JP2006243819A - Information management system, information management apparatus, information management method, program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information management apparatus having the same operation authority as that of information at a copy source to manage information even when a part of or a whole of the information is copied. <P>SOLUTION: The apparatus includes: an information storage means for storing one or more pieces of information by relating identifiers identifying information (hereinafter, referred to as information identifier) to the information (hereinafter, referred to as storage information); and an access right recording means recording operation authorities set for each pair of the information identifiers of the information identifiers and identifiers of users and identifiers of users. The apparatus acquires storage information similar to the information required from a client and stored in the storage means (hereinafter, refereed to as similar information) from the storage means in the descending order of their similarities, refers to the access right recording means to count the number of items of the similar information the operation authorities of which are not owned by the users. When the counted number of the items does not exceed the preset threshold information, the apparatus presents the information required from the client, and in contrast otherwise, it refuses the presentation of the required information. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information management system, an information management device, an information management method, a program, and a recording medium, and more particularly to management of information that needs to be restricted in access.

In document management systems and document search systems, access rights are set for documents stored in the system to improve security, and certain operations such as browsing and updating are not allowed to unauthorized users. Such a response has become common.
On the other hand, in document retrieval, there are many documents that calculate the similarity of documents and present the results in descending order of the similarity with respect to the retrieval conditions.
However, document similarity and access control are just individual elements that make up the system. Even if they are used at the same time, only the similarity is used to narrow down the documents for checking access control. is there.
For example, in Patent Document 1, a list of document candidates indicating an order of similarity of document information that matches a search request from a client terminal with reference to index information for searching each document information group stored in a database Based on the access right control information corresponding to each document information stored in the database and the user authentication result, the document information to be discriminated is sequentially determined by the user from the first document information included in the document candidate list. It is determined whether or not the document information can be browsed. When the number of document information determined to be viewable document information by the user reaches a predetermined number, a list of document information determined to be viewable document information is displayed as a first search result list on the client terminal. provide. As a result, an information retrieval system capable of efficiently performing a search considering the database access right is realized.
However, even if such a method is adopted, it is still necessary to set an access right for each document.
Documents are generally divided into internal elements by bibliographic items such as titles and creators, and body delimiters such as chapters, sections, and paragraphs. For example, Patent Document 2 discloses a method of performing control in a combination of a document type and a job authority regarding a method of performing access control with respect to an internal element of a document.
In this patent document 2, a registered document is stored, an access authority is set according to an individual job authority, access to the document is controlled, and unauthorized access is rejected. Thus, not only can the confidentiality of the document be maintained, but also the forgery of the document can be prevented. If the access right is changed according to the state of the document, not only the approved completed document can be protected, but also the unapproved document can be appropriately protected.
JP 2004-185095 A JP-A-6-4530

However, even if access restrictions are applied to certain information or documents, if some of them are copied to other information or documents and used, the same access restrictions can be applied to the copy destination document. The user who copied the password must set the access right.
In addition, even if access restrictions are applied to the document itself, there may be cases where the same access control is not required for the copy destination document when a portion that does not have a problem even if copied and published is copied to another document. If the decision is left to the copying user, correct access control cannot be performed.
The present invention has been made in consideration of the above-described circumstances, and an information management system that manages to have the same operation authority as that of information at the copy source even when a part or all of the information is copied, An object is to provide an information management device, an information management method, a program, and a recording medium.

In order to solve the above-described problem, the invention according to claim 1 is an information management system including at least a server and a client, wherein the server associates an information identifier that is an identifier for identifying information with stored information. Information storage means for storing one or more pieces of information, access right storage means for storing operation authority set for each set of the information identifier and the user identifier, and storage information similar to information Similar information acquisition means for acquiring similar information from the information storage means in descending order of similarity and information in the information storage means requested by the client using the similar information acquisition means If the user counts the number of similar information that the user does not have operating authority with reference to the access right storage means and the number does not exceed a preset threshold value. The, characterized in that it comprises a storage information reference means for presenting the information requested by the client.
The invention according to claim 2 is an information management system including at least a server and a client, wherein the server includes an information identifier that is an identifier for identifying information and an identifier for each internal element that is a part of the stored information. Information storage means for storing one or more pieces of information by associating a certain internal element identifier with the information of the internal element, and an operation authority set for each set of the user identifier, the information identifier, and the internal element identifier Access right storage means for storing information, similar information acquisition means for acquiring similar internal elements that are internal elements similar to the internal elements of information from the information storage means in descending order of similarity, and the information requested by the client For each internal element of information in the storage means, the similar information acquisition means is used to acquire a similar internal element, and the access right storage means is Accordingly, the number of similar internal elements to which the user has no authority is counted, and if the number exceeds a preset threshold, it is assumed that the internal element has no reference operation authority, and the client's It is characterized by comprising stored information reference means for removing and presenting requested information.
According to a third aspect of the present invention, in the information management system according to the first or second aspect, the information storage unit stores, in the stored information, access control information that is information used only for access control. The similar information acquisition means acquires the similar information using the access control information.
According to a fourth aspect of the present invention, in the information management system according to the first, second, or third aspect, the information storage unit stores and stores information represented by a character string, and the similar information acquisition unit includes the information The character string information stored in the information storage means is acquired in order from the information with the highest similarity.
According to a fifth aspect of the present invention, in the information management system according to the first, second, or third aspect, the information accumulating unit accumulates information that is represented by an image, and the similar information obtaining unit includes the information It is characterized in that the image information stored in the storage means is acquired in descending order of information.

The invention of the information management device according to claim 6 is an information storage means for storing one or more pieces of information by associating an information identifier, which is an identifier for identifying information, with stored information, an information identifier, and a user's An access right storage unit that stores operation authority set for each set of identifiers, similar information acquisition unit that acquires similar information that is storage information similar to information from the information storage unit in descending order of similarity, and a client For the requested information in the information storage means, the similar information acquisition means is used to acquire similar information, and the access right storage means is referred to, so that the number of similar information for which the user has no operation authority. And stored information reference means for presenting information requested by the client when the number does not exceed a preset threshold value.
The invention of the information management apparatus according to claim 7 includes: an information identifier that is an identifier for identifying information; an internal element identifier that is an identifier for each internal element that is a part of the stored information; and information on the internal element Correspondingly, information storage means for storing one or more pieces of information, access right storage means for storing operation authority set for each set of user identifier, information identifier, and internal element identifier, and internal elements of information Similar information acquisition means for acquiring similar internal elements that are similar internal elements in descending order of similarity from the information storage means, and for each of the internal elements of information in the information storage means requested by the client, A similar internal element is acquired using the similar information acquisition means, the number of similar internal elements to which the user is not authorized is counted with reference to the access right storage means, and the number is preset. If it exceeds the threshold value, that there is no operating authority of the reference to the internal elements, characterized in that it comprises a storage information reference means for presenting removed from the request information of the client.

According to an eighth aspect of the present invention, there is provided an information management method comprising: an information storage means for storing one or more pieces of information by associating an information identifier that is an identifier for identifying information with stored information; Access right storage means for storing the operation authority set for each set of identifiers, and for the information in the information storage means requested by the client, similar information that is similar to the information is stored. Acquired from the information storage means in descending order of similarity, and refers to the access right storage means to count the number of similar information for which the user has no operation authority, and the number does not exceed a preset threshold In this case, the information requested by the client is presented.
The invention of the information management method according to claim 9 includes an information identifier that is an identifier for identifying information, an internal element identifier that is an identifier for each internal element that is a part of the stored information, and information on the internal element. Correspondingly, the information storage means for storing one or more pieces of information, and the access right storage means for storing the operation authority set for each set of the user identifier, the information identifier, and the internal element identifier, For each of the internal elements of the information in the information storage means requested from, obtain similar internal elements that are similar to the internal elements of the information from the information storage means in descending order of similarity, Referring to the access right storage means, the user counts the number of similar internal elements to which the user has no authority. If the number exceeds a preset threshold, the internal element does not have the authority to operate the reference. As, characterized by presenting removed from the request information of the client.
The invention according to claim 10 is a program for causing a computer to realize the function of the information management system according to any one of claims 1 to 5 or the function of the information management apparatus according to claim 6 or 7. is there.
The invention described in claim 11 is a computer-readable recording medium in which the program according to claim 10 is recorded.

According to the present invention, even when part or all of the information is copied, the operation authority can be set in the same manner as the information of the copy source.
Therefore, by finding information with high similarity to the information to be accessed and using the operation authority set in that information instead, it is possible to appropriately protect even information without operation authority. Confidentiality is improved as a whole management.
In addition, it is possible to set an operation authority for each internal element of information individually and appropriately protect even information that is partially confidential.
Further, by registering in advance information only for indicating contents to be subjected to access restriction separately from the accumulated information, fine restriction can be performed.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.
<Embodiment 1>
FIG. 1 is a block diagram showing a functional configuration of the information management system according to the first embodiment of the present invention. In FIG. 1, an information management system includes one or more client terminals 10 and an information management server (information management apparatus) 20 connected via a computer network such as the Internet / intranet. When the use of the system is started, the user identifier is transmitted to the server 20, and then an operation request is specified for the information group managed by the server 20.
The server 20 includes an access right storage unit 21, a user information storage unit 22, an information storage unit 23, a stored information reference unit 24, and a similar information acquisition unit 25.
The user information storage means 22 stores information about users who can use this information management system. This information includes a user identifier (ID) set for each user, a user name, an authentication key, such as a password. At the start of use of the information management system, an authentication process is executed with the user information, whereby the user identifier is transmitted from the client terminal 10 to the server 20.
The information storage means 23 can be realized by using, for example, a relational database system. As illustrated in FIG. 2, the data items of the information storage unit 23 include information identifiers, information titles, information contents, and the like set for each information.
This content includes what is expressed by a character string and what is expressed by an image.

The access right storage means 21 can be realized using, for example, a relational database system. As illustrated in FIG. 3, the data items of the access right storage means 21 are made up of user identifiers, stored information identifiers, and numerical values representing authorized operation details. This indicates the authority that can be operated by the user indicated by the “user identifier” with respect to the information indicated by the “identifier of stored information” by “numerical value indicating the operation contents with authority”.
In addition, as illustrated in FIG. 4, the authority of one operation is a numerical value expressed by a power of two, and the “numeric value indicating the operation content with authority” corresponds to each operation permitted for each user. It is calculated as the sum of the numerical values to be added. For example, if the “numeric value representing the authorized operation content” is “35”, the “creation” of the information, the “detail display” of the information content, and the “list display” when creating the list of search information and the like are displayed. Have each authority.
If the information is represented by a character string, the similar information acquisition unit 25 acquires the information in descending order of the similarity of the character string using a known full-text search engine capable of performing a concept search. Further, if the information is represented by an image, the information is acquired in descending order of information using a known similar image search system.
The stored information reference unit 24 acquires the operation authority for each stored information from the access right storage unit 21 using the user identifier sent from the client terminal 10. For example, in FIG. 3, if the user identifier is “Akai”, the operation authority is “255” for the stored information “040014”, and the operation authority is “141” for the stored information “040015”. Is.
Next, when a reference request is received from the client terminal 10, if the user does not have the authority to operate the reference target information, the user terminal rejects the request. The storage information to be acquired is acquired, and the storage information similar to the acquired storage information is acquired using the similar information acquisition means 25.
Finally, it is determined whether or not the user has the reference operation authority for the acquired similar information, and the number of similar information without the operation authority is counted. If the obtained number exceeds a preset threshold value, a message to reject the reference request is transmitted to the client terminal 10. On the other hand, if the obtained number does not exceed a preset threshold, the information requested by the user is transmitted to the client terminal 10.

The processing procedure of the stored information reference means 24 will be described in detail using the flowchart of FIG.
The user identifier transmitted from the client terminal 10 is obtained (step S10), and the access authority storage means 21 is referred to obtain the operation authority for each stored information corresponding to the user identifier (step S11).
From step S13 to S23, processing is repeated until a disconnection request is received from the client terminal 10 (step S12). Normally, a disconnection request does not come, but when it comes, the process is interrupted even during the repetition, and a message to the effect of the interruption is transmitted to end the process.
An identifier of information requested to be referred from the client terminal 10 is obtained (hereinafter, this identifier is referred to as a reference information identifier) (step S13).
With reference to the access right storage means 21, the operation contents with authority are acquired using the user identifier and the reference information identifier as keys, and if there is no reference authority in this authority (NO in step S14), the client terminal 10 A message to the effect that the reference request has been rejected is transmitted to end the processing (step S23).

On the other hand, if the user has the reference authority (YES in step S14), the similar information acquisition unit 25 is used to acquire an identifier of information similar to the information indicated by the reference information identifier (step S15).
The obtained similar information is repeatedly processed from step S17 to S20 (step S16).
First, the access right storage means 21 is referred to obtain the information identifier of the similar information (step S17), and the operation authority having the authority corresponding to the information identifier of the similar information and the identifier of the user has the reference authority. It is checked whether there is any (step S18).
If there is no reference authority (NO in step S18), 1 is added to the number of similar information without reference authority (step S19).
Steps S16 to S20 are repeated until the similar information is exhausted (step S20).
If the number of similar information without reference authority is within a preset threshold range (YES in step S21), the content of the information indicated by the reference information identifier is transmitted to the client terminal 10 (step S22), and the client terminal Return to step S12 to process the next request from.
On the other hand, if the number of similar information without reference authority is not within a preset threshold range (NO in step S21), a message indicating that the reference request is rejected is transmitted to the client terminal 10 and the process is terminated. (Step S23).
By configuring the first embodiment as described above, even if information for which operation authority is not set is used, if the operation authority is set for information having a high degree of similarity, the operation authority is used instead. Confidentiality is improved throughout the management system.

<Embodiment 2>
The first embodiment performs the entire information when searching for similar information. However, in the second embodiment, when the information can be decomposed into one or more parts (hereinafter, internal elements), the similar information is I search for each internal element.
Since the functional configuration of the second embodiment is the same as that of the first embodiment (FIG. 1), only the parts that are different in the realization method will be described.
The information storage means 23 can use a relational database system as in the first embodiment, but has an information identifier representing the entire information and an internal element identifier for each internal element in the information, and a title and a title for each internal element. The contents of the internal elements are associated with each other (see FIG. 6). By adopting such a data structure, it is possible to refer to each internal element constituting the information.
For example, in FIG. 6, the information indicated by the information identifier “040014” is composed of three internal elements of internal element identifiers “1”, “2”, and “3”. For example, the internal element of the internal element identifier “1” is composed of a title “Introduction” and a content “What is information retrieval ...”.
In addition, the access right storage means 21 stores the operation contents with the authority corresponding to the information identifier representing the entire information, and the information identifier representing the entire information and the internal element for each internal element in the information. Corresponding to the identifier, “authorized operation content” is also recorded (see FIG. 7).
The similar information acquisition unit 25 searches for similar information (internal elements) using the target as an internal element.
The stored information reference means 24 obtains the operation authority for each information from the access right storage means 21 using the user identifier sent from the client terminal 10, and rejects it when there is no reference operation authority. Return to the client terminal 10.
On the other hand, if there is an authority, information corresponding to the information identifier requested by the client terminal 10 is acquired from the information storage means 23, disassembled into internal elements, and similar internal information is acquired by the similar information acquisition means 25 for each internal element. Get the element.
Next, the operation authority is acquired from the access right storage means 21 for each of the similar internal elements, and the number of similar internal elements having no reference operation authority is counted. When the obtained number is less than the preset number, the identifier of the internal element is recorded.
When similar internal elements have been examined for all internal elements, only the content corresponding to the identifier of the recorded internal element is presented to the client terminal 10 among the information requested by the user.

The processing procedure of the stored information reference means 24 will be described in detail using the flowchart of FIG.
The user identifier transmitted from the client terminal 10 is obtained (step S30), and the operation authority for each stored information corresponding to the user identifier is acquired with reference to the access right storage means 21 (step S31).
From step S33 to S46, processing is repeated until a disconnection request is received from the client terminal 10 (step S32). Normally, a disconnection request does not come, but when it comes, the process is interrupted even during the repetition, and a message to the effect of the interruption is transmitted to end the process.
An identifier of information requested to be referred from the client terminal 10 is obtained (hereinafter, this identifier is referred to as a reference information identifier) (step S33).
With reference to the access right storage means 21, the operation contents with authority are acquired using the user identifier and the reference information identifier as keys, and if there is no reference authority in this authority (NO in step S34), the client terminal 10 A message to the effect that the reference request has been rejected is transmitted to end the processing (step S46).
On the other hand, if the user has reference authority (YES in step S34), the processing is repeated from step S36 to S43 for each internal element identifier of the information indicated by the reference information identifier (step S35).

Using the similar information acquisition unit 25, the identifier of the internal element similar to the content of the internal element indicated by the internal element identifier is acquired (step S36).
The access right storage means 21 is referred to obtain the information identifier of the obtained similar internal element (step S37), and the “authoritative operation” corresponding to the information identifier, the similar internal element identifier and the user identifier is obtained. It is checked whether or not the “content” has a reference authority (step S38).
If the similar internal element does not have reference authority (NO in step S38), 1 is added to the number of similar internal elements without reference authority (step S39).
Steps S36 to S40 are repeated until similar internal elements are exhausted (step S40).
If the number of similar internal elements without reference authority is within a preset threshold range (YES in step S41), the internal element identifier is temporarily recorded as an internal element with reference authority (step S42). ).
Steps S35 to S43 are repeated until the internal elements are exhausted (step S43).
When an internal element with reference authority is recorded (YES in step S44), the content of the recorded internal element with reference authority is transmitted to the client terminal 10 (step S45), and the next from the client terminal 10 is transmitted. Return to step S32 to process the request.
On the other hand, if an internal element with reference authority is not recorded (NO in step S44), a message indicating that the reference request is rejected is transmitted to the client terminal 10 and the process is terminated (step S46).
By configuring the second embodiment as described above, even when information for which no operation authority is set is set, the operation authority is individually set for the internal element of the information, and the operation authority is set for the internal element having a high degree of similarity. Is set, it is possible to appropriately protect even partially confidential information by using the operation authority instead.

<Embodiment 3>
The third embodiment is different from the first and second embodiments described above only in that the contents to be restricted are specified, and the functional configuration of the third embodiment is the same as in the first and second embodiments. Since it is the same as (FIG. 1), only the part with a different realization method is demonstrated.
The information storage means 23 can use a relational database system, but differs in that it stores contents for controlling access in the information (hereinafter referred to as access control information) (see FIG. 9). FIG. 9A shows an example in which the access control information is held in the information storage unit of the first embodiment. FIG. 9B shows an example in which access control information is held in the information storage unit of the second embodiment.
The similar information acquisition unit 24 determines whether there is a similar part by comparing the information requested from the client terminal 10 with the access control information recorded in the information storage unit 23.
By configuring the third embodiment as described above, it is possible to register in advance information only for indicating the contents to be restricted from access, in addition to the accumulated information, so that fine restrictions can be made.

The present invention is not limited only to the above-described embodiments. By making each function constituting the server (document management apparatus) of the above-described embodiment into a program and writing it in a recording medium in advance, storing these programs in a computer memory or storage device, and executing them Needless to say, the object of the present invention is achieved. In this case, the program itself read from the recording medium realizes the functions of the above-described embodiment, and the program and the recording medium recording the program also constitute the present invention.
In addition, the program includes a case where the functions of the above-described embodiment are realized by processing in cooperation with an operating system or another application program based on an instruction of the program.
Note that the program for realizing the functions of the above-described embodiments includes a disk system (for example, a magnetic disk, an optical disk, etc.), a card system (for example, a memory card, an optical card, etc.), and a semiconductor memory system (for example, a ROM, a nonvolatile memory). Etc.) and a recording medium of any form such as a tape system (for example, magnetic tape, cassette tape, etc.). Alternatively, the program stored in the storage device may be directly supplied from the server computer via the network. In this case, the storage device of this server computer is also included in the recording medium of the present invention.
As described above, by programming and distributing the functions of the above-described embodiment, the cost can be reduced, and the portability and versatility can be improved.

It is a block diagram which shows the function structure of the information management system which concerns on Embodiment 1 of this invention. It is a figure which shows the example of a data structure of the information storage means which concerns on Embodiment 1. FIG. It is a figure which shows the example of a data structure of the access right memory | storage means which concerns on Embodiment 1. FIG. It is a figure which shows the example of the operation content table used with an access right memory | storage means. 4 is a flowchart showing a processing procedure of accumulated information reference means according to the first embodiment. It is a figure which shows the example of a data structure of the information storage means which concerns on Embodiment 2. FIG. It is a figure which shows the example of a data structure of the access right memory | storage means which concerns on Embodiment 2. FIG. It is a flowchart which shows the process sequence of the stored information reference means which concerns on Embodiment 2. FIG. It is a figure which shows the example of a data structure of the information storage means which concerns on Embodiment 3. FIG.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Client terminal, 20 ... Server for information management (information management apparatus), 21 ... Access right storage means, 22 ... User information storage means, 23 ... Information storage means, 24 ... Storage information reference means, 25 ... Similar information Acquisition means.

Claims (11)

In an information management system comprising at least a server and a client, the server is
Information storage means for storing one or more pieces of information by associating information identifiers, which are identifiers for identifying information, and storage information, and operation authority set for each set of the information identifier and the user identifier Access right storage means, similar information acquisition means for acquiring similar information that is storage information similar to information from the information storage means in descending order of similarity, and information in the information storage means requested by the client. On the other hand, the similar information is acquired using the similar information acquisition means, the access right storage means is referred to, the number of similar information for which the user has no operation authority is counted, and the number is preset. An information management system comprising: stored information reference means for presenting information requested by the client when the threshold value is not exceeded. In an information management system comprising at least a server and a client, the server is
Information that stores one or more pieces of information by associating an information identifier that is an identifier for identifying information, an internal element identifier that is an identifier for each internal element that is a part of the accumulated information, and the information of the internal element Storage means, access right storage means for storing operation authority set for each set of user identifier, information identifier, and internal element identifier, and a similar internal element that is similar to the internal element of information. Similar information acquisition means for acquiring from the storage means in descending order of similarity and internal elements of the information in the information storage means requested by the client, similar internal elements are obtained using the similar information acquisition means. Obtain and refer to the access right storage means, count the number of similar internal elements for which the user is not authorized, and if the number exceeds a preset threshold, That there is no operating authority of reference element, the information management system characterized by comprising a storage information reference means for presenting removed from the request information of the client.   3. The information management system according to claim 1, wherein the information storage unit can store access control information, which is information used only for access control, with respect to the stored information, and the similar information acquisition unit. Is an information management system characterized in that similar information is obtained using the access control information.   4. The information management system according to claim 1, wherein the information accumulation unit accumulates information represented by a character string, and the similar information acquisition unit includes a character string stored in the information accumulation unit. An information management system characterized in that information is acquired in descending order of information similarity.   4. The information management system according to claim 1, 2, or 3, wherein the information storage means stores information including information represented by an image, and the similar information acquisition means stores image information stored in the information storage means. An information management system characterized in that information is acquired in descending order of similarity.   Information storage means for storing one or more pieces of information is associated with information identifiers that are identifiers for identifying information and stored information, and operation authority set for each pair of information identifiers and user identifiers is stored. Access information storage means, similar information acquisition means for acquiring similar information that is storage information similar to information from the information storage means in descending order of similarity, and information in the information storage means requested by a client The similar information is acquired using the similar information acquisition means, the access right storage means is referred to, the number of the similar information that the user does not have the operation authority is counted, and the threshold is set in advance. An information management apparatus comprising: accumulated information reference means for presenting information requested by the client if not exceeded.   Information that stores one or more pieces of information by associating an information identifier that is an identifier for identifying information, an internal element identifier that is an identifier for each internal element that is a part of the accumulated information, and the information of the internal element Storage means, access right storage means for storing operation authority set for each set of user identifier, information identifier, and internal element identifier, and a similar internal element that is similar to the internal element of information. For each of the similar information acquisition means for acquiring from the storage means in descending order of similarity and the internal elements of the information in the information storage means requested by the client, the similar information acquisition means is used to acquire similar internal elements. Then, referring to the access right storage means, the number of similar internal elements to which the user is not authorized is counted, and if the number exceeds a preset threshold, the internal elements That there is no operating authority of reference, the information management apparatus characterized by comprising a storage information reference means for presenting removed from the request information of the client.   Information storage means for storing one or more pieces of information is associated with information identifiers that are identifiers for identifying information and stored information, and operation authority set for each pair of information identifiers and user identifiers is stored. Access right storage means, and for the information in the information storage means requested by the client, similar information that is storage information similar to the information is acquired from the information storage means in descending order of similarity, Referring to the access right storage means, the user counts the number of similar information for which the user has no operation authority, and presents the information requested by the client when the number does not exceed a preset threshold. An information management method characterized by:   Information that stores one or more pieces of information by associating an information identifier that is an identifier for identifying information, an internal element identifier that is an identifier for each internal element that is a part of the accumulated information, and the information of the internal element Storage means; access right storage means for storing operation authority set for each set of a user identifier, an information identifier, and an internal element identifier; and internal information stored in the information storage means requested by a client For each element, a similar internal element that is an internal element similar to the internal element of the information is acquired from the information storage unit in descending order of similarity, and the user refers to the access right storage unit to If the number of similar internal elements without a count exceeds a preset threshold value, it is assumed that the internal element does not have reference operation authority, and the information requested by the client is Information management method, characterized in that the presentation be removed from.   The program for making a computer implement | achieve the function of the information management system in any one of Claims 1 thru | or 5, or the function of the information management apparatus of Claim 6 or 7.   A computer-readable recording medium on which the program according to claim 10 is recorded.

Images