JP2006155283A - Document processor and processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve the security of a document without constructing a complicated system. <P>SOLUTION: A buried position information extraction part 36 reads document data from a storage device 23, and extracts a parameter from a position information buried tag buried in the document data. A position information determination part 37 determines whether or not position information acquired by a position information acquisition part 31 is within an allowable range extracted by the extraction part 36. A document access control part 38 determines that the document is accessible when the acquired position information is within the allowable range, and displays the content of the document data as it is on a display part 3. When the position information is out of the allowable range, the document is determined to be non-accessible, and an alarm mark showing non-accessibility is displayed on the document. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a document processing apparatus and method, for example, a document processing apparatus and method suitable for use in security of electronic documents.

  In recent years, with the spread of mobile terminals such as mobile PCs, electronic documents and electronic data can be easily carried. As security methods for electronic documents, there are various methods for restricting access to documents by personal authentication or encryption.

  For example, an electronic document processing method for receiving an electronic document transmitted from a first computer system by a second computer system and performing processing in response to a read request for the electronic document to the second computer system Discloses an electronic document processing method in which a user who can read an electronic document by a destination computer and the time and place of the user can be specified for each transmission document (see, for example, Patent Document 1).

  In the above electronic document processing method, when information on the location of the requesting computer is included in the read condition, information identifying the location is obtained from the address of the computer that issued the read request, and the acquired information and It is determined whether or not to permit the read request by comparing with the data indicating the read condition obtained in the receiving step.

  Also, a method for protecting an electronic publication document that can prevent illegal copying and improve the tracking of the original user in electronic publication has been disclosed (see, for example, Patent Document 2).

In the method for protecting electronic publication documents, the copyright server authenticates requests from a plurality of users and instructs the document server to act on correct authentication of each request. The document server creates a uniquely encoded, compressed and encrypted document for each authenticated request, and sends a document for each authenticated request user to each authenticated request user through the network. Forward to the corresponding display or print agent.
JP-A-8-102735 (Claim 2, Paragraph 10) Japanese Patent No. 3121738

  However, conventional security technology can open a document wherever there is an authority. For this reason, it is possible that an accident would occur such as an inadvertent person inadvertently publishing a document that should not be disclosed on the go, and there was no way to deal with it.

  Further, the technique described in Patent Document 1 has a problem that it cannot be applied to a mobile terminal because the location is specified from the address of the computer that issued the read request. Since the technique described in Patent Document 2 requires an authentication server, there is a problem of increasing the size and complexity of the system configuration.

  The present invention has been proposed to solve the above-described problems, and an object of the present invention is to provide a document processing apparatus and method capable of improving the security of a document without configuring a complicated system. .

  The document processing apparatus according to the present invention includes an information acquisition unit that acquires at least one of position information and time information, and information that embeds the information acquired by the information acquisition unit in the document data as a permission condition for the document data Embedding means.

  The document processing method according to the present invention acquires at least one of position information and time information, and embeds the acquired information in the document data as a permission condition for the document data.

  The information to be acquired may be either position information or time information, or both. The acquired information is embedded as permission conditions in the document data.

  Therefore, according to the document processing apparatus and method of the present invention, security information is obtained by acquiring at least one of position information and time information and embedding the acquired information in the document data as a permission condition for the document data. Can be obtained.

  The document processing apparatus according to the present invention includes an information acquisition unit that acquires at least one of position information and time information, and whether or not the information acquired by the position information acquisition unit satisfies a permission condition embedded in document data. And an output control means for controlling the output mode of the document data based on the determination result of the determination means.

  The document processing method according to the present invention acquires at least one of position information and time information, determines whether or not the acquired information satisfies a permission condition embedded in document data, and determines the determination result. Based on this, the output mode of the document data is controlled.

  As long as the acquired information is information corresponding to the permission condition, either position information or time information, or both may be used. Then, it is determined whether or not the acquired information satisfies a permission condition embedded in the document data. The output control means controls the output mode of the document data based on the determination result. The output mode includes not only how to display document data but also how to print.

  Therefore, according to the document processing apparatus and method of the present invention, at least one of position information and time information is acquired, and it is determined whether or not the acquired information satisfies a permission condition embedded in the document data. By controlling the output mode of the document data based on the determination result, the document data can be secured without making a predetermined input request to the user.

  According to the document processing apparatus and method of the present invention, it is possible to provide security to document data without performing troublesome work.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram showing a configuration of a document processing system according to an embodiment of the present invention. The document processing system includes an electronic document processing apparatus 10 that creates and browses electronic documents, a document management server 20 that manages electronic documents, and a document database 30 that stores various electronic documents.

  The electronic document processing device 10 includes a GPS receiving device 1 that receives a GPS (Global Positioning System) signal, a control device 2 having a CPU (Central Processing Unit) 21, a memory 22, and a storage device 23, and a display device that displays an image. 3 and a printing apparatus 4 for printing an image.

[Create document data]
(First creation mode)
FIG. 2 is a block diagram showing a functional configuration of the control device 2 when creating document data. The CPU 21 generates a position information acquisition unit 31 that acquires position information based on the GPS signal received by the GPS receiver 1 and a tag in which the position information and the like are embedded (hereinafter referred to as “position information embedded tag”). A position information embedded tag generation unit 32, a tag writing unit 33 for writing the position information embedded tag in the document data, and a storage device 23 for storing the document data.

  The position information acquisition unit 31 acquires the current position information (for example, longitude and latitude) based on the GPS signal supplied from the GPS receiving device 1 when the storage of the document data is detected.

  The position information embedded tag generating unit 32 generates a position information embedded tag having the permitted position and the permitted range as parameters. Specifically, the position information embedded tag generation unit 32 sets the position information acquired by the position information acquisition unit 31 as a permitted position, and sets a value set by the user or a preset value as a permitted range.

  Note that the position information embedded tag generation unit 32 may use the position information input by the user instead of the position information acquired by the position information acquisition unit 31. As a method of inputting the position information, not only the longitude and latitude are input, but there are also the following methods.

  FIG. 3 is a diagram illustrating a state in which a permission position and a permission range are set via a map. When a map is displayed on the display device 3 shown in FIG. 1, the user may specify a permitted position and a permitted range using a pointing device (not shown), for example, using the map. The position information embedded tag generation unit 32 may generate the position information embedded tag using a permitted position designated by the user among a plurality of preset permitted positions.

  FIG. 4 is a diagram illustrating a state where a plurality of permitted positions are stored in the storage device 23 in advance. When a plurality of permitted positions are set, the user may mark a check box indicating a desired place using, for example, a pointing device. At this time, the position information embedded tag generation unit 32 generates a position information embedded tag using the permitted position marked on the check box.

  The tag writing unit 33 writes the position information embedded tag generated by the position information embedded tag generating unit 32 in the document data, and writes this document data in the storage device 23. Thereby, the document data in which the position information embedded tag is embedded is stored. Note that the document data is not limited to data created by the user, but may be data downloaded from a server, for example.

(Second creation mode)
FIG. 5 is a block diagram showing functional configurations of the control device 2 and the document management server 20 when creating document data. The CPU 21 receives the position information acquisition unit 31 that acquires position information based on the GPS signal received by the GPS receiver 1, the position information transmission unit 34 that transmits position information, and the information transmitted from the document management server 20. An information receiving unit 35 for receiving and a storage device 23 are provided. In addition, the document management server 20 includes a position information embedded tag generation unit 32 that generates a position information embedded tag, and a tag writing unit 33 that writes the position information embedded tag into document data.

  In the document processing system configured as described above, the position information transmission unit 34 of the control device 2 requests download and transmits the position information acquired by the position information acquisition unit 31 to the document management server 20.

  On the other hand, the position information embedded tag generation unit 32 of the document management server 20 uses the position information transmitted from the control device 2 as a permitted position, and uses a value set by the user or a preset value as a permitted range. And a location information embedded tag having the permission range as parameters. The tag writing unit 33 reads out document data from the document database 30, writes a position information embedded tag in the document data, and transmits the document data to the control device 2.

  The information receiving unit 35 of the control device 2 receives the document data transmitted from the document management server 20 and writes this document data in the storage device 23.

  As described above, the electronic document processing apparatus 10 generates a position information embedded tag having a permission position and a permission range as parameters based on the current position information of the user or the position information input by the user. Write information embedded tags to document data. Further, the electronic document processing apparatus 10 can download the document data with the position information embedded tag from the document management server 20 by transmitting the current position information to the document management server 20. Thereby, the electronic document processing apparatus 10 can obtain document data that can be confirmed only within the range specified by the permitted position and the permitted range. In addition, the electronic document processing apparatus 10 can provide security to document data without requiring a user to perform complicated input operations.

  Note that the electronic document processing apparatus 10 may generate a time information embedded tag having parameters of a permission time and a permission range instead of the permission position and the permission range. The permission time may be a time at the time of tag creation or a time input by the user. In addition, the permission range may be a time range input by the user or a preset time range.

  Furthermore, the electronic document processing apparatus 10 can also generate a tag that includes a permission position and a permission range, a permission time, and a permission range as parameters.

[View document data]
(First browsing mode)
FIG. 6 is a block diagram showing a functional configuration of the control device 2 when browsing document data. The control device 2 includes a position information acquisition unit 31 that acquires position information based on a GPS signal received by the GPS receiver 1 and an embedded information that extracts position information from a position information embedded tag embedded in document data. A position information extraction unit 36, a position information determination unit 37 that determines position information, and a document access control unit 38 that controls access to document data are provided.

  The embedded position information extraction unit 36 reads document data from the storage device 23 and extracts parameters from position information embedded tags embedded in the document data.

  The position information determination unit 37 determines whether the position information acquired by the position information acquisition unit 31 is within the permission range extracted by the embedded position information extraction unit 36.

  FIG. 7 is a diagram for explaining the determination contents of the position information determination unit 37. The position information acquired by the position information acquisition unit 31 is “own position information”. The position information determination unit 37 determines whether or not its own position information is within the permitted range when the permitted position is used as a reference. The document access control unit 38 determines that access is possible when “own position information” is within the permitted range, and access is not possible when it is not within the permitted range, and display of document data is performed according to the determination result. Control aspects.

  FIG. 8A is a diagram illustrating a display mode of document data when access is possible, and FIG. 8B is a diagram illustrating a display mode of document data when access is not possible. The document access control unit 38 displays the content of the document data as it is on the display device 3 when it is accessible, and displays a warning mark indicating that access is impossible on the document when access is impossible. Note that the document access control unit 38 may display only the warning mark or may display nothing instead of displaying the warning mark on the document.

(Second browsing mode)
FIG. 9 is a block diagram showing another functional configuration of the control device 2 when browsing document data. The control device 2 includes a document information control unit 39 instead of the document access control unit 38 shown in FIG. The document information control unit 39 determines “no display restriction” when “own position information” is within the permitted range, and determines “with display limitation” when it is not within the permitted range.

  FIG. 10A is a diagram illustrating a display mode of document data when there is no display limitation, and FIG. 10B is a diagram illustrating a display mode of document data when there is a display limitation. The document information control unit 39 displays the content of the document data as it is on the display device 3 when “no display restriction”, and a part of the content of the document data (for example, confidential information) when “display restriction exists”. A mask is displayed in an area where access restrictions such as are set. Of course, the display is not limited to mask display unless part of the content is visible.

  As described above, the electronic document processing apparatus 10 determines whether or not the user position information is within the range specified by the position information embedded tag written in the document data, and the document is determined according to the determination result. The display mode of data can be controlled.

  Thereby, even if the document data which is a confidential document is taken out, the electronic document processing apparatus 10 can open the document data only at the place where the document data is acquired, so that the security can be strengthened. It is also possible to prevent an authorized person from opening the document data inadvertently.

  Furthermore, the electronic document processing apparatus 10 can perform security work on document data without requiring a troublesome work for the user by automatically performing an authentication work using the position information.

  The electronic document processing apparatus 10 may perform the following processing when the time information embedded tag having the permission time and permission range parameters is embedded in the document data. For example, the electronic document processing apparatus 10 determines whether or not the current time is within the time range specified by the parameter of the time information embedding tag. When the determination is negative, it may be determined that “access is not possible” or “information is restricted”.

  In addition, when the document data includes a position information embedded tag and a time information embedded tag, the electronic document processing apparatus 10 has both its own position information and the current time within the parameters written in the tag. If the determination is affirmative, it may be determined as “accessible” or “no information restriction”. Further, in the above embodiment, the document access control unit 38 and the document information control unit 39 control only the display device 3, but may control the printing device 4.

  As described above, the electronic document processing apparatus 10 restricts the use of the document data depending on the location and time when the document data is received. Therefore, in order to ensure security, the electronic document processing apparatus 10 manages the person who distributes the document data, It is possible to save the trouble of changing the contents of the document data according to the distribution destination.

  Note that the present invention is not limited to the above-described embodiment, and it is needless to say that the present invention can also be applied to a design modified within the scope of the claims.

  For example, the electronic document processing apparatus 10 may accept a change of a parameter written in a tag when access is possible or information is not limited. Further, when the electronic document processing apparatus 10 detects that the user has confirmed the document, the electronic document processing apparatus 10 may release at least one of the restriction on the position and time. The electronic document processing apparatus 10 may change the shape of a predetermined icon or restrict document editing when access is not possible or information is restricted.

  Further, the electronic document processing apparatus 10 may embed a position information embedded tag or a time information embedded tag in the document data when the document data is downloaded or received by e-mail or the like. Further, when the received document data is opened, the tag may be embedded in the document data.

  Further, the electronic document processing apparatus 10 is configured to display the content of information to be displayed according to the permission range when a plurality of permission ranges (first and second permission ranges in the present embodiment) are embedded in the document data. May be changed. For example, when document data is distributed in advance as seminar material and a seminar visitor brings a personal computer as the electronic document processing apparatus 10, the electronic document processing apparatus 10 can perform the following processing.

  FIG. 11 is a diagram showing the relationship between the position information of the user and the first and second permission ranges. FIG. 11A shows the position of the user when the position information is outside the first permission range. When the information is within the first permission range and outside the second permission range, (C) is when the position information of the user is within the second permission range. The first permission range is a place away from the seminar venue, and the second permission range is the range of the seminar venue.

  When the position information of the electronic document processing apparatus 10 is outside the first permitted range, the electronic document processing apparatus 10 displays only the title of the document data and the seminar venue guidance. The electronic document processing apparatus 10 displays guidance in the vicinity of the venue when the position information of the electronic document processing apparatus 10 is within the first permission range and outside the second permission range. The electronic document processing apparatus 10 displays the seminar material when the position information of the electronic document processing apparatus 10 is within the second permission range.

  As described above, when a plurality of permission ranges are embedded in the document data, the electronic document processing apparatus 10 can also change the output content of the document data depending on which permission range the current position is in. . Note that the position information is given as an example of the permitted range, but it is needless to say that it may be time information.

It is a block diagram which shows the structure of the document processing system which concerns on embodiment of this invention. It is a block diagram which shows the functional structure of the control apparatus 2 at the time of document data preparation. It is a figure which shows the state which sets a permission position and a permission range via a map. It is a figure which shows the state by which the several permission position is memorize | stored previously in the memory | storage device. It is a block diagram which shows the functional structure of the control apparatus at the time of document data preparation. It is a block diagram which shows the functional structure of the control apparatus at the time of document data browsing. It is a figure explaining the content of determination of a position information determination part. (A) is a figure which shows the display mode of document data when accessible, (B) is a figure which shows the display mode of document data when inaccessible. It is a block diagram which shows the other functional structure of the control apparatus at the time of document data browsing. (A) is a figure which shows the display mode of document data when there is no display restriction, (B) is a figure which shows the display mode of document data when there is a display restriction. It is a figure which shows the relationship between an own position information, and the 1st and 2nd permission range, (A) is the position information of 1st when (B) is outside the 1st permission range, and (B). Is within the permitted range and outside the second permitted range, (C) is when the position information of the user is within the second permitted range.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 GPS receiver 2 Control apparatus 3 Display apparatus 4 Printing apparatus 20 Document server 22 Storage apparatus 30 Document database

Claims (12)

Information acquisition means for acquiring at least one of position information and time information;
Information embedding means for embedding information acquired by the information acquisition means in the document data as a permission condition for the document data;
A document processing apparatus. The information acquisition means acquires current position information,
The document processing apparatus according to claim 1, wherein the information embedding unit embeds a predetermined range from the current position information acquired by the information acquisition unit in the document data as a permission condition. Get at least one of location information and time information,
A document processing method for embedding the acquired information in the document data as a permission condition for the document data. Obtaining the current position information as the at least one information;
The document processing method according to claim 3, wherein a predetermined range from the acquired current position information is embedded in the document data as a permission condition. Information acquisition means for acquiring at least one of position information and time information;
A determination unit that determines whether the information acquired by the position information acquisition unit satisfies a permission condition embedded in the document data;
Output control means for controlling the output mode of the document data based on the determination result of the determination means;
A document processing apparatus. The information acquisition means acquires current position information,
The document processing apparatus according to claim 5, wherein the determination unit determines whether or not the current position information acquired by the position information acquisition unit is within a range indicated by the permission condition. The document processing apparatus according to claim 5, wherein the output control unit outputs an image in a mode corresponding to a determination result of the determination unit for a predetermined portion of the document data. The output control unit outputs the document data when it is determined that the acquired information satisfies the permission condition by the determination unit, and the information acquired by the determination unit does not satisfy the permission condition. The document processing apparatus according to any one of claims 5 to 7, wherein output of the document data is prohibited when it is determined. Obtain at least one piece of location information and time information,
Determining whether the acquired information satisfies a permission condition embedded in the document data;
A document processing method for controlling an output mode of the document data based on the determination result. Obtaining the current position information as the at least one information;
The document processing method according to claim 9, wherein it is determined whether or not the acquired current position information is within a range indicated by the permission condition. The document processing method according to claim 9 or 10, wherein an image is output in a manner corresponding to the determination result for a predetermined portion of the document data. The document data is output when it is determined that the acquired information satisfies the permission condition, and the output of the document data is prohibited when it is determined that the acquired information does not satisfy the permission condition. The document processing method according to any one of claims 9 to 11.

Images