JP2004021450A - Information management system, information management method, and information management program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To dispense with the need for change of each access right to an owned information set, when an owner of many information sets changes the access right of a specific user. <P>SOLUTION: This information management method is used, wherein the user's effective access right to a specified information set is determined based on a user's temporary access right to an information set specified as a processing object and a user's temporary access right to an information set associated with the specified information set. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an information management system, an information management method, and an information management program for managing a user's access right to information.
[0002]
[Prior art]
In information management of digitized information stored in a database or the like, an access control list (ACL) that lists a user's access permission to each piece of information is referred to, and information is controlled within a range permitted by the access right. An information management system that enables operation is used.
[0003]
Information elements stored in the database are provided with attributes such as creator, creation date and time, owner, and information body. Information elements are combined and managed in units of information sets. Further, each information set is provided with an identifier for specifying the information set such as “information 1”.
[0004]
A user who is a user of the system or a group of a plurality of users is given an operation access right to each information set.
[0005]
FIG. 12 shows an example of a conventional access control list. For example, the access right of the user 1 to the information set “information 1” is a write right (hereinafter referred to as a write right), and the access right of the user 1 to the information set “information 3” is a read right (hereinafter referred to as a read right). Yes, the access right of the user 2 to the information set “information 3” is all rights (hereinafter, referred to as “manage right”).
[0006]
Here, “read right” indicates that reading of information included in the information set is permitted. “Write right” indicates that writing (or changing) of information in the information set is permitted. The “manage right” indicates that reading, writing, changing the access right, and changing the owner of the information included in the information set are permitted.
[0007]
FIG. 13 shows a conceptual diagram of a conventional operation of information included in an information set using ACL. In FIG. 13A, since the user 3 has the manage right for the information set "information 3", the user 3 can read and write the attribute of the information set "information 3". That is, the user 3 can display and confirm the information included in the information set “information 3” on the display, and rewrite the content of the information.
[0008]
On the other hand, in FIG. 13B, since the user 1 has only the read right for the information set “information 3”, the user 1 can perform only the read operation of the information set “information 3”. That is, the user 1 can display the information included in the information set “information 3” on a display or the like to check it, but cannot rewrite the content of the information.
[0009]
As described above, by setting the access right for each combination of the information set and the user, the operation range of each user for the information set can be managed.
[0010]
Further, the owner of the information set and the user having the manage right are given the authority to change the access right of each user to the information set, and change the operation range of each user by changing the access right. be able to.
[0011]
[Problems to be solved by the invention]
However, in the related art, for example, when the owner of the information set changes the access right of a specific user, it is necessary to change the access right of the user to all the information sets. Therefore, there is a problem that the owner must know the existence of all information sets owned by the owner.
[0012]
Further, since the access right needs to be changed for each information set, the change operation becomes complicated, there is a possibility that the change is omitted, and an enormous operation time is required. As a result, in practice, it was not possible to set the user's access right in detail.
[0013]
An object of the present invention is to provide an information management system, an information management method, and an information management program that can solve the above problems.
[0014]
[Means for Solving the Problems]
In order to solve the above problem, an information management system capable of managing a plurality of information sets, each including at least one information element, in association with each other, wherein a user temporarily manages information sets specified as processing targets. Means for determining an effective access right of the user for the specified information set based on the access right and a provisional access right of the user for the information set associated with the specified information set. An information management system characterized by the following can be used.
[0015]
An information management method capable of managing a plurality of information sets, each including at least one information element, in association with each other, comprising: a user's temporary access right to an information set specified as a processing target; Determining the effective access right of the user to the specified information set based on the identified information set and the provisional access right of the user to the information set associated with the information set. A method can be used.
[0016]
An information management program capable of managing a plurality of information sets, each including at least one information element, in association with each other, wherein the temporary access right of a user to an information set specified as a processing target is determined. Determining the effective access right of the user to the identified information set based on the identified information set and the temporary access right of the user to the information set associated with the information set. An information management program can be used.
[0017]
Further, the information set may be an object including an information element relating to data and an information element relating to a processing method for processing the data.
[0018]
BEST MODE FOR CARRYING OUT THE INVENTION
FIG. 1 shows a block diagram of a configuration of an information management system according to an embodiment of the present invention. The configuration of the information management system according to the present embodiment will be described below.
[0019]
The information management system includes a computer 10 and a server 12 owned by a user, and a network 14 connecting them. The computer 10 basically includes a control unit 16, an input unit 18, a storage unit 20, and an interface 22. The components are connected to each other via a bus 24 so that information can be transmitted. The server 12 is basically composed of a control unit 28, a storage unit 30, and an interface 26, and the components are connected to each other via a bus 32 so that information can be transmitted. The computer 10 and the server 12 are connected so as to be able to transmit information to each other via the network 14 by interfaces 22 and 26, respectively. This information management system is an example, and is not limited to this mode. For example, the following processing may be performed in the computer 10 without using the server 12.
[0020]
The storage unit 30 of the server 12 stores an access control list (ACL). Furthermore, an information set including information about users (hereinafter, referred to as user information set), an information set including information about a group of a plurality of users (hereinafter, referred to as group information set), and normal information such as document information and image information (Hereinafter simply referred to as an information set) is stored. These access control lists and each information set may be stored in the storage unit 20 of the computer 10.
[0021]
FIG. 2 shows an example of the user information set. Information elements included in the user information set are given attributes such as an ID number, a user name, and an owner. FIG. 3 shows an example of the group information set. The information elements included in the group information set include an ID number, a group name, an owner, the number of users included in the group, and an ID number of a user (or group) information set of a user (or group) included in the group. Attributes are assigned. That is, the group information set is associated with the user (or group) information set by storing the ID number of the user (or group) information set in the users included in the group. FIG. 4 shows an example of the information set. The information elements included in the information set are composed of various combinations. For example, attributes such as an ID number, an information name, an owner, a creation date and time, a lock state, and data are provided. These information sets include at least information elements to which the attribute of the owner is assigned, and the information elements are ID numbers of other information sets. That is, the information set is associated with another information set by storing the ID number in the attribute of the owner. When a new information set is created, the ID of the user information set relating to the user who created the information set is stored in the attribute of the owner.
[0022]
FIG. 5 shows an example of the mail monitoring information set. The mail monitoring information set is used to notify a specific user of a mail when the content of another information set is changed. The mail monitoring information set includes an information element to which an information set to be monitored and an attribute of a mail notification destination are added. The ID number of at least one information set to be monitored is set in the monitoring target information set, and the ID of at least one user (or group) information set corresponding to the user (or group) of the mail notification destination is set as the notification destination. The number is stored. When the content of any of the information sets is changed, it is possible to determine whether or not a mail notification to the user is necessary by referring to the mail monitoring information set. Further, if e-mail notification is required, e-mail notification can be performed to a user corresponding to the user information set stored at the notification destination.
[0023]
The mail monitoring information set can further include the processing method of the above-described mail monitoring method. That is, the information set may be an object including an information set to be monitored, an instance of a user to be notified of an e-mail, and a method such as an e-mail monitoring program for these.
[0024]
Similarly, a bulletin board information set including a plurality of information sets, a calendar information set including an information set including information on schedules, and the like can be created. Also in this case, each of the information sets included in the bulletin board information set and the calendar information set is associated with the bulletin board information set and the calendar information set.
[0025]
Further, a folder information set can be created by combining an information set, a user information set, a bulletin board information set, and the like. Also in this case, the information set, the user information set, the bulletin board information set, and the like are associated with the folder information set. Information elements, information sets, and the like can be freely combined, and are not limited to the above embodiments.
[0026]
FIG. 6 shows a flowchart of the information management method according to the embodiment of the present invention. Hereinafter, each step of the information management method of the present embodiment will be described with reference to the drawings.
[0027]
In step ST1, the operator inputs an operation command. An operation command is input from the input unit 18 of the computer 10. The operation command is sent to the control unit 16, and the content of the operation and the target information set to be operated are specified. Further, the control unit 16 refers to the target information set stored in the storage unit 30 of the server 12 (or the storage unit 20 of the computer 10), and specifies its attribute.
[0028]
For example, in FIG. 4, the information name of the target information set is “document A”, and its owner is specified as “user 1”.
[0029]
In step ST2, the temporary access right of the operator to the target information set is checked. Specifically, for example, the control unit 16 checks the contents of the ACL stored in the storage unit 30 (or the storage unit 20), and determines the temporary access right.
[0030]
FIG. 7 shows an example of an ACL in the present embodiment. The ACL in FIG. 7 is an example, and the present invention is not limited to this.
[0031]
In the ACL of the present embodiment, provisional access rights of each user or each group to the information set, user information set, group information set, mail monitoring information set, bulletin board information set, calendar information set, and folder information set are set. . The “manage right” means a person who has a “write right”, a “read right”, a temporary access right for changing the access right and changing the owner. The “manage right” is automatically and initially set to the user who created the information set.
[0032]
In the above specific example, the temporary access right of the operator “user 2” to the target information set “document A” is determined to be “manage right”.
[0033]
In step ST3, an information set associated with the target information set for the operation (hereinafter referred to as a related information set) is examined from the set of the operation and the target information set. The related information set can be looked up from the control table.
[0034]
FIG. 8 shows an example of a comparison table for investigating related information. The type of the related information set associated with the target information set can be specified from the combination of the operation content and the target information set. The comparison table can be stored in the storage unit 30 similarly to the ACL.
[0035]
From FIG. 8, it can be seen that the operation of changing the owner of the target information set corresponds to condition 3, and the related information set at that time is a user or a group who is the owner of the target information set. Since the related information set is found to be the owner of the target information set, the owner of the document A is checked from FIG. As a result, it is found that the owner of the document A is the user 1.
[0036]
In step ST4, the temporary access right of the operator to the related information set is checked. Specifically, for example, the control unit 16 checks the contents of the ACL stored in the storage unit 30 (or the storage unit 20) and determines the temporary access right.
[0037]
In the above example, the related information set relating to the change of the owner of the target information set “Document A” is “User 1”, and the temporary access right of the operator “User 2” to “User 1” is determined to be “read right”. Is done.
[0038]
In step ST5, the effective access of the operator to the target information set is determined from the combination of the temporary access right of the operator to the target information set obtained in step ST2 and the temporary access right to the related information set obtained in step ST4. Determine your rights.
[0039]
When determining the effective access right from the temporary access right, a comparison table can be used. If the combination of the provisional access rights satisfies the conditions in the comparison table, the effective access is "permitted", and if not, "not permitted".
[0040]
The comparison table of FIG. 8 is also a comparison table for determining an effective access right from the provisional access right. An effective access right to the combination of the provisional access rights can be set for each information set to be operated or each information element to which an attribute included in the information set is assigned.
[0041]
The access right, for example, when read / manage is displayed, indicates that a read right or a manage right to the information set is required to perform the operation.
[0042]
Applying to the above example, since the operation instruction changes the owner of the information set, the effective access right is determined using the condition 3. The temporary access right of the operator “user 2” to the related information set “user 1” is “read right”, and the temporary access right of the operator “user 2” to the target information set “document A” is “manage right”. Since the condition 3 is satisfied, the effective access right is “permitted”. FIG. 9 shows a conceptual diagram of the relationship between the operator, the target information set, and the related information set.
[0043]
In step ST6, processing and operations are performed on the attributes included in the target information set based on the effective access right determined in step ST5.
[0044]
In the above example, since the effective access right is “permission”, the operator “user 2” can change the contents of the attribute of the owner of the target information set “document A”. Similarly, it can be seen that the operator “user 2” can also change the contents of the attribute of the owner of the target information set “document B” whose owner is “user 1”.
[0045]
By executing the above information management method, it is possible to control operations on information sets and attributes. Hereinafter, an operation example of a representative information set will be described.
[0046]
(If the operation is "disallowed")
In the above example, when the operator is “user 3”, the temporary access right of the operator “user 3” to the target information set “document A” is “write right”. Further, the provisional access right to the related information set “user 1” is not set. Therefore, the condition 3 is not satisfied, and the effective access right of the operator “user 3” to the target information set “document A” is “not permitted”. Therefore, “User 3” cannot change the contents of the attribute of the owner of the target information set “Document A”.
[0047]
(When the operator and owner of the target information set are common)
Even when the operator is the same “user 1” as the owner, the provisional access right of the operator “user 1” to the target information set “document A” and the operator “user” to the related information set “user 1” The temporary access right of “1” is determined. In any case, since the operator “user 1” is the owner, it has “manage right”, satisfies condition 3 of the comparison table, and the effective access right is “permitted”.
[0048]
(When the target information set includes other information sets)
Even when the information set associated with another information set such as the mail monitoring information set is set as the target information set, the temporary access right of the operator to the target information set and the operation on the information set associated with the target information set The effective access right of the operator to another information set included in the target information set can be determined based on the temporary access right of the operator.
[0049]
For example, it is assumed that the operator “user 2” changes the monitoring target information set included in the mail monitoring information set “mail monitoring A” shown in FIG. According to the example of the ACL and the comparison table, the temporary access right of the operator “user 2” to the information set “mail monitoring A” is determined to be “write right”. Further, from the comparison table, the related information set of the condition 5 becomes the monitoring target information set. The temporary access right of the operator “user 2” to the information set “document A” set in the monitoring target information set is determined to be “manage right”. Therefore, since the condition 5 of the comparison table is satisfied, the effective access right of the operator “user 2” to the monitoring target information set of the target information set “mail monitoring A” is “permitted”, and “user 2” is “Document A” can be deleted from the monitoring target of “Monitor A”, or “Document A” can be registered as a new monitoring target.
[0050]
For a folder information set including a plurality of information elements, an effective access right can be determined by the same method, and the operation of the operator can be managed.
[0051]
As described above, by setting the conditions of the comparison table for the target information set or the attributes included therein, it is possible to finely set the effective access right of the operator to each information set.
[0052]
Next, a case where the operation range of the specific user for the target information set is changed will be described.
[0053]
The owner of the information set can change the provisional access right of the owned information set by changing the contents of the ACL. The effective access right is determined by a combination of the temporary access right of the operator to the target information set and the temporary access right of the operator to the related information set. Change the access right.
[0054]
(When changing the operation range of a specific user for only a specific information set)
By changing the temporary access right of a specific user to a specific information set, the operation range can be changed.
[0055]
For example, in the case where the change of the operator “user 2” to the owner of the target information set “document A” is not permitted, as shown in FIG. The temporary access right may be changed from “manage right” to “read right”, “write right” or “no access right”.
[0056]
(To change the operation range of a specific user for all information sets owned)
By changing the provisional access right of the specific user to the related information set, it is possible to change the operation range of the specific user for all the information sets owned by the specific user.
[0057]
For example, when the change operation of the owner of the user “user 2” to the target information sets “document A” and “document B” is prohibited, as shown in FIG. What is necessary is just to change the temporary access right of “user 2” from “read right” to “no access right”.
[0058]
As described above, an owner having a plurality of information sets can collectively change the effective access rights of a specific user to all the information sets owned by only changing the temporary access rights of the specific user. Can be.
[0059]
That is, the owner does not need to know the existence of all the information sets and does not need to change the provisional access rights to the individual information sets. Therefore, the work of changing the effective access rights becomes easy and simple. As a result, the change time can be shortened without any omission of the change of the access right.
[0060]
In addition, the above effects can be obtained by programming each step of the above embodiment and causing the computer 10 or the server 12 to execute the program. Further, the same effect can be obtained by recording the program on a computer-readable recording medium such as a flexible disk or a magneto-optical disk, and causing the computer 10 or the server 12 to read and execute the program.
[0061]
【The invention's effect】
According to the present invention, the owner can change the effective access right of a specific user to all information sets at once. As a result, the owner does not need to know the existence of all the information sets and does not need to change the provisional access rights to the individual information sets, so that the work of changing the access rights is easy and simple. Further, the change time can be shortened without any omission of change of the access right.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of an information management system according to an embodiment of the present invention.
FIG. 2 is a diagram showing contents of a user information set.
FIG. 3 is a diagram showing the contents of a group information set.
FIG. 4 is a diagram showing contents of an information set.
FIG. 5 is a diagram showing the contents of a mail monitoring information set.
FIG. 6 is a diagram showing a flowchart of an information management method according to the embodiment of the present invention.
FIG. 7 is a diagram showing an ACL according to the embodiment of the present invention.
FIG. 8 is a diagram showing a control table according to the embodiment of the present invention.
FIG. 9 is a conceptual diagram of an operation relation in the embodiment of the present invention.
FIG. 10 is a diagram showing a modified ACL in the embodiment of the present invention.
FIG. 11 is a diagram showing a modified ACL in the embodiment of the present invention.
FIG. 12 is a diagram showing an ACL in a conventional information management system.
FIG. 13 is a conceptual diagram of an operation relationship in a conventional information management system.
[Explanation of symbols]
10 computers, 12 servers, 14 networks, 16 control units, 18 input units, 20 storage units, 22 interfaces, 24 buses, 26 interfaces, 28 control units, 30 storage units, 32 buses.

Claims (6)

An information management system capable of managing a plurality of information sets, each including at least one information element, in association with each other,
Based on the provisional access right of the user to the information set specified as the target of processing and the provisional access right of the user to the information set associated with the specified information set,
An information management system, wherein an effective access right of the user to the specified information set is determined. The information set comprises:
Information elements about the data,
An information element relating to a processing method for processing the data;
The information management system according to claim 1, wherein the information management system is an object including: An information management method capable of managing a plurality of information sets, each including at least one information element, in association with each other,
Based on the provisional access right of the user to the information set specified as the target of processing and the provisional access right of the user to the information set associated with the specified information set,
An information management method, wherein an effective access right of the user to the specified information set is determined. The information set comprises:
Information elements about the data,
An information element relating to a processing method for processing the data;
The information management method according to claim 3, wherein the object is an object including: An information management program capable of managing a plurality of information sets, each including at least one information element, in association with each other,
Based on the provisional access right of the user to the information set specified as the target of processing and the provisional access right of the user to the information set associated with the specified information set,
An information management program for causing a computer to execute a step of determining an effective access right of the user for the specified information set. The information set comprises:
Information elements about the data,
An information element relating to a processing method for processing the data;
The information management program according to claim 6, wherein the information management program is an object including:

Images