JP2007079864A - Content management system, control method of content management system and control program of content mangement system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a content management system which improves convenience in access control of an output content written out, based on a content. <P>SOLUTION: In the content management system storing a database associating at least one content with information of access right of the content, an output content output part 33 writes the content as an output content of a predetermined format and also writes an access control list of a predetermined format, based on the information of access right, and an access control part 34 determines, based on the access control list, whether a user's access is permitted. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a content management system, a content management system control method, and a content management system control program that store a database that associates at least one content with access right information of the content.

When content such as information stored in an e-mail or database is distributed to a viewer by a content publishing server such as a web server, the content is automatically written as output content in a format suitable for browsing such as HTML format, There is a technique of transmitting from a content management server such as a database server to a content publishing server (see, for example, Patent Document 1).
JP 2001-337890 A

  However, according to the technology of the above-described conventional example, even when information of a user who has access rights to the content is associated with content such as information stored in an e-mail or a database, the content publishing server Cannot take over access rights information. For this reason, when it is necessary to restrict access to the output content, it is necessary to separately register information related to the access right in the content publishing server, which is not convenient.

  The present invention has been made in view of the above circumstances, and one of its purposes is a content management system and a content management method capable of improving convenience when performing access control of output content written based on content. And providing a content management program.

  In order to solve the above problems, a content management system according to the present invention is a content management system for storing a database associating at least one content with information on access rights of the content, wherein the content is in a predetermined format. Whether to allow the user to access to the output content based on the access control list and the writing means for writing out the access control list in a predetermined format based on the access right information Access control means for determining whether or not.

  As a result, the content management system according to the present invention writes the access control list based on the access right information associated with the content, and takes over the access right information of the original content to the access control list for the output content. Can improve convenience.

  Here, there may be a plurality of the access control means, and the writing means may write out a plurality of types of access control lists according to the plurality of access control means. Thereby, even when there are a plurality of access control means, an access control list corresponding to the access control means can be written out.

  Further, in the content management system according to the present invention, the database associates the content with the content publication period information, and the writing means stores an access control list including the publication period information. It may be written out. As a result, the content management system according to the present invention writes the access control list on the basis of the information on the publication period associated with the content, so that the information on the publication period can be taken over by the access control list for the output content.

  Alternatively, in the content management system according to the present invention, in the database, information on the publication period of the content is associated with the content, and the writing means accesses at a timing based on the information on the publication period. A control list may be written out. Thus, the content management system according to the present invention can perform access control based on the publication period on the output content even when the information on the publication period cannot be included in the access control list.

  In the content management system according to the present invention, the database associates information on access rights to the content group with respect to the content group with which the content is associated, and the writing means includes the content An access control list for the output content corresponding to the content group may be generated based on information on access rights to the group. Thereby, the content management system according to the present invention can take over the information on the access right of the content group to the access control list when the content is managed in association with the content group.

  Also, a control method for a content management system according to the present invention is a control method for a content management system that stores a database associating at least one content and information on the access right of the content, Whether to write out the output content in a format, write out an access control list in a predetermined format based on the access right information, and whether to allow the user to access the output content based on the access control list Determining whether or not.

  A control program for a content management system according to the present invention is a control program for a content management system that stores a database associating at least one content with information on the access right of the content. The output content is written in the format, and the writing means for writing out the access control list in a predetermined format based on the access right information, and the user is allowed to access the output content based on the access control list. The computer is caused to function as an access control means for determining whether or not.

  Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

  As shown in FIG. 1, the content management system according to the embodiment of the present invention includes a content management server 10 connected via a network 22 and two web servers 20a and 20b. . In addition, although the case where content is distributed by two web servers is described here as a specific example, there may be one or three or more content publishing servers. In addition, the content publishing server according to the present embodiment does not have to be a web server, holds output content and an access control list, performs access control based on the access control list, The present invention can be applied to a content publishing server (for example, a streaming distribution server) that publishes output content. Further, the content management server and the content publishing server may be integrally configured as one server computer.

  The content management server 10 is a general server computer, and includes a control unit 11, a storage unit 12, an operation unit 13, a display unit 14, and a communication unit 15 as shown in FIG.

  Here, the control unit 11 is, for example, a CPU or the like, and operates according to a program stored in the storage unit 12. In the present embodiment, the control unit 11 performs a process of writing out an access control list based on access right information for content. The contents of the process executed by the control unit 11 will be described in detail later.

  The storage unit 12 includes at least one of a memory element such as a RAM and a ROM, a disk device, and the like. The storage unit 12 stores a program executed by the control unit 11, content to be processed in the present embodiment, information on access rights, and the like. The storage unit 12 also operates as a work memory for the control unit 11.

  The operation unit 13 is a keyboard, a mouse, or the like, receives a user's instruction operation, and outputs the content of the instruction operation to the control unit 11. The display unit 14 is a display or the like, and displays information according to an instruction from the control unit 11.

  The communication unit 15 is a network card, a modem, or the like, and transmits information via the network 22 in accordance with an instruction from the control unit 11. In addition, the communication unit 15 receives information that arrives via the network 22 and outputs the information to the control unit 11.

  The web servers 20 a and 20 b are both general server computers and are connected to the content management server 10 via the network 22. Further, it is connected to the user terminal 21 via the network 23. The web servers 20a and 20b store the output content and the access control list transmitted from the content management server 10 via the network 22 in a storage unit (not shown). In response to the content distribution request transmitted from the user terminal 21, the output content is distributed according to the access restriction conditions based on the access control list.

  The user terminal 21 is a general personal computer or the like, and is connected to the network 23 and makes a content distribution request to the web server 20a or 20b based on a user's instruction operation. Here, the network 23 may be a wide area network to which an unspecified number of terminals such as the Internet are connected, or may be a local area network such as an in-house network. Further, the network 22 and the network 23 may be a single network.

  Here, data such as content held by the storage unit 12 of the content management server 10 will be described in detail. Here, as an example, it is assumed that the content held by the content management server 10 is mail information transmitted to the mailing list. The information of each mail included in the content includes information of a message ID, a transmission date / time, a sender, a mail number, a destination, a mail title, a mail text, and an attached file, for example, as in a table shown in FIG. In addition, each mail is associated with browsing permission group information as access right information as shown in FIG. In addition, information about the publication start date and time and the publication end date and time may be associated with each content. In the example of FIG. 2, information on the publication start date / time and the publication end date / time is associated with attached files for some of the plurality of emails. Note that the content held by the content management server 10 may be managed as a group by a data structure such as a tree structure. An example of this case will be described in detail later.

  In addition, the content management server 10 holds a list of content publishing servers to which output content is to be written. The list of content publishing servers includes the host name and list format number of the content publishing server as shown in FIG. 3, for example. Here, it is assumed that server1.aaa.bbb.ccc: 8080 is the host name of the web server 20a, and server2.aaa.bbb.ccc: 8080 is the host name of the web server 20b. By using this list, the content management server 10 can generate an access control list in a format corresponding to each of the content publishing servers.

  Functionally, the content management system according to the embodiment of the present invention has a content conversion unit 31, an access control list generation unit 32, a content output unit 33, an access control unit 34, and an output content as shown in FIG. The distribution unit 35 is included. Among these functions, the content conversion unit 31 and the access control list generation unit 32 can be realized by executing a program stored in the storage unit 12 by the control unit 11 in the content management server 10. The access control unit 34 and the output content distribution unit 35 can be realized by a program stored in the web server 20a or the web server 20b. The content output unit 33 can be realized by the content management server 10 and the web server 20a or 20b operating in cooperation.

  The content conversion unit 31 converts the content into the content distribution format used by the web servers 20a and 20b based on the content information held by the content management server 10, and temporarily stores the obtained data in the storage unit 12. Remember. Specifically, for example, with respect to an HTML document template for publishing information included in an e-mail as a home page, information such as the transmission date and time, sender, e-mail title, e-mail text, and link to an attached file shown in FIG. Is embedded to generate one HTML document for each piece of mail information. Such a function can be realized by a technique disclosed in, for example, Japanese Patent Application Laid-Open No. 2004-86855. If it is not necessary to convert the content held by the content management server 10 into a distribution format, the content conversion unit 31 is not necessary. In that case, data having the same content as the content held by the content management server 10 is written to the content publishing server as output content.

  The access control list generating unit 32 generates an access control list in a format that can be used by the content publishing server based on the access right information associated with the content held by the content management server 10, and the obtained data is stored in the access control list. The data is temporarily stored in the storage unit 12. Specifically, first, the list format number of the access control list associated with the content publishing server that writes the target output content is acquired from the list of content publishing servers shown in FIG. Then, an access control list in a list format predetermined according to the acquired list format number is generated based on the access right information. For example, when the web service program used in the web server 20a is different from the web service program used in the web server 20b, the same output content is published under the same access restriction in both. In addition, the access control list generating unit 32 generates different types of access control lists for the web server 20a and the web server 20b.

  Here, the access control list generated by the access control list generating unit 32 holds information on a viewing permission group that permits browsing of the output content in association with the output content or a group such as a directory storing the output content. It is a list. In the list format in which the disclosure period can be set, information on the date and time when the user's browsing permission is started and the date and time when the user's browsing permission is stopped may be held. Furthermore, it is good also as recording combining these information. An example of the access control list generated by the access control list generation unit 32 will be described later.

  The content output unit 33 outputs the data obtained by the content conversion unit 31 to the network 22 as output content, and writes it in a predetermined directory of the web servers 20a and 20b. Similarly, the access control list generated by the access control list generation unit 32 is written in a predetermined directory of the web servers 20a and 20b. At this time, as described above, when a plurality of types of access control lists are generated in accordance with the web servers, the corresponding types of access control lists are written to the respective web servers. In the example of the content public server list shown in FIG. 3, the access control list corresponding to the list format number 1 is written to the web server 20a, and the access control list corresponding to the list format number 2 is written to the web server 20b. Write out. The content output unit 33 can be realized by, for example, an ftp function.

  The access control unit 34 functions on the web server, and determines whether or not to distribute the output content when the viewer requests distribution of the output content from the user terminal 21 via the network 23. Specifically, the access control unit 34 acquires user authentication information such as a user name and a password, for example, when an output content distribution request is received from a viewer, and refers to the access control list corresponding to the requested output content. It is then determined whether the user is permitted to browse. If the access control list includes information on the publication period, the current date and time are referred to determine whether the output content corresponds to the publication period.

  Based on the determination of the access control unit 34, the output content distribution unit 35 distributes the requested output content to the viewer. Specifically, when the access control unit 34 determines to distribute the output content, the output content distribution unit 35 transmits the requested output content to the user terminal 21. Conversely, if the access control unit 34 determines not to distribute the output content, the output content distribution unit 35 transmits information for outputting that the user terminal 21 is not authorized to view the requested output content. To do.

  Next, an example of an access control list generated by the access control list generation unit 32 and an example of access restriction by the access control unit 34 corresponding thereto will be described.

  First, an example in which the web server 20a stores output contents for performing the same access restriction in one directory will be described. For example, in the web server 20a, output contents related to a mailing list named pat-user are stored under the directory D, and this is only disclosed to viewers belonging to two user groups named pat-user and pat-mgr. For example, the access control list to be generated is as shown in FIG. The access control list shown in FIG. 5 is an access control list generated in the form of an .htaccess file that can be used in a web service such as Apache. In the access control list shown in FIG. 5, the description “require group pat-user pat-mgr” on the last line is only for viewers belonging to one of the two user groups pat-user and pat-mgr. Indicates that access is permitted. By storing this access control list in the same directory D of the web server 20a as the output contents related to the mailing list, it is possible to restrict access by the user group to the HTML document stored in the directory D.

  In this example, only the users belonging to pat-user and pat-mgr are allowed to view the output content stored in the directory D, and information on users belonging to the group is recorded in the .htgroup file. Yes. Therefore, when there is an output content distribution request from the user, the access control unit 34 refers to the .htgroup file and the user corresponding to the user authentication information received from the user terminal 21 is included in the pat-user or pat-mgr group. If it is included, it is determined to distribute the output content. If it is not included, a decision is made not to deliver the output content.

  Next, an example in the case where information regarding access restriction is set for each output content stored in the web server 20a will be described. In this case, the access control list generated by the access control list generator 32 is, for example, as shown in FIG. In the access control list shown in FIG. 6, for example, the description “1.html, pat-mgr” permits only the viewers belonging to the user group pat-mgr to access the content 1.html. Represents. This access control list is stored in a directory in which output contents such as top.html and 1.html are stored by the content output unit 33 as in the above example. In the case of this example, the access control unit 34 can be realized by a program such as dedicated web application software configured to be able to read the access control list, for example. The access control unit 34 distributes the output content for each output content for which the output content distribution request has been made from the user terminal 21 with reference to the information of the permitted user group described in the access control list. It is determined whether or not.

  Next, an example in the case of restricting browsing according to the publication period for output content will be described. For example, in the example of the content table shown in FIG. 2, the content of the attachment file report.doc with the message ID 01234@aaa.bbb.ccc is published as 10:00 on February 28, 2005 as the publication start date and time. The end date and time is set to 0:00 on March 12, 2005. In this case, the access control list generated by the access control list generation unit 32 for the attached file is, for example, as shown in FIG. This access control list is written by the content output unit 33 in the same directory as the directory storing the attached file report.doc. Similar to the above-described example, when the access control unit 34 is realized by a program such as web application software corresponding to the access control list, the access control unit 34 acquires information on the current date and time, and accesses the time information and the access information. It is determined whether or not the output content is to be distributed by comparing the information of the disclosure period set in the control list. Specifically, if the current date and time is after the publication start date and before the publication end date and time, the decision is made to deliver the output content to the user terminal 21; otherwise, the decision is made not to deliver the content. I do.

  When the access control unit 34 does not correspond to the access control list describing the publication start date / time and the publication end date / time, the publication start and publication end of the output content can be controlled by the following method. That is, first, the access control list generation unit 32 simply generates an access control list that permits browsing to users in the browsing permission group. The content output unit 33 writes the target output content and the access control list to the web servers 20a and 20b at the timing when the release start date and time arrives. Thereby, when the user makes an output content distribution request to the web server 20 a and the web server 20 b after the publication start date and time, the output content distribution unit 35 can distribute the output content to the user terminal 21. When the publication end date of the output content comes, the content management server 10 outputs a command to delete the output content to the web servers 20a and 20b. Thereby, the output content stored in the web servers 20a and 20b is deleted, and it becomes possible to prevent the user from browsing the output content after the publication end date and time.

  Further, instead of the method of outputting and deleting the output content main body, the start and end of the output content can be controlled by the following method. That is, first, the access control list generation unit 32 generates an access control list that is not permitted to be browsed by all users, and the content output unit 33 outputs the output content and the web servers 20a and 20b before the publication start date and time. Write access control list. At this stage, since the access control unit 34 determines that the output content is not distributed to all users, the user cannot view the output content even when accessing the web server 20a or 20b. Next, the access control list generation unit 32 generates an access control list that permits browsing of the users in the viewing permission group of the output content, and the content output unit 33 sets the web server 20a and The access control list is written to 20b, and the existing access control list is updated. Thereby, a user who is permitted to browse can browse the output content. Furthermore, the access control list generation unit 32 generates an access control list that does not permit browsing to all users again, and the content output unit 33 accesses the web servers 20a and 20b at the timing when the publication end date and time has come. Write a control list and update an existing access control list. Thereby, after the publication end date and time, even if the output content in the web server 20a or 20b is not deleted, the user cannot view the output content.

  As described above, according to a predetermined timing, the access control list is written to the content publishing server, and the existing access control list is updated, so that the publishing of the output content can be started without writing and deleting the output content. You can control the end of publishing. According to this method, even when the amount of output content data is large and it takes time to transmit data on the network, it is possible to control the start and end of publication at the timing intended by the content manager. In addition, according to this method, not only the start and end of publishing of content, but also a new access control list is written according to a predetermined timing and an existing access control list is updated. The user who can view the content can also be changed.

  Next, an example in which access restriction is performed on output content when the content management server 10 manages content in association with a content group, such as a tree structure, will be described. In this example, the content stored in the storage unit 12 is classified according to a tree-structured data structure as shown in FIG. 8A, for example, and each content is associated with one content group. It shall be. In the example of FIG. 8A, the contents A and B are associated with the content group “general”, and the contents C, D, and E are associated with the content group “members only”. Further, the content groups “general” and “members only” are associated with the higher content group “top”. Furthermore, it is assumed that there is no setting of a browsing permission group for the content groups “top” and “general”, and the user group all-member is associated with the content group “member-only” as a browsing permission group. Such a data structure can be realized by data in XML format as shown in FIG.

  In the case of this example, the access control list generation unit 32 generates an access control list for the output content associated with the content group based on the access right information for the content group. Here, in the case where the output contents associated with different content groups are stored in different directories on the web server 20a or 20b, the access control list generation unit, as in the example of the access control list shown in FIG. No. 32 can generate an access control list that simply describes the information of the browsing permission group without specifying the file name of each output content. Then, the content output unit 33 writes the access control list together with the output content in a directory on the web server corresponding to the content group, thereby restricting access to the output content associated with the content group.

  In addition, when output contents associated with a plurality of content groups are sometimes stored in the same directory on the web server 20a or 20b, an access control list is generated as in the example of the access control list shown in FIG. The unit 32 generates an access control list for setting the information of the viewing permission group for each output content, thereby restricting access by the different viewing permission groups for each of the output contents associated with the different content groups. be able to. According to such a method, even if the data structure of the content stored in the storage unit 12 of the content management server 10 and the directory structure of the output content stored in the web server 20a or 20b are different from each other, The access right information for the content group in the data structure can be transferred to the web server.

  Further, as shown in the example of FIG. 8A, in the hierarchical structure data in which the content group is associated with another content group, the access right information associated with the content group in a different hierarchy is included. Based on this, an access control list for the output content may be generated. Specifically, in the case of the example of FIG. 8A, when the user group pat-user is further associated with the content group “top” as the viewing permission group, the output content corresponding to the content A and B is the user The access control list generation unit 32 generates an access control list so that only the group pat-user can be viewed. On the other hand, for the output contents corresponding to the contents C, D and E, the user group pat is assigned by the viewing permission group corresponding to each of the directly associated contents group “member only” and the upper content group “top”. The access control list generating unit 32 generates an access control list so that only users who are members of -user and who are members of the user group all-member can view. Thus, when the content management server 10 manages content with a hierarchical data structure, the web servers 20a and 20b can change the hierarchical data structure by setting access right information to the content groups of the respective hierarchical levels. Even when there is no takeover, it is possible to restrict access according to the original data structure for each output content.

  Here, the access control list generation unit 32 can also use the following method when generating an access control list for the output content. That is, first, user group information is acquired as access right information associated with output content. Then, based on the acquired user group information, information on users belonging to the user group is acquired. Subsequently, an access control list is generated based on the acquired user information. For example, when there is content that is permitted to be browsed only by users belonging to the user group pat-user, the access control list generating unit 32 acquires the users belonging to the user group pat-user and allows access only to the users concerned Generate a list. As a result, even if the access control unit 34 cannot acquire information on users belonging to the user group pat-user, only the users belonging to the user group pat-user can view the output content corresponding to the content. It is possible to restrict access to be permitted. For this reason, even if the web servers 20a and 20b do not hold user group information, the content management server 10 independently generates a user group and sets access right information for the content using the user group. be able to.

  Furthermore, as described above, when generating an access control list for output content associated with a plurality of content groups, the access control list generating unit 32 uses the user group as access right information associated with each content group. The access control list may be generated based on the information of the users belonging to the user group.

  Specifically, for example, in the example of FIG. 8A described above, an example in which the user group pat-user is further associated with the content group “top” as a viewing permission group will be described. In this example, the output contents corresponding to the contents C, D, and E must be viewable only by users who are members of the user group pat-user and are members of the user group all-member. Here, the access control list generation unit 32 acquires information on users belonging to the user group pat-user and the user group all-member, and generates a list of users belonging to both groups in common. Then, an access control list that allows browsing only to users included in the generated list is generated. Thereby, even if it is a case where the information of the user who belongs to a user group cannot be acquired, the access control part 34 can perform the access restriction which permits browsing only to the user who belongs to a some user group. Moreover, in the format of the .htaccess file described above, when a plurality of user groups are listed as browsing permission groups, browsing is permitted to users belonging to any one of the listed groups. Even when an access control list of such a format is used, if the method described above is used, it is possible to perform access restriction that permits browsing only to users who belong to a plurality of user groups in common.

  Note that the access control list generation unit 32 may generate access control lists that have not only different list formats but also different access restrictions for the same content, depending on a plurality of content publishing servers. In this case, the storage unit 12 of the content management server 10 holds a plurality of pieces of information for each content publishing server as access right information associated with the content. Then, the access control list generation unit 32 generates an access control list for performing different access control for each content publishing server, based on the information of the plurality of access rights. For example, the access control list generation unit 32 browses only users belonging to the department A among users belonging to the user group pat-user in the access control list output to the web server 20a for a certain content. In the access control list to be output to the web server 20b as an authorized user, an access control list is generated so that only users belonging to the department B among the users belonging to the user group pat-user are allowed to be viewed. . Thereby, the access control list generation unit 32 can generate an access control list corresponding to the user accessing the content publishing server.

  In the following, the flow of processing when the output content is distributed to the viewer using the content management system according to the present embodiment described above will be described based on the flowchart of FIG.

  First, the content management server 10 starts writing output content at a predetermined timing or based on an instruction operation or the like by the user with respect to the operation unit 13. Specifically, the content conversion unit 31 first converts the content to be distributed into output content such as an HTML document (S1).

  Next, the access control list generation unit 32 refers to the list of content public servers stored in the storage unit 12 and acquires the list format number of the content public server to be distributed (S2). Here, if the content publishing servers to be distributed are the web servers 20a and 20b, 1 and 2 are acquired as list format numbers. Further, the access control list generation unit 32 generates an access control list for the output content to be distributed, in a list format corresponding to the acquired list format number (S3).

  When the access control list generation unit 32 generates the access control list, the content output unit 33 writes the output content and the corresponding access control list to the web servers 20a and 20b via the network 22 (S4). Here, the output content is stored in a predetermined directory on the web server. The access control list is stored in a predetermined directory or the same directory as the output content.

  After the process of S4, for example, the viewer requests the web server 20a to distribute the HTML document 1.html including the mail information of message ID 0000abc@aaa.bbb.ccc from the user terminal 21 (S5). . When the output content distribution request is transmitted to the web server 20a via the network 23, the access control unit 34 acquires the user authentication information of the viewer from the user terminal 21 (S6). Specifically, for example, a screen for prompting input of a user name, a password, or the like as user authentication information is displayed on the user terminal 21. On the other hand, the access control unit 34 acquires the user authentication information by inputting the user authentication information and transmitting it to the web server 20a.

  Subsequently, the access control unit 34 determines whether to distribute the output content to the viewer based on the user authentication information acquired in the process of S6 (S7). Here, from the table shown in FIG. 2, pat-user and pat-mgr are associated as browsing permission groups with the contents of the mail whose message ID is 0000abc@aaa.bbb.ccc. Therefore, the access control list is also shown in FIG. As shown in the example, it is assumed that information that only a user belonging to the user group can view is included. Therefore, when the user who has requested the output content distribution from the user terminal 21 is included in the pat-user or pat-mgr, the access control unit 34 determines to distribute the output content, and otherwise outputs the output content. Make a decision not to deliver.

  When the access control unit 34 determines to distribute the output content in the process of S7, the output content distribution unit 35 transmits the requested HTML document 1.html data to the user terminal 21 (S8). On the other hand, when the access control unit 34 determines not to distribute the output content in the process of S7, the output content distribution unit 35 displays message information indicating that the user terminal 21 is not permitted to view the requested output content. Transmit (S9).

  According to the present embodiment described above, when the access control of the output content written based on the content is performed based on the access right information for the content, the access control list used on the content publishing server is used as the access right. Convenience can be improved by writing based on the information.

  In the above description, the access right information associated with the content or content group held by the content management server 10 is the browsing permission group. However, the access right that can be used in this embodiment is used. This information is not limited to this. For example, information on users who are allowed to browse instead of user groups may be used, or information on user terminals such as network addresses may be used. Furthermore, when multiple types of access rights such as permission only for viewing, permission for viewing and printing, permission for editing, etc. are set for the user or user group, information on these types of access rights is included in the information. By writing out the access control list based on the information, the access right type information may be taken over by the content publishing server.

  In the above description, an example has been described in which the content output unit 33 writes the output content to the content publishing server and also writes the access control list for the output content. It is also possible to write out the control list alone. That is, in the content management server 10, when the content content is updated, but there is no change in the corresponding access right information, the content conversion unit 31 generates output content according to the updated content as necessary. Then, the content output unit 33 may write the output content to the content publishing server. On the other hand, in the content management server 10, when only the access right information is changed with the content content unchanged, the access control list generation unit 32 regenerates the access control list, and the content output unit 33 only generates the access control list. May be written to the content publishing server. As a result, the content management system according to the present embodiment allows the output content information in the content publishing server and the contents of the access control list corresponding to the information in the content publishing server as needed in response to the update of the content and access right information in the content management server 10. Can be updated.

It is a block diagram showing the schematic structure of the content management system which concerns on embodiment of this invention. 3 is an explanatory diagram illustrating an example of a data structure of content stored in a storage unit 12. FIG. 6 is an explanatory diagram illustrating an example of a data structure of a content public server list stored in a storage unit 12. FIG. It is a functional block diagram showing the function of the content management system which concerns on embodiment of this invention. It is a figure showing an example of the access control list which the access control list generation part 32 generates. It is a figure showing another example of the access control list which the access control list generation part 32 generates. It is a figure showing another example of the access control list which the access control list generation part 32 generates. 12 is an explanatory diagram illustrating another example of the data structure of content stored in the storage unit 12. FIG. It is a flowchart which shows an example of the process performed by the content management system which concerns on embodiment of this invention.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 Content management server, 11 Control part, 12 Storage part, 13 Operation part, 14 Display part, 15 Communication part, 20a and 20b Web server, 21 User terminal, 22 and 23 Network, 31 Content conversion part, 32 Access control list generation Unit, 33 content output unit, 34 access control unit, 35 output content distribution unit.

Claims (7)

A content management system for storing a database associating at least one content with information on access rights of the content,
Writing out the content as output content in a predetermined format and writing out an access control list in a predetermined format based on the access right information;
Access control means for determining whether to permit the user's access to the output content based on the access control list;
A content management system comprising: The content management system according to claim 1,
There are a plurality of the access control means,
The content management system, wherein the writing means writes a plurality of types of access control lists in accordance with the plurality of access control means. The content management system according to claim 1 or 2,
In the database, information on the publication period of the content is associated with the content,
The content management system, wherein the writing means writes an access control list including information on the publication period. The content management system according to claim 1 or 2,
In the database, information on the publication period of the content is associated with the content,
The content management system, wherein the writing means writes an access control list at a timing based on the information of the disclosure period. The content management system according to any one of claims 1 to 4,
In the database, access right information for the content group is associated with the content group associated with the content,
The content writing system, wherein the writing unit generates an access control list for the output content corresponding to the content group based on information on an access right to the content group. A control method of a content management system for storing a database that associates at least one content with information on access rights of the content,
Writing the content as output content of a predetermined format and writing an access control list of a predetermined format based on the access right information;
Determining whether to allow a user access to the output content based on the access control list;
A method for controlling a content management system, comprising: A control program for a content management system that stores a database that associates at least one content with information on access rights of the content,
Writing out the content as output content in a predetermined format, writing out an access control list in a predetermined format based on the access right information, and a user to the output content based on the access control list Access control means for determining whether or not to permit access
A control program for a content management system, which causes a computer to function as:

Images