JP2003288247A - Contents management method with security function and contents management device with security function - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a contents management device with a security function for preventing browsing of multiple contents from analogy of a file name of contents required to be restricted from browsing. <P>SOLUTION: A server 200 refers to a file type information database 240 on the basis of an extension received with a file upload request to acquire a file storage destination, forms encrypted contents ID to allocate it to a file name, and applies the extension to the contents ID to change the file name to a file storage name. Then, the file is stored in the file storage destination under the file storage name, while the file storage destination and the file storage name are associated with the contents ID to be stored in a contents information database 280. Consequently, browsing of multiple contents according to analogy of the file name can be prevented. <P>COPYRIGHT: (C)2004,JPO

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a content in which a file storing information (content) necessary for transmitting information from a server on a Web is uploaded from a client to a server, accumulated, and distributed from the distribution server to the client. The present invention relates to a management method with a security function and a content management device with a security function.

[0002]

2. Description of the Related Art In order to transmit information from a server on the Web, information (content) transmitted by the server must be uploaded from the client to the server and stored. In this case, depending on the content, there are cases where it is not desired to allow other users to view the content from the viewpoint of security. In such a case, if you give a continuous name to the file name of each file that stores the content, or if you upload a file with a file name that is related and upload and store it, If any one of the file names is known, other related file names can be easily inferred, and those files can be browsed, which is a security problem. For example, the file names are as shown in Figure 1.jpg, Figure 2.jpg, and Figure 3.j.
If you give a continuous file name such as pg, if you can get the file name of Figure 2.jpg, it will be related Figure 1.jpg.
You can also browse these files by analogy with the file names in Fig. 3.jpg.

As described above, in the conventional method of managing the content transmitted by the server on the Web, if any one of the file names of a plurality of related files whose browsing is desired can be obtained, other related file names are obtained. Can be easily analogized, and a large amount of content will be browsed,
There was a security issue.

[0004]

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and it is possible to prevent browsing of a large amount of content by analogizing the file name of the file storing the content whose browsing is desired to be restricted. An object of the present invention is to provide a content management method with a security function and a content management apparatus with a security function.

[0005]

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems. The invention according to claim 1 is of a different type in which still images, moving images, voices and texts are used alone or in combination. In a content management method of uploading and accumulating content from a client to a server and delivering from a delivery server to a client, a request receiving step of receiving a file upload request including a file, an extension and a file name of the file from the client, A file type information acquisition means for acquiring a storage destination of the file by referring to a file type information database based on the extension; and generating and assigning a content ID encrypted by a predetermined algorithm to the file name. Add the extension to the content ID and rename the file. And filename encryption process to change yl storage name, a file storage process of storing the file in the file storage destination by the file storage name, the file storage location, the content ID file storage name
And a content information storage step of storing the content information in a content information database in association with the content information database.

According to a second aspect of the invention, in the content management function with security function according to the first aspect, a content list transmitting step of transmitting a content list in which each content is associated with a tag to the client; A content information acquisition process of acquiring the file storage destination, the file storage name, and the address of the distribution server by referring to the content information database and the file type information database based on the content ID included in the tag received from the client. ,
A URL sending step of sending the address of the delivery server, a file storage destination and a file storage name to the client; a delivery request receiving step of receiving the delivery server address, the file storage location and a file storage name from the client; A content distribution process of searching a file having the file storage name from a file storage destination and distributing the file from the distribution server.

The invention according to claim 3 is a still image, a moving image,
In a content management device for uploading and accumulating different types of contents, which are single or combination of voice and text, from a client to a server, and delivering the contents from the delivery server to the client, a file storing the contents, an extension and a file name of the file. An upload acceptance processing unit that receives an upload request for a file including a file, a file type information database that stores the extension, the file storage destination, and the address of the distribution server in association with each other, and the content that is encrypted with a predetermined algorithm in the file name. A file name encryption unit that assigns an ID and adds the extension to the content ID to change the file name into a file save name; and referring to the file type information database based on the extension, F Yl storage destination and file types I
A file type identification storage unit that acquires D and stores the file in the file storage destination with the file save name;
A content storage unit that stores the file for each content type, a content information database that stores the file storage destination and the file storage name in association with the content ID, and a file storage destination and the file storage name that are associated with the content ID. And a content information storage unit for storing the content information in the content information database.

According to a fourth aspect of the present invention, in the content management device with security function according to the third aspect,
A content list in which a tag is associated with each content is transmitted to the client, and the file is referenced by referring to the content information database and the file type information database based on the content ID included in the tag received from the client. A delivery request reception processing unit that acquires a storage destination, a file save name, and a delivery server address, and sends the delivery server address, the file storage destination, and the file save name to the client, and the delivery server address from the client. A distribution server that receives a file storage destination and a file storage name, searches the content storage unit for the file having the file storage name stored in the file storage destination, and distributes the searched file to the client To further have And it features.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION A content management apparatus with a security function according to an embodiment of the present invention will be described below with reference to FIG. FIG. 1 is a block diagram showing the configuration of a system to which the content management device with a security function according to the embodiment is applied. In FIG. 1, the system includes a client 100, a server 200, and a distribution server α.
310, distribution server β 320, distribution server γ 330, and network 400 connecting these.

Next, the function of each of the above-mentioned constituent blocks constituting the present system will be described. Client 100
Has a function of uploading a file storing the content to the server 200 and downloading the content stored in the server 200 from the distribution server α310 to the distribution server γ330 and displaying it on the screen. The server 200 uploads a file storing content from the client 100, and types of content stored in the uploaded file (still image, moving image,
The file (contents) is saved by automatically determining the corresponding file storage destination according to the (voice, text). Further, the server 200 distributes the content requested to be downloaded by the client 100, in order to distribute the content, the distribution server α 310 to the distribution server γ corresponding to the content type.
It also has a function of automatically allocating to 330 and delivering the content to the client.

The distribution server α310, the distribution server β320, and the distribution server γ330 are respectively the server 2
00 has a function of delivering the moving image (Real) content, the moving image (WMT) content, and the text content stored in 00 to the client 100.

Next, the configuration of the client 100 will be described. 110 uploads a file to the server 200, and distributes server α310 to distribution server γ33.
It is a browser that displays files downloaded from 0 on the screen. The user selects a file storing the content to be uploaded on the screen displayed by the browser 110, inputs additional information such as the title of the content, a description, and the creator as necessary, and uploads the content on the screen. Request upload of content by turning on the button. This allows the browser 11
0 transmits the selected file, the file name of the file, the extension indicating the file type, additional information, Mime-Type indicating the data format of the information to be transmitted, and the like to the server 200.

Also, the browser 110 displays the content list received from the server 200 on the screen, and when the user selects the content desired to be distributed on the content list screen, the source of the content list display is associated with the selected content. The tag embedded in (including the content ID for identifying the content and the address of the delivery request reception processing unit of the server 200) is transmitted to the server 200. Further, the client 100 is the server 20.
0 to distribution server address (URL: Uniform Resour
ce Locators), file storage destination, file save name and Mime-Type, it connects to the distribution server specified by the URL of the distribution server and sends the file storage destination and file save name to request file distribution. The browser 110 also has a function of displaying the delivered file on the screen. 120 is a server 200 or distribution server α3
10 to 10 is a communication unit having a function of communicating with the distribution server γ 330 via the network 400. Reference numeral 130 is a video player that plays back content (video).

Next, the configuration of the server 200 will be described. A communication unit A 210 communicates with the client 100 via the network 400 when the client 100 uploads a file (content). Two
An upload reception processing unit 20 receives a file uploaded from the client 100 and performs a process necessary for storing the content stored in the file in the content storage unit. That is, the upload reception processing unit 220 sends the file received from the client 100 to the file type identification storage unit, receives the file storage destination, the content ID, and the file storage name from the file type identification storage unit as a response, and outputs them as these information. Additional information (title name, description, creator, etc.) is added and sent to the content information storage unit for storage in the content information database (content information DB). Here, the file storage destination is a storage location in the content storage unit that stores the content, the content ID is an identifier for uniquely identifying the content, and the file storage name is the file when the uploaded file is stored in the content storage unit. It is the name.

Then, 230 acquires information necessary for storing the file sent from the upload acceptance processing section 220 in the content storage section, and uses the acquired file storage name to designate a designated file storage destination in the content storage section. Is a file type identification storage unit for storing a file in. That is, the file type identification storage unit 230 receives the Mime-Type received from the upload reception processing unit 220.
And the extension are sent to the file type information database (file type information DB), and as a response, the file type ID for identifying the file storage destination and the file type
To receive. In addition, the file type identification storage unit 230
The file name and the file type ID are sent to the file name encryption unit, and the content ID and the file storage name are received as a response. Then, the file type identification storage unit 230
Stores the file in the file storage destination of the content storage unit with the acquired file storage name, and sends the file storage destination, the content ID, and the file storage name to the upload reception processing unit 220.

Reference numeral 240 is a file type information database (file type information DB) that holds information necessary for determining the file storage destination, the address (URL) of the distribution server, etc. based on the file type of the file. The information stored in the file type information DB 240 is shown in FIG. As shown in FIG. 2, the file type information DB 240 stores the Mime-Type, the extension, the file storage destination, and the distribution server address (URL) in association with the file type ID.

Reference numeral 250 denotes a file name encryption unit that encrypts the file name and changes it to a file storage name in order to avoid analogy of the file name given to the uploaded file. That is, the file name encryption unit 250 receives the file name and the file type ID, and generates and assigns the content ID encrypted by a predetermined algorithm to this file name. here,
The encryption algorithm may be any encryption method or encryption algorithm. Furthermore, the file name encryption unit 2
50 is a file type ID and is a file type information DB 24.
The file name is changed to the file save name by searching for 0, receiving the extension stored in association with the file type ID as a response, and attaching this extension to the content ID. For example, if the file name and extension are as shown in Figure 1.jpg, the content ID 27 encrypted in Figure 1
The egr is assigned, the extension jpg of the file in FIG. 1 is added to the content ID to create the file save name 27egr.jpg, and the file name FIG. 1.jpg is changed to the file save name 27egr.jpg.

Reference numeral 260 indicates the uploaded file (content) for each content type, for example, a moving image (R).
It is a content storage unit for storing eal) content, moving image (WMT) content, and text content.
A content information storage unit 270 stores the file storage destination, the content ID, the file storage name, and the additional information received from the upload reception processing unit 220 in the content information database.

Reference numeral 280 denotes the content storage unit 26.
It is a content information database (content information DB) that stores information about contents held in 0. FIG. 3 shows the information stored in the content information DB 280.
Shown in. As shown in FIG. 3, the content information DB 280
The file storage destination, file save name, file type ID, additional information (file name, description, etc.), date and time when the file was uploaded, and other information are stored in association with the content ID. A communication unit B 290 communicates with the client 100 for content distribution (download).

Reference numeral 295 denotes a distribution request acceptance processing unit that receives a content distribution request from the client 100 and transmits information necessary for distributing the content to the client 100 to the client 100. That is, the delivery request reception processing unit 295 is configured to send the client 100
The tag embedded in association with the content selected by the user on the content list screen displayed by the browser 110 (the URL of the server of the delivery request reception processing unit 295)
And the content ID) are sent from the client 100, the content ID in this tag is sent to the content information DB 280, and the content I is sent as a response.
D, file storage destination, file save name and file type ID are received. In addition, the distribution request reception processing unit 295
Returns the acquired file type ID to the file type information DB
240, and as a response, acquires the URL of the file storage destination and the distribution server (one of distribution server α310 to distribution server γ330) that distributes the file, and includes the URL of the distribution server, the file storage destination, and the file storage name. It also has a function of transmitting the URL and the Mime-Type to the requesting client 100.

The processing units shown in FIG. 1 may be realized by dedicated hardware, and these processing units may be composed of a memory and a CPU (central processing unit). The function may be realized by loading a program (not shown) for realizing the function in each processing unit or the like into the memory and executing the program. In addition, the storage unit such as the content storage unit is a hard disk device, an optical disk device, a nonvolatile memory such as a flash memory, or a RAM (Random Access Memory).
Such a volatile memory or a combination thereof. Further, an input device, a display device, etc. (none of which are shown) are connected as peripheral devices to the device with security function. Here, the input device refers to an input device such as a keyboard and a mouse. The display device refers to a CRT (Cathode Ray Tube), a liquid crystal display device, or the like.

Next, the operation of this embodiment will be described with reference to FIGS. FIG. 4 is a sequence diagram showing an operation of uploading and storing a file storing contents according to the present embodiment from a client to a server, and FIG. 5 is a sequence diagram showing an operation of delivering contents from a distribution server to a client. First, FIG.
The operation of uploading and accumulating contents will be described with reference to. In FIG. 4, the user uses the browser 110 of the client 100 to operate the client 100.
To the server 200, select the file to be uploaded from the screen received from the server 200 and displayed by the browser 110, and input additional information (title, description, author name, etc.) attached to the file as necessary. (Optional) Click the upload button displayed on the screen to request the file upload. This causes the client 100 to select the selected file, file name, extension, additional information, and Mime-Typ.
The e is transmitted to the server 200 to request the file upload (step S1).

Upload acceptance processing unit 2 of server 200
20 sends the received file, file name, etc. to the file type identification storage unit 230. The file type identification storage unit 230 sends the received Mime-Type and extension to the file type information DB 240. File type information DB240
Searches for the corresponding file type ID and file storage destination based on the received Mime-Type and extension information and returns them to the file type identification storage unit 230 (step S2).

Then, the file type identification storage section 230
Sends the file name and file type ID to the file name encryption unit 250. The file name encryption unit 250 generates the encrypted content ID and assigns it to the file name,
In addition, the file type information DB 240 by the file type ID
The file name is changed to the file storage name by adding the extension obtained by searching for to the content ID, and the content ID and the file storage name are returned to the file type identification storage unit 230 (step S3).

The file type identification storage section 230 stores the file with the file save name in the received file storage destination (step S4). In addition, the file type identification storage unit 230 sends the content ID, the file storage destination, the file storage name, and the file type ID to the upload reception processing unit 220. The upload reception processing unit 220 sends the received content ID, file storage destination, file storage name, file type ID, and additional information to the content information storage unit 270 and stores it in the content information DB 280 (step S5).

As a result, the file name of the uploaded file is changed to the encrypted unique file save name, and the file is stored with the file save name. Therefore, it is possible to avoid duplication of the file name of the saved file and browse. It is possible to prevent browsing of a large number of files by inferring the file names of the restricted files. Further, the user can easily upload the content from the client to the server without explicitly specifying the storage destination of the file to be uploaded and the delivery method.

Next, content distribution (download)
The operation at that time will be described with reference to FIG. In FIG. 5, the client 100 requests the distribution request acceptance processing unit 295 of the server 200 for a list of contents (step S20). The distribution request reception processing unit 295 transmits the list of contents to the client 100 (step S2).
1). The browser 110 of the client 100 displays a list of the received contents on the screen. Then, when the user selects the content desired to be distributed from the content list display screen, the browser 110 transmits the tag associated with the selected content to the distribution request reception processing unit 295 of the server 200 (step S22).

The distribution request reception processing unit 295 is provided with the content I included in the tag sent from the client 100.
D is sent to the content information DB 280, and the file storage destination, the file save name, the file type ID, and the content ID stored in association with the content ID are received as a response (step S23). The delivery request reception processing unit 295 uses the file type ID as the file type information DB.
Send to 240. The file type information DB 240 is a file storage destination stored in association with a file type ID,
URL of distribution server (UR of distribution server α310, distribution server β320 or distribution server γ330
L) is retrieved and returned to the delivery request reception processing unit 295 (step S24). The distribution request reception processing unit 295 uses the distribution server URL, the file storage destination, and the file storage name as the basis.
A URL including the URL of the distribution server, the file storage destination, and the file storage name is created, and this URL and Mime-Type are transmitted to the client 100 (step S25).

As a result, the client 100 receiving the URL and the Mime-Type activates the application based on the Mime-Type (step S26). The started application is the UR of the distribution server by the browser 110.
It connects to a distribution server corresponding to L, for example, distribution server α310, transmits a file storage destination and a file storage name, and requests file distribution (step S27). The distribution server α310 searches for a file having the received file storage name from the file storage destination of the content storage unit 260,
The searched content (moving image (Real) content) is transmitted to the client 100 (step S28). The client 100 reproduces the received moving image (Real) content on the moving image player 130 and displays it on the screen (step S29).

As a result, the user can easily download the target content without explicitly designating the distribution server that distributes the desired content.

In the above description, the content storage units are provided in the server, but the content storage units may be distributed and arranged in the distribution servers corresponding to each content type. .

[0032]

As described above, according to the first and third aspects of the present invention, when the user uploads the file storing the content from the client to the server, the screen displayed on the client by the user. Select a file with, and request upload of the file by turning on the upload button.The server refers to the file type information database based on the received extension to acquire the storage location of the file, and A content ID encrypted by a predetermined algorithm is generated and assigned, an extension is added to the content ID, and the file name is changed to a file storage name. And
The file is stored with the file storage name in the file storage destination, and the file storage destination and the file storage name are stored in the content information DB in association with the content ID. As a result, even if another file with the same file name is uploaded, the file can be prevented from being overwritten or destroyed. In addition, since it is difficult to infer another file name from one file name, it is possible to prevent browsing of a large number of files by analogy of other file names from the file name of a file whose browsing is restricted. Further, according to claims 2 and 4 of the present invention,
The content ID and the URL of the delivery request reception server are embedded in association with each content on the content list display screen, and when the user selects the content desired to be delivered on the content list display screen, the client corresponds to the content. Content ID attached
To the server. The server receives the received content I
The content information DB is searched based on D to obtain the file storage destination, the file storage name, and the URL of the distribution server, and the content ID, the file storage destination, the file storage name, the distribution server URL, and the like are transmitted to the client. Client is the URL of the distribution server that received
When you connect to the distribution server that supports and request the distribution of the file with the file save name, the distribution server searches the file storage destination for the file (content) with the file save name,
Configured to send the retrieved content to the client. As a result, the user does not need to explicitly specify the distribution server corresponding to the content desired to be distributed, and can easily download and browse the target content. Further, since the distribution server and the server are separately configured, the distribution server can be easily changed.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration of a system to which a content management device with security according to an embodiment of the present invention is applied.

FIG. 2 is a diagram showing a configuration of a file type information database according to the same embodiment.

FIG. 3 is a diagram showing a configuration of a content information database according to the same embodiment.

FIG. 4 is a sequence diagram showing an operation at the time of uploading and accumulating content of the content management device with security according to the embodiment.

FIG. 5 is a sequence diagram showing an operation of the content management device with security according to the embodiment when delivering content.

[Explanation of symbols]

100 ... Client, 110 ... Browser, 120 ... Communication Unit, 130 ... Video Player, 200 ... Server, 21
0 ... Communication unit A, 220 ... Upload acceptance processing unit, 23
0 ... File type identification storage unit, 240 ... File type information DB, 250 ... File name encryption unit, 260 ... Content storage unit, 270 ... Content information storage unit, 280 ...
Content information DB, 290 ... Communication unit B, 295 ... Delivery request acceptance processing unit, 310 ... Delivery server α, 320 ... Delivery server β, 320 ... Delivery server γ

   ─────────────────────────────────────────────────── ─── Continued front page    (72) Inventor Ikuo Yoda             1-9-1, Konan, Minato-ku, Tokyo             IT Comware Co., Ltd. F-term (reference) 5B017 AA07 BA07 CA16                 5B082 GA11 HA08

Claims (4)

[Claims] 1. A content management method for uploading and accumulating contents of different types of still images, moving images, audios, and texts alone or in combination from a client to a server, and distributing the contents from a distribution server to the client, A request receiving process for receiving a file upload request including a file extension and a file name, and a file type information acquisition unit for acquiring a storage destination of the file by referring to a file type information database based on the extension. A file name encryption process of generating and assigning a content ID encrypted by a predetermined algorithm to the file name and adding the extension to the content ID to change the file name into a file storage name; With the file save name With a content security function, the method includes a file storage step of storing in a file storage destination and a content information storage step of storing the file storage destination and the file storage name in the content information database in association with the content ID. Management method. 2. A content list transmitting process of transmitting a content list in which a tag is associated with each content to the client, and the content information database and the file based on the content ID included in the tag received from the client. Content information acquisition process of acquiring the file storage destination, file storage name, and distribution server address by referring to the type information database, and URL transmission of transmitting the distribution server address, file storage destination, and file storage name to the client A process, a delivery request receiving process of receiving the address of the delivery server, a file storage destination, and a file save name from the client; and a process of searching a file with the file save name from the file store and delivering the file from the delivery server. Security function management method of the content of claim 1, further comprising a Ceiling delivery process. 3. A content management device for uploading and accumulating contents of different types of single or combination of a still image, a moving image, an audio, and a text from a client to a server, and distributing the contents from the distribution server to the client. An upload acceptance processing unit that receives a file, a file upload request including an extension and a file name of the file, a file type information database that stores the extension, the file storage destination, and the address of the distribution server in association with each other, the file A file name encryption unit that assigns a content ID encrypted by a predetermined algorithm to a name and adds the extension to the content ID to change the file name to a file storage name; and the file based on the extension. Type information database File storage destination and file type ID of the file by referring to the file, and stores the file in the file storage destination with the file storage name, and stores the file for each content type. A content storage unit, a content information database that stores the file storage destination and the file storage name in association with the content ID, and a content that stores the file storage destination and the file storage name in the content information database in association with the content ID A content management device with a security function, comprising: an information storage unit. 4. A content list in which a tag is associated with each content is transmitted to a client, and the content information database and the file type information database are created based on the content ID included in the tag received from the client. A delivery request reception processing unit that refers to the file storage destination, the file storage name, and the address of the delivery server and sends the address of the delivery server, the file storage destination, and the file storage name to the client; The address of the distribution server, the file storage destination, and the file storage name are received, the file having the file storage name stored in the file storage destination is searched from the content storage unit, and the searched file is stored in the client. A distribution server for distribution Security function content management apparatus according to claim 3, characterized in that it comprises a.