user operation is a change of attribute information of a certain member (change of attribute of a certain entry), first, the search result update processing unit 33 displays the attribute of the changed attribute information. Specify (step A71).

  Next, the search result update processing unit 33 accesses the group attribute storage unit 32 and acquires group attribute information. And the search result update process part 33 acquires the list | wrist of the dynamic group relevant to the attribute of the attribute information used as update object with reference to group attribute information (step A72). Specifically, the search result update processing unit 33 identifies the group in which the attribute of the attribute information to be updated is set to 1 in the table shown in FIG. create.

  Next, the search result update processing unit 33 executes Steps A73 to A75 for each dynamic group specified in the list. In step A73, the search result update processing unit 33 determines whether or not the member whose attribute information has been updated satisfies the definition of the dynamic group to be processed.

  As a result of the determination in step A73, if the member whose attribute information has been updated satisfies the definition of the dynamic group to be processed, the search result update processing unit 33 executes step A74.

  In step A74, the search result update processing unit 33 adds the information of the entry to the index information of the dynamic group to be processed in the search result cache. Specifically, the search result update processing unit 33 sets the bit information corresponding to the member whose attribute information has been updated to 1 in the bitmap of the dynamic group to be processed (see FIG. 2).

  On the other hand, as a result of the determination in step A73, when the member whose attribute information has been updated does not satisfy the definition of the dynamic group to be processed, the search result update processing unit 33 executes step A75.

  In step A75, the search result update processing unit 33 deletes the entry information from the index information of the dynamic group to be processed in the search result cache. Specifically, the search result update processing unit 33 sets the bit information corresponding to the member whose attribute information has been updated to 0 in the bitmap of the dynamic group to be processed (see FIG. 2).

  When Steps A73 to A75 are executed for all the dynamic groups in the list acquired in Step A72, the processing in the search result update processing unit 33 ends. Thereafter, the processing in the information management apparatus 100 is also temporarily terminated.

  As described above, in this embodiment, when member attribute information is updated, only dynamic groups related to the update are targeted for processing based on the group attribute information. In this case, the definition of the dynamic group is not executed, and instead, only the determination as to whether the updated member satisfies the definition of the related dynamic group is performed. For this reason, according to the present embodiment, the speed of the update process is increased, so that even when the number of dynamic groups is large, the update process time of the search result cache can be suppressed in updates other than the dynamic groups.

  In addition, according to the present embodiment, since the update process is speeded up, it is suppressed that the update process takes too much time even if the search result cache is updated each time the member attribute information is updated. For this reason, the dynamic group information can be returned to the user's client computer at high speed without inconsistency.

  In the above-described example, the group is a “dynamic group” defined by LDAP, but the present embodiment is not limited to this. The “group” in the present embodiment may be defined by the search condition.

  The program in the embodiment of the present invention may be a program that causes a computer (server computer) to execute steps A1 to A7 shown in FIG. 4 and steps A71 to A75 shown in FIG. By installing and executing this program on a computer, the information management apparatus 100 and the information management method in the present embodiment can be realized.

  In this case, a CPU (Central Processing Unit) of the computer functions as the LDAP processing device 10 and the search result update device 30 (excluding the group attribute storage unit 32) and performs processing. In the present embodiment, a storage device such as a hard disk or memory provided in the computer functions as the search result storage unit 20 and the group attribute storage unit 32.

  Here, a computer that realizes the information management apparatus 100 by executing the program according to the embodiment will be described with reference to FIG. FIG. 6 is a block diagram illustrating an example of a computer that implements the information management apparatus according to the embodiment of the present invention.

  As shown in FIG. 6, the computer 110 is a server computer, and includes a CPU 111, a main memory 112, a storage device 113, an input interface 114, a display controller 115, a data reader / writer 116, and a communication interface 117. Is provided. These units are connected to each other via a bus 121 so that data communication is possible.

  The CPU 111 performs various calculations by developing the program (code) in the present embodiment stored in the storage device 113 in the main memory 112 and executing them in a predetermined order. The main memory 112 is typically a volatile storage device such as a DRAM (Dynamic Random Access Memory). Further, the program in the present embodiment is provided in a state of being stored in a computer-readable recording medium 120. Note that the program in the present embodiment may be distributed on the Internet connected via the communication interface 117.

  Specific examples of the storage device 113 include a hard disk and a semiconductor storage device such as a flash memory. The input interface 114 mediates data transmission between the CPU 111 and an input device 118 such as a keyboard and a mouse. The display controller 115 is connected to the display device 119 and controls display on the display device 119. The data reader / writer 116 mediates data transmission between the CPU 111 and the recording medium 120, and reads a program from the recording medium 120 and writes a processing result in the computer 110 to the recording medium 120. The communication interface 117 mediates data transmission between the CPU 111 and another computer.

  Specific examples of the recording medium 120 include general-purpose semiconductor storage devices such as CF (Compact Flash) and SD (Secure Digital), magnetic storage media such as a flexible disk, or CD-ROM (Compact Disk). Optical storage media such as Read Only Memory).

  Part or all of the above-described embodiments can be expressed by (Appendix 1) to (Appendix 12) described below, but is not limited to the following description.

(Appendix 1)
An information management device for managing attribute information of members existing on a network,
A search processing unit for searching for the member belonging to the group defined by the search condition;
A search result storage unit that stores the search results as index information in a bitmap format for each of the groups;
A group attribute storage unit that stores, as group attribute information, an attribute related to the definition of the group for each group;
When the attribute information of the member belonging to any group is changed, a group associated with the same attribute as the attribute information of the changed member information is selected based on the group attribute information And determining whether or not the member whose attribute information has been changed satisfies the definition of the selected group, and, depending on the determination result, a portion corresponding to the selected group in the index information. A search result update processing unit to update,
An information management device comprising:

(Appendix 2)
When the definition of any of the groups is changed, the attribute related to the changed definition in the group in which the definition is changed is specified, and the group attribute information is updated based on the specified attribute. The information management apparatus according to appendix 1, further comprising a group attribute update processing unit.

(Appendix 3)
If the definition of any of the groups is changed, the search processing unit searches the member again for the group whose definition is changed, and updates the index information based on a search result. The information management apparatus according to 1 or 2.

(Appendix 4)
The search result storage unit assigns 1-bit information corresponding to all the members for each of the groups, sets the 1-bit information of members belonging to the group to 1, and the group The index information is stored by setting the 1-bit information of members that do not belong to 0 to 0,
As a result of the determination, the search result update processing unit sets the corresponding 1-bit information of the index information to 1 for the member determined to satisfy the definition of the selected group, and is selected. For members determined not to meet the group definition, the corresponding 1-bit information of the index information is set to 0.
The information management device according to any one of appendices 1 to 3.

(Appendix 5)
A method for managing attribute information of members existing on a network,
(A) searching for the member belonging to the group defined by the search condition;
(B) storing the search results as index information in a bitmap format for each of the groups;
(C) storing, for each group, an attribute related to the definition of the group as group attribute information;
(D) When attribute information of the member belonging to any group is changed, the attribute information is related to the same attribute as the attribute information of the changed member based on the group attribute information Select a group, step,
(E) It is determined whether the member whose attribute information has been changed satisfies the definition of the group selected in the step (d), and the selected member in the index information is determined according to the determination result. Update the part corresponding to the group, and
An information management method characterized by comprising:

(Appendix 6)
(F) When the definition of any one of the groups is changed, an attribute related to the changed definition in the group in which the definition is changed is specified, and based on the specified attribute, the (c) The information management method according to appendix 5, further comprising a step of updating the group attribute information stored in the step.

(Appendix 7)
(G) When the definition of any of the groups is changed, the member is searched again for the group whose definition is changed, and stored in the step (b) based on the search result. The information management method according to appendix 5 or 6, further comprising a step of updating the index information.

(Appendix 8)
In the step (b), 1-bit information corresponding to all the members is assigned to each group, and the 1-bit information of members belonging to the group is set to 1. Storing the index information by setting the 1-bit information of members not belonging to the group to 0;
In the step (e), for the member determined to satisfy the definition of the selected group as a result of the determination, the 1-bit information corresponding to the index information is set to 1 and selected. For members determined not to meet the group definition, the corresponding 1-bit information of the index information is set to 0.
The information management method according to any one of appendices 5 to 7.

(Appendix 9)
A program for managing attribute information of members existing on a network by a computer,
In the computer,
(A) searching for the member belonging to the group defined by the search condition;
(B) storing the search results as index information in a bitmap format for each of the groups;
(C) storing, for each group, an attribute related to the definition of the group as group attribute information;
(D) When attribute information of the member belonging to any group is changed, the attribute information is related to the same attribute as the attribute information of the changed member based on the group attribute information Select a group, step,
(E) It is determined whether the member whose attribute information has been changed satisfies the definition of the group selected in the step (d), and the selected member in the index information is determined according to the determination result. Update the part corresponding to the group, and
A program that executes

(Appendix 10)
(F) When the definition of any one of the groups is changed, an attribute related to the changed definition in the group in which the definition is changed is specified, and based on the specified attribute, the (c) The program according to appendix 9, wherein the computer further executes the step of updating the group attribute information stored in the step.

(Appendix 11)
(G) When the definition of any of the groups is changed, the member is searched again for the group whose definition is changed, and stored in the step (b) based on the search result. The program according to appendix 9 or 10, further causing the computer to execute a step of updating index information.

(Appendix 12)
In the step (b), 1-bit information corresponding to all the members is assigned to each group, and the 1-bit information of members belonging to the group is set to 1. Storing the index information by setting the 1-bit information of members not belonging to the group to 0;
In the step (e), for the member determined to satisfy the definition of the selected group as a result of the determination, the 1-bit information corresponding to the index information is set to 1 and selected. For members determined not to meet the group definition, the corresponding 1-bit information of the index information is set to 0.
The program according to any one of appendices 9 to 11.

  As described above, according to the present invention, it is possible to shorten search processing cache update processing time while suppressing occurrence of inconsistency in group member information defined by a search condition. Therefore, the present invention is useful for fields in which information on groups defined by search conditions is required to be searched at high speed and without inconsistencies, such as directory services.

DESCRIPTION OF SYMBOLS 10 LDAP processing apparatus 11 Protocol process part 12 Search process part 13 Update process part 20 Search result storage part 30 Search result update part 31 Group attribute update process part 32 Group attribute storage part 33 Search result update process part 100 Information management apparatus 110 Computer 111 CPU
112 Main Memory 113 Storage Device 114 Input Interface 115 Display Controller 116 Data Reader / Writer 117 Communication Interface 118 Input Device 119 Display Device 120 Recording Medium 121 Bus

Claims (6)

An information management device for managing attribute information of members existing on a network,
A search processing unit for searching for the member belonging to the group defined by the search condition;
A search result storage unit that stores the search results as index information in a bitmap format for each of the groups;
A group attribute storage unit that stores, as group attribute information, an attribute related to the definition of the group for each group;
When the attribute information of the member belonging to any group is changed, a group associated with the same attribute as the attribute information of the changed member information is selected based on the group attribute information And determining whether or not the member whose attribute information has been changed satisfies the definition of the selected group, and, depending on the determination result, a portion corresponding to the selected group in the index information. A search result update processing unit to update,
An information management device comprising:   When the definition of any of the groups is changed, the attribute related to the changed definition in the group in which the definition is changed is specified, and the group attribute information is updated based on the specified attribute. The information management apparatus according to claim 1, further comprising a group attribute update processing unit.   When the definition of any of the groups is changed, the search processing unit searches the member again for the group whose definition is changed, and updates the index information based on a search result. Item 3. The information management device according to Item 1 or 2. The search result storage unit assigns 1-bit information corresponding to all the members for each of the groups, sets the 1-bit information of members belonging to the group to 1, and the group The index information is stored by setting the 1-bit information of members that do not belong to 0 to 0,
As a result of the determination, the search result update processing unit sets the corresponding 1-bit information of the index information to 1 for the member determined to satisfy the definition of the selected group, and is selected. For members determined not to meet the group definition, the corresponding 1-bit information of the index information is set to 0.
The information management device according to claim 1. A method for managing attribute information of members existing on a network,
(A) searching for the member belonging to the group defined by the search condition;
(B) storing the search results as index information in a bitmap format for each of the groups;
(C) storing, for each group, an attribute related to the definition of the group as group attribute information;
(D) When attribute information of the member belonging to any group is changed, the attribute information is related to the same attribute as the attribute information of the changed member based on the group attribute information Select a group, step,
(E) It is determined whether the member whose attribute information has been changed satisfies the definition of the group selected in the step (d), and the selected member in the index information is determined according to the determination result. Update the part corresponding to the group, and
An information management method characterized by comprising: A program for managing attribute information of members existing on a network by a computer,
In the computer,
(A) searching for the member belonging to the group defined by the search condition;
(B) storing the search results as index information in a bitmap format for each of the groups;
(C) storing, for each group, an attribute related to the definition of the group as group attribute information;
(D) When attribute information of the member belonging to any group is changed, the attribute information is related to the same attribute as the attribute information of the changed member based on the group attribute information Select a group, step,
(E) It is determined whether the member whose attribute information has been changed satisfies the definition of the group selected in the step (d), and the selected member in the index information is determined according to the determination result. Update the part corresponding to the group, and
A program that executes

Images