JP2004185176A - Confidential data browsing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To safely browse confidential data through an open communication line by a reliable method for a user. <P>SOLUTION: Confidential data are transferred to a user by a safe means, and retrieval conditions are transferred through an open communication line to a server, and the server retrieves the data, and returns only the identifier of the pertinent data to terminal equipment. The terminal equipment refers to the confidential data transferred and set to the user. The server transfers data erasure information with the identifier. The server transfers only the identifier and update information. Trace information is added to the confidential data for each user. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a communication line application system or an Internet application system for performing secure search, browsing, and data maintenance of secret data via a communication line or the Internet.
[0002]
[Prior art]
A system that searches and browses confidential data by accessing a server in a network closed by a communication line, a system that searches and browses confidential data by restricting access to an Internet server, and a system that exclusively uses confidential data for terminals There is a system for searching and browsing confidential data by inserting software.
[0003]
[Problems to be solved by the invention]
Closed communication networks have low line speeds and costly equipment in proportion to cost. Communication costs are higher than in open communication networks such as the Internet. These problems can be prevented by securely browsing confidential data through an open communication network.
Although some problems can be solved by restricting access to Internet servers, posting open data on the Internet is unreliable and avoided because of the openness of the Internet. Also, since there are problems such as eavesdropping and hacking, it is dangerous to send confidential data through a communication line or store it in a server. This problem is solved by passing the secret data without passing through the Internet and referring to the passed data when necessary at the terminal.
Easy maintenance of confidential data. It is safe to search and browse secret data by putting secret data and dedicated software in the terminal, but maintenance of the secret data is not easy. By connecting to the server and receiving and maintaining the maintenance information, the data can be easily kept up to date.
Be able to track the loss of secret data. It is possible to trace confidential data leaked by the user intentionally or by negligence.
[0004]
[Means for Solving the Problems]
The secret data is passed to the user by a secure means, the search condition is passed to the server via an open communication line, and the server performs the search and returns only the identifier of the corresponding data to the terminal. The terminal refers to the secret data passed to the user and set.
The server passes data deletion information by identifier. The server passes only the identifier and the update information as data update information.
By including tracking information in the secret data for each user, it is possible to track a case in which the data is omitted.
[0005]
DESCRIPTION OF THE PREFERRED EMBODIMENTS
When browsing a large amount of data, the number of data that can be browsed at a time is limited, so it must be narrowed down in some way. Even if the condition is determined by tacit understanding, the search is always performed in the order of newest first 20 cases. Search is always performed when browsing a part of a large number of data.
In addition, the data required for the search is sufficient for the content used for the search, and can be generally coarser than the detailed data to be referred. For example, in the case of secret data of personnel affairs, the occupation is often not a company A employee but a company employee. Also, if the secret data contains image or audio data, the image data or audio data is not normally searched for, and is only necessary for displaying or reproducing details on the terminal. It is. In general, the search database will be less confidential, making the secret data coarser and less detailed. Therefore, by storing only the less confidential search data in the server, the risk can be minimized even if the data is leaked due to hacking.
[0006]
A method for receiving and viewing confidential data via a communication line will be described with reference to FIG.
a1) The user previously receives a plurality of secret data (H) and identifiers (S) of the respective secret data via a communication line. a2) Each of the identifiers (S) in the user terminal (T) from the identifier (S) To be able to refer to the secret data (H). b) At the request of the user, the terminal (T) connects to the server (Z) of the secret data browsing system via a communication line, presents the search condition (K) to the server (Z), and requests a search. . c1) The server (Z) searches using the database (B) of the secret data (H) on the server (Z), and c2) communicates at least the identifier (G) of the corresponding secret data (H). Return to the terminal (T) via the line. At this time, it is possible to supplement the secret data (H) previously received by returning the public data not present in the secret data (H) previously received in a or the data changed after being received in advance. d) The terminal (T) uses the returned identifier (G), refers to the corresponding secret data (F) from among the secret data (H) that can be referred to in a, and refers to the terminal (T). It is displayed on the display device (D) of (T) or reproduced by the reproducing device.
The display can be easily realized by applying the Internet technology and realizing the server (Z) as a WWW server with plug-in software of a browser of the terminal (T) and a browser referring to the secret data (H). Needless to say, if the cost is increased, it can be realized with dedicated software without using a standard browser or WWW server on the Internet.
At this time, in the case of image data, it is displayed as an image, and in the case of audio, it is reproduced.
[0007]
The secret data (H) to be received in advance is secured by using a closed line such as a dedicated line, by performing an open line using an established security method such as encrypting data, or by using a communication line such as a VPN (virTual private Network). It is desirable to carry out. Also, it is desirable that the storage location of the secret data (H) on the server (Z) be stored in a location that can be accessed only by the dedicated CGI and cannot be accessed by a general public line. The security at this time is required to be higher than the line that presents the search condition (K) and returns the identifier (S). The secret data (H) is not always stored on the server (Z) by a method such as storing the secret data (H) in the server (Z) after the expiration date and receiving the secret data (H) through the highly secure communication line. It is also important.
[0008]
When searching, only the identifier (S) can be presented as the search condition (K), and it can be checked only whether or not the data is still registered.
If the secret data (H) has a unique value throughout the data, the same effect can be obtained even if the value is made to function as the identifier (S) without separately providing the identifier (S).
When referring to the secret data (H) from the identifier (S), each piece of the secret data may be converted into an individual file, and the file name may be referred to as the identifier (S) from the file. A plurality of data may be implemented together with the identifier (S) in the database of the terminal (T) so that individual data can be referenced from the identifier (S).
[0009]
Image data and audio data that do not easily become search conditions (K), that is, do not need to be stored in the server (Z) when implementing this system, often have a high degree of confidentiality. Image data and audio data are received via a highly secure communication line, an identifier (S) retrieved via the communication line is received from a server (Z), and the corresponding image data and audio data are displayed on a terminal (T). High security is realized by reproduction.
[0010]
With reference to FIG. 2, a method for receiving and viewing secret data via a recording medium will be described.
a1) The user previously receives a plurality of secret data (H) and an identifier (S) of each secret data via the recording medium (M). a2) The user receives the data (H) and the identifier (S). Or the storage medium (M) is attached to the terminal (T) so that the secret data (H) can be referenced from the identifier (S). The receiving of the recording medium (M) is performed by highly secure transportation or the like. b) At the request of the user, the terminal (T) connects to the server (Z) of the secret data browsing system via a communication line, presents the search condition (K) to the server (Z), and requests a search. . c1) The server (Z) searches using the database (B) of the secret data (H) on the server (Z), and c2) communicates at least the identifier (G) of the corresponding secret data (H). Return to the terminal (T) via the line. At this time, it is possible to supplement the secret data (H) previously received by returning the public data not present in the secret data (H) previously received in a or the data changed after being received in advance. d) Using the returned identifier (G), the terminal refers to the corresponding secret data (F) from the secret data (H) referred to in the above a, and refers to the terminal (T). Is displayed on the display device (D) or reproduced by the reproducing device.
The display can be easily realized by applying the Internet technology and realizing the server (Z) as a WWW server with plug-in software of a browser of the terminal (T) and a browser referring to the secret data (H). Needless to say, if the cost is increased, it can be realized with dedicated software without using a standard browser or WWW server on the Internet.
When the image data is displayed, it is displayed as an image in the case of image data, and is reproduced in the case of audio.
[0011]
When searching, only the identifier (S) can be presented as the search condition (K), and it can be checked only whether or not the data is still registered.
If the secret data (H) has a unique value throughout the data, the same effect can be obtained even if the value is made to function as the identifier (S) without separately providing the identifier (S).
When referring to the secret data (H) from the identifier (S), the individual secret data (H) may be converted into an individual file, and the file name may be referred to as the identifier (S) from the file. A plurality of data may be implemented together with the identifier (S) in the database of the terminal (T) so that individual data can be referenced from the identifier (S).
Since the receiving of the recording medium (M) for recording the secret data (H) is performed by mail or transportation, the communication medium is completely escaped from interception of the communication, misuse, misuse, and hacking of the password.
[0012]
Image data and audio data that do not easily become search conditions (K), that is, do not need to be stored in the server (Z) when implementing this system, often have a high degree of confidentiality. Image data and audio data are received by highly secure transportation and mailing means, the identifier (S) retrieved via the communication line is received from the server (Z), and the corresponding image data and audio data are transmitted to the terminal (T). By displaying and reproducing with, high security is realized.
[0013]
A method of browsing confidential data using the Internet will be described with reference to FIG.
a1) The user previously receives a plurality of secret data (H) and identifiers (S) of the respective data via a communication line, and a2) receives the respective secret data from the identifiers in the user terminal (T). (H) can be referred to. b) The secret data (H) that can be referred to by the terminal (T) is a separate file name (identifier file name in the figure) (N in the figure) that is regularly created from the identifier (S) of each data (H). ) (Hereinafter referred to as a secret file) (E). c1) At the request of the user, the terminal (T) connects to the server (Z) of the secret data browsing system via the Internet and opens the homepage (L) for presenting search conditions with a browser. c2) The search conditions are transmitted to the server. (K) is presented and a search is requested. d1) The server (Z) performs a search based on the search condition (K) using the database (B) of the secret data on the server (Z), and d2) an identifier of the corresponding secret data (F) From (S1), a home page (P) referring to the file (E) of the secret data (H) of the terminal (T) stored under the file name (N) regularly created in b above is returned. e) The terminal (T) displays the above homepage (P), and refers to the secret data (H) from the file (E) of the terminal (T) referred to in the homepage (P) for display or reproduction by the reproducing device. .
[0014]
The secret data (H) to be received in advance is secured by using a closed line such as a dedicated line, by performing an open line using an established security method such as data encryption, or by using a communication line such as a VPN (virTual private Network). It is desirable to carry out. Also, the storage location of the secret data (H) on the server (Z) can be accessed only by the special CGI using a special protocol (for example, IPX / SPX), and cannot be directly accessed by a general public line and protocol (for example, TCP / IP). It is desirable to save it in a place. In this case, the CGI is accessed to receive the secret data via the communication line. It is required that the security at the time of receiving the secret data (H) be higher than that of an Internet communication line that presents the search condition (K) and returns the identifier (S). The secret data (H) is not always stored on the server (Z) by a method such as storing the secret data (H) in the server (Z) after the expiration date and receiving the secret data (H) through the highly secure communication line. It is also important.
[0015]
A method of performing a search by presenting a search condition (K) on the Internet is widely realized using CGI or the like.
Displaying on the browser with reference to the file (E) of the secret data (H) is realized using the frame function of the browser. It can also be realized by a method of creating plug-in software for the browser and taking in the secret data (H) into the page (P).
In addition, image data to be kept secret can be referred to and displayed on a browser simply by referring to a file containing the image data on a homepage. In this case, the file name to be referred to may be a file name (N) created regularly from the identifier (S).
[0016]
In order to store the secret data (H) as a file with a file name (N) regularly created from the identifier (S) of each data, a file with a file name (N) created from the identifier (S) must be stored. The secret data (H) may be inserted and the secret data (H) may be received and stored in the terminal (T). Alternatively, each terminal receives the secret data (H) and the identifier (S), creates a file having a file name (N) regularly created from each identifier (S) at the terminal (T), and stores the individual data. It may be realized by storing.
Obviously, the file name (N) regularly created from the identifier (S) may be the same as the file name (N). If the secret data (H) is received in the file having the file name (N) created from the identifier (S) and the secret data (H) is received, the identifier (S) can be received from the file name (N). There is no need to receive the identifier (S).
[0017]
The storage location of the secret file (E) of the terminal (T) must be the location of the file to be referenced. When the file (E) of the secret data (H) is stored in the terminal (T), the location of the secret file (E) to be referred to in the home page (P) is the same as that of the file (E). What should I do? Alternatively, the problem can be solved by notifying the server (Z) of the storage location of the secret file (E) when presenting the search condition (K).
[0018]
A method for browsing confidential data using the Internet and a recording medium will be described with reference to FIG.
a1) The user previously receives a plurality of secret data (H) and identifiers (S) of the respective data via the recording medium (M), and a2) stores the data in the terminal (T) or (M) is attached to the terminal (T) so that it can be referred to. b) The secret data (H) that can be referred to by the terminal (T) or the secret data (H) of the attached recording medium (M) is regularly created from the identifier (S) of each data (H). File (identifier file name) (N) (hereinafter referred to as a secret file) (E). c1) At the request of the user, the terminal (T) connects to the server (Z) of the secret data browsing system via the Internet and opens the homepage (L) for presenting search conditions with a browser. c2) The search conditions are transmitted to the server. (K) is presented and a search is requested. d1) The server (Z) performs a search based on the search condition (K) using the database (B) of the secret data on the server (Z), and d2) an identifier of the corresponding secret data (F) From (S1), a home page (P) referring to the file (E) of the secret data (H) of the terminal (T) stored under the file name (N) regularly created in b above is returned. e) The terminal (T) displays the above homepage (P), and refers to the secret data (H) from the file (E) of the terminal (T) referred to in the homepage (P) for display or reproduction by the reproducing device. .
[0019]
A method of performing a search by presenting a search condition (K) on the Internet is widely realized using CGI or the like.
Designating the file (E) of the secret data (H) and displaying it on the browser is realized by using the frame function of the browser. It can also be realized by a method of creating plug-in software for the browser and taking in the secret data (H) into the page (P).
In addition, image data to be kept secret can be referred to and displayed on a browser simply by referring to a file containing the image data on a homepage. In this case, the file name to be referred to may be a file name (N) created regularly from the identifier (S).
[0020]
In order to store the secret data (H) as a file with a file name (N) regularly created from the identifier (S) of each data, a file with a file name (N) created from the identifier (S) must be stored. The secret data (H) may be inserted and the secret data (H) may be received and stored in the terminal (T). Alternatively, each terminal receives the secret data (H) and the identifier (S), creates a file having a file name (N) regularly created from each identifier (S) at the terminal (T), and stores the individual data. It may be realized by storing.
Obviously, the file name (N) regularly created from the identifier (S) may be the same as the file name (N). If the secret data (H) is received in the file having the file name (N) created from the identifier (S) and the secret data (H) is received, the identifier (S) can be received from the file name (N). There is no need to receive the identifier (S).
[0021]
The storage location of the secret file (E) of the terminal (T) must be the location of the file to be referenced. When the file (E) of the secret data (H) is stored in the terminal (T), the location of the secret file (E) to be referred to in the home page (P) is the same as that of the file (E). What should I do? Alternatively, the problem can be solved by notifying the server (Z) of the storage location of the secret file (E) when presenting the search condition (K).
[0022]
Referring to FIG. 5, a method of obtaining the location of a file to be referred by using a cookie will be described.
a) A cookie on the terminal (T) from which the server (Z) of the secret data browsing system can read a storage location (O) for storing the secret data (H) in the terminal (T) as a file (E). Set to U). b) The server (Z) of the secret data browsing system receives a search request via the Internet, c) reads the cookie (U) on the terminal (T), and d) stores the file in the storage location (B). Return home page (P) by referring to (E).
[0023]
With reference to FIG. 6, a method for deleting stored secret data based on server information will be described.
a) The terminal (T) connects to the server (Z) of the secret data (H) browsing system via a communication line based on the user's request, and b) receives the identifier (R) of the secret data to be deleted, c ) Delete the corresponding referenced private data (I) and / or identifier (Q).
[0024]
In the present system, the search is always performed based on the data of the server (Z). Therefore, if the data of the server (Z) is deleted and maintained, the deleted data is not reflected in the search result. However, the data that can be referred to by the terminal (T) remains in the terminal (T). By keeping the master data on the server (Z) always up-to-date, the terminal (T) receives and deletes the identifier (S) of the deleted data from the server (Z), thereby eliminating unnecessary storage.
[0025]
A method of deleting secret data based on server information will be described with reference to FIG.
a1) The user receives a plurality of secret data (H) and the identifiers (S) of the respective data in advance, and a2) the respective secret data (H) from the identifier (S) in the user terminal (T). To be able to refer to. b1) The terminal (T) connects to the server (Z) of the secret data browsing system based on the user's request, b2) receives the identifier (R) of the secret data to be deleted, and b3) can be referred to by the above a1 and a2. The corresponding secret data (I) and / or identifier (Q) are deleted from the secret data (H).
[0026]
In the case where the secret data (H) received by the user is data to be subsequently deleted, maintenance of the data (H) is troublesome. The master data on the server (Z) is always kept up-to-date, and the terminal (T) receives the identifier (S) of the deleted data from the server (Z) and deletes it.
[0027]
A method of updating secret data based on server information will be described with reference to FIG.
a1) The user receives a plurality of secret data (H) and the identifiers (S) of the respective data in advance, and a2) receives the respective secret data (H) from the identifier (S) in the user terminal (T). ). b1) At the request of the user, the terminal (T) connects to the server (Z) of the secret data browsing system, b2) receives the updated secret data (I) and the identifier (Q) of the data, and Update the corresponding secret data that can be referred to.
[0028]
In the case where the secret data (H) received by the user is data that is subsequently changed, the maintenance of the data (H) is troublesome. The master data on the server (Z) is always kept up-to-date, and the terminal (T) receives the updated secret data (I) and its identifier (Q) from the server (Z) and resolves them by updating.
[0029]
A method of tracking omission of secret data will be described with reference to FIG.
Tracking data (W1 to W3) different for each user is put in each piece of secret data (H) received in advance.
A part of the secret data (H) is intentionally lost due to negligence. By examining the different tracking data (W1 to W3) for each user in the leaked secret data, it is possible to distinguish which user has received the secret data (H) that has been leaked. By putting the tracking data (W1 to W3) in the individual secret data (H), it is possible to track which secret data has been passed to which user even if any secret data is missing.
[Brief description of the drawings]
FIG. 1 A method of receiving and browsing confidential data via a communication line. FIG. 2 A method of receiving and browsing confidential data via a recording medium. FIG. 3 A method of browsing confidential data using the Internet. FIG. Method of browsing confidential data using a computer and a recording medium [FIG. 5] Method of obtaining the location of a file to be referred using a cookie [FIG. 6] Method of deleting stored confidential data based on server information [FIG. 7] Method of deleting secret data based on server information [FIG. 8] Method of updating secret data based on server information [FIG. 9] Method of tracking omission of secret data [Description of symbols]
(Fig. 1)
B. A database of secret data; Display device; Applicable secret data; Applicable identifier; Secret data; Search condition; Identifier; User's terminal; server;
(Fig. 2)
B. A database of secret data; Display device; Applicable secret data; Applicable identifier; Secret data; Search condition; Recording medium; Identifier; User's terminal; server;
(Fig. 3)
B. A database of secret data; Display device; A secret file; Applicable secret data; Applicable identifier; Secret data; Search condition; Homepage for presenting search conditions; A file name regularly created from the identifier (identifier file name); Home page referring to secret file; Homepage screen; Identifier; User's terminal; server;
(FIG. 4)
B. A database of secret data; Display device; A secret file; Applicable secret data; Applicable identifier; Secret data; Search condition; Homepage for presenting search conditions; Recording medium; A file name regularly created from the identifier (identifier file name); A home page referring to the secret file; Homepage screen; Identifier; User's terminal; server;
(FIG. 5)
E. FIG. File; Secret data; Storage location; Homepage that refers to the file in the storage location User's terminal; U. Cookies; server;
(FIG. 6)
A. B. identifier of data to be deleted; Trash; Secret data; I. Applicable secret data; Q: applicable identifier; Identifier; User's terminal; server;
(FIG. 7)
A. B. identifier of data to be deleted; Trash; Secret data; I. Applicable secret data; Q: applicable identifier; Identifier; User's terminal; server;
(FIG. 8)
A: identifier of data to be updated; Secret data; I. Secret data to be updated Identifier; User's terminal; server;
(FIG. 9)
H. Secret data; J1 to J3. Users 1-3; Identifier; T1 to T3. Terminals of users 1 to 3; Tracking data changed for each user; W1 to W3; tracking data 1 to 3; server;

Claims (9)

A secret data browsing system a. The user receives in advance a plurality of pieces of secret data and identifiers of the respective pieces of secret data via a communication line, and makes it possible to refer to the respective pieces of secret data from the identifiers in the user terminal.
b. At the request of the user, the terminal connects to a server of the secret data browsing system via a communication line, presents search conditions to the server, and requests a search.
c. The server performs a search based on the search condition using the secret data database on the server, and returns at least an identifier of the corresponding secret data to the terminal via a communication line.
d. Using the returned identifier, the terminal refers to the corresponding secret data from among the secret data referred to in a above and displays the secret data on the display device of the terminal or reproduces the data on the reproducing device. A secret data browsing system a. The user receives in advance a plurality of pieces of secret data and identifiers of the respective pieces of secret data via a recording medium, and makes it possible to refer to the respective pieces of secret data from the identifiers in the user terminal.
b. At the request of the user, the terminal connects to the server of the secret data browsing system via a communication line, presents search conditions to the server, and requests a search.
c. The server performs a search based on the search condition using the secret data database on the server, and returns at least an identifier of the corresponding secret data to the terminal via a communication line.
d. Using the returned identifier, the terminal refers to the corresponding secret data from among the secret data referred to in a above and displays the secret data on the display device of the terminal or reproduces the data on the reproducing device. A secret data browsing system a. The user receives in advance a plurality of pieces of secret data and identifiers of the respective pieces of secret data via a communication line, and makes it possible to refer to the respective pieces of secret data from the identifiers in the user terminal.
b. The secret data that can be referred to by the terminal is stored as files having different file names regularly created from identifiers of individual data.
c. At the request of the user, the terminal connects to the server of the secret data browsing system via the Internet, presents search conditions to the server, and requests a search.
d. The server searches the server based on the search condition using the database of the secret data on the server, and stores the terminal with the file name regularly created in the step b from the identifier of the corresponding secret data. Returns a home page that references the secret data file. A secret data browsing system a. The user receives in advance a plurality of pieces of secret data and identifiers of the respective pieces of secret data via the recording medium, and makes it possible to refer to the respective pieces of secret data from the identifiers in the user terminal.
b. The secret data that can be referred to by the terminal is stored in a file having a file name regularly created from the identifier of each data.
c. At the request of the user, the terminal connects to the server of the secret data browsing system via the Internet, presents search conditions to the server, and requests a search.
d. The server searches the server based on the search condition using the database of the secret data on the server, and stores the terminal with the file name regularly created in the step b from the identifier of the corresponding secret data. Returns a home page that references the secret data file. The storage location for storing the secret data in a file according to claim 3 or 4 is set in a cookie on a terminal which can be read by a server of the secret data browsing system. 4 secret data browsing system. The terminal connects to a server of the secret data browsing system via a communication line based on a request of the user, receives the identifier of the deleted secret data, and receives the identifier of the deleted secret data. The secret data browsing system according to claim 1, 2, 3, or 4, wherein the corresponding secret data and / or identifier referred to in (a) is deleted. A secret data browsing system a. The user receives a plurality of pieces of secret data and identifiers of the respective pieces of secret data in advance, and makes it possible to refer to the respective pieces of secret data from the identifiers in the user terminal.
b. Based on the user's request, the terminal connects to the server of the secret data browsing system via a communication line, receives the identifier of the secret data to be deleted, and selects the corresponding data from the secret data referred to in a. And / or delete the identifier. A secret data browsing system a. The user receives a plurality of pieces of secret data and identifiers of the respective data in advance, and makes it possible to refer to the respective secret data from the identifiers in the user terminal.
b. Based on the user's request, the terminal connects to the server of the secret data browsing system via a communication line, receives the secret data to be updated and the identifier of the data, and updates the corresponding secret data that can be referred to by a. I do. Claim 1, wherein different tracing data for each user is entered in each of the secret data received in a of Claim 1, Claim 2, Claim 3, Claim 4, Claim 7, or Claim 8. The secret data browsing system according to claim 2, claim 3, claim 4, claim 7, or claim 8.

Images