JP2006318370A - Electronic document usage control method, electronic document usage device, and electronic document usage program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To control usage of an electronic document based on terms of service decided by a manager for properly controlling usage of the electronic document at a data duplication destination while allowing data duplication between the electronic documents. <P>SOLUTION: A document attribute storage medium 24 stores a document attribute management table 25, in which information for identifying the electronic document and document attributes of the electronic document are paired with each other. An input/output request capture part 21 captures an input/output processing request for the electronic document, a document attribute management part 23 acquires the document attributes related to the electronic document from the document attribute management table 24, and a service term acquisition part 26 acquires the terms of service from an information management terminal. A permission determination part 22 determines permission as to the input/output processing request based on the terms of service. When determination result is affirmative, the requested input/output processing is carried out, while the input/output request is rejected if the determination result is negative. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an electronic document use control method and an electronic document use apparatus for controlling use of an electronic document on a computer.

  In order to prevent unauthorized disclosure of confidential information, even after the electronic document is provided to the user, it is controlled based on the rules established by the administrator, and furthermore, a part of the data extracted from the electronic document. Need to be controlled as a restriction target.

  Among electronic documents handled on a computer, there is also confidential information that should be restricted to a specific user. Therefore, access control is generally performed to restrict reading of an electronic document by an unauthorized user. However, there is a risk that an electronic document read by an authorized user may be copied and leaked intentionally or accidentally. It is also possible that important information is leaked by copying a part of the electronic document to another electronic document that is not monitored or restricted in usage via a shared memory (for example, a Windows (registered trademark) clipboard). . On the other hand, a method for restricting writing of an electronic document including confidential information to an area where monitoring or use restriction cannot be performed, or a method for restricting use of a shared memory in a case where an electronic document including confidential information is referenced Exists.

  However, restricting the use of the shared memory in a legitimate electronic document editing operation significantly reduces user convenience. On the other hand, there is a method for controlling the use of an electronic document while allowing the use of a shared memory (Patent Document 1).

  According to this, a security access label representing a security profile that defines the user security access level and the input / output operations allowed for the document is established and associated with each document selected for security protection. Use of the electronic document is controlled based on restrictions (“copy prohibited”, “print prohibited”, etc.) described in the security access label. In addition, when a part of an electronic document is copied to another electronic document via the shared memory (hereinafter referred to as “data replication”), the security access label of the data replication source electronic document and the data replication destination A comparison is made with the security access label of the electronic document, and a security access label to be newly assigned to the electronic document of the data duplication destination is determined based on the weight selected in advance for all the security access labels. As a result, the use of the electronic document as the data replication destination is controlled in a manner that reflects the restrictions described in the security access label of the electronic document as the data replication source.

Rather than restricting the use of shared memory, by incorporating restrictions that should be applied to the data along with data duplication into the restrictions on the electronic document of the data duplication destination, while permitting the use of shared memory, the electronic document It is possible to control the use of, and to achieve both convenience and safety.
Patent No. 207688304

  In order to prevent unauthorized leakage of an electronic document, it is important that the use of the electronic document be controlled based on the terms of use defined by the administrator even after being provided to the user. In addition, editing and updating through various user's hands may increase the importance of electronic documents, and information may become obsolete over time and confidential information may be treated as public information. . In accordance with this, it is conceivable that conditions and restrictions on the use of electronic documents are also changed. For this reason, it is important that even after provision to the user, the administrator can change the usage rule that defines the usage conditions and restrictions of the electronic document, and the change is correctly reflected in the control.

  However, the above prior art has the following problems.

  1) Since the information describing the restrictions is directly associated with the electronic document and provided to the user, control is performed based on the restriction, so that the electronic document that is left to the administrator and passed to the user On the other hand, the administrator cannot change restrictions or use conditions or make new settings.

  2) In a situation where data replication is performed between multiple electronic documents with different managers, new classifications and restrictions are derived from the classifications and restrictions associated with each electronic document, and new data is copied to the electronic document that is the data replication destination. In the case of association, since the restrictions set by each administrator are combined into one, the administrator of the electronic document cannot be specified, and each administrator is set by which administrator It is unclear whether it can be changed by an administrator, and appropriate usage management cannot be performed by the administrator.

  Accordingly, an object of the present invention is to appropriately control the use of an electronic document as a data duplication destination while controlling the use of an electronic document based on a usage rule defined by an administrator and permitting data duplication between electronic documents. Another object of the present invention is to provide an electronic document usage control method, an electronic document usage device, and an electronic document usage program that can be controlled and further change usage rules by a management entity even after the electronic document is provided to the user.

In order to achieve the above object, the electronic document usage control method of the present invention comprises:
An input / output request capturing step in which an input / output request capturing unit captures an input / output processing request of the electronic document input by the user to the electronic document using device;
Identification included in the input / output processing request from the document attribute management table stored in the storage medium, which is a combination of identification information for identifying the electronic document existing in the electronic document utilization apparatus and the document attribute of each electronic document A document attribute acquisition step in which the document attribute management means acquires the document attribute of the electronic document of information;
An electronic policy in which a usage rule is associated with the acquired document attribute and which is a rule that defines rules for various operations performed on the electronic document. A usage agreement acquisition step acquired from the document management device;
A permission determination step of performing permission determination for the input / output processing request based on the acquired usage agreement.

  The electronic document to be controlled and the document attribute representing the attribute of each electronic document are managed in association with each other, and the document attribute is associated with the usage rule that defines the usage conditions and restrictions of the electronic document having the document attribute. to manage. When an electronic document input / output processing request for an operating system performed by an application is captured by the electronic document utilization apparatus, the document attribute of the electronic document is acquired, and a usage rule associated with the document attribute is acquired. When the permission determination for the input / output processing request is performed based on the usage rule and the determination result is “permitted”, the requested input / output processing is executed, and the determination result is “not permitted”. The I / O request is rejected.

  Here, the document attribute is intermediate information for associating the electronic document with the usage rule, and is information serving as a pointer to the usage rule. As the document attribute, for example, a “document attribution” attribute is defined as a document attribute representing the attribution of an electronic document such as an owner or a management source, and a department name or group name is used as a value of the “document attribution” attribute, or an electronic document A “document state” attribute may be defined as a document attribute representing the status of handling, and a “document state” attribute value may be “confidential”, “public”, or the like. As long as these document attributes are associated with the terms of use, the definition of the attribute name and attribute value is not particularly limited.

  The terms of use are information including restrictions indicating permission or non-permission of processing such as reading and writing of an electronic document, conditions for permitting execution of request processing, conditions for prohibiting execution of request processing, and the like. .

  According to the present invention, the usage rules used for control when using an electronic document are managed by the electronic document management apparatus. When the electronic document is actually used by the electronic document utilization apparatus, the electronic document is stored in the electronic document. Since the usage rule is acquired from the electronic document management apparatus based on the associated document attribute and the control is performed based on the usage rule, the usage rule can always be changed and corrected in the electronic document management apparatus.

  According to the embodiment of the present invention, the usage rule includes a condition relating to a user attribute associated with the user of the electronic document, and the user attribute acquisition unit obtains the user identification information of the user from the login information of the electronic document utilization apparatus. And acquiring a user attribute associated with the user identification information from the electronic document management apparatus, and the permission determining step is acquired in the user attribute acquiring step. Using the user attribute further, permission determination is performed.

  When the user attribute associated with the user is managed and the user attribute is required in the permission determination for the operation request of the electronic document, the user identification information is obtained from the login information, and the user The user attribute associated with the user identification information is acquired and used for permission determination.

  According to another embodiment of the present invention, the usage rule management means of the electronic document management apparatus includes a step of updating the usage rule to a newly specified usage rule. Thereby, the use conditions and restrictions of the electronic document can be changed.

Another electronic document usage control method of the present invention is as follows:
A shared memory write request capturing step in which the input / output request capturing means captures a data write request to the shared memory input by the user to the electronic document utilization apparatus when data replication is performed between the electronic documents via the shared memory. When,
Electronic data whose data is copied to the shared memory in response to the data write request from a document attribute management table stored in a storage medium, which is a combination of identification information for identifying each electronic document and document attributes of each electronic document A data duplication source electronic document attribute acquisition step in which the document attribute management means acquires the document attribute of the document;
A shared memory read request capturing step in which a shared memory monitoring means captures a data read request from the shared memory;
A data replication destination electronic document in which the document attribute management means adds the document attribute acquired in the data replication source electronic document attribute acquisition step as a document attribute to be associated with an electronic document whose data is replicated from the shared memory by reading the data And an attribute addition step.

  In data replication between electronic documents performed via a shared memory, the electronic document utilization device captures a data write request to the shared memory made by an application and the application is opened at the time of the data write request The document attribute associated with (data duplication source electronic document) is acquired, and the document attribute is held until the data written in the shared memory is updated or deleted. As a document attribute associated with an electronic document (data duplication destination electronic document) that is opened by the application at the time of the data read request, the data read request made by the application of the electronic document using device is captured. The document attribute held in conjunction with the data is added.

  When data replication is performed, the data replication destination document is in a state in which the document attribute originally associated before the data replication is performed and the document attribute newly associated after the data replication are associated with each other. When the electronic document is used, control is performed in which both the usage rule associated with each document attribute, that is, the usage rule of the data replication source document and the usage rule of the data replication destination document are observed.

In order to achieve the above object, an electronic document utilization apparatus according to the present invention provides:
An input / output request capturing means for capturing an input / output processing request of the electronic document input by the user to the electronic document using device;
A storage medium storing a document attribute management table in which identification information for identifying an electronic document existing in the electronic document using apparatus and a document attribute of each electronic document are paired;
Document attribute acquisition means for acquiring the document attribute of the electronic document of the identification information included in the input / output processing request from the document attribute management table;
Acquires a usage rule, which is associated with the acquired document attribute and defines rules for various operations performed on the electronic document, from the electronic document management apparatus that manages the use of the electronic document in the electronic document utilization apparatus. A terms of service acquisition means,
Permission determination means for performing permission determination for the input / output processing request based on the acquired usage rule.

Another electronic document utilization apparatus of the present invention is:
A shared memory write request capturing means for capturing a data write request to the shared memory input by the user to the electronic document using apparatus when data replication is performed between the electronic documents via the shared memory;
A storage medium storing a document attribute management table in which information for identifying each electronic document and document attributes of each electronic document are paired;
Data replication source electronic document attribute acquisition means for acquiring the document attribute of the electronic document whose data is replicated to the shared memory in response to the data write request from the document attribute management table;
Shared memory read request capturing means for capturing a data read request from the shared memory;
A data duplication destination electronic document attribute adding unit for adding the document attribute acquired by the data duplication source electronic document attribute acquiring unit as a document attribute to be associated with an electronic document whose data is copied from the shared memory by the data reading.

  As described above, according to the present invention, not only the use of an electronic document in the electronic document utilization apparatus can be controlled based on the usage rule, but also the electronic document on the electronic document utilization apparatus is managed in association with the document attribute. By managing the correspondence between document attributes and usage rules and managing the usage rules on the document management device, the usage of the electronic document can be changed by correcting the usage rules on the management terminal even after the electronic document is provided to the user. It is possible to change restrictions and usage conditions.

  According to the present invention, when data replication is performed between electronic documents, the document attribute of the data replication source electronic document is propagated, and in addition to the document attribute of the data replication destination electronic document, data replication after data replication is performed. Data replication by controlling the usage of the destination electronic document based on both the usage rule associated with the document attribute propagated along with the data replication and the usage agreement associated with the original document attribute of the data replication destination electronic document. However, it is possible to appropriately manage the use of the electronic document and to achieve both convenience and manageability. Furthermore, even if the administrator of the data replication source electronic document and the data replication destination electronic document are different, the terms of use managed by each administrator are reflected in the control of the electronic document utilization device, respectively. It is possible to continuously manage the use of a part of the data.

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of an information system according to an embodiment of the present invention. The information management terminal 1 and the information use terminal 2 are connected to a network 3, and the information use terminal 2 includes an externally connected storage medium 4 and a printer 5.

  FIG. 2 shows the configuration of the information management terminal 1.

  The information management terminal 1 includes a usage rule management unit 11, a usage rule storage unit 12, a user attribute management unit 13, a user attribute storage unit 14, and a communication unit 18.

  The usage rule storage unit 12 stores a usage rule management table 15 and a usage rule 16 in a storage medium or an area of the storage medium.

  The usage rule management table 15 is an information table in which a document attribute and a usage rule specified to be associated with the document attribute are combined, and is managed by the usage rule management unit 11. The terms of service 16 is information that defines rules for operations such as reading, writing, and printing performed on an electronic document on a computer. Restrictions indicating permission and prohibition, or conditions for permitting execution of request processing And information including conditions for refusing execution of request processing. The conditions described in the Terms of Use 16 include information on users such as affiliations and job titles, information on request processing such as the export destination (local hard disk, externally connected storage medium, specific directory, etc.) Information about the computer usage environment such as usage time and usage location is used, and is expressed as a conditional expression together with a comparison operator. The usage rule storage unit 12 may be a storage medium that stores the usage rule management table 15 and the usage rule 16 separately, or a region of the storage medium.

  The user attribute storage unit 14 stores a user attribute management table 17 in a storage medium or an area of the storage medium.

  The user attribute management table 17 is an information table in which user identification information and user attributes are combined, and is managed by the user attribute management unit 13.

  The usage rule management unit 11 receives a usage rule acquisition request including specification of document attributes from the information usage terminal 2 via the communication unit 18 and refers to the usage rule management table 15 stored in the usage rule storage unit 12. Then, the usage rule 16 associated with the designated document attribute is specified, the entity of the specified usage rule 16 is extracted from the usage rule storage unit 12, and the requesting information usage terminal 2 is connected via the communication unit 18. Return to In addition, it accepts a request for registration, update, and deletion of the usage rule 16 associated with a specific document attribute, updates the contents of the usage rule management table 15 stored in the usage rule storage unit 12, and changes the substance of the usage rule 16. It is stored in the usage rule storage unit 12 or deleted from the usage rule storage unit 12.

  The user attribute management unit 13 receives a user attribute acquisition request from the user terminal 2 via the communication unit 18, refers to the user attribute management table 17 stored in the user attribute storage unit 14, and specifies The user attribute associated with the made user identification information is specified and returned to the information use terminal 2 via the communication unit 18.

  FIG. 3 is a diagram showing a configuration of the information use terminal 2 of FIG. The information utilization terminal 2 includes an input / output request capturing unit 21, a permission determination unit 22, a document attribute management unit 23, a document attribute storage unit 24, a usage rule acquisition unit 26, a user attribute acquisition unit 27, a shared memory monitoring unit 28, and a communication unit. 29, a hard disk 30 and a shared memory 31.

  The input / output request capturing unit 21 reads an electronic document from a storage medium such as the hard disk 30, writes it to the hard disk 30 or an externally connected storage medium 4, and further writes it to the printer 5. ) To monitor the input / output processing performed by the application to the operating system before the operating system executes it. Furthermore, the permission determination unit 22 is inquired about the captured processing request, and based on the determination result of the permission determination unit 22, the operating system is caused to execute the request processing or the request processing is rejected.

  The permission determination unit 22 receives a permission determination request for an input / output processing request for an electronic document captured by the input / output request capturing unit 21, and requests the document attribute management unit 23 to acquire the document attribute of the electronic document. Based on the obtained document attribute, the usage rule acquisition unit 26 is requested to acquire the usage rule 16 associated with the document attribute, and based on the acquired usage rule, permission determination is performed for the input / output processing request, and “permitted”. Alternatively, the determination result “not permitted” is returned to the input / output request capturing unit 21. If there are a plurality of document attributes acquired from the document attribute management unit 23, the usage rule 16 is acquired from the usage rule acquisition unit 26 for each document attribute, and permission determination is performed based on each usage rule. When the result is “permitted”, “permitted” is returned to the input / output request capturing unit 21, and when at least one is “not permitted”, “not permitted” is returned to the input / output request capturing unit 21. In addition, when a user attribute is required for permission determination, a user attribute acquisition request is made to the user attribute acquisition unit 27, and permission determination is performed using the acquired user attribute.

  The document attribute management unit 23 receives the document attribute acquisition request from the permission determination unit 22, refers to the document attribute management table 25 stored in the document attribute storage unit 24, and is associated with the designated electronic document. Document attributes are specified and returned to the permission determination unit 22. Further, registration, update, and deletion of the association between the electronic document and the document attribute are accepted as necessary, and the contents of the document attribute management table 25 are updated.

  The document attribute storage unit 24 is a storage medium that stores the document attribute management table 25 or an area of the storage medium.

  The document attribute management table 25 is an information table in which information for identifying an electronic document existing in the information use terminal 2 and a document attribute associated with the electronic document are paired, and is managed by the document attribute management unit 23. The information for identifying the electronic document is information for uniquely identifying the electronic document in the information use terminal 2, and may be information indicating an electronic document storage location in the information use terminal 2, an ID, or the like.

  The usage rule acquisition unit 26 receives the usage rule acquisition request from the permission determination unit 22, and uses the usage rule 16 to the usage rule management unit 11 of the information management terminal 1 via the communication unit 29 based on the designated document attribute. Is obtained, and the obtained usage agreement 16 is returned to the permission determination unit 22.

  The user attribute acquisition unit 27 receives the user attribute acquisition request from the permission determination unit 22, acquires information (user identification information) for identifying the user from the login information of the information use terminal 2, and the information management terminal 1 The user attribute management unit 13 is requested to acquire a user attribute associated with the user identification information, and the acquired user attribute is returned to the permission determination unit 22.

  The shared memory monitoring unit 28 captures a data write request to the shared memory 31 performed by an application in the information use terminal 2, and the electronic attribute (the application is opened at the time of the data write request to the document attribute management unit 23) A request for acquisition of a document attribute associated with the data replication source electronic document) is made, the acquired document attribute is held until the data written in the shared memory 31 is updated or deleted, and the information use terminal 2 uses the application. A shared memory management is performed as a document attribute associated with an electronic document (data duplication destination electronic document) opened by the application when the data read request from the shared memory 31 to be performed is captured and the document attribute management unit 23 requests the data read. It is necessary to add the document attribute held in the section 28. To.

  Table 1 shows an example of the usage rule management table 15 of FIG. The usage rule management table 15 expresses correspondence between document attributes and usage rules. For example, in the case of Table 1, “usage rule 1” is associated with a document attribute whose attribute name is “document attribution” and whose attribute value is “group A”.

表２、表３は、図２の利用規約１６の例を示している。

Tables 2 and 3 show examples of the usage rules 16 in FIG.

  As shown in Table 2, the usage rule 16 expresses conditions for permitting or rejecting each operation. There may be a plurality of condition descriptions. For example, in the case of Table 2, the read operation is permitted if the user's title is “general employee” or “manager”, but otherwise it is not permitted, and the read operation is not permitted. On the other hand, if the group belongs to “Group A” and the export destination is “Local hard disk”, it is permitted, but otherwise it is not permitted, and it is used for printing operations. This indicates that permission is granted if the manager's title is “manager”, but otherwise no permission is granted.

  In addition, as shown in Table 3, the usage rule 16 may express only permission or disapproval of an operation without setting a condition. For example, Table 3 indicates that a read operation and a write operation are permitted, but a print operation is not permitted.

表４は、図２の利用者属性管理テーブル１７の例を示している。利用者属性管理テーブル１７は、利用者を識別する情報（利用者識別情報）と利用者属性の組により表現されている。また、１つの利用者識別子に対し、複数の利用者属性が関連付けられていてもよい。また、利用者属性は属性の名前と値との組により表現される。例えば、表４の場合、利用者識別子が「ＵＩＤ０１」の利用者は、属性名が「所属グループ」でその属性値が「グループＡ」、さらに、属性名が「役職」でその属性値が「一般社員」という利用者属性が関連付けられていることになる。

Table 4 shows an example of the user attribute management table 17 of FIG. The user attribute management table 17 is expressed by a set of information for identifying a user (user identification information) and a user attribute. A plurality of user attributes may be associated with one user identifier. A user attribute is represented by a pair of attribute name and value. For example, in the case of Table 4, a user whose user identifier is “UID01” has an attribute name “affiliation group”, an attribute value “group A”, an attribute name “title”, and an attribute value “ The user attribute “general employee” is associated.

表５は、図３の文書属性管理テーブル２５の例を示している。文書属性管理テーブル２５は、電子文書と文書属性とを関連付けるために、情報利用端末２において電子文書を識別する情報（文書識別子）と該電子文書と関連付ける文書属性の組により表現されている。また、１つの文書識別子に対し、複数の文書属性が関連付けられてもよい。また、文書属性は属性の名前と値との組により表現される。例えば、表５の場合、文書識別子が「００１」の電子文書は、属性名が「文書帰属」でその属性値が「グループＡ」という文書属性が関連付けられていることになる。

Table 5 shows an example of the document attribute management table 25 of FIG. The document attribute management table 25 is expressed by a set of information (document identifier) for identifying an electronic document in the information use terminal 2 and a document attribute associated with the electronic document in order to associate the electronic document with the document attribute. A plurality of document attributes may be associated with one document identifier. A document attribute is represented by a pair of attribute name and value. For example, in the case of Table 5, an electronic document whose document identifier is “001” is associated with a document attribute whose attribute name is “document attribution” and whose attribute value is “group A”.

次に、情報利用端末２にてアプリケーションによる電子文書の入出力要求が行われる場合の本実施形態における一連の処理を説明する。

Next, a series of processes in the present embodiment when an electronic document input / output request is made by an application at the information use terminal 2 will be described.

  Here, in the information management terminal 1, the usage rule management table 15 is set as shown in Table 1, "Usage rule 1" is set as shown in Table 2, and the user attribute management table 17 is set as shown in Table 4. Further, in the situation where the document attribute management table 25 is set as shown in Table 5 in the information use terminal 2, the user whose user identification information is “UID01” is transferred to the externally connected storage medium 4 as a document identifier. A case where an electronic document “001” (hereinafter referred to as “electronic document 001”) is written will be described as an example.

  When the application requests the operating system to write the electronic document 001 to the externally connected storage medium 4, the input / output request capturing unit 21 captures the request.

  The input / output request capturing unit 21 requests the permission determination unit 22 to determine permission for the writing process of the electronic document 001.

  The permission determination unit 22 requests the document attribute management unit 23 for the document attribute of the electronic document having the document identifier “001”.

  The document attribute management unit 23 refers to the document attribute management table 25 and returns “document attribution = group A” to the permission determination unit 22 as the document attribute associated with the document identifier “001”.

  The permission determination unit 22 requests the usage rule acquisition unit 26 for the usage rule 16 associated with the document attribute “document attribution = group A”.

  The usage rule acquisition unit 26 requests the usage rule 16 associated with the document attribute “document attribution = group A” to the usage rule management unit 11 of the information management terminal 1.

  The usage rule management unit 11 refers to the usage rule management table 15 and identifies “use rule 1” as the usage rule 16 associated with the document attribute “document attribution = group A”. To the usage rule acquisition unit 26 of the information usage terminal 2.

  After receiving the “use agreement 1” from the use agreement management unit 11, the use agreement obtaining unit 26 returns the “use agreement 1” to the permission determining unit 22.

  The permission determination unit 22 interprets the contents of the “Terms of Use 1” and determines the write request requested by the input / output request capturing unit 21. In “Terms of Use 1”, “User Affiliation Group” is “Group A” and “Export Destination” is “Local Hard Disk” as conditions for permitting the writing operation. Since the “user affiliation group” is required for the determination here, the permission determination unit 22 requests the user attribute from the user attribute acquisition unit 27.

  The user attribute acquisition unit 27 acquires user identification information (in this example, “UID01”) from the login information of the user terminal 2 and associates it with “UID01” to the user attribute management unit 13 of the information management terminal 1. The requested user attribute is requested via the communication units 29 and 18.

  The user attribute management unit 13 refers to the user attribute management table 17 and sets “affiliation group = group A” and “position = general employee” as the user attributes associated with the user identification information “UID01”. It returns to the user attribute acquisition unit 27 via the communication units 18 and 29.

  The user attribute acquisition unit 27 returns the user attribute received from the user attribute management unit 13 to the permission determination unit 22.

  The permission determination unit 22 continues the determination using the user attribute. Since the user attribute of the user with the user identifier “UID01” is “affiliation group = group A”, the first condition (“user belonging group” is “group A”) ) Will be satisfied. However, since the request here is a write request to the externally connected storage medium 4, the second condition (“write destination” is “local hard disk”) is not satisfied. Accordingly, the permission determination unit 22 returns “not permitted” to the input / output request capturing unit 21 as a determination result.

  Since the determination result returned from the permission determination unit 22 is “non-permitted”, the input / output request capturing unit 21 rejects a request for writing the electronic document 001 to the externally connected storage medium 4 by the application.

  As described above, in the present embodiment, permission determination is performed for a process requested upon capturing an input / output request, and control based on the determination result is performed by the input / output request capturing unit 21. The same processing is performed for reading electronic documents and printing requests.

  Next, a series of processes in the present embodiment when data replication is performed between electronic documents will be described.

  Here, in the information management terminal 1, the usage rule management table 15 is set as shown in Table 1, the usage rule 1 and the usage rule 3 are set as shown in Table 2 and Table 3, respectively, and the user attribute management table 17 is In the information use terminal 2, the document attribute management table 25 is set as shown in Table 5, and the information use terminal 2 uses the user identification information “UID01”. The electronic document with the document identifier “001” (hereinafter referred to as “electronic document 001”) and the electronic document with the document identifier “002” (hereinafter referred to as “electronic document 002”) that are permitted to be read by the user are read by the application. In the read state, a part of the data of the electronic document 001 is copied to the electronic document 002, and the electronic document 002 is written to the local hard disk 30. Until issued it will be described as an example.

  First, when a data write request to the shared memory 31 is made by an application reading the electronic document 001, the shared memory monitoring unit 28 captures the data write request to the shared memory 31 by the application reading the electronic document 001. The document attribute management unit 23 is requested to acquire the document attribute associated with the electronic document 001.

  The document attribute management unit 23 refers to the document attribute management table 25 and returns “document attribution = group A” to the shared memory monitoring unit 28 as the document attribute associated with the document identifier “001”.

  The shared memory monitoring unit 28 holds “document attribution = group A” as the document attribute of the data written in the shared memory 31. The document attribute held here is held until the data on the shared memory 31 is deleted or updated with another data. Furthermore, the shared memory monitoring unit 28 captures a data read request from the shared memory 31 by an application that opens the electronic document 002, and monitors the shared memory as a document attribute associated with the electronic document 002 to the document attribute management unit 23. A request is made to add the document attribute (“document attribution = group A”) held in the section 28.

  The document attribute management unit 23 edits the document attribute management table 25 and adds “document attribution = group A” as the document attribute associated with the electronic document 002.

  Thereafter, when a request to write the electronic document 002 to the local hard disk 30 is made by an application that opens the electronic document 002, the request is captured by the input / output request capturing unit 21.

  The input / output request capturing unit 21 requests the permission determination unit 22 to determine permission for the writing process of the electronic document 002.

  The permission determination unit 22 requests the document attribute management unit 23 for the document attribute of the electronic document having the document identifier “002”.

  The document attribute management unit 23 refers to the document attribute management table 25 and sets “document state = public” and “document attribution = group A” as the document attributes associated with the document identifier “002”. Return to

  The permission determining unit 22 requests the usage rule acquisition unit 26 for the usage rule 16 associated with the document attributes “document state = public” and “document attribution = group A”.

  The usage rule acquisition unit 26 associates the usage rule 16 associated with the document attribute “document state = public” and the document attribute “document attribution = group A” with respect to the usage rule management unit 11 of the information management terminal 1. The requested terms of service 16 are requested.

  The usage rule management unit 11 refers to the usage rule management table 15 and uses the usage rule 16 associated with the document attribute “document state = public” and the usage associated with the document attribute “document attribution = group A”. “Terms of use 3” and “Terms of use 1” are specified as the terms 16 and returned to the terms of use obtaining unit 26 via the communication units 18 and 29.

  After receiving the “use agreement 3” and the “use agreement 1” from the use agreement management section 11, the use agreement obtaining section 26 returns them to the permission determination section 22.

  The permission determination unit 22 interprets the contents of “Usage Rules 3” and “Usage Rules 1”, and determines the write request requested by the input / output request capturing unit 21. In “use agreement 3”, the writing operation is permitted, so the determination result based on “use agreement 3” is “permitted”. Further, in “Usage Rules 1”, “User Affiliation Group” is “Group A” and “Export Destination” is “Local Hard Disk” as conditions for permitting the writing operation. Since the “user affiliation group” is required for the determination here, the permission determination unit 22 requests the user attribute from the user attribute acquisition unit 27.

  The user attribute acquisition unit 27 acquires user identification information (“UID01” in this example) from the login information of the information use terminal 2 and sets it to “UID01” with respect to the user attribute management unit 13 of the information management terminal 1. Request associated user attributes.

  The user attribute management unit 13 refers to the user attribute management table 17 and uses “Communication group = Group A” and the user attribute associated with the user identifier “UID01” via the communication units 18 and 29 as the user attribute. “Position = General employee” is returned to the user attribute acquisition unit 27.

  The user attribute acquisition unit 27 returns the user attribute received from the user attribute management unit 13 to the permission determination unit 22.

  The permission determination unit 22 continues the determination using the user attribute. Since the user attribute of the user of the user identification information “UID01” is “Affiliation Group = Group A”, the first condition in “Terms of Use 1” (“User Affiliation Group” is “Group A”) ) Will be satisfied. Further, since the request here is a write request to the local hard disk 30, the second condition (“write destination” is “local hard disk”) is also satisfied. Accordingly, the determination result based on “Usage Terms 1” is “permitted”. The permission determination unit 22 returns “permitted” as the determination result to the input / output request capturing unit 21 because the determination results based on “use rule 3” and “use rule 1” are both “permitted”. .

  Since the determination result returned from the permission determination unit 22 is “permitted”, the input / output request capturing unit 21 releases the request to write the electronic document 002 to the local hard disk 30 by the application and continues the processing by the operating system. Let

  As described above, even when a part of the data of the electronic document is copied to another electronic document, the data replication destination document has the document attributes and the data replication that were originally associated before the data replication was performed. Since the newly associated document attributes are associated with each other, when using the electronic document, the terms of use associated with each document attribute, that is, the terms of use of the data duplication source document and the data duplication destination document Will be controlled to comply with both terms of service.

  The functions of the information management terminal 1 and the information utilization terminal 2 are recorded on a computer-readable recording medium, and the program recorded on the recording medium is read into the computer. May be executed. The computer-readable recording medium refers to a recording medium such as a flexible disk, a magneto-optical disk, and a CD-ROM, and a storage device such as a hard disk device built in a computer system. Furthermore, the computer-readable recording medium is a medium that dynamically holds the program for a short time (transmission medium or transmission wave) as in the case of transmitting the program via the Internet, and the computer serving as the server in that case Such as a volatile memory that holds a program for a certain period of time.

It is a figure which shows the structure of the information system of one Embodiment of this invention. It is a figure which shows the structure of an information management terminal. It is a figure which shows the structure of an information utilization terminal.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Information management terminal 2 Information utilization terminal 3 Network 4 External connection storage medium 5 Printer 11 Usage rule management part 12 Usage rule storage part 13 User attribute management part 14 User attribute storage part 15 Usage rule management table 16 Usage rule 17 Use Person attribute management table 18 Communication unit 21 Input / output request capturing unit 22 Permission determination unit 23 Document attribute management unit 24 Document attribute storage unit 25 Document attribute management table 26 Terms of use acquisition unit 27 User attribute acquisition unit 28 Shared memory monitoring unit 29 Communication Section 30 Hard disk 31 Shared memory

Claims (8)

An electronic document use control method for controlling use of an electronic document in an electronic document use apparatus,
An input / output request capturing step in which an input / output request capturing unit captures an input / output processing request of the electronic document input by the user to the electronic document using device;
Included in the input / output processing request from a document attribute management table stored in a storage medium, which is a set of identification information for identifying an electronic document existing in the electronic document utilization apparatus and the document attribute of each electronic document. A document attribute acquisition step in which the document attribute management means acquires the document attribute of the electronic document of the identification information;
The usage rule acquisition means for using the electronic document in the electronic document using device is a usage rule which is information defining rules for various operations performed on the electronic document, which are associated with the acquired document attribute. A usage agreement acquisition step acquired from the electronic document management device to be managed;
An electronic document usage control method, comprising: a permission determination step in which a permission determination means determines permission for the input / output processing request based on the acquired usage rule. The terms of use include conditions relating to user attributes associated with users of electronic documents,
User attribute acquisition means acquires the user identification information of the user from login information of the electronic document utilization device, and acquires a user attribute associated with the user identification information from the electronic document management device. A user attribute acquisition step;
In the permission determination step, permission determination is further performed using the user attribute acquired in the user attribute acquisition step.
The electronic document usage control method according to claim 1.   3. The electronic document usage control method according to claim 1, further comprising a step of updating the usage rule by the usage rule management means of the electronic document management apparatus to a newly specified usage rule. An electronic document use control method for controlling use of an electronic document in an electronic document use apparatus,
A shared memory write request capture unit that captures a data write request to the shared memory that is input by the user to the electronic document utilization apparatus when data replication is performed between the electronic documents via the shared memory. Steps,
Electronic data whose data is copied to the shared memory in response to the data write request from a document attribute management table stored in a storage medium, which is a combination of identification information for identifying each electronic document and document attributes of each electronic document A data duplication source electronic document attribute acquisition step in which the document attribute management means acquires the document attribute of the document;
A shared memory read request capturing step in which a shared memory monitoring means captures a data read request from the shared memory;
A data replication destination in which the document attribute management means adds the document attribute acquired in the data replication source electronic document attribute acquisition step as a document attribute to be associated with an electronic document whose data is replicated from the shared memory by the data reading An electronic document usage control method comprising: an electronic document attribute adding step. In an electronic document utilization apparatus in which a user uses an electronic document,
An input / output request capturing means for capturing an input / output processing request of the electronic document input by the user to the electronic document using device;
A storage medium storing a document attribute management table in which identification information for identifying an electronic document existing in the electronic document utilization apparatus and a document attribute of each electronic document are paired;
Document attribute acquisition means for acquiring the document attribute of the electronic document of the identification information included in the input / output processing request from the document attribute management table;
Electronic document management for managing usage of an electronic document in the electronic document utilization apparatus, using a usage rule that is associated with the acquired document attribute and that defines rules for various operations performed on the electronic document. Terms of use acquisition means acquired from the device;
An electronic document usage control apparatus comprising: permission determination means for performing permission determination for the input / output processing request based on the acquired usage rule. The terms of use include conditions relating to user attributes associated with users of electronic documents,
User attribute acquisition means for acquiring user identification information from login information of the electronic document utilization apparatus and acquiring user attributes associated with the user identification information from the electronic document management apparatus;
The permission determination means performs permission determination by further using the user attribute acquired by the user attribute acquisition means.
The electronic document utilization apparatus according to claim 5. In an electronic document utilization apparatus in which a user uses an electronic document,
A shared memory write request capturing means for capturing a data write request to the shared memory input by the user to the electronic document using apparatus when data replication is performed between the electronic documents via the shared memory;
A storage medium storing a document attribute management table in which information for identifying each electronic document and document attributes of each electronic document are paired;
Data replication source electronic document attribute acquisition means for acquiring the document attribute of the electronic document whose data is replicated to the shared memory in response to the data write request from the document attribute management table;
Shared memory read request capturing means for capturing a data read request from the shared memory;
A data duplication destination electronic document attribute adding means for adding the document attribute acquired by the data duplicating source electronic document attribute acquiring means as a document attribute to be associated with an electronic document whose data is copied from the shared memory by reading the data; An electronic document utilization apparatus comprising the electronic document utilization apparatus.   The electronic document utilization program for operating a computer as an electronic document utilization apparatus in any one of Claim 5 to 7.

Images