JP2003006185A - Access management system and browser program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To perform access management with respect to information viewing by a browser. SOLUTION: Each of clients 3 and 13 transmits user identification information to a general-purpose machine 4, before starting a browser and starts the browser, when authentication by the general-purpose machine 4 is successful. Each of the clients 3 and 13 also transmits an access log to a server within the same communication network in accordance with the browser, in the case of acquiring and displaying an electronic document and in the case of printing the electronic document. A server 2 collects access logs stored in another server 12. Setting about browser function limitation and setting for inhibiting the startup of a browser, that does not output access log, are preliminarily made in each of the clients 3 and 13.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an access management system and a browser program for managing access to electronic documents.

[0002]

2. Description of the Related Art In recent years, networking of computers has become common, and a form in which a large number of users use each terminal device connected to a communication network has become widespread. There is a client / server method as a method for executing processing by networked computers. In the client-server method, the client has a processing execution environment. Therefore, when a new computer is added as a client, an execution environment must be built on that computer as well. Further, when it becomes necessary to modify the execution environment, the network administrator must distribute the information necessary for modifying the execution environment to all the clients. As described above, the client / server method has a problem that the operation cost increases.

Further, there is a form of a communication network in which a computer on the communication network holds a browser program and a user browses information (electronic document) using the browser. Each computer receives and displays an electronic document from another server or the like. The electronic document displayed by the browser is HTML (Hypertext Markup Language).
It is described by the page description such as
orm Resource Locator). In this form, the burden of distributing the information necessary for modifying the execution environment to each computer does not occur.

A user operates a browser to display a plurality of windows or browses an electronic document while switching between the windows. For example, the operating system (hereinafter referred to as OS) of a computer is Windows.
It is wsNT and the browser is InternetExpl
In the case of “orer”, the electronic document to which the link is set can be displayed in a new window by holding down the “Shift” key and clicking the link setting part on the screen with the mouse. In addition, "Alt" key and "T"
By pressing the "ab" key at the same time, the window displayed in the front can be switched. The user browses the electronic document and proceeds with business operations by such an operation. Further, the displayed electronic document is printed. In some cases, Windows NT and Internet Explorer are used by Micros.
is a trademark of oft.

[0005]

However, when displaying an electronic document by a browser, it is difficult to take security measures. For example, a third party may operate a computer to browse an electronic document. In particular, when the electronic document contains information that should not be known to anyone other than the parties concerned, there is a problem that the information is known to a third party. Furthermore, a third party prints the displayed electronic document,
Information leaks could spread depending on the printed matter. Further, even when a legitimate user is browsing an electronic document, a third party may browse the information when the user leaves the seat for a while.

[0006] Therefore, the network administrator needs to prevent a third party from browsing the information by the browser. Furthermore, when information is leaked, it is preferable to be able to know when and from which computer the information was leaked.

An object of the present invention is to provide an access management system and a browser program for performing access management for browsing information by a browser.

[0008]

An access management system according to the present invention responds to an operation of an electronic document viewer in accordance with a record holding device for holding record information of an operation of the electronic document viewer and a browser displaying an electronic document. A document display device that displays the electronic document and transmits the record information of the operation related to the electronic document to the record holding device via the communication network, and the record holding device stores the record information of the operation received from the document display device. It is characterized by holding.

For example, a plurality of communication networks each having a record holding device and a document display device are provided, and the document display device in each communication network transmits the record information of the operation to the record holding device connected to the same communication network. According to such a configuration, the operation record information is distributed and accumulated in the record holding devices in each communication network, so that one communication network is not occupied by the communication of the operation record information and the communication is smoothly performed. It can be carried out.

For example, the document display device transmits the record information of the browsing operation to the record holding device via the communication network when the electronic document is displayed. In addition, the document display device,
The electronic document may be printed according to the operation of the electronic document reader, and when the electronic document is printed, the record information of the print operation may be transmitted to the record holding device via the communication network. According to such a configuration, the record holding device holds the record information of the browsing operation and the print operation, so that when the confidential information is leaked, the leaked situation can be investigated. Further, it is preferable that the document display device adds the record information of the print operation and prints the electronic document. According to such a configuration,
Information leakage status can also be investigated from printed materials.

Of the record holding devices, record holding devices other than the predetermined record holding device transmit operation record information to the predetermined record holding device via a communication network, and the predetermined record holding device is the other. Holds the record information of the operation received from the record holding device. With such a configuration, it is possible to collectively manage the operation record information in one predetermined record holding device. Further, since the information is distributed to each record holding device and then the information is collected in the predetermined record holding device, the communication network having the predetermined record holding device is not occupied by the communication of the record information of the operation, and the communication is smoothly performed. It can be carried out.

An authentication device is provided which receives the identification information of the electronic document viewer from each document display device and performs authentication based on the identification information. The authentication device holds in advance the identification information of each electronic document viewer. However, when the identification information received from the document display device matches any of the identification information held in advance, it is preferable to send information indicating that the authentication has been successful to the document display device. With such a configuration, it is possible to prevent unauthorized users from browsing the electronic document.

For example, when the document display device receives information indicating that the authentication is successful from the authentication device, the document display device transmits the information regarding the authentication result to the record holding device connected to the same communication network, and the record holding device Holds information about the received authentication result. With such a configuration, since the information regarding the authentication result is distributed and accumulated in each record holding device, one communication network is not occupied by the communication regarding the information regarding the authentication result, and the communication can be smoothly performed. .

Of the record holding devices, the record holding devices other than the predetermined record holding device transmit information regarding the authentication result to the predetermined record holding device via the communication network, and the predetermined record holding device is the other. It is preferable to retain the information regarding the authentication result received from the record retaining device. With such a configuration, it is possible to collectively manage the information regarding the authentication result in one predetermined record holding device.
Further, since the information is distributed to each record holding device and then the information is collected in the predetermined record holding device, the communication network having the predetermined record holding device is not occupied by the communication of the information regarding the authentication result, and the communication is smoothly performed. It can be carried out.

Further, it is preferable that the document display device is provided with a browser function setting means for setting a function restriction of the browser, and the operation of the electronic document displayed by the browser is restricted according to the setting of the browser function setting means. By limiting the operation, the effect of preventing information leakage can be enhanced.

Further, the document display device preferably terminates the browser when there is no information input for a predetermined time. Even when the electronic document viewer leaves the seat without closing the browser, it is possible to reduce the chances of a third party viewing information.

Further, the document display device activates only the browser which causes the record holding device to transmit the record information of the operation relating to the electronic document. With such a configuration, the electronic document is not browsed by another browser without accumulating the record information of the operation.

Further, the program of the browser according to the present invention causes a computer connected to a record holding device for holding record information of the operation of the electronic document viewer to a computer connected via a communication network, in accordance with the operation of the electronic document viewer. It is characterized in that the processing for displaying the document and the processing for transmitting the record information of the browsing operation to the record holding device via the communication network are executed.

A browser program according to the present invention causes a computer to print an electronic document in response to an operation of an electronic document viewer, and to send record information of the print operation to a record holding device via a communication network. It may be executed. According to such a program, when confidential information is leaked, it is possible to investigate the leaked situation by the record information of the printing operation. Further, when printing the electronic document, the computer may be caused to execute a process of adding the record information of the printing operation to the electronic document and printing.
Information leakage status can also be investigated from printed materials.

[0020]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. FIG. 1 is an explanatory diagram showing an embodiment of an access management system according to the present invention. The access management system of this example is the first communication network 1
And a second communication network 11 and a dedicated line 21. In this example, a server (record holding device) 2, a client (document display device) 3, and a general-purpose machine (authentication device) 4 are connected to the first communication network 1 and are connected to the second communication network 11. Is a server (record holding device) 1
2 and the client (document display device) 14 are connected. Each of the communication networks 1 and 11 is connected to a dedicated line by routers 5 and 15, respectively. The router 5 controls transmission / reception of information to / from a communication network other than the first communication network. Similarly, the router 15 controls transmission / reception of information to / from another communication network.

In this example, the case where the first communication network 1 is provided at the head office of the company and the second communication network 11 is provided at the branch of the company will be described as an example. In addition,
The communication network that the access management system has is 3
It may be more than one. The number of clients and servers connected to each communication network is not limited to one.

A print server connected to the printer may be arranged in each communication network. A printer may be connected to each client. When each client prints, a print server or a printer directly connected to the client prints.

The first communication network 1 and the second communication network 11 are connected to another communication network (not shown) such as the Internet. Client 3,13
Has a browser, and displays the electronic document received via the Internet or the like by the browser. Also, a device in the access management system (for example, the servers 2 and 12)
Holds the electronic document, and the clients 3 and 13 may receive and display the data of the electronic document from these devices. The servers 2 and 12 receive the access logs described later from the clients 3 and 13 and hold them. The general-purpose device 4 receives the user identification information (user ID, password, and fingerprint information) from the clients 3 and 13 before the clients 3 and 13 display the electronic document by the browser, and authenticates the user.

When the user wants to browse an electronic document in each of the clients 3 and 13, the user first transmits the identification information of the user to the general-purpose device 4 from the client. At this time, the clients 3 and 13 and the general-purpose device 4 are
It communicates by IP. When the general-purpose device 4 succeeds in the authentication, the clients 3 and 13 receive and display the data of the electronic document from a server (not shown) on the Internet or a device in the access management system.

Each of the clients 3 and 13 outputs an access log to a server in the same communication network as the client when displaying an electronic document or printing an electronic document. For example, if the client 13 acquires and displays an electronic document or prints it, the client 13
The access log is output to the server 12 in the same communication network. The access log is record information of browsing operation or printing operation. The access log output as the record information of the browsing operation is, for example, the URL of the electronic document browsed by the user, the date and time when the electronic document is displayed according to the browsing operation,
It includes the user ID of the user who performed the browsing operation, the terminal name (client name) operated by the user, and the like. The access log output as the record information of the print operation includes, for example, the URL of the printed electronic document, the date and time when the print operation is performed, the user ID of the user who performed the print operation, the terminal name, and the like.

Since each client 3, 13 outputs an access log to the server 2, 12 in the same communication network, the access log is stored in each server 2, 12. One server in the access management system (here, the head office server 2) collects access logs accumulated in each server. When the network administrator uses the access log collected by the server 2 at the head office,
See who viewed what information on what computer.

Further, the browsers included in the clients 3 and 13 can limit the functions that can be used by the user according to predetermined settings. For example, print prohibition can be set. In this case, even if the user performs a printing operation, the browser does not print. Furthermore, the clients 3 and 13 can be set so that a browser other than a predetermined browser does not start. This setting is made by the network administrator.

Next, the structure of the client will be described. FIG. 2 is a block diagram showing an example of the configuration of the clients 3 and 13. The control unit 31 executes processing according to the program stored in the storage device 32. Storage device 32
Holds an OS, a browser program, an identification information transmission program, and the like. Network interface unit 33
Transmits and receives information to and from other devices via a communication network. The input unit 34 is composed of, for example, a keyboard and a mouse, and information is input by the user. The output unit 35 is composed of, for example, a display device and displays an electronic document or the like. Fingerprint input device 36
Inputs the fingerprint information of the user. Fingerprint input device 36
Is a configuration for detecting fingerprint information from the user's finger pressed against the fingerprint input device 36, for example.

The control section 31 transmits the identification information to the general-purpose machine 4 according to the identification information transmission program. Of the identification information, the user ID and password are input from the input unit 34, and the fingerprint information is input from the fingerprint input device 36. The storage device 32 stores the address of the general-purpose device 4 in advance, and the control unit 31 transmits the identification information using this address. When the general-purpose device 4 succeeds in the authentication, the control unit 31
Information about the authentication result is sent to a server in the same communication network. The information regarding the authentication result is information indicating the authentication record, and includes, for example, the user ID, the authentication date and time, the terminal name, and the like.

The control unit 31 of each client records various settings of the application (browser or the like) of the client in the database according to the OS stored in the storage device 32. The OS also has a function of editing this database.

The client OS is Windows N
It may be an existing OS such as T. For example, Windo
wsNT and the like record various settings of applications in a database called a registry. Further, the information of the registry can be edited by a program called a system policy attached to Windows NT or the like. In the case of Windows NT, etc., each registry can be directly edited according to the system policy of each computer. It is also possible to change the registry of each computer by storing a setting file in which various settings are described in one computer in the communication network and causing another computer to read the setting file. Note that this setting file is called a system policy file. In the computer that stores the system policy file, the system policy file is stored in a location (directory) named "NETLOGON".

As described above, any OS capable of recording various settings of the application in the database and editing the recording can be applied to the present invention. In the following description, a database such as a registry that records various settings will be referred to as a setting information database.

In the setting information database, information indicating whether or not the function restriction of the browser is set is recorded. Function restrictions include, for example, printing prohibition, information display prohibition, prohibition of temporarily storing information specified by the user in the storage device, prohibition of activation of multiple windows, switching of windows when multiple windows are activated. Prohibition, prohibition of screen size setting other than full screen display, etc. When prohibition of these functions is set, the control unit 31 temporarily prints, displays information, temporarily holds information specified by the user in the storage device, starts multiple windows, switches windows, and displays other than full screen. Prohibits setting the screen size of. It should be noted that “temporarily holding the information specified by the user in the storage device” means holding the specified information in the storage device in order to paste it to another application. In addition, information indicating whether or not to terminate the browser when the information is not input to the client for a predetermined time is also recorded in the setting information database. These settings are made by the administrator.

When using Windows NT or the like as the OS, the administrator may use the system policy to make various settings such as whether or not printing is prohibited. In addition,
Items set in the system policy are defined in a text file called a policy template. Therefore, the administrator defines each item such as whether or not to prohibit printing in the policy template, and then performs the setting using the system policy.

The control unit 31 reads the information on the function restriction from the setting information database when the browser is started according to the program of the browser, and operates according to the setting indicated by the read information. If there is an item for which the administrator has not set whether to prohibit or not, the control unit 31 operates as being prohibited for that item. For example, if the administrator does not set whether to prohibit the screen size setting other than the full screen display, the browser displays the electronic document on the entire screen of the output unit 35 and accepts the screen reduction operation by the user. Absent.

When electronic information is acquired and displayed, the control unit 31 outputs an access log to a server in the same communication network according to the browser.

Control unit 3 for executing processing according to the browser
When the setting information database is set to permit printing, the first prints the electronic document according to the user's operation. At this time, the browser causes the control unit 31 to add the print operation record information to the electronic document and print it. For example, the date and time of printing, the URL of the printed electronic document, and the user ID of the user who performed the printing operation are added according to the printing operation and printing is performed. Also, the browser is the control unit 31.
Causes the server in the same communication network to output the access log.

The browser is activated after the user authentication by the general-purpose device 4 is successful. The URL of the electronic document to be displayed at startup is preset in the browser, and the browser acquires and displays the electronic document at startup.

The browser program according to the present invention causes the control unit 31 to output the access log, but the storage device 32
May hold programs for other browsers. However, in this case, the setting information database is registered with the setting that prohibits the activation of other browsers that do not output the access log. That is, the client activates only the browser that causes the server to output the access log. This setting is performed in the same way as the setting of the function restriction of the browser. For example, when the OS is Windows NT, the system policy is used to set startup prohibition of other browsers in the registry.

In this example, the browser function setting means is
It is realized by an OS having a setting information database (for example, Windows NT having a registry).

Next, the configuration of the server will be described. FIG. 3 is a block diagram showing an example of the configuration of the servers 2 and 12. The control unit 41 executes processing according to the program stored in the storage device 42. The network interface unit 43 transmits / receives information to / from other devices via a communication network. The database 44 holds the access log received from the clients in the same communication network and the information regarding the authentication result. The control unit 41
When the information related to the access log or the authentication result is received from the clients in the same communication network, the received information is registered in the database 44. Further, the server 2 at the head office collects access logs from other servers 12.
The database of the server 2 also holds the access logs collected from the other servers 12.

Next, the structure of the general-purpose machine 4 will be described.
The configuration of the general-purpose device 4 is similar to that of the servers 2 and 12, and includes a control unit,
A storage device, a network interface unit, and a database are provided. However, the storage device stores the user authentication program, and the database holds the authentication master (user ID, password, and fingerprint information of the authorized user managed by the administrator). The control unit authenticates with the identification information (user ID, password, and fingerprint information) and the authentication master received from the clients 3 and 13 according to the user authentication program.

Next, the operation will be described. FIG. 4 is an explanatory diagram showing an example of the progress of processing when a user is authenticated and browses an electronic document. Here, a case where each of the clients 3 and 13 includes Windows NT as an OS will be described as an example. It is assumed that the administrator has set the function restriction of the browser in the registry of each client in advance. In addition, the administrator also sets in the registry the prohibition of starting other browsers that do not output the access log. It is assumed that the administrator has made these settings using the system policy for each client.

A user who wants to browse an electronic document receives a user ID and a password from any one of the clients (here, the client 13) to the general-purpose machine 4.
Send to. At this time, the user firstly selects the client 1
In 3, the identification information transmission program is started. When this program is activated, the control unit 31 of the client 13 displays the input screen of the user ID and password on the output unit 35. FIG. 5 is an explanatory diagram showing an example of a user ID and password input screen. The user enters his user ID and password on this screen,
Click the "Run" button with the mouse. The control unit 13
In response to this operation, the user ID and password input by TCP / IP are transmitted to the general-purpose device 4 (step S71). It should be noted that each client holds the address of the general-purpose device 4 in advance, and in step S71, information is transmitted using this address.

The general-purpose device 4 having received the user ID and the like authenticates by collating the received user ID and password with the user ID and password held in the database (step S72). If the received user ID and password match any one of the user ID and password in the database, the general-purpose device 4 sends information indicating that the authentication was successful to the client 13 by TCP / IP. If they do not match, the fact that the authentication has failed is transmitted to the client 13.

When the authentication in step S72 is successful, the control unit 31 of the client 13 prompts the user to press his / her finger against the fingerprint input device 36. For example,
The screen illustrated in FIG. 6 is output to the output unit 35. The fingerprint input device 36 detects fingerprint information from the pressed finger. The control unit 31 transmits this fingerprint information to the general-purpose device 4 by TCP / IP (step S73).

The general-purpose machine 4 authenticates the fingerprint by collating the received fingerprint information with the fingerprint information held in the database (step S74). If the received fingerprint information matches any of the fingerprint information in the database, the general-purpose device 4 sends the information indicating that the authentication is successful to the client 13 by TCP / IP. If they do not match, the fact that the authentication has failed is transmitted to the client 13.

If the fingerprint authentication succeeds after the user ID and password, the control unit 31 of the client 13 sends information about the authentication result to the server 12 in the same communication network (step S75). For example, the user ID, the authentication date and time, the terminal name, etc. are transmitted. The control unit 41 of the server 12 registers the received information on the authentication result in the database 44.

Further, the control unit 31 of the client 13 is
After step S75, the browser is activated to display the electronic document on the output unit 35 (step S76). The URL of the electronic document displayed when the browser is activated is set in advance, and the control unit 31 acquires and displays the document corresponding to this URL. FIG. 7 is an example of an electronic document displayed by a browser.

The control unit 31 displays the electronic document and then
The access log is transmitted to the server 12 in the same communication network (step S77). For example, UR of electronic document
L, display date / time, user ID of viewer, terminal name, etc. are transmitted. The control unit 41 of the server 12 registers the received access log in the database 44.

Further, the control unit 31 reads the information regarding the function restriction of the browser from the registry when the browser is activated, and operates according to the setting indicated by the read information. For example, when the print prohibition is set, the control unit 31 does not print even if the user performs a print operation. Information display prohibition, prohibition of temporarily storing information specified by the user in the storage device, prohibition of starting multiple windows, prohibition of switching windows when multiple windows are started, screen size setting other than full screen display The same applies when prohibition is set. Further, when the registry is set to terminate the browser when there is no input to the client for a predetermined time, the control unit 31 terminates the browser if there is no input for the predetermined time.

After step S77, the control unit 31 receives the URL from the user or clicks the link setting portion of the displayed electronic document with the mouse.
The electronic document corresponding to the URL and the electronic document to which the link is set are acquired and displayed. Then, every time the electronic document is displayed, the access log is transmitted to the server 12 as in step S77.

Further, since the setting for prohibiting the activation of other browsers is registered in the registry, the control unit 31 does not activate the other browsers even if the user performs an operation to activate the other browsers. .

In the above example, the user is the client 13
The case of using is described as an example. When the user uses the client 3, the client 3 executes the step S7.
In S5 and S77, the information about the authentication result and the access log are transmitted to the server 2 in the same communication network as the client 3.

Further, in the above example, the administrator has set the function restriction and the start restriction of other browsers by using the system policy for each client. The administrator uses a predetermined directory (NETLOGO) of the general-purpose device 4.
The system policy file may be stored in N) and the registry setting may be performed by causing each of the clients 3 and 13 to read the system policy file.
The administrator can change the registry setting of each client by changing the system policy file of the general-purpose device 4. In this case, the OS of the general-purpose device 4 is an OS that can hold the system policy file (for example, W
Windows NT, etc.).

Next, the operation of the control unit 31 of the client during printing will be described. FIG. 8 is an explanatory diagram showing an example of the operation of the control unit 31 during printing. The control unit 31
After step S76 described above, the electronic document is acquired according to the user's operation and displayed on the output unit 35 (step S8).
1). When the instruction to print the displayed electronic document is input, the control unit 31 determines whether the print prohibition is set (step 82).

When the print prohibition is set, the control unit 3
No. 1 does not print and continues to display the electronic document. on the other hand,
If the print prohibition is not set, the access log is transmitted to the server in the same communication network according to the browser (step S83). For example, the UR of a printed electronic document
L, the print date and time, the user ID of the printer, the name of the printed terminal, etc. are transmitted. Subsequently, the control unit 31 prints the electronic document (step S84). At this time, the control unit 31 prints the electronic document by adding the URL of the electronic document, the print date and time, the user ID of the printer, the name of the printed terminal, and the like.

Next, the operation of the server 2 for collecting access logs from other servers 12 will be described. Since each client 3 and 13 outputs the access log to the server in the same communication network, the access log is set to each server 2 and 12.
Accumulated in. The server 2 transmits an access log transmission command to another server 12 by the operation of the administrator. The control unit 41 of the server 12 that receives this command compresses the data of the access log in the database 44, and the server 2
Send to. When the server 2 receives the compressed access log data, the server 2 decompresses this data and decompresses it.
Registered in the database 44 of The administrator confirms the browsing and printing status of the electronic document by the access log in the server 2.

Although the case where the server 12 transmits the access log in response to the access log transmission command is shown here, the server 12 may periodically transmit the accumulated access log. Also in this case, the server 12 compresses the data of the access log and then transmits it. Further, the server 2 may collect the information about the authentication result together with the access log. The operation when the server 2 collects the information about the authentication result is the same as the operation when the access log is collected.

According to the above access management system, each client outputs an access log to a server in the same communication network according to the browser, and the server 2 collects the access log from each server. Therefore, the administrator can confirm, by the access log in the server 2, when, by whom, which computer browsed or printed which electronic information. As a result, when confidential information is leaked, it is possible to investigate who leaked the confidential information and when. Further, since the URL of the printed electronic document, the print date and time, the user ID of the printer, and the like are also printed on the printed matter, it is possible to investigate the leakage status from the printed matter. Furthermore, since each server also holds information regarding the authentication result, it is possible to investigate when and who was authenticated by which computer.

Further, since the browser is activated when the authentication based on the identification information is successful, the user ID,
It is possible to prevent an unauthorized user who has not registered a password or fingerprint information from browsing an electronic document.

Further, since it is possible to set the function restriction of the browser, it is possible to prohibit printing, for example, or prohibit holding the displayed information in the storage device for pasting it to another application. As a result,
The effect of preventing leakage of electronic documents can be enhanced. Also, the browser can be terminated when there is no input for a predetermined time. Therefore, even when the user leaves the seat without closing the browser, it is possible to reduce the chances of information browsing by a third party.

Finally, the server 2 manages the access logs of all the clients, but the clients 3 and 13 in the respective communication networks accumulate the access logs in the respective servers 2 and 12. Therefore, even if the clients of each communication network display or print, all the clients do not directly send the access log to the server 2, and the dedicated line 21 or the communication network 1 of the head office is for communication of the access log. Is never occupied. Then, the server 2 collects access logs during a time period when the number of users is small (for example, at midnight), so that information can be transmitted and received smoothly. Further, since the access log data is compressed and transmitted / received, the amount of information transmitted / received can be reduced.

Since the general-purpose machine 4 authenticates each user, the administrator only has to register the identification information of each user in the general-purpose machine 4, and it is not necessary to register the identification information in a plurality of places. The burden of administrator user management is reduced.

In the above example, the OS of each of the clients 3 and 13 is Windows NT.
S is not limited to Windows NT. The OS may be any OS that can record various settings of applications in the setting information database and edit the records.

In the above example, the case where the authentication information includes the fingerprint information is shown, but the authentication may be performed using information other than the fingerprint information.

[0067]

According to the present invention, an electronic document is displayed according to the operation of the electronic document viewer according to the record holding device for holding the record information of the operation of the electronic document viewer and the browser for displaying the electronic document. , A document display device for transmitting the record information of the operation related to the electronic document to the record holding device via the communication network, and the record holding device holds the record information of the operation received from the document display device. When information is leaked, it is possible to investigate the leaked situation by the record information of the operation.

Further, the program of the browser according to the present invention is a process of displaying an electronic document on a computer according to an operation of an electronic document viewer, and a process of transmitting record information of the browsing operation to a record holding device via a communication network. When the confidential information is leaked, the leaked situation can be investigated by the record information of the browsing operation.

[Brief description of drawings]

FIG. 1 is an explanatory diagram showing an embodiment of an access management system according to the present invention.

FIG. 2 is a block diagram showing an example of the configuration of a client.

FIG. 3 is a block diagram showing an example of the configuration of a server.

FIG. 4 is an explanatory diagram showing an example of a process progress at the time of browsing an electronic document.

FIG. 5 is an explanatory diagram showing an example of a user ID and password input screen.

FIG. 6 is an explanatory diagram showing an example of a screen prompting for input of fingerprint information.

FIG. 7 is an explanatory diagram showing an example of a displayed electronic document.

FIG. 8 is an explanatory diagram illustrating an example of an operation during printing.

[Explanation of symbols]

1 First communication network 2 servers 3 clients 4 General-purpose machine 5 routers 11 Second communication network 12 servers 13 clients 15 router

Front page continuation (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06F 13/00 510 G06F 13/00 510A 15/00 330 15/00 330A

Claims (15)

[Claims] 1. A record holding device for holding record information of an operation of an electronic document viewer, and a browser for displaying the electronic document, the electronic document is displayed according to the operation of the electronic document viewer, and the operation related to the electronic document is displayed. An access management system, comprising: a document display device for transmitting record information to a record holding device via a communication network, wherein the record holding device holds record information of an operation received from the document display device. 2. A plurality of communication networks each having a record holding device and a document display device, wherein each document display device in each communication network transmits operation record information to a record holding device connected to the same communication network. The access control system according to item 1. 3. The access management system according to claim 1, wherein the document display device transmits the record information of the browsing operation to the record holding device via the communication network when the electronic document is displayed. 4. The document display device prints an electronic document in response to an operation of an electronic document viewer, and when the electronic document is printed, transmits record information of the print operation to a record holding device via a communication network. The access management system according to any one of claims 1 to 3. 5. The access management system according to claim 4, wherein the document display device prints the electronic document by adding print operation record information. 6. A record holding device other than the predetermined record holding device of the record holding devices transmits operation record information to the predetermined record holding device via a communication network, and the predetermined record holding device comprises: The access management system according to any one of claims 1 to 5, which retains record information of an operation received from another record holding device. 7. An authentication device that receives identification information of an electronic document viewer from each document display device and performs authentication based on the identification information, the authentication device including the identification information of each electronic document viewer. 7. The information indicating that the authentication is successful is transmitted to the document display device when the identification information held in advance and received from the document display device matches any one of the identification information held in advance. The access management system according to any one of 1. 8. The document display device, when receiving the information indicating that the authentication is successful from the authentication device, transmits the information on the authentication result to the record holding device connected to the same communication network, and the record holding device, The access management system according to claim 7, which holds information on the received authentication result. 9. A record holding device other than the predetermined record holding device among the record holding devices transmits information about an authentication result to the predetermined record holding device via a communication network,
9. The access management system according to claim 8, wherein the predetermined record holding device holds information regarding an authentication result received from another record holding device. 10. The document display device comprises a browser function setting means for setting a function restriction of the browser, and restricts an operation to an electronic document displayed by the browser according to the setting of the browser function setting means. The access management system according to any one of items 9. 11. The access management system according to claim 1, wherein the document display device terminates the browser when there is no information input for a predetermined time. 12. The access management system according to claim 1, wherein the document display device activates only a browser that causes the record holding device to transmit record information of an operation related to an electronic document. 13. A process of displaying an electronic document in response to an operation of an electronic document viewer on a computer connected to a record holding device for holding record information of an operation of the electronic document viewer via a communication network, A program of the browser for executing the process of transmitting the record information of the to the record holding device via the communication network. 14. A process of printing an electronic document in accordance with an operation of an electronic document viewer, a print operation, to a computer connected to a record holding device for holding record information of an operation of the electronic document viewer via a communication network. 14. The program of the browser according to claim 13, for executing a process of transmitting the record information of [4] to a record holding device via a communication network. 15. When printing an electronic document to a computer connected to a record holding device that holds the record information of the operation of the electronic document viewer through a communication network, the record information of the printing operation is added to the electronic document. 15. The program of the browser according to claim 14, which is for executing a process of printing.