JP2006259804A - Electronic file management device, and access privilege management method for electronic file - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To easily set an access privilege with respect to a folder having a hierarchical structure, and electronic files held in the folder, and to immediately apply the set access privilege. <P>SOLUTION: The electronic file management device 1 is provided with: a personal identification means 25 for authenticating a preset user; an access privilege specifying means 30 for specifying the access privilege with respect to the folder and the electronic files in accordance with an instruction of the authenticated user; an access privilege writing means 40 for writing the specified access privilege into an access privilege management table 45; and a reference instructing means for instructing an update of reference with respect to an application program referring to the access privilege management table in response to writing to the access privilege management table 45. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic file management apparatus and an electronic file access right management method.

  2. Description of the Related Art Conventionally, in a file management system having a hierarchical structure, access rights to folders and electronic files stored in the folders are as shown in Windows (registered trademark) manufactured by Microsoft Corporation, Patent Document 1 and Patent Document 2 below. The access right management table in which the access right is written is managed. The access right setting method managed by such an access right management table is selected for an electronic file or folder by an administrator who has logged in to the file management system with a predetermined authority within a predetermined authority range. It was set by selecting a predetermined access right from among possible access rights.

Japanese Patent Laid-Open No. 2003-30026 JP 2004-46460 A

  However, in the conventional method, when the access right to the folder or the electronic file is changed and the access right management table is updated, the application program that refers to the access right management table receives the update of the access right management table, In order to apply the changed access right, it is necessary to restart the file management system in addition to the login operation and logout operation of the user of the electronic file management apparatus. In addition, to set access rights for each electronic file or folder, call the screen for setting the access rights for each electronic file or folder to be set by a predetermined operation, and set the predetermined access right each time. The troublesome operation to do was necessary.

In order to solve the above-described problems, an electronic file management apparatus according to the present invention stores electronic files in folders having a hierarchical structure, manages the folders and the electronic files, and manages the folders and the electronic files. An electronic file management apparatus that manages access rights to a file using an access right management table that can be referred to from an application program, authenticating whether or not the user is a preset user, and in accordance with instructions from the authenticated user Receiving an access right defining means for defining an access right to the folder or the electronic file, an access right writing means for writing the defined access right to the access right management table, and writing to the access right management table , The application that refers to the access right management table. Relative Deployment program, characterized in that it comprises a reference instruction means for instructing the update of the reference.
According to this invention, the access right for the folder or electronic file is defined by the user authenticated by the authentication means and then written in the access right management table. In response to this writing, the reference instruction means instructs the application program that refers to the access right in the access right management table to refer to the written access right. Accordingly, the access right can be validated only by an operation for defining the access right, without performing a logout or restart procedure for the electronic file management apparatus.

In the present invention, a display means for displaying an image, and a first interface means for referring to the access right management table and displaying the state of the hierarchical structure in which the folder and the electronic file are managed as an image on the display means When the folder or electronic file on the image is designated, it is displayed superimposed on the vicinity of the designated folder or electronic file, and access that can be defined for the designated folder or electronic file. It is preferable to further comprise second interface means for displaying the rights in a selectable manner.
In the present invention, the access right defining means prescribes the access right selected by the second interface means for the folder or the electronic file designated on the first interface means. It is preferable.
According to this invention, by designating a folder or electronic file for setting access rights, selectable access rights are displayed in the vicinity of the designated folder or electronic file, and by selecting the displayed access rights, The selected access right is set for the instructed folder or electronic file. Accordingly, it is possible to visually and easily set the access right for the folder or the electronic file.

In the present invention, the second interface means selects the access right to be set for a folder or an electronic file excluding the folder or the electronic file designated on the first interface means. Is preferred.
According to the present invention, it is possible to easily set an access right for a folder or electronic file excluding a designated folder or electronic file.

  In this invention, the access right includes a disclosure right for disclosing the designated folder and the electronic file, a print right for printing the contents of the designated electronic file, and a change right for rewriting the contents of the designated electronic file. In addition, at least one of a deletion right to delete the designated folder or electronic file and a copy creation right to create a copy of the designated folder or electronic file may be included.

In order to solve the above-described problem, an electronic file access right management method according to the present invention accommodates and stores an electronic file in a folder having a hierarchical structure, manages the folder and the electronic file, and And an access right management method for an electronic file that manages an access right to the electronic file in an access right management table that can be referred to from an application program, the selecting step for selecting a folder or an electronic file, and the selected folder or electronic file An access right defining step for defining an access right to be set for the file; an authentication step for authenticating whether or not the user is a preset user; and the access right management table indicating the access right selected by the authenticated user Writing to the access right management table Receiving inclusive can, with respect to the application program referring to the access right management table, characterized in that it comprises a reference instruction step of instructing updating of the reference.
According to this invention, the access right for the folder or electronic file is defined by the user authenticated in the authentication step, and then written in the access right management table. In the reference instruction step, the application program that receives the writing and refers to the access right in the access right management table is instructed to refer to the written access right. Accordingly, the access right can be validated only by an operation for defining the access right, without performing a logout or restart procedure for the electronic file management apparatus.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
(Embodiment)

FIG. 1 is an external configuration diagram showing an external appearance of an electronic file management apparatus 1 according to the present embodiment. This electronic file management apparatus 1 has an appearance substantially similar to that of a portable information display terminal. That is, on the surface of the electronic file management apparatus 1, a display body 115 for displaying information, an input key 145, and a fingerprint sensor 122 are provided. Further, a card I / F (Inter Face) 130 to which a media card 135 (FIG. 2) as a storage medium can be attached is provided on the upper side surface of the electronic file management apparatus 1. Here, the input key 145 indicates a direction input key 145A for indicating the position of the cursor 165 (FIG. 5) on the display body 115, such as a computer mouse, and page turning of content displayed on the display body 115. It consists of an instruction input key 145B. Further, the fingerprint sensor 122 makes a fingerprint for authenticating whether or not the user is a predetermined individual by contacting the user's finger with the detection surface in accordance with a message displayed on the display body 115 as necessary. It is an input means.
In such a configuration, the electronic file management device 1 manages a folder constructed in a hierarchical structure in a storage area of a storage medium or an external storage device, which will be described later, or an electronic file stored under such a folder. At the same time, the hierarchical structure of the folder and the content of the content included in the electronic file are displayed on the display body 115 in accordance with a user instruction.

<Hardware configuration of electronic file management device>
FIG. 2 is a diagram showing a hardware configuration of the electronic file management apparatus 1, which will be described with reference to this figure. The electronic file management apparatus 1 includes a CPU (Central Processing Unit) 100, a RAM (Random Access Memory) 105, a ROM (Read Only Memory) 125, a card I / F 130, an input I / F 140, a display controller 110, and an HDD controller 120. It is prepared for. These units are connected to each other by a bus 150 so that signals can be transmitted and received.
The CPU 100 reads various programs and data such as a basic control program stored in the ROM 125 and an application program stored in an HDD (Hard Disk Drive) 123 which is an external storage device connected to the ROM 125 and the HDD controller 120. These various programs and data are expanded and executed in a main memory area provided in the RAM 105, and control of each unit included in the electronic file management apparatus 1 is executed.
The display controller 110 drives the display body 115. The display body 115 can adopt a general liquid crystal display body or a memory display body such as an electrophoretic method or a cholesteric liquid crystal. The card I / F 130 exchanges information with the loaded media card 135. Further, the input I / F 140 inputs information from the input key 145 and the fingerprint sensor 122. The fingerprint sensor 122 is a device that optically detects a fingerprint of a finger in contact with the detection surface and converts it into an electrical signal.

<Functional configuration of electronic file management device>
FIG. 3 is a diagram illustrating a functional configuration of the electronic file management apparatus 1. A functional configuration of the electronic file management apparatus 1 will be described with reference to FIG. 5 which is a display screen of the file operation means 15 displayed on the display body 115.
The electronic file management apparatus 1 includes an operation input unit 10, a file operation unit 15, an access right selection unit 20, a display unit 35, an access right defining unit 30, a personal authentication unit 25, and an access right writing unit 40. The access right management table 45 and the access right reading means 50 are provided.
The display means 35 displays the input information on the display body 115.
The operation input unit 10 inputs an operation instruction to the file operation unit 15 via the direction input key 145A and the instruction input key 145B.
As shown in FIG. 5A, the file operation means 15 is a user interface 160 that is an interface means for displaying the electronic file group 65 and the folder group 60 capable of storing the electronic file group 65 in a tree-like hierarchical structure. The folder having a hierarchical structure constructed in the storage device 55 such as the HDD 123 and the media card 135 and the file stored in the folder are displayed on the screen of the display means 35, and these folders and files are managed. It is an application program. The file operation means 15 acquires information on access rights of folders and files via an access right reading means 50 described later, and the obtained access rights are immediately applied to the user interface 160. Yes.
As shown in FIG. 5B, the access right selection means 20 includes the other user interface 170 as an interface means, and is a tool for selecting an access right to be set for a folder or file selected by the user. . The other user interface 170 is displayed superimposed on the vicinity of the image image of the folder or electronic file selected by the user on the one user interface 160 and can be selected for the selected folder or electronic file. Is displayed. Details of the display of the access right will be described later. The user selects an access right to be set from selectable access rights, and information on the selected access right is sent to the access right defining means 30.

The personal authentication means 25 determines whether or not the user who uses the electronic file management apparatus 1 is a preset user and authenticates the user. In the present embodiment, the fingerprint sensor 122 inputs a user's fingerprint pattern and compares it with a pre-registered regular user's fingerprint pattern for determination. In addition to the fingerprint authentication method, the personal authentication means 25 can employ an iris iris pattern authentication method, a password input or a personal identification method using a physical key.
The access right defining means 30 defines the access right to be set based on the authentication result of the personal authentication means 25, the access right selected by the access right selecting means 20, and the currently set access right. That is, when the user authenticated by the personal authentication means 25 selects the access right by the access right selection means 20, the access right is set so as to overwrite the currently set access right with the selected access right. Information on the selected access right and a write instruction are sent to the right writing means 40. On the other hand, if the personal authentication unit 25 fails to authenticate, a message indicating that the access right cannot be set is displayed on the display unit 35.
The access right writing unit 40 writes the specified access right in the access right management table 45 in accordance with the instruction from the access right defining unit 30. The access right reading means 50 reads information on the access right written in the access right management table 45, and gives a read instruction to other functional units as necessary. Details will be described later.

The access right management table 45 is configured in an electronic file format and is stored in a predetermined area of the HDD 123 or the media card 135. Only the access right writing means 40 can write to the electronic file. Therefore, only the access right defining means 30 can instruct writing of the access right.
Similarly, the access right management table 45 can be read only by the access right reading means 50. The access right reading means 50 is configured to be called as needed from an application program that can be driven by the electronic file management apparatus 1. Accordingly, when an application program such as the file operation unit 15 is started, first, the access right management table 45 is read from the access right reading unit 50, and the access right set in the access right management table 45 is used as an initial value. Programmed to reference.
The access right writing unit 40 is configured to notify the access right reading unit 50 of a change in access right when the access right is written in the access right management table 45. In response to this notification, the access right reading means 50 instructs the reference source referring to the access right, that is, the application program such as the file operation means 15 to refer to the changed access right and apply it. It also has a function as an instruction means. Then, the application program that has received the reference instruction obtains access right information from the access right reading means 50 and applies it immediately.
Each of the above-described means realizes each function by organically cooperating hardware resources including the CPU 100, RAM 105, etc. and various software stored in the ROM 125, HDD 123, media card 135, etc. is doing.

<Access right setting process>
Next, FIG. 4 is a flowchart showing a flow of processing for setting an access right in the electronic file management apparatus 1. FIG. 6 is a diagram showing a selection screen displayed by the access right selection means 20. Further, FIG. 7 is a diagram showing the configuration of the access right management table 45. A series of processing for setting the access right in the electronic file management apparatus 1 will be described according to FIG. 4 and with reference to FIGS.
In the process of setting the access right, first, a selection step of selecting a folder or an electronic file is executed, and the user operates the input key 145 to select the electronic file or folder to set the access right (step. S200). Specifically, as shown in FIG. 5A, on one user interface 160 displayed on the display body 115, the user operates the direction input key 145A to set an access right. Alternatively, the cursor 165 is moved to the folder.
Next, an access right defining step is executed, and the user selects an access right to be set for the selected electronic file or folder (step S205). Specifically, when the user designates the electronic file or folder with the cursor 165, the user presses a predetermined instruction input key 145B, so that the other user interface 170 as shown in FIG. Are superimposed on the user interface 160.

Here, when the cursor 165 is moved to “access right setting”, when the target of setting the access right is a folder, the other user interface 170A as shown in FIG. , Expanded and displayed. The user selects one from “I can access this folder” 175 or “I can access other than this folder” 180. When “Can access this folder” is selected, the user and the user (guest) who is not recognized as a user are given access rights to the folder. At the same time, all folders other than this folder are shifted to the invisible state on the display screen or to the inaccessible light color display state. Note that the access to a folder is to disclose a folder so as to refer to an electronic file or a subfolder stored in the folder.
If you select “Can access other than this folder”, access to this folder is prohibited for the user and the user (guest) who is not recognized as a user, and it is below the same hierarchy as this folder. Yes, give access to all folders except this folder. At the same time, this folder is moved to an invisible state on the display screen or to an inaccessible dimmed state, and all folders except this folder that are under the same hierarchy as this folder are excluded. Is displayed in the normal state.

  On the other hand, when the access right is set for an electronic file, the other user interface 170B as shown in FIG. 6B is expanded and displayed adjacent to “access right setting”. The user sets either “open this file” or “other than this file” and either “open” 185, “open / printable” 190, or “open / printable / updateable” 195. Select one of them. That is, “open this file”, “can open / print this file”, “can open / print / update this file”, “open other than this file”, “can open / print other than this file” Alternatively, one of “Open other than this file / Can print / Update” is selected. Here, “opening” an electronic file means that if the electronic file is a file containing content such as a document file, the electronic file is disclosed by an application program associated with the file and the content is referred to. is there.

Further, “to be able to print” an electronic file means to open the electronic file with an application program associated with the electronic file and print the contents of the electronic file. Further, “to be able to update” an electronic file means that the electronic file is opened by an application program associated with the electronic file and the contents of the electronic file are updated. Further, “other than this file” means all files except the file below the hierarchy of the folder to which this file belongs. The electronic file described here is not limited to an electronic file including content, and may be an executable electronic file such as an application program. In this case, a predetermined program is executed by opening the electronic file. In addition to the above-mentioned rights, selectable access rights can be a deletion right for deleting electronic files and folders, a copy creation right for creating copies of electronic files and folders, and the like.
Returning to FIG. 4, it is then determined whether or not an access right has already been set for the electronic file management apparatus 1 (step S210). Specifically, the access right reading means 50 reads the access right management table 45 and determines whether or not the access right is set. Here, the access right management table 45 of FIG. 7 is a table format of the actual access right management table 45. When the access right is set in this way, the access right for the user (guest) is set for each folder or electronic file. Note that a preset user (user) follows the set access right unless authenticated by the personal authentication means 25, but has the authority to modify the access right by being authenticated by the personal authentication means 25. .

Here, if the access right has already been set in the electronic file management apparatus 1 (Yes in step S210), a message to overwrite the access right set this time is displayed for the access right that has already been set. Thus, confirmation of the user is obtained (step S215).
A user whose user has been set in advance by the personal authentication means 25 after obtaining the above user confirmation or when the access right is not set in the electronic file management apparatus 1 (No in step S210). An authentication process for authenticating whether or not is (step S220).
Here, when it is authenticated that the user is a preset user (Yes in step S225), a writing process is executed. That is, the access right defining means 30 issues a write instruction to the access right writing means 40 in order to write the access right selected by the user in the access right management table 45. In accordance with this instruction, the access right writing unit 40 sets the selected access right by overwriting the access right selected by the user in the access right management table 45 (step S230). Here, since the access right is overwritten on the existing access right, even if the access rights contradict each other, the access right set last is always valid.
Next, a reference instruction step is executed, and the access right reading means 50 instructs the application program that refers to the access right to refer to the changed access right and applies the application program in response to this instruction. Applies the changed access right (step S232). In this way, the changed access right becomes valid, and a series of processing ends.
If the user is not authenticated as a preset user (No in step S225), a message indicating that the access right selected by the user cannot be set is displayed (step S235), and the access right is displayed. A series of processing ends without setting.
Thus, the set access right is written in the access right management table 45 and stored in the HDD 123. Therefore, unless the access right is changed, the same access right is read and applied to the application program every time the electronic file management apparatus 1 is activated.

As mentioned above, although this invention was demonstrated based on embodiment shown in figure, this invention is not limited to these, The modification as described below can also be assumed.
(1) In this embodiment, access rights are set for folders and files stored in storage means included in the electronic file management apparatus 1, such as the media card 135 as a storage medium and the HDD 123 as an external storage device. However, the electronic file management apparatus 1 is connected to the network, and folders and files of the connection destination server or the like can be targeted.
(2) In this embodiment, when the access right is already set in the access right management table 45, the access right defined by the access right defining means 30 is overwritten and set. However, the access right is already set. If so, the user may be allowed to select one of both settings.
(3) The administrator prepares a large number of electronic file management apparatuses 1 described in the present embodiment, inputs the same content, and collectively assigns the same access right to each electronic file management apparatus 1. By setting these, it is possible to apply as a system using a plurality of explanation display devices and explanation display devices that display only the same content to many users.
(4) Further, the explanation display device described above, instead of the administrator selecting the access right, uses the access right based on weak wireless instructions or position information of the electronic file management device 1 by GPS (Global Positioning System). The access right may be set for each predetermined area by adding a function for selecting the file, and the user carrying the electronic file management apparatus 1 may move to display the predetermined content.

The external appearance block diagram which shows the external appearance of the electronic file management apparatus which concerns on embodiment of this invention. The figure which shows the hardware constitutions of the electronic file management apparatus electronics in the said embodiment. The functional block diagram which shows the functional structure of the electronic file management apparatus in the said embodiment. 6 is a flowchart showing a flow of processing for setting an access right in the electronic file management apparatus according to the embodiment. The figure which shows the screen which the file operation means of the electronic file management apparatus in the said embodiment displays. The figure which shows the screen which the access right selection means of the electronic file management apparatus in the said embodiment displays. The figure which shows the structure of the access right management table of the electronic file management apparatus in the said embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Electronic file management apparatus, 10 ... Operation input means, 15 ... File operation means, 20 ... Access right selection means, 25 ... Personal authentication means, 30 ... Access right prescription means, 35 ... Display means, 40 ... Access right writing means 45 ... Access right management table, 50 ... Access right reading means, 60 ... Folder group, 65 ... Electronic file group, 100 ... CPU, 105 ... RAM, 110 ... Display controller, 115 ... Display body, 120 ... HDD controller, 122 ... Fingerprint sensor, 123 ... HDD, 125 ... ROM, 130 ... Card I / F, 135 ... Media card, 140 ... Input I / F, 145 ... Input key, 150 ... Bus, 160 ... One user interface, 165 ... Cursor 170, the other user interface.

Claims (6)

Store and store electronic files in folders with a hierarchical structure, manage the folders and electronic files, and manage access rights to the folders and electronic files with an access right management table that can be referenced from application programs An electronic file management device,
Authentication means for authenticating whether or not the user is a preset user;
According to the authenticated user's instruction, access right defining means for defining access rights to the folder and the electronic file;
Access right writing means for writing the specified access right into the access right management table;
An electronic file management apparatus comprising: a reference instructing unit that instructs the application program that refers to the access right management table to update the reference upon receiving writing to the access right management table. The electronic file management apparatus according to claim 1.
Display means for displaying an image;
A first interface unit that refers to the access right management table and displays the state of the hierarchical structure in which the folder and the electronic file are managed as an image on the display unit;
By indicating the folder or the electronic file on the image, it is displayed superimposed on the vicinity of the specified folder or electronic file,
2. An electronic file management apparatus, further comprising second interface means for selectively displaying an access right that can be defined for the designated folder or electronic file. The electronic file management apparatus according to claim 2,
The access right defining means is:
An electronic file management apparatus for defining the access right selected by the second interface means for the folder or the electronic file designated on the first interface means. The electronic file management apparatus according to claim 2,
The second interface means includes
An electronic file management apparatus, wherein the access right to be set is selected for a folder or an electronic file excluding the folder or the electronic file designated on the first interface means. The electronic file management apparatus according to any one of claims 1 to 4,
The access right is
A disclosure right to disclose the specified folder or the electronic file;
A print right to print the contents of the specified electronic file;
An update right to rewrite the contents of the specified electronic file;
Delete right to delete the specified folder or electronic file,
An electronic file management device comprising at least one of a designated copy creation right for creating a copy of the folder or the electronic file. Store and store electronic files in folders with a hierarchical structure, manage the folders and electronic files, and manage access rights to the folders and electronic files with an access right management table that can be referenced from application programs An access right management method for an electronic file
A selection process for selecting a folder or electronic file;
An access right defining step for defining an access right to be set for the selected folder or electronic file;
An authentication step for authenticating whether or not the user is a preset user;
A writing step of writing the access right selected by the authenticated user into the access right management table;
An access right management for an electronic file, comprising: a reference instruction step for instructing the application program that refers to the access right management table to update the reference in response to writing to the access right management table Method.

Images