JP2000010928A - Information management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To eliminate the setting error of access limit that is caused by a rewrite error, etc., and to prevent unreasonable leakage of the information having high secrecy by automatically rewriting the contents of a staff information table on the relevant day when the department name of each member of the staff is changed based on the scheduled changes in the staff which are previously inputted. SOLUTION: An access control system 3 refers to the contents of the scheduled changes in the staff written into a latest department information table 5 of a personnel management system 2 every day and at a fixed time. The contents of a staff information table 7 where the department names of each member of the staff are registered are changed based on the referred contents of the table 5. Then the contents of limit which are defined for each member of the staff to utilize a work system 4 are changed. Thus, it's possible to prevent the unreasonable leakage of the information which are registered into an application server device.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information management system arranged in a company, a government office, and the like. In particular, a personnel management system for managing personnel contents of each employee, and each employee has high business confidentiality. Information in which an access control system is arranged between a business system that provides information and the like, the personnel management system and the business system are linked, and access is automatically restricted according to a personnel change or the like. Regarding the management system.

[0002]

2. Description of the Related Art In an information management system used in a company or a government office, access is restricted according to the position of each employee, and the type of information that can be extracted from an application server device or the like is limited. Outflow of information registered in the server device is often restricted.

[0003]

However, in such an information management system, each employee number (employee ID) registered in the information management system is registered on the day when the position of each employee is changed due to a personnel change or the like. Title I indicating the title
Since the contents of the staff information table corresponding to D must be rewritten, the work of rewriting the staff information table accompanying a personnel change is concentrated on a specific day, for example, April 1, and the labor on the day is reduced. There is a problem in that the staff information table becomes enormous and a mistake in rewriting the staff information table easily occurs.

The present invention has been made in view of the above circumstances, and in claim 1, when the position of each employee is changed based on a pre-input personnel change schedule of each employee, this is detected.
It is possible to automatically rewrite the contents of the staff information table, thereby eliminating access setting mistakes caused by miswriting of the staff information table, etc. It is an object of the present invention to provide an information management system that can prevent leakage of highly confidential information.

According to a second aspect of the present invention, based on a pre-input personnel change schedule of each employee, on the day when the title of each employee changes, this is detected and the contents of the employee information table are automatically updated. It is an object of the present invention to provide an information management system that can be rewritten, thereby eliminating an error in setting access restrictions due to an error in rewriting an employee information table.

[0006]

In order to achieve the above object, according to the present invention, according to claim 1, according to the position of each employee,
In an information management system for restricting access rights to information, a latest post information table in which personnel changes of each staff are written, a staff information table in which post names of each staff are written, and a preset cycle. The latest post information table is accessed to extract the personnel change contents of each staff, based on the extracted contents, the post information update processing means for updating the contents of the staff information table, and every time an access request is issued, An access right granting means for accessing the contents of the staff information table and granting an access right to the information when the staff issuing the access request is a predetermined manager is provided.

According to a second aspect, in the information management system according to the first aspect, the post information update processing means compares the date of the promulgation date written in the latest post information table with the date of the day. If they match, the staff ID and post ID associated with the matching promulgation date
And updating the contents of the staff information table.

With the above arrangement, according to the first aspect of the present invention, the post information update processing means performs the following at a preset cycle.
Access the latest post information table in which personnel changes of each staff are written, extract the contents of personnel changes of each staff, and update the contents of the staff information table in which the post names of each staff are written based on the extracted contents. In addition, every time an access request is issued by a staff member, the access right granting means accesses the contents of the staff information table, and when the staff member is in a predetermined position, information with high business confidentiality is obtained. Access rights. By this, when the post title of each employee changes based on the pre-entered personnel change of each employee, this is detected and the contents of the staff information table are automatically rewritten, thereby rewriting the staff information table. An error in setting the access restriction due to a mistake or the like is eliminated, and information with high business confidentiality and the like registered in the application server device or the like is prevented from leaking out.

In the present invention, the date of promulgation date written in the latest position information table is compared with the date of the current day by the position information update processing section. Official I related to the promulgation date
D. Extract the post ID and update the contents of the staff information table. With this, based on the personnel change schedule of each staff member entered in advance, on the day when the title of each staff member changes, this is detected, and the contents of the staff information table are automatically rewritten. This prevents errors in setting access restrictions caused by mistakes in rewriting data, and prevents information with high business confidentiality registered in the application server device or the like from leaking out.

[0010]

FIG. 1 is a block diagram showing an embodiment of an information management system according to the present invention.

An information management system 1 shown in FIG. 1 is based on a personnel management system 2 for managing personnel such as staff members and the latest post information registered in the personnel management system 2.
An access control system 3 for restricting access to each staff member, and a business system 4 for allowing each staff member to use an application server device (not shown) based on the contents of the access control of the access control system 3 are provided. In this information management system 1, the personnel change schedule contents of the staff members written in the latest post information table 5 of the personnel management system 2 at a preset cycle, for example, at a fixed time every day, by the access control system 3. And, based on the reference contents, change the contents of the staff information table 7 in which the titles of the staff members are registered, and change the contents of restrictions when each staff member uses the business system 4. The information registered in the application server device is prevented from leaking out.

As shown in FIG. 2, the personnel management system 2 uses the staff number (employee ID) of each employee as a search key,
The latest job information that registers the job ID indicating the job title of each employee, the issuance date indicating the date on which the employee was instructed to become the job title, and the promulgation date indicating the date on which the employee takes the job indicated by the job title. A table 5 and a transfer subsystem 6 for updating the contents of the latest post information table 5 based on the input contents of the operator each time there is a regular personnel change or an irregular personnel change. , Regular personnel changes,
Alternatively, every time the contents of the personnel change schedule corresponding to the irregular personnel changes are input, the personnel change processing is performed by the transfer subsystem 6 based on the input personnel change schedule contents, and the latest post information table 5 is obtained. Update the contents of

As shown in FIG. 3, the access control system 3 uses a staff number (employee ID) as a search key, a post ID indicating the post name of each employee, and an update date indicating the date on which the post ID was updated. The staff information table 7 in which information is registered,
As shown in FIG. 4, a resource ID indicating each application name which can be used by each officer indicated by each position ID, a user ID required when each application is used, and each application Access the contents registered in the latest post information table 5 of the personnel management system 2 at an access control table 8 in which a password and the like necessary for use are registered, and at a preset cycle, for example, at a fixed time every day. Then, it is checked whether or not there is any employee whose position change has been promulgated on the day, and information on the staff whose position change has been promulgated on that day (position change information) is extracted. Information update processing unit 9 for updating the
D. When the resource ID is supplied, it is determined by referring to the contents of the staff table 7 whether the staff indicated by the staff ID can access the resource indicated by the resource ID, and the staff can access the resource. An access control processing unit 10 is sometimes provided that reads the contents of the access control table 8, reads out the user ID and password corresponding to the staff ID and resource ID, and returns them to the business system 4.

In the access control system 3, the contents of the latest position information table 5 of the personnel management system 2 are accessed by the position information update processing unit 9 every day at a preset time every day. The information of the staff (post transfer information) for which the post transfer has been promulgated is extracted, the contents of the staff information table 7 are updated based on the post transfer information, and the staff ID and the resource ID are supplied from the business system 4. Each time, by referring to the contents of the staff table 7, the access control processing unit 10 determines whether the staff indicated by the staff ID can access the resource indicated by the resource ID, and the staff can access the resource. At this time, referring to the contents of the access control table 8, the post I
D, the user ID and the password corresponding to the resource ID are read, and these are returned to the business system 4.

The business system 4 is provided with a resource ID,
When the use permission of the resource is input from outside, a plurality of applications (APL) 12 for performing processing using a predetermined specific resource, for example, an application server device, etc., and a keyboard or the like is operated by a staff member. Each time the staff ID and the selection of the resource to be used are input, it is determined whether the resource ID of the application 12 indicated by the selection among the applications 12 is a resource ID having access restriction, and If the resource ID has no restriction, the use of the application 12 indicated by the resource ID is unconditionally permitted. If the resource ID is the resource ID having the access restriction, the staff ID and the resource ID are set to the access control system 3. And the staff having the staff ID uses the application 12 indicated by the resource ID. When the required user ID and password are returned, ask the staff to enter the user ID and password, and check whether the user ID and password match the user ID and password returned from the access control system 3. And an access control system client module 11 for permitting a staff member having a staff ID to use the application 12 indicated by the resource ID when these match.

In the business system 4, each time a staff member operates a keyboard or the like to input a staff ID and a selection of a resource to be used, the access control system client module 11 uses the application indicated by the selection. It is determined whether or not the resource ID of the resource ID 12 is a resource ID having an access restriction. If the resource ID is a resource ID having no access restriction, the use of the application 12 indicated by the resource ID is unconditionally permitted. To start processing using an application server device managed by the application 12 indicated by the resource ID for the staff member having the staff ID.

If the resource ID is a resource ID having an access restriction, the access control system client module 11 supplies the staff ID and the resource ID to the access control system 3. Necessary for a staff member having a staff ID to use the application 12 indicated by the resource ID.
D. When the password is returned, ask the staff to enter the user ID and password, and check whether the user ID and password match the user ID and password returned from the access control system. When the ID matches, the resource ID is assigned to the staff having the staff ID.
, The application 12 is activated, and the staff having the staff ID starts processing using the application server managed by the application 12 indicated by the resource ID.

As described above, in the present embodiment, the access control system 3 sets a preset cycle,
For example, at a fixed time every day, the personnel management system 2
, The contents of the staff information change schedule registered in the staff information table 7 in which the titles of the staff members are registered are changed based on the reference contents. Changes the contents of restrictions when using the business system 4, thereby restricting the leakage of information registered in the application server device. For this reason, based on the personnel change schedule of each employee registered in the latest position information table 5, when the position name of each employee changes, this is detected and the contents of the employee information table 7 are automatically rewritten. By doing so, it is possible to eliminate an access restriction setting error due to a mistake in rewriting the staff information table 7 and to prevent information with high business confidentiality registered in an application server device or the like from leaking out. Can be.

In this embodiment, a fixed time every day is specified as a preset cycle. Therefore, the personnel change schedule of each staff registered in the latest post information table 5 is set. Based on the above, on the day when the title of each staff member is changed, this can be detected and the contents of the staff information table 7 can be automatically rewritten, thereby restricting access due to a mistake in rewriting the staff information table 7. Can be prevented from being set incorrectly, whereby information with high business confidentiality registered in the application server device or the like can be prevented from leaking out.

[0020]

As described above, according to the present invention, in the information management system according to the first aspect of the present invention, when the title of each employee is changed based on the pre-input personnel change schedule of each employee, Can be detected and the contents of the staff information table can be automatically rewritten. This eliminates errors in setting access restrictions caused by mistakes in rewriting the staff information table, etc., thereby registering in the application server device etc. It is possible to prevent information with high confidentiality and the like from being leaked out.

Further, in the information management system according to claim 2,
Based on the personnel change schedule of each staff entered in advance, on the day when the title of each staff has changed, this can be detected and the contents of the staff information table can be automatically rewritten,
This eliminates errors in setting access restrictions due to errors in rewriting the staff information table, etc., thereby preventing information with a high degree of business confidentiality registered in the application server device etc. from leaking out. can do.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an embodiment of an information management system according to the present invention.

FIG. 2 is an explanatory diagram showing an example of a format of a latest post information table used in the information management system shown in FIG. 1;

FIG. 3 is an explanatory diagram showing an example of a format of a staff information table used in the information management system shown in FIG. 1;

FIG. 4 is an explanatory diagram showing an example of a format of an access control table used in the information management system shown in FIG.

[Explanation of symbols]

1: information management system 2: personnel management system 3: access control system 4: business system 5: latest post information table 6: transfer subsystem 7: staff information table 8: access control table 9: post information update processing unit 10: access Control processing unit 11: Access control system client module (access right granting means) 12: Application

Claims (2)

[Claims] 1. An information management system for restricting access rights to information according to the position of each employee, wherein an updated position information table in which personnel changes of each employee are written, and a position name of each employee are written. The staff information table and the latest job information table are accessed at a preset cycle to extract the personnel change contents of each staff, and based on the extracted contents, the job information update for updating the contents of the staff information table A processing means, and an access right granting means for accessing the contents of the staff information table every time an access request is issued, and for giving an access right to the information when the staff issuing the access request is a predetermined manager. An information management system, comprising: 2. The information management system according to claim 1, wherein the post information update processing means compares the date of the promulgation date written in the latest post information table with the date of the day. An information management system that extracts a staff ID and a post ID associated with a coincident promulgation date and updates the contents of the staff information table.