JP2006113664A - Document management device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a document management device for managing a document in order to restrict the browsing of a portion of a document according to a user. <P>SOLUTION: A document storing part 1 stores a document whose disclosed section which an arbitrary user is able to browse and whose encrypted secret section which a specific user is permitted to browse are set, and a document management information storing part 2 stores a user who is permitted to browse the secret section in the document as document management information. Furthermore, a user management information storing part 3 stores the decoding key of each user as user management information. In receiving the browsing request of the document from the user, a management part 4 confirms the existence of the secret section and the browsing right of the secret section by referring to the document management information. When the browsing right is set to a user who requests browsing, the secret section is decoded, and provided for browsing with the disclosed section. When the user does not have any browsing right, the secret section is replaced with a specific pattern, and provided for browsing. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a document management apparatus that holds a document for browsing.

  In recent years, a system that electronically stores and manages documents and browses and edits documents as required is generally used. In such a system, there is no problem even if all the users can browse any document as long as the documents shared within a group of a small number of users are accumulated. However, among documents that are actually stored, there are documents that are shared, and there are secret documents that only some users or specific users want to be able to view. Therefore, it is necessary to limit the users who can browse depending on the managed document.

  Conventionally, there is a document in which a password is provided for each document, and the document cannot be browsed unless the password is input. For example, as described in Patent Document 1, a document is encrypted with a common key, and the common key is encrypted with one or more public keys corresponding to users who are permitted to view the document. In such a case, a system is considered in which a user decrypts a common key encrypted with a secret key, and decrypts and browses the document using the decrypted common key.

  However, in the conventional technique, whether or not browsing is possible is determined for each document. For this reason, for example, a part common to users and a part that can be browsed only by a specific user cannot coexist in one document. For this reason, even if the contents are coherent, contents that can be viewed by different users have to be divided and accumulated as separate documents. Conversely, a part that can be viewed by a certain user but cannot be viewed by another user cannot be included in one document.

JP 2004-151163 A

  The present invention has been made in view of the above-described circumstances, and an object thereof is to provide a document management apparatus that manages a document so that browsing of a part of the document can be restricted according to a user.

  The present invention relates to a document management device for storing a document including a public part that can be browsed by an arbitrary user and a secret part that is permitted to be browsed by a specific user, and information that specifies at least the secret part of the document And a document management information storage unit that registers the specific user who permits the browsing of the secret part, and a management unit that permits the browsing of the public part or the public part and the secret part according to the user browsing the document. It is characterized by.

  The secret part can be encrypted, and for the user who is permitted to view the secret part, the secret part is stored using a decryption key previously associated with the secret part in the document management information storage means. What is necessary is just to decode a part and to make browsing possible. When browsing the secret part, it is preferable that the user is authenticated and then decrypted to enable browsing. The decryption key used at the time of decryption can also be used as a password used when authenticating the user if the viewing right is only for a specific user.

  Further, in the case where browsing of the secret part is not permitted, it is possible to add predetermined data to an area in the document where the secret part is present for browsing. Furthermore, a plurality of concealment levels can be set as the concealment portion. In this case, it is possible to register the user corresponding to the secret level, and to permit browsing of the secret part and the public part according to the secret level of the user who browses the document.

  According to the present invention, since the document includes a public part and a secret part, even a user who is not permitted to browse the secret part can browse the public part in the document, and of course, browse the secret part. If it is a user who is permitted to browse, it is possible to browse the secret part that is permitted to be browsed together with the public part. Therefore, it is possible to limit information that can be browsed by a user who wants to browse while being a single document. In addition, according to the present invention, there are various effects such as making it possible to create and store documents with different information that can be browsed by users.

  FIG. 1 is a block diagram showing an embodiment of the present invention. In the figure, 1 is a document storage unit, 2 is a document management information storage unit, 3 is a user management information storage unit, and 4 is a management unit. The document storage unit 1 stores a document. In each document, a public part that can be browsed by an arbitrary user and a secret part that is permitted to be browsed by a specific user can be set. The secret part can be encrypted.

  The document management information storage unit 2 stores document management information for documents stored in the document storage unit 1. In the document management information, information for specifying the secret part, a specific user who permits browsing of the secret part, and a decryption key for decoding the secret part can be registered. FIG. 2 is an explanatory diagram of an example of document management information. In this example, the document name that identifies the document stored in the document storage unit 1, the confidential information that identifies the confidential part in the document, the information on the viewing right that indicates the user who can browse the confidential part, A decryption key for decrypting the secret part is included. For example, in the document “document 1”, the second and third pages are secret parts, and the other parts are public parts. And it is shown that the users who can browse the secret part are “USER1” and “USER2”. Of course, the entire document may be a secret part such as “Document 2”, or may not include a secret part like “Document 3”. In addition, a plurality of secret portions may exist in one document. In that case, it is possible to set a viewing right for each secret part. In the example shown in FIG. 2, the decryption key is registered for each secret part. However, the present invention is not limited to this, and the decryption key may be shared.

  The user management information storage unit 3 stores user management information in which a user ID for identifying a user is associated with a password for authenticating the user. FIG. 3 is an explanatory diagram of an example of user management information. This user management information is used for authenticating the user when the user uses the apparatus or when the user views the document.

  Note that the document storage unit 1, the document management information storage unit 2, and the user management information storage unit 3 may be configured as separate storage units, or may be configured to share the same storage unit as appropriate.

  The management unit 4 permits browsing of only the public part or all or part of the public part and the secret part according to the user who requested browsing of the document, and provides the user with browsing information. At this time, the confidential information corresponding to the document requested to be browsed and the browsing right (information of the user who is permitted to browse) are acquired from the document management information stored in the document management information storage unit 2, and the confidential information and the browsing are acquired. The right part of the document to be viewed is determined for the user who has requested viewing. When the user who has requested browsing is permitted to browse a part or all of the secret part, the decryption key corresponding to the secret part is obtained from the document management information storage unit 2 and is concealed using the decryption key. Decrypt the part and use it for browsing.

  If browsing is not permitted for all or a part of the confidential part in the document, that part is omitted from the browsing information, and predetermined data is added to the area of the document where the confidential part exists. The user may be clearly informed that the secret part exists.

  Further, when at least the secret part can be browsed, authentication is performed using the user management information registered in the user management information storage unit 3 in order to confirm that the user who has made the browsing request is a genuine user. Good. The user authentication may be performed at the start of use of the apparatus, for example, and thereafter the browsing request may be made any number of times, or the user may be authenticated for each browsing request. When authentication is performed for each browsing request, it is not necessary to perform authentication when the browsing right is not set for the confidential part of the document requested to be browsed.

  All the units shown in FIG. 1 do not have to be present in the same casing, and devices having functions of the respective units may be appropriately connected via a network or the like. For example, the document storage unit 1 may be configured to be accessed through a network as a document database device.

  FIG. 4 is a flowchart showing an example of the operation according to the embodiment of the present invention. A user may log in to the management unit 4 or a system including the document management apparatus of the present invention, and make a document browsing request after the document management apparatus or system becomes available. it can. When logging in, the user can be authenticated using a password in accordance with the user management information registered in the user management information storage unit 3.

  The document that the user requests to browse is, for example, by providing the user with a list of documents stored in the document storage unit 1 or selecting the document, or using a search result by a search process provided separately by the management unit 4, This can be specified by selecting a document to be viewed. Alternatively, a document to be browsed may be designated by directly inputting a uniquely determined document name.

  When a document browsing request is received from the user, for example, the process shown in FIG. 4 is started. In S11, information specifying a document to be browsed is received. Here, the document name is received.

  In S12, based on the received document name, the document management information stored in the document management information storage unit 2 is referred to, and the confidential information and the browsing right corresponding to the document for which the browsing request has been received are acquired. In S13, it is determined from the document management information whether there is a secret part in the document. If there is no secret part, in S14, the requested entire document is permitted to be browsed and returned to the user as browsing information as it is. Thereby, for example, a document is displayed or printed and can be browsed.

  If it is determined that the confidential part is included in the document requested to be browsed in S13, the browsing right is further determined in S15. That is, it is determined whether or not the browsing request information in the document management information includes the user who made the browsing request. If the viewing request information includes the user who made the browsing request, it is assumed that the user has the viewing right for the confidential part in the document. In this case, in S16, the decryption key corresponding to the secret part is acquired from the document management information stored in the document management information storage unit 2, and the secret part in the document to be browsed is decrypted. As a result, the concealed part becomes in a state where it can be browsed. In addition, when authenticating a user for each browsing request, the user may be confirmed immediately before S16.

  When it is determined that the user who has requested browsing in S15 does not have the browsing right, browsing is not permitted for the confidential portion. In this example, in S <b> 17, predetermined data is added to an area where the confidential portion exists in the document, and the confidential portion is replaced with predetermined data.

  In order to cope with the case where there are a plurality of secret parts in one document, in this example, in S18, it is determined whether or not there are other secret parts in the document, and other secret parts exist. If yes, the process returns to S15 and the process for the next secret part is performed.

  In this way, if the user who has requested browsing has a viewing right for each confidential part, the confidential part can be decoded and browsed, and if there is no viewing right, the confidential part is replaced with predetermined data. And it returns to a user as browsing information with the public part in a document. As a result, the contents of the document that are permitted to be browsed by the user (the public part and the secret part decrypted with the viewing right) are displayed or printed so as to be viewable. Further, in this example, for the secret part without the viewing right, predetermined data is displayed or printed, and the contents cannot be browsed. Therefore, although it is one document, each user can browse the content of the document according to the viewing right of each user. Moreover, since only the user who has set the viewing right can view the concealed portion, it is possible to protect the secret of a part of the document.

  FIG. 5 is an explanatory diagram of a specific example of the operation according to the embodiment of the present invention. Here, it is assumed that the document management information storage unit 2 stores the document management information as shown in FIG. 2, and a specific example of “document 1” is shown in FIG. Of this “document 1”, pages 2 and 3 are treated as confidential information. Therefore, the pages 2 and 3 are encrypted and stored in the document storage unit 1 as shown in FIG. With respect to this concealed portion, a viewing right is set for a plurality of users in the document management information shown in FIG.

  For example, when a user with the user ID “USER1” or “USER2” browses “document 1”, these users have viewing rights based on the document management information shown in FIG. Therefore, for pages 2 and 3 of “document 1”, the decryption key associated with the secret part is acquired from the document management information and decrypted, and together with page 1 of the public part, as shown in FIG. You can browse the entire document.

  When another user, for example, a user with the user ID “USER3” tries to browse, the document management information shown in FIG. 2 indicates that this user has no viewing right. Therefore, the pages 2 and 3 are not decoded, and a checkered pattern is inserted into the pages 2 and 3 here as shown in FIG. Therefore, “USER3” can browse the contents of the public page 1 but cannot browse the contents of the secret part.

  Even if “document 1” is illegally extracted from the document storage unit 1, the confidential part is encrypted, so there is little risk of information leakage.

  FIG. 6 is an explanatory diagram of another specific example of the operation according to the embodiment of the present invention. FIG. 6A shows another example of document management information. In this example, page 2 and page 3 are separately registered as confidential parts for “document 1”. In addition, for page 2, viewing rights are set for “USER1” and “USER2”, but for page 3, viewing rights are set only for “USER1”. By performing such a setting, it is possible to set the user to permit browsing in stages. In this example, a common decryption key for decrypting the secret part is used, and the decryption key is not shown. In this case, it can be considered that a common decryption key is associated with each secret part. Of course, as shown in FIG. 2, a decryption key corresponding to each secret part may be registered.

  For example, for “document 1” shown in FIG. 5A, page 2 and page 3 which are the secret portions are separately encrypted and stored in the document storage unit 1. For example, page 2 is encrypted so that it can be decrypted with a shared decryption key, and page 3 is encrypted so that it can be decrypted with a decryption key corresponding to “USER1”.

  When the user with the user ID “USER1” requests browsing, both the pages 2 and 3 have the browsing right, so both the pages 2 and 3 are decrypted with a common decryption key. As a result, the contents of all pages can be browsed as shown in FIG.

  When the user with the user ID “USER2” requests browsing of “Document 1”, “USER2” is set to have a browsing right for page 2, but has no browsing right for page 3. Therefore, as shown in FIG. 6C, page 2 is decoded, but page 3 is not decoded but replaced with a predetermined pattern, here a checkered pattern. Thus, “USER2” can browse the contents by decrypting the public page 1 and the page 2 with the viewing right with the shared decryption key. Note that the page 3 is not decrypted and a checkered pattern is added here, so that the contents cannot be browsed.

  For other users, since the viewing right is not set for both pages 2 and 3, only the public page 1 can be viewed as shown in FIG. 6D. The checkered pattern is added.

  In this way, all pages are browsed for “USER1”, pages 1 and 2 are browsed for “USER2”, and only page 1 is browsed for other users. As described above, it is possible to provide document contents according to the browsing level of the user.

  FIG. 7 is an explanatory diagram of still another specific example of the operation according to the embodiment of the present invention. In the specific description above, the secret part is set in units of pages, but the present invention is not limited to this. FIG. 7 shows an example in which a part of one page is a secret part. In FIG. 7A, the area indicated by the checkered pattern is an area where a secret part exists, and such browsing information is presented when a user who does not have a browsing right setting makes a browsing request. become. In addition, when a user who has been set with a viewing right makes a browsing request for this secret portion, the entire page can be viewed as shown in FIG.

  Of course, it is also possible to set a plurality of secret parts in one page. Moreover, you may comprise so that the concealment part which straddles a page can be set. For example, it is possible to set a secret part in various units, such as setting a secret part in units of chapters or sections, or setting a chart or the like as a secret part.

  In the specific example described above, when browsing is not permitted for the secret portion, the secret portion is replaced with a checkered pattern, but of course, the pattern is arbitrary, and may be replaced with, for example, a blank. Further, the browsing information may be reconstructed by deleting the secret part without performing the replacement with the pattern.

  In the above description, an example in which a secret key is registered for each secret part or a common decryption key is registered as a decryption key for decrypting the secret part. The present invention is not limited to this. For example, when only one user can view each secret part, a password for authenticating the user can be used as a decryption key. In this case, in the case of decrypting a secret part to which the user who has requested browsing has a viewing right, the password corresponding to the user is extracted from the user management information stored in the user management information storage unit 3 and decrypted. What is necessary is just to decrypt a secret part using it as a key. Further, even when viewing rights are set for a plurality of users, the users can be grouped and the group password can be used as a decryption key. Alternatively, it is possible to use a password of the user when the viewing right is for a single user, and use a common decryption key when the viewing right is for a plurality of users.

It is a block diagram which shows one Embodiment of this invention. It is explanatory drawing of an example of document management information. It is explanatory drawing of an example of user management information. It is a flowchart which shows an example of the operation | movement in one Embodiment of this invention. It is explanatory drawing of the specific example of the operation | movement in one Embodiment of this invention. It is explanatory drawing of another specific example of the operation | movement in one Embodiment of this invention. It is explanatory drawing of another specific example of the operation | movement in one Embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Document storage part, 2 ... Document management information storage part, 3 ... User management information storage part, 4 ... Management part.

Claims (7)

  Document storage means for storing a document including a public part that can be browsed by an arbitrary user and a secret part that is permitted to be browsed by a specific user, information that specifies at least the secret part of the document, and browsing permission of the secret part A document management apparatus comprising: a document management information storage unit that registers a specific user; and a management unit that permits browsing of the public part or the public part and the secret part according to a user who browses the document.   The document management apparatus according to claim 1, wherein the secret part is encrypted.   In the document management information storage means, a decryption key for decrypting the secret part is registered in association with the secret part, and the management means is a user who is permitted to view the secret part in the document. 3. The document management apparatus according to claim 2, wherein the secret part is decrypted using the decryption key associated with the secret part in the document management information storage unit, and can be browsed. .   And a user management information storage unit that associates a user ID for identifying the user with a password for authenticating the user. The management unit authenticates the user by using the user ID and password in the user management information storage unit. The document management apparatus according to any one of claims 1 to 3, wherein browsing is permitted for a secret portion that is permitted to be browsed by the user after success.   And a user management information storage unit that associates a user ID for identifying the user with a password for authenticating the user. The management unit authenticates the user by using the user ID and password in the user management information storage unit. 3. The document management apparatus according to claim 1, wherein after the success, the secret part permitted to be browsed by the user is decrypted by using the password to enable browsing. 4.   2. The management unit according to claim 1, wherein when the browsing of the secret part is not permitted, the management unit adds predetermined data to a region in the document where the secret part is present and provides the browsing. 6. The document management apparatus according to any one of 5 above.   The concealment part can set a plurality of concealment levels and can register a user corresponding to the concealment level, and the management means can manage the concealment part and the public part according to the concealment level of the user viewing the document. The document management apparatus according to claim 1, wherein browsing is permitted.

Images