WO2023153558A1 - Method for managing authority over resources included in structured document, and apparatus using same - Google Patents

Abstract

Provided in the present disclosure are a method for managing the authority of users over resources, which are items included in a structured document, and a computing device using same. Particularly, according to the present disclosure, provided are a method and a computing device using same, the method comprising: generating an owner tag corresponding to the highest element document included in the structured document in response to a request while generating a structured document and the highest element document; generating a new resource in response to a request; generating a policy tag or a permission tag corresponding to a first specific resource in response to a request; returning the specific authority of a user over a first specific action with respect to a second specific resource in response to a request; and enabling or disabling execution of the second specific action of the user according to the acquired authority of the user over the second specific action with respect to a third specific resource in response to a request.

Description

Method for managing authority for resources included in structured document and apparatus using same

Disclosed in the present disclosure is a method for managing users' rights to resources, which are items included in a structured document, and a computing device using the same. Specifically, according to the present disclosure, while generating a structured document and a top-level element document included in the structured document according to a request, an owner tag corresponding to the top-level element document is created, and the new resource is created according to a request, According to the request, a policy tag corresponding to the first specific resource or the permission tag is generated, the permission of the specific user for the first specific action on the second specific resource is returned according to the request, and the third obtained according to the request is returned. A method for executing or not executing a second specific action of a user according to a user's authority for a second specific action for a specific resource and a computing device using the same are provided.

BACKGROUND OF THE INVENTION With the development of hardware and software technologies related to documents, technologies for modifying, distributing, and tracking various documents have been developed. For example, U.S. Patent Publication No. 9,323,850 discloses a method and system for estimating the viral score of a content item from a publisher.

The permission setting function, which is a function that enables others to set whether or not each document created by a user can be viewed, reproduced, and used, is generalized with respect to the file system of an operating system (OS) running on a computing device. However, there is a limitation in that it is not possible to set the right to view, copy, and use for some of the documents when using such technologies.

Various actions handled through a single document need to be controlled at least in a way desired by the creator. It is necessary to propose a method of authority management that can enable the document to be used according to the intention by enabling the setting of

Therefore, the invention of the present disclosure aims to overcome the limitations of the prior art as follows.

Specifically, the present invention deals with a structured document, which is a document structured by dividing a single document into several parts, by reducing the load incurred in reading or writing the entire document as the size of the single document increases, but resources corresponding to a part thereof. Its purpose is to provide a method for flexible and efficient authority management for

In addition, the present invention is a document that is not typically handled in the file system of the operating system, against read/write access, use, etc. of multiple users by enabling permission setting for actions such as sharing (ie, redistribution) and contribution Its purpose is to be able to maintain the integrity and recyclability of each part.

The characteristic configuration of the present invention for achieving the object of the present invention as described above and realizing the characteristic effects of the present invention described later is as follows.

According to one aspect of the present disclosure, a method for managing authority on resources included in a structured document as tags is provided, wherein the structured document has at least a depth of 0. including one top-level element document, and optionally further including at least one element document having a depth of 1 or more, each of all element documents included in the structured document including at least one record as content; , the resources include the structured document, all the element documents included in the structured document, and all the records, each of the resources including a correction round as the number of times modified, having a depth greater than or equal to 1 When the at least one element document is included in the structured document, the structured document indicates that all element documents having a depth n of 1 or more in the structured document are each subordinate to one element document having a depth of n-1. Further comprising each dependent relationship to indicate, wherein users of individual resources belonging to the resources include a general user, at least one owner of the individual resource, and at least one specific user for the individual resource, wherein the Each of the tags includes an owner tag for authorizing actions on the individual resource to the at least one owner of the individual resource, and an owner tag for authorizing or prohibiting actions on the individual resource for the general user. a policy tag, and a permission tag to authorize or forbid actions on the individual resource for the at least one particular user, the method comprising a request from a user to create the structured document: In response to the document generation request, the computing device performs a process of generating the structured document and the top-level element document included in the structured document, and a process of generating the owner tag corresponding to the top-level element document; In response to a resource creation request, which is a request from a user, to create a new resource in the structured document, the computing device creates the new resource; In response to a permission addition request, which is a request from a user, to add a permission for a first specific resource in the structured document, the computing device generates the policy tag or the permission tag corresponding to the first specific resource. ; In response to an authority confirmation request, which is a request for verifying authority of a specific user with respect to a first specific action for a second specific resource in the structured document, the computing device determines the first specific action for the second specific resource. returning the specific user's permission for an action; and in response to an action execution request, which is a request from a user, for executing a second specific action for a third specific resource in the structured document, the computing device, the second specific action for the third specific resource of the user. Acquiring the user's authority for the second specific action for the third specific resource through an authority confirmation request for an action, and executing or not executing the second specific action according to the acquired authority .

Advantageously, (i) the structured document and the resources and (ii) the tags are held and managed in a repository as different units of information.

In one embodiment, the actions related to the individual resource include a request for contribution and a reflection of the contribution for the individual resource, and the request for contribution includes a content modified from the individual resource, and By generating a new resource including a correction cycle increased by 1 from the correction cycle of the individual resource, and providing a first user interface accessible by a contribution reflector, a user permitted to reflect the contribution to the individual resource, , is an action for determining whether to replace the individual resource by the new resource through the first user interface, and the reflection of the contribution is performed by the computing device according to whether the individual resource is replaced by the new resource. , is an action that causes the new resource to replace the individual resource or maintain the individual resource within the structured document.

In another embodiment, the actions for the individual resource include reading the individual resource, the second specific action is copying of the structured document, and the copying of the structured document causes the computing device to: A document duplication step of creating a new structured document by duplicating target resources, which are structured documents or resources to which the user has been granted read permission, among all resources included in the structured document, and the computing device, using the copy target resources This action includes a tag inheritance step of duplicating all tags corresponding to and applying them to the new structured document.

Preferably, the actions related to the individual resource include reading of the individual resource and sharing of the individual resource, and the sharing of the individual resource causes the computing device to set a user designated as the target of the sharing. Provide a second user interface accessible by a receiver, but if the acceptor's acceptance of the individual resource determined through the second user interface is true, the structured document or all information included in the structured document A new structured document is created by duplicating replication target resources, which are resources to which the recipient has read permission, among resources, and the new structured document is created so that the recipient is included in at least one owner of the top-level element document of the new structured document. An action that creates or modifies the owner tag of the top-level element document.

Advantageously, returning the right of the specific user with respect to the first specific action on the second specific resource may cause the first specific resource among the second specific resource and an ancestor resource of the second specific resource to be returned. searching for a specific tag, which is a tag of a resource closest to the second specific resource, as a tag applied to the specific user with respect to an action; and determining and returning the authority of the specific user with respect to the first specific action for the second specific resource according to the specific tag obtained according to the search.

More advantageously, in the step of searching for the specific tag, the search is performed under a first condition that the specific tag is an owner tag and that the specific user belongs to the at least one owner corresponding to the specific tag, the specific tag a policy tag, and a second condition in which permission is granted or prohibited with respect to the first specific action by the specific tag, the specific tag is an authorization tag, and the specific user with respect to the first specific action by the specific tag. The third condition in which permission is granted or prohibited, or the fourth condition in which the tag of the nearest resource that satisfies the first condition, the second condition, and the third condition does not exist is set as an end condition. For the 4 conditions, the third condition is applied first, the second condition is applied first to the third condition, and the first condition is applied first to the second condition.

According to another aspect of the present invention, a computer program comprising instructions implemented to perform the methods according to the present invention is also provided. For example, such a computer program may be stored on a machine-readable non-transitory recording medium.

According to another aspect of the present invention, there is provided a computing device that manages authority for resources included in a structured document as tags, wherein the structured document has a depth of 0. It includes at least one top-level element document, and optionally further includes at least one element document having a depth of 1 or more, and each of all element documents included in the structured document includes at least one record as content. and the resources include the structured document, all of the element documents included in the structured document, and all of the records, each of the resources including a correction round as the number of times modified, wherein the depth is equal to or greater than 1. When the at least one element document having a depth of 1 or more is included in the structured document, in the structured document, all element documents having a depth n of 1 or more depend on one element document having a depth of n-1. Further including each dependency relationship indicating that the resources are, wherein users of individual resources belonging to the resources include a general user, at least one owner of the individual resource, and at least one specific user of the individual resource, Each of the tags includes an owner tag for authorizing actions on the individual resource for the at least one owner of the individual resource, and authorization or prohibiting actions on the individual resource for the general user. a policy tag for the at least one specific user, and a permission tag for authorizing or forbidding actions on the individual resource for the at least one particular user, the computing device comprising: (i) a user for generating the structured document; A structured document creation request, which is a request from a user, (ii) a resource creation request, which is a request from a user, to create a new resource in the structured document, (iii) a permission for a first specific resource in the structured document. , Authorization addition request, which is a request from a user, (iv) Authorization confirmation request, which is a request to confirm the authorization of a specific user with respect to a first specific action on a second specific resource in the structured document, and (v) the structured document a communication unit for obtaining an action execution request, which is a request from a user, for executing a second specific action for my third specific resource; and a sub-process for generating the structured document and the top-level element document included in the structured document, and a sub-process for generating the owner tag corresponding to the top-level element document, in response to the structured document generation request. A process of creating the new resource in response to the resource creation request, a process of generating the policy tag or the permission tag corresponding to the first specific resource in response to the permission addition request, and a response to the permission confirmation request. , a process of returning the authority of the specific user for the first specific action for the second specific resource, and, in response to the action execution request, for the second specific action for the third specific resource of the user. A processor that obtains the user's authority for the second specific action for the third specific resource through an authority confirmation request, and performs a process of executing or not executing the second specific action according to the acquired authority include

According to the present invention, management of creation, reading, modification, deletion, sharing, contribution, etc. of the contents of each part belonging to a document, in particular, it is easy to set rights, and in particular, against read/write access and use of multiple users, corresponding It has the advantage of being able to effectively maintain the integrity and recyclability of each part of the document.

The accompanying drawings for use in describing the embodiments of the present invention are only some of the embodiments of the present invention, and those of ordinary skill in the art (hereinafter referred to as "ordinary technicians") Other figures may be obtained on the basis of these figures without any effort to the extent of inventing the invention.

1 is a conceptual diagram schematically illustrating an exemplary configuration of a computing device that performs a method for managing rights for resources included in a structured document (hereinafter referred to as a "method for managing structured document rights") according to the present disclosure. .

2 is a block diagram exemplarily illustrating a structured document dealt with in the present disclosure.

FIG. 3 is a block diagram exemplarily showing tags corresponding to each of resources, including structured documents, element documents included in the structured document, and records included in the element document covered by the present disclosure.

4 is an exemplary block diagram illustrating hardware or software components of a computing device performing a structured document rights management method according to the present disclosure.

5 is a flowchart illustrating an embodiment of a structured document rights management method according to the present disclosure.

6 is a sequence diagram illustrating a process of generating a structured document and generating an owner tag corresponding to the structured document according to the structured document rights management method of the present disclosure.

7 is a sequence diagram illustrating a process of generating a policy tag or permission tag corresponding to a specific resource according to the structured document management method of the present disclosure.

8 is a flowchart illustrating a process of searching for tags according to the structured document management method of the present disclosure.

9 is a block diagram showing an example of a result of searching for tags according to the structured document management method of the present disclosure.

FIG. 10 is a sequence diagram illustrating a process of acquiring a user's authority and executing or not executing the second specific action according to the acquired authority according to the structured document management method of the present disclosure.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The following detailed description of the present invention refers to the accompanying drawings, which illustrate specific embodiments in which the present invention may be practiced in order to make the objects, technical solutions and advantages of the present invention clear. These embodiments are described in sufficient detail to enable a person skilled in the art to practice the present invention. In the description with reference to the accompanying drawings, the same reference numerals are given to the same components regardless of reference numerals, and overlapping descriptions thereof will be omitted. Like reference numbers in the drawings indicate the same or similar function throughout the various aspects.

Terms such as "first" or "second" may be used to describe various components, but such terms are to be interpreted solely for the purpose of distinguishing one component from another, and no order is implied. because it doesn't For example, a first element may be termed a second element, and similarly, a second element may be termed a first element.

It should be understood that when an element is referred to as being “connected” to another element, it may be directly connected or connected to the other element, but other elements may exist in the middle.

Singular expressions include plural expressions unless the context clearly dictates otherwise. In this disclosure, terms such as "comprise" or "have" are intended to designate that the described feature, number, step, operation, component, part, or combination thereof exists, but one or more other features or numbers, It should be understood that the presence or addition of steps, operations, components, parts, or combinations thereof is not precluded.

In the present disclosure, a "structured document" is a concept that refers to a document bundle including one or more individual element documents connected to each other in a one-to-one or one-to-many (1:Many) dependency relationship (or equivalent inclusive relationship, etc.). Structured documents, element documents, and records, which are the contents of element documents, can each be encompassed by the higher concept of 'resource', and the dependency relationship or inclusion relationship between element documents can be generalized as a dependency relationship between resources.

However, such a dependency or inclusion relationship between resources is conceptually equivalent to a superior/subordinate relationship. For convenience, in this disclosure, when a resource A depends on another resource B, resource A may be referred to as a "parent resource" of resource B, and resource B may be referred to as a "child resource" of resource A. . Expanding this, parent resources, parent resources of parent resources, parent resources of parent resources of parent resources, etc. are referred to as "ancestral resources", and child resources, child resources of child resources, child resources of child resources of child resources, etc. It may be referred to as a "descendant resource".

In the present disclosure, "authority" or "authority information" refers to a value that sets whether a user can take an action (action) with respect to a resource or not, a Boolean value, It can have a form such as an enumeration value or an integer value. In this disclosure, the expression "permission granted" may mean that the permission has a true value, and the expression "permission prohibited" may mean that the permission has a false value. there is.

On the other hand, the authority information in the form of an integer value can express the authority of a user for various actions on a resource in a single value by bit expression, and the bit operation of a computing device is faster than a branch by a logical operation. Since it is extremely fast, the usefulness of expressing authority in integer form is well known to those skilled in the art.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the related art, and unless explicitly defined in the present disclosure, interpreted in an ideal or excessively formal meaning. It doesn't work.

Moreover, the present invention covers all possible combinations of the embodiments presented in this disclosure. It should be understood that the various embodiments of the present invention are different, but need not be mutually exclusive. For example, specific shapes, structures, and characteristics described herein may be implemented in one embodiment in another embodiment without departing from the spirit and scope of the invention. Additionally, it should be understood that the location or arrangement of individual components within each disclosed embodiment may be changed without departing from the spirit and scope of the invention. Accordingly, the detailed description that follows is not intended to be taken in a limiting sense.

In this disclosure, unless otherwise indicated or clearly contradicted by context, terms referred to in the singular encompass the plural unless the context requires otherwise. In addition, in describing the present invention, if it is determined that a detailed description of a related known configuration or function may obscure the gist of the present invention, the detailed description will be omitted.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art can easily practice the present invention.

1 is a conceptual diagram schematically illustrating an exemplary configuration of a computing device that performs a method for managing structured document rights according to the present disclosure.

Referring to FIG. 1 , a computing device 100 according to an embodiment of the present disclosure includes a communication unit 110 and a processor 120, and communicates with an external computing device (not shown) through the communication unit 110. You can communicate directly or indirectly.

Specifically, the computing device 100 may include typical computer hardware (eg, a computer, processor, memory, storage, input and output devices, and other components of conventional computing devices; a router; electronic communication devices, such as switches, switches, etc.; electronic information storage systems, such as network-attached storage (NAS) and storage area network (SAN)) and computer software (i.e., enabling computing devices to It may be to achieve the desired system performance by using a combination of instructions). The storage may include a storage device such as a hard disk or a universal serial bus (USB) memory as well as a storage device based on a network connection such as a cloud server.

The communication unit 110 of such a computing device may transmit and receive requests and responses between other computing devices that are interlocked, for example, a dedicated storage, for example, a database server, and the like. As an example, such requests and responses are the same TCP ( It may be performed by a Transmission Control Protocol (Session) session, but is not limited thereto, and may be transmitted and received as a User Datagram Protocol (UDP) datagram, for example.

Specifically, the communication unit 110 may be implemented in the form of a communication module including a communication interface. For example, communication interfaces include Wireless LAN (WLAN), Wireless Fidelity (WiFi) Direct, Digital Living Network Alliance (DLNA), Wireless Broadband (WiBro), World interoperability for Microwave access (WiMax), High Speed Downlink Packet Access (HSDPA), etc. Including wireless Internet interface of Bluetooth™, RFID (Radio Frequency IDentification), Infrared Data Association (IrDA), UWB (Ultra-WideBand), ZigBee, and NFC (Near Field Communication) short-range communication interfaces. can do. In addition, the communication interface may represent all interfaces through which the processor communicates with the outside (eg, various buses such as a data bus, wired/wireless interfaces).

For example, the communication unit 110 may transmit/receive data from another computing device through an appropriate communication interface. In addition, in a broad sense, the communication unit 110 may include a keyboard, a mouse, other external input devices, a printing device, a display, and other external output devices for receiving commands or instructions, or may be interlocked with them. In order to enable interaction with a user by displaying and providing a user interface suitable for a user of a computing device, for example, a user terminal such as a portable terminal or a personal computer (PC) or a server, the computing device 100 is provided. It is known that the display unit can be embedded or interlocked with an external display device through the communication unit 110 . For example, such a display unit or display device may be a touch screen capable of touch input.

In addition, the processor 120 of the computing device may include one or more micro processing units (MPUs), central processing units (CPUs), and graphics processing units (GPUs) having internal memory such as cache memory and/or external memory. , a microprocessor such as a neural processing unit (NPU) or a tensor processing unit (TPU), a controller such as a microcontroller, an embedded microcontroller, a microcomputer, an arithmetic logic unit (ALU), a digital signal processor, such as , a programmable digital signal processor or other programmable device. In addition, it may further include a software configuration of an operating system and an application that performs a specific purpose.

Now, the structured document rights management method according to the present disclosure will be described in detail with reference to FIGS. 2 to 9 .

2 is a block diagram exemplarily illustrating a structured document dealt with in the present disclosure.

Referring to FIG. 2 , a structured document 200 includes at least one top-level element document 210 having a depth of zero. Here, the depth of the element document has an integer greater than 0, that is, a non-negative integer value.

When the structured document 200 does not include any element document having a depth of 1 or more, the structured document may be referred to as a trivial structured document, and at least one element document having a depth of 1 or more (eg, 220 to 270) may be referred to as a non-trivial structured document.

In the example of FIG. 2 , element documents 220 and 230 of depth 1 are subordinate to element document 210 of depth 0, and element documents 240 and 250 of depth 2 are dependent on element document 220 of depth 1. ), and element documents 260 and 270 of depth 3 are subordinate to element document 240 of depth 2.

The structured document 200 may optionally further include element documents having a depth of 1 or more, and all element documents having a depth n of 1 or more in the structured document 200 each have a depth of n-1. It must depend on one element document. The subordinate relationship between individual element documents in the structured document is included in the structured document 200 as data called 'dependency relationship'.

Referring to the example of FIG. 2 , each element document included in the structured document 200 includes at least one record 212 to 276 as contents of the element document. Records may include text, figures, or pictures, but are not limited thereto, and may include data in various formats. Each of the records corresponding to the contents of a certain element document has values indicating whether to use (or display) and/or activate (or highlight) whether or not to use each of the child resources of the element document, for example, It may include Boolean values and display order values, eg, integer values, which are values indicating a display order when displaying the child resources.

As noted above, 'resource' encompasses the structured document 200, all element documents 210 to 270 included in the structured document, as well as the records 212 to 276 of the element document 210 to 270. . Each resource includes information on a revision count, which is the number of times the resource has been modified.

FIG. 3 is a block diagram exemplarily showing tags corresponding to each of resources, including structured documents, element documents included in the structured document, and records included in the element document covered by the present disclosure.

Prior to describing the tags illustrated in FIG. 3, starting with a user who is a subject to whom authority for a certain resource is granted or prohibited, a user of an individual resource includes a general user (everybody), and at least one of the individual resources. includes an owner of, and at least one specific user for the individual resource.

If so, the types of tags include an owner tag 320 for authorizing actions on the individual resource 310a for at least the owner 322 of the individual resource 310a, and an individual resource 310b for the general user. ), a policy tag 340 for authorizing or prohibiting actions on an individual resource 310c for the at least one specific user 362, a permission tag 360 for authorizing or prohibiting actions on an individual resource 310c. is included Since the general user refers to a specific user, there is a one-to-one correspondence relationship between the individual resource 310b and the policy tag 340, and a one-to-one correspondence relationship or a one-to-many correspondence between the individual resource 310a and the owner tag 320. There is a relationship. If the individual resource 310a has a unique owner, a one-to-one correspondence relationship will be established between the individual resource and the owner tag, but if there are multiple owners of the individual resource 310a, a one-to-many correspondence relationship (one owner tag has only one owner). correspondence) may be established or a one-to-one correspondence relationship (when multiple owners correspond to one owner tag) may be established.

Similarly, a one-to-one correspondence relationship or a one-to-many correspondence relationship may be established between the individual resource 310c and the permission tag 360, and a person skilled in the art may select one of them as a design proposal according to need.

It goes without saying that the owner tag 320 here is not intended to prohibit any action rights for any owner 322 .

4 is an exemplary block diagram illustrating hardware or software components of a computing device for performing a method for managing structured document rights according to the present disclosure, and FIG. 5 is an exemplary embodiment of a method for managing structured document rights according to the present disclosure. It is a flow chart showing

4 and 5, the structured document rights management method of the present disclosure is implemented by a computing device, for example, the server 100, in response to a structured document generation request, which is a request from a user, to create a structured document. The structured document generation module 410, which generates the structured document 200 and the highest element document 210 included in the structured document 200, implemented by the server 100 or interlocked with the server 100 A process (S100a; not shown) holding in a predetermined storage 420, and an owner tag corresponding to the top-level element document 210 to generate an owner tag designating the user as an owner and holding it in a predetermined storage 420 and performing a process (S100b; not shown) (S100).

Of course, the structured document creation request, resource creation request, permission addition request, permission confirmation request, action execution request, etc. described in this disclosure can be obtained from another computing device used by the user, for example, the client 100'. .

That is, the storage 420 among the components illustrated in FIG. 4 may be implemented in the server 100, which is the same computing device as the other modules, but may be implemented in a storage server (not shown), which is a separate computing device. .

6 is a sequence diagram illustrating a process of generating a structured document and generating an owner tag corresponding to the structured document according to the structured document rights management method of the present disclosure.

As illustrated in FIGS. 4 and 6 , the structured document 200 and resources including it and the tags may be held and managed in the same storage 420, but in different storages as different units of information, e.g., structured documents. and resources can be held and managed in the document repository 422 and tags in the tag repository 424. Such an information unit may be, for example, a table of a SQL-based database, but is not limited thereto.

Generation of the top element document 210 in the process S100a may be performed by the resource creation module 430 called by the structured document creation module 410 . The generation of the top-level element document 210 in the process (S100a) is performed by the resource creation module 430 as described later, since the user who requested the creation of the structured document 200 becomes the owner of the created structured document 200. Since there is no need to request permission confirmation of the same user, permission confirmation described later may be omitted.

The generation of the owner tag in process S100b may be performed by the tag generation module 440 called by the structured document generation module 410 . Similar to the process S100a, the generation of the owner tag in the process S100b is performed by the tag generation module 440 as described below since the user requesting the creation of the structured document becomes the owner of the created structured document 200. There is no need to request confirmation of the user's authority as such.

The owner tag is data indicating that the owner designated thereby has all rights to the structured document 200. As mentioned above, the owner corresponding to the owner tag is not limited to a single number and may be multiple.

On the other hand, the owner tag corresponding to the structured document is defined as the owner tag corresponding to the top-level element document, which is to ensure consistency in data handling when searching for authority by the tag described later.

With continued reference to FIGS. 4 and 5 , the structured document rights management method of the present disclosure is configured to generate a new resource in the structured document 200 by the resource creation module 410 implemented by the server 100. , In response to a resource creation request, which is a request from a user, generating the new resource (S200). The new resource may be, but is not limited to, a new element document included in the structured document 200, and may be, for example, a new record included in any element document of the structured document 200.

In addition, in the structured document rights management method of the present disclosure, the tag generation module 440 implemented by the server 100 adds rights to a first specific resource in the structured document 200, from a user. In response to the permission addition request, which is the request, a policy tag or permission tag corresponding to the first specific resource is generated (S300). The policy tag and permission tag are as described above.

7 is a sequence diagram illustrating a process of generating a policy tag or permission tag corresponding to a specific resource according to the structured document management method of the present disclosure.

In detail with reference to FIG. 7, the tag generation module 440 allows the user to select the first specific resource (S340), and the type of tag for the first specific resource (policy tag, permission). tag, etc.) and its content (subject and authority of the subject) are selected by the user (S360), and a policy tag or permission tag corresponding to the first specific resource is generated and stored in a predetermined storage 420. (S380). A step of providing and displaying the entire structured document through, for example, the client 100' before the selection of the first specific resource (S340) so that the user can select the first specific resource (S320) may be further included.

On the other hand, in the above-described generation (S200) of the new resource, a policy tag for a general user or a permission tag for a specific user preset by the owner of the structured document corresponds to the resource as a default value. It can be created together, for this purpose, the resource creation module 410 may call the tag creation module 440.

Next, in the structured document permission management method of the present disclosure, the permission confirmation module 450 implemented by the server 100 is a specific user with respect to a first specific action for a second specific resource in the structured document 200. As a response to the permission confirmation request, which is a request for checking the permission of, returning (S400; returning or return) the permission of the specific user regarding the first specific action for the second specific resource. Furthermore, in the structured document rights management method of the present disclosure, the action execution module 460 implemented by the server 100 executes a second specific action with respect to a third specific resource in the structured document 200. , In response to an action execution request, which is a request from a user, the user related to the second specific action for the third specific resource through a permission confirmation request for the second specific action for the third specific resource of the user Obtaining (S400) the authority of, and executing or not executing the second specific action according to the acquired authority (S500).

actions

Prior to a detailed description of the search for authority possessed by a certain user with respect to a specific action for a specific resource (S400) and the execution of the specific action (S500), in the present disclosure, an action for an individual resource, which is the subject of authority confirmation First described, such actions may include uses and access of the resource. The uses may include modification (editing), viewing, deletion, etc. of the resource, and each of these uses may be granted or prohibited. In addition, since the access refers to displaying the resource as a search result, this access may also be granted or prohibited.

For example, actions may include deleting a top-level element document, which may be the same action as deleting a corresponding structured document.

On the other hand, actions may include deletion of a resource that is not a top-level element document, and upon such deletion, all individual resources that are not a top-level element document and do not have child resources follow a chain of dependency relationships from top-level element documents. In order to ensure that deletion of an individual resource does not cause fragmentation of any other individual resource in the structured document, child resources included in the individual resource to be deleted and their dependent relationships are also recursively recursive. Of course, it should be deleted as recursive.

Actions - solicitation of contributions and reflection of contributions

Also, the actions may include 'request for contribution' and 'reflection of contribution' for the individual resource. Here, 'contribution' refers to the action of a user requesting the contribution (i.e., a contributor) to modify the resources of a previously created structured document. Corresponds to an action that is delivered to the creator of the document, and 'reflection of the contribution' corresponds to an action that changes or maintains the resources of the structured document according to the decision made by the user (ie, the contributor) who decides whether to approve the modification. do.

More specifically, the contribution request includes, by the action execution module 460 implemented by the server 100, the content modified from the individual resource, and a correction cycle increased by 1 from the correction cycle of the individual resource. By creating a new resource that does, and providing a predetermined first user interface through the server 100 or client 100' accessible by a contribution reflector, a user permitted to reflect the contribution to the individual resource, This is an action for determining whether to replace the individual resource with the new resource through the first user interface. A user interface providing module (not shown) implemented by the server 100 may be used to provide the first user interface. In this case, the action execution module 460 calls and uses such a user interface providing module. can

In addition, the reflection of the contribution is determined by the action execution module 460 implemented by the server 100, depending on whether the individual resource is replaced by the new resource, in the structured document, the new resource is the individual resource. It is an action that replaces or maintains the individual resource. If the new resource replaces the individual resource according to the selection of the contributor, the new resource has a correction cycle increased by 1 compared to the individual resource. The action execution module 460 may be configured in such a way as to leave a history of, that is, a contribution record.

action - share

On the other hand, the actions may also include sharing of the individual resource. Here, a user requesting execution of an action of sharing may be referred to as a sender, and a user designated as a target of the sharing may be referred to as a receiver. there is. In order to share the individual resource, the action execution module 460 implemented by the server 100 provides a predetermined second user interface accessible by the receiver through the second user interface. If it is true that the acceptor accepts the determined individual resource, copying of the structured document 200 (original structured document) is performed to generate a new structured document 200' (not shown) and correspond to the new structured document. Create or modify the owner tag of the shared resources in the new structured document so that the recipient is included in at least one owner of shared resources that are resources to which the read permission of the recipient is granted among the individual resource and descendant resources of the individual resource. is an action

That is, since the duplication is performed so that the new structured document for which the recipient is one of the owners includes only resources to which the recipient has been granted read permission among the original structured documents, the new structured document is not the same as the original structured document. may not be In such sharing, the sender and receiver may be the same, so sharing to oneself can be referred to as collection.

As described above for providing the first user interface, the user interface providing module may also be used for providing the second user interface.

Action - Clone structured document

In addition, the actions may include duplication of the structured document, wherein the duplication of the structured document is performed by the action execution module 460 implemented by the server 100, the structured document 200 itself and A document duplication step of generating a new structured document by copying resources included in the structured document 200, that is, replication target resources, which are resources to which the user has been granted read permission, among all resources of the structured document 200, and The action may include a tag inheritance step in which the action execution module 460 copies all tags corresponding to the replication target resources and applies them to the new structured document. That is, duplication of a structured document is substantially the same action as sharing of a structured document in which the sender and receiver are the same, but the difference is that the second user interface for asking whether or not the receiver accepts the sender is not provided. there is.

In relation to the structured document rights management method of the present disclosure, other actions for a structured document itself or resources belonging thereto can be easily derived by a person skilled in the art, so detailed descriptions thereof will be omitted.

Discovery of user's authority regarding actions on resources

Now, for a detailed description of reference numeral S400, reference is made to FIG. 8 exemplarily illustrating a process of searching for tags according to the structured document management method of the present disclosure.

Referring to FIG. 8 , returning (S400) the authority of the specific user for the first specific action for the second specific resource, the second specific resource (R), and the second specific resource Applied to the specific user (U) with respect to the first specific action (A) among ancestor resources (expressed as a set, {R _p | R _p is an ancestor resource of R}), that is, among R ∪ {R _p } It may include a step (S420) of searching for a tag that is the specific user, and the target of the specific search is the closest resource R' to the second specific resource among the tags applied to the specific user. It is to find the corresponding specific tag (T).

The search for the second specific resource and an ancestor resource of the second specific resource to obtain the specific tag T of the nearest resource is performed from the second specific resource R to the ancestor resource {R _p }) and searches for a tag t of a resource r that satisfies a specific condition, that is, an end condition, among R ∪ {R _p }, for example, a breadth-first search (BFS). ), but is not limited thereto. The tag t of resource r, which satisfies the termination condition, is the specific tag T that is the result of the search.

The termination condition to be satisfied is: (i) a first condition in which tag t corresponds to an owner tag and a particular user U belongs to the at least one owner corresponding to tag t; (ii) a tag (t) is a policy tag, and the second condition that the tag (t) authorizes or prohibits the first specific action (A), (iii) the tag (t) is a permission tag, and the tag (t) This is a condition that satisfies one of the third conditions in which the specific user U's authority for the first specific action A is granted or prohibited.

The fourth condition that no tag t that satisfies the first condition, the second condition, and the third condition does not exist is also an end condition, but if the fourth condition is satisfied, a specific tag (T) that is the result of the search ) does not exist, the authority for the first specific action (A) for the second specific resource (R) of the specific user (U) may be regarded as prohibited.

There may be an order to be determined first between the first condition and the fourth condition. For example, the third condition may be applied first to the fourth condition, and the second condition to the third condition. A condition may be applied first, and the first condition may be applied first with respect to the second condition.

9 is a block diagram showing an example of a result of searching for tags according to the structured document management method of the present disclosure. Referring to FIG. 9 , a schematic subordinate relationship of resources 910 to 919 belonging to a structured document 900 is shown. The top-level element document of the structured document 900 is a resource 910, and each resource The symbol indicated in the indicated node indicates the kind of tag set to the particular user U with respect to the first particular action while corresponding to that resource. Among them, "O" stands for owner tag, "A" for permission tag, and "P" for policy tag. Unsigned resources 914, 916, 918, and 919 indicated in the node mean that there is no tag set to correspond to each of the resources with respect to the first specific action and specific user U.

According to the above-described authority search method, for example, the closest resource that satisfies the end condition of the resource 914 to which the tag set for the specific user U with respect to the first specific action does not correspond is the resource 911 ), and since the end condition is the third condition, the tag applied to the resource 911, the first specific action, and the specific user U is also applied to the resource 914 and the resource 918.

In addition, in the example of FIG. 9 , resources that satisfy the end condition among ancestor resources of the resource 919 whose tag does not correspond to the resource 910 that satisfies the first condition and the resource 915 that satisfies the second condition Among them, since the resource closest to the resource 919 is the resource 915, the tag of the resource 915 is applied to the resource 919. On the other hand, since there is only the resource 910 that satisfies the first condition among resources that satisfy the end condition among the ancestor resources of the resource 912, the tag of the resource 910 is applied to the resource 912.

In short, since resources to which the same tag is applied in FIG. 9 are painted with the same pattern, the method of rights search described with reference to FIG. 8 will be understood by those skilled in the art.

Returning the authority of the specific user (S400), following the step (S420), with reference to the specific tag obtained according to the search, with respect to the first specific action for the second specific resource, the specific user's A step (S480) of determining the authority and returning it may be further included.

Now, for a detailed description of reference numeral S500, FIG. 10 shows a process of acquiring a user's authority according to the structured document management method of the present disclosure and executing or not executing the second specific action according to the acquired authority. see

Referring to an embodiment with reference to FIG. 10, the user from the client 100' takes the second specific action and the action including the third specific resource selected (S530) as a target of the second specific action. When the execution request is acquired (S540), the action execution module 460 sends an authorization confirmation request (S550) for the second specific action for the third specific resource of the user to the third specific resource. The user's authority for the second specific action may be returned (S480) and obtained, and the result may be returned (S580) after executing or not executing the second specific action according to the obtained authority (S580). there is.

A step of providing and displaying the entire structured document through, for example, the client 100' (S520) may be further included before the selection (S530) so that the user can select the third specific resource and the second specific action. .

On the other hand, as the user's authority is acquired at reference numeral S500 and the second specific action is executed or not executed according to the acquired authority, the above-described creation of a new resource (S200) also requests and obtains authority confirmation. After (S400), it goes without saying that the user can perform this (S200) only when the user has authority. Since the creation of structured documents and the creation of resources can be regarded as a kind of action, respectively, the structured document creation module 410 and the resource creation module 430 that perform each of them can also be integrated into the action execution module 460. , the example shown in FIG. 4 is a separate structured document creation module 410 and modules corresponding to generation of a structured document and generation of a resource, which are essential actions among actions performed by a more general-purpose action execution module 460. It may be interpreted that what is indicated by the resource generation module 430 is not passing.

In light of the above description, it will be appreciated by those skilled in the art that there is no necessary precedence relationship between the respective steps (S100 to S500) of the structured document rights management method of the present disclosure. Of course, in any structured document, creating a new resource (S200), creating a tag for a specific resource (S300), requesting and obtaining permission for a user's resource (S400), or performing other actions on a resource (S500) In order to do this, the structured document itself must first be generated (S100) and exist, so it can be seen that the step (S100) logically precedes the steps (S200 to S500), but this is only in relation to any one structured document. , For different structured documents, any of the methods of the present invention can be newly created (S100) of another structured document immediately after performing an action of modifying a resource belonging to one structured document (S500). Since steps cannot necessarily precede or follow, the use of the term 'step' is intentionally avoided in this disclosure, and it will be said that a time-series logical precedence relationship exists only when absolutely necessary. Therefore, the person skilled in the art will understand that all the steps described above are interchangeable regardless of the magnitude of the expressed numerals, unless a compelling reason to do so follows.

According to the present invention, the handling by multiple users of a structured document composed of several parts can be carried out efficiently and systematically, while providing sufficient variability or flexibility to the structure, and in particular, the present invention provides for the sharing of actions that are not typical. There is an advantageous effect of maintaining integrity, recyclability, etc. of each part of the document against read/write access and use by multiple users by enabling permission settings for contribution and contribution.

Of course, the method disclosed in this disclosure may be performed not only once but also repeatedly, intermittently or continuously according to the user's request or need.

Based on the description of various embodiments of the present disclosure, a person skilled in the art can determine the method and / or processes of the present invention, and the steps are hardware, software, or hardware and software suitable for a particular application. It can be clearly understood that any combination can be realized.

In addition, today's skilled person reading this disclosure is familiar with various user interfaces that may be provided through a computing device, for example, a workstation, a personal computer, a portable terminal, etc., making the methods described in this disclosure For the individual steps (S100 to S500), a person skilled in the art can perform various manipulations of the user necessary in the method of the present disclosure, particularly contents of individual resources constituting the structured document described in the present disclosure, such as text. Various user interfaces required for performing actions such as receiving various types of data such as , photos, dates, and times from the user and outputting them for provision to the user can be easily assumed.

The hardware device may include a general-purpose computer and/or a dedicated computing device or a specific computing device or a particular aspect or component of a specific computing device. The processes may be realized by a processor as described above, which is combined with a memory such as ROM/RAM or the like for storing program instructions and configured to execute instructions stored in the memory. Additionally, or alternatively, the processes may use an application specific integrated circuit (ASIC), programmable gate array, such as a field programmable gate array (FPGA), programmable logic unit (PLU) or programmable array logic (Programmable Array Logic; PAL) or any other device capable of executing and responding to other instructions, any other device or combination of devices that may be configured to process electronic signals. A processing device may run an operating system and one or more software applications running on the operating system. A processing device may also access, store, manipulate, process, and generate data in response to execution of software. For convenience of understanding, there are cases in which one processing device is used, but those skilled in the art will understand that the processing device includes a plurality of processing elements and/or a plurality of types of processing elements. It can be seen that it can include. For example, a processing device may include a plurality of processors or a processor and a controller. Other processing configurations are also possible, such as parallel processors. The hardware device may also include a communication unit as described above capable of exchanging signals with an external device.

Software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may independently or collectively configure a processing device to operate as desired. ) command to the processing unit. Software and/or data may be any tangible machine, component, physical device, virtual equipment, computer storage medium or device, intended to be interpreted by or provide instructions or data to a processing device. , or may be permanently or temporarily embodied in a transmitted signal wave. Software may be distributed on networked computer systems and stored or executed in a distributed manner. Software and data may be stored on one or more machine-readable recording media.

Furthermore, the subject matter of the technical solution of the present invention or parts contributing to the prior art may be implemented in the form of program instructions that can be executed through various computer components and recorded on a machine-readable medium. Machine-readable media may include program instructions, data files, data structures, etc. alone or in combination. Program instructions recorded on a machine-readable recording medium may be specially designed and configured for the embodiment or may be known and usable to those skilled in the art of computer software. Examples of machine-readable recording media include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs, DVDs, and Blu-rays, and floptical disks. ), and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include storage and compilation for execution on any one of the foregoing devices, as well as a heterogeneous combination of processors, processor architectures, or different combinations of hardware and software, or any other machine capable of executing program instructions. or a structured programming language such as C, an object-oriented programming language such as C++, or a high-level or low-level programming language (assembler, hardware description languages, and database programming languages and technologies) that can be interpreted. As it exists, it includes not only machine code and bytecode, but also high-level language code that can be executed by a computer using an interpreter.

Therefore, in one aspect according to the present invention, when the above-described methods and combinations thereof are performed by one or more computing devices, the methods and combinations of methods may be implemented as executable code that performs each step. In another aspect, the method may be implemented as systems performing the steps, the methods may be distributed in several ways across devices or all functions may be integrated into one dedicated, stand-alone device or other hardware. In another aspect, the means for performing the steps associated with the processes described above may include any of the hardware and/or software described above. All such sequential combinations and combinations are intended to fall within the scope of this disclosure.

Although the present invention has been described above with specific details such as specific components and limited embodiments and drawings, specific structural or functional descriptions of the embodiments are provided for purposes of illustration and to help a more general understanding of the present invention. However, the present invention is not limited to the disclosed embodiments, and those skilled in the art can make various modifications and variations from these descriptions.

Therefore, the technical idea of the present invention should not be limited to the above-described embodiments and should not be determined, and the claims attached to this disclosure, including changes or substitutes included in the technical idea, as well as the scope of this patent claim Or equivalently, all modifications will fall within the scope of the spirit of the present invention. For example, the described techniques may be performed in an order different from the method described, and/or components of the described system, structure, device, circuit, etc. may be combined or combined in a different form than the method described, or other components may be used. Or even if it is replaced or substituted by equivalents, appropriate results can be achieved.

Such equivalent or equivalent modifications will include, for example, logically equivalent methods that can produce the same results as those performed by the method according to the present invention. The scope should not be limited by the above examples, and should be understood in the broadest sense permitted by law.

Claims (15)

1. A method for managing rights on resources included in a structured document as tags,

   The structured document includes at least one top-level element document having a depth of 0, and optionally further includes at least one element document having a depth of 1 or more, and included in the structured document Each element document contains at least one record as content,

   The resources include the structured document, all the element documents included in the structured document, and all the records, each of the resources including a correction number as the number of times modified,

   When the at least one element document having a depth of 1 or more is included in the structured document, the structured document includes one element document having a depth of n-1 in each of all element documents having a depth n of 1 or more in the structured document. It further includes each dependency relationship indicating that it is dependent on the element document of,

   Users of individual resources belonging to the resources include a general user, at least one owner of the individual resource, and at least one specific user of the individual resource,

   Each of the tags includes an owner tag for authorizing actions on the individual resource for the at least one owner of the individual resource, and authorization or prohibiting actions on the individual resource for the general user. a policy tag for authorization, and a permission tag for authorizing or forbidding actions on the individual resource for the at least one specific user;

   The method,

   A process of generating, by a computing device, the structured document and the top-level element document included in the structured document in response to a structured document creation request from a user for generating the structured document, and corresponding to the top-level element document performing a process of generating the owner tag;

   In response to a resource creation request, which is a request from a user, to create a new resource in the structured document, the computing device creates the new resource;

   In response to a permission addition request, which is a request from a user, to add a permission for a first specific resource in the structured document, the computing device generates the policy tag or the permission tag corresponding to the first specific resource. ;

   In response to an authority confirmation request, which is a request for verifying authority of a specific user with respect to a first specific action for a second specific resource in the structured document, the computing device determines the first specific action for the second specific resource. returning the specific user's permission for an action; and

   In response to an action execution request, which is a request from a user, for executing a second specific action for a third specific resource in the structured document, the computing device performs the second specific action for the third specific resource of the user. Obtain the user's authority for the second specific action for the third specific resource through an authority confirmation request for, and execute or not execute the second specific action according to the acquired authority

   Including, structured document rights management method.
2. According to claim 1,

   (i) the structured document and the resources and (ii) the tags are held and managed in a repository as different units of information.
3. According to claim 1,

   The actions related to the individual resource include a request for contribution and reflection of the contribution for the individual resource,

   The request for contribution is

   The computing device is a user who is permitted to create a new resource including the content modified from the individual resource and a correction cycle increased by 1 from the correction cycle of the individual resource, and to reflect the contribution to the individual resource. An action for determining whether to replace the individual resource by the new resource through the first user interface by providing a first user interface accessible by a contributor,

   The reflection of the above contribution is,

   According to whether the individual resource is replaced by the new resource, the action of causing the computing device to replace the individual resource with the new resource or to maintain the individual resource in the structured document.
4. According to claim 1,

   the actions on the individual resource include reading on the individual resource;

   The second specific action is duplication of the structured document,

   Replication of the structured document,

   A document duplication step in which the computing device creates a new structured document by duplicating replication target resources, which are the structured document or resources to which the user has been granted read rights, among all resources included in the structured document; and

   A tag inheritance step of, by the computing device, duplicating all tags corresponding to the replication target resources and applying them to the new structured document.

   An action comprising a, structured document rights management method.
5. According to claim 4,

   The actions related to the individual resource include reading of the individual resource and sharing of the individual resource,

   Sharing of the individual resources,

   If the computing device provides a second user interface accessible by a receiver, that is, a user designated as the sharing target, and whether or not the receiver accepts the individual resource determined through the second user interface is true, , Creating a new structured document by duplicating replication target resources, which are the structured document or resources to which the recipient has read permission, among all resources included in the structured document, and create a new structured document, and at least one of the uppermost element documents of the new structured document and an action of creating or modifying an owner tag of the top-level element document of the new structured document so that the owner includes the acceptor.
6. According to claim 1,

   Returning the specific user's authority for the first specific action for the second specific resource,

   Among the second specific resource and an ancestor resource of the second specific resource, a specific tag applied to the specific user with respect to the first specific action, which is a tag of a resource closest to the second specific resource, is searched for. doing; and

   determining and returning the authority of the specific user with respect to the first specific action for the second specific resource according to the specific tag obtained according to the search;

   Including, structured document rights management method.
7. According to claim 6,

   In the step of searching for the specific tag, the search,

   a first condition, wherein the particular tag is an owner tag, and the particular user belongs to the at least one owner corresponding to the particular tag;

   a second condition in which the specific tag is a policy tag, and permission for the first specific action is granted or prohibited by the specific tag;

   a third condition in which the specific tag is a permission tag, and the specific user is granted or prohibited with respect to the first specific action by the specific tag; or

   A fourth condition in which a tag of the nearest resource that satisfies the first condition, the second condition, and the third condition does not exist.

   As an end condition, the third condition is applied first to the fourth condition, the second condition is applied first to the third condition, and the first condition is applied first to the second condition , structured document rights management methods.
8. A computer program, stored in a machine-readable recording medium, comprising instructions implemented to cause a computing device to perform the method of any one of claims 1 to 7.
9. A computing device that manages rights to resources included in a structured document as tags,

   The structured document includes at least one top-level element document having a depth of 0, and optionally further includes at least one element document having a depth of 1 or more, and included in the structured document Each element document contains at least one record as content,

   The resources include the structured document, all the element documents included in the structured document, and all the records, each of the resources including a correction number as the number of times modified,

   When the at least one element document having a depth of 1 or more is included in the structured document, the structured document includes one element document having a depth of n-1 in each of all element documents having a depth n of 1 or more in the structured document. It further includes each dependency relationship indicating that it is dependent on the element document of,

   Users of individual resources belonging to the resources include a general user, at least one owner of the individual resource, and at least one specific user of the individual resource,

   Each of the tags includes an owner tag for authorizing actions on the individual resource for the at least one owner of the individual resource, and authorization or prohibiting actions on the individual resource for the general user. a policy tag for authorization, and a permission tag for authorizing or forbidding actions on the individual resource for the at least one specific user;

   The computing device,

   (i) a structured document creation request, which is a request from a user to create the structured document, (ii) a resource creation request, which is a request from a user to create a new resource in the structured document, (iii) the structured document A permission addition request, which is a request from a user, for adding a permission for a first specific resource within the structured document, (iv) a request for confirming a specific user's permission for a first specific action for a second specific resource within the structured document. a communication unit for obtaining an authorization confirmation request and (v) an action execution request, which is a request from a user, for executing a second specific action with respect to a third specific resource within the structured document; and

   A process for performing a sub-process for generating the structured document and the top-level element document included in the structured document, and a sub-process for generating the owner tag corresponding to the top-level element document in response to the structured document generation request; In response to a resource creation request, a process of creating the new resource, in response to the permission addition request, a process of generating the policy tag or the permission tag corresponding to the first specific resource, as a response to the permission confirmation request, A process of returning the specific user's authority for the first specific action for the second specific resource, and the authority for the second specific action for the third specific resource of the user in response to the action execution request A processor that obtains the user's authority for the second specific action for the third specific resource through a confirmation request, and performs a process of executing or not executing the second specific action according to the acquired authority

   Including, structured document rights management device.
10. According to claim 9,

    (i) the structured document and the resources and (ii) the tags are held and managed in a repository as different information units.
11. According to claim 9,

    The actions related to the individual resource include a request for contribution and reflection of the contribution for the individual resource,

    The request for contribution is

    The processor creates a new resource including the contents modified from the individual resource and a correction cycle increased by 1 from the correction cycle of the individual resource, and a user who is permitted to reflect the contribution to the individual resource is a contribution. An action that allows the contributing reflector to determine whether to replace the individual resource by the new resource through the first user interface by providing a first user interface accessible by the reflector,

    The reflection of the above contribution is,

    Wherein the processor is an action of causing the new resource to replace the individual resource or to maintain the individual resource in the structured document according to whether the individual resource is replaced by the new resource.
12. According to claim 9,

    the actions on the individual resource include reading on the individual resource;

    The second specific action is duplication of the structured document,

    Replication of the structured document,

    A document duplication sub-process in which the processor creates a new structured document by copying replication target resources, which are the structured document or resources to which the user has been granted read permission among all resources included in the structured document, and

    A tag inheritance sub-process in which the processor copies all tags corresponding to the replication target resources and applies them to the new structured document

    An action for performing sub-processes including a structured document rights management device.
13. According to claim 12,

    The actions related to the individual resource include reading of the individual resource and sharing of the individual resource,

    Sharing of the individual resources,

    The processor provides a second user interface accessible by a receiver, which is a user designated as the sharing target, and if it is true that the receiver accepts the individual resource determined through the second user interface, A new structured document is created by duplicating replication target resources, which are the structured document or resources to which the recipient has read permission, among all resources included in the structured document, and at least one owner of a top-level element document of the new structured document An action of generating or modifying an owner tag of the top-level element document of the new structured document so that the acceptor is included in the structured document rights management device.
14. According to claim 9,

    The process of returning the authority of the specific user for the first specific action for the second specific resource,

    Among the second specific resource and an ancestor resource of the second specific resource, a specific tag applied to the specific user with respect to the first specific action, which is a tag of a resource closest to the second specific resource, is searched for. sub-process; and

    A sub-process for determining and returning the authority of the specific user for the first specific action for the second specific resource according to the specific tag obtained according to the search.

    Including, structured document rights management device.
15. According to claim 14,

    In the process of searching for the specific tag,

    The search is

    a first condition, wherein the particular tag is an owner tag, and the particular user belongs to the at least one owner corresponding to the particular tag;

    a second condition in which the specific tag is a policy tag, and permission for the first specific action is granted or prohibited by the specific tag;

    a third condition in which the specific tag is a permission tag, and the specific user is granted or prohibited with respect to the first specific action by the specific tag; or

    A fourth condition in which a tag of the nearest resource that satisfies the first condition, the second condition, and the third condition does not exist.

    As an end condition, the third condition is applied first to the fourth condition, the second condition is applied first to the third condition, and the first condition is applied first to the second condition , structured document rights management device.

Images