JP2007310822A - Information processing system and information control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an information processing system capable of inexpensively providing the same effect as a thin client server system. <P>SOLUTION: This information processing system is composed of an information control server 4 connected to a network 5, storing control object data, associated with the control object data, storing output environment limiting data capable of specifying an output possibility state of an external output part for approving of access to the control object data and having output environment limiting data transmission processing for transmitting output environment limiting data in response to the access from a notebook personal computer 1, a communication part communicating data via the network 5, the external output part capable of outputting the control object data or processed data after processing information on the control object data to an external apparatus, and the notebook personal computer 1 having output possibility state transfer processing for transferring an output possibility state in response to reception of the output environment limiting data and executing information processing by making access to the control object data via the communication part. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information processing system and an information management program including a server computer and an information processing terminal.

  In recent years, due to the downsizing and high functionality of computer terminals that serve as information processing terminals, laptop computers and the like are often used as portable client terminals in server client systems.

  Since these notebook PCs used as client terminals were developed for general personal use, many functions related to the output (transmission, display, printing, and storage) of information to external devices Since there is a rich client terminal with an interface, there is a large risk that information (data) used in these notebook computers etc. is illegally obtained by a third party intentionally or negligently, Therefore, as these client terminals, dedicated computer terminals whose functions are limited so as to have only a specific function, that is, a thin client server system using a so-called thin client has been used (for example, see Patent Document 1).

JP 2003-330728 A

  If these thin client server systems are introduced, the risk of information leakage etc. can be greatly reduced and the security of the system can be improved. However, a dedicated thin client is used instead of the rich client terminal currently used. In addition to the need to introduce a client terminal, it is necessary to provide a server with a high processing capacity to complement the functions restricted in the thin client terminal in the server. There is also a problem that many rich client terminals to be replaced are wasted.

  The present invention has been made paying attention to such problems, and an object of the present invention is to provide an information processing system and an information management program that can obtain the same effect as a thin client server system at low cost.

In order to solve the above problem, an information processing system according to claim 1 of the present invention provides:
A server computer that is connected to a data communication network so as to be capable of data communication and stores management target data including management target information to be managed;
Data communication means for performing data communication with the server computer via the data communication network, and external output means capable of outputting the management target data or processed data after processing the management target data to an external device At least an information processing terminal for accessing the management target data stored in the server computer through the data communication means and performing information processing on the accessed management target data;
An information processing system comprising:
The server computer
In association with the management target data, storing output environment restriction data capable of specifying an access permission output permission / non-permission state which is an output permission / non-permission state of the external output means permitting access to the management target data;
In response to access from the information processing terminal, output environment restriction data transmitting means for transmitting output environment restriction data corresponding to management target data to be accessed to the information processing terminal,
In response to reception of the output environment restriction data, the information processing terminal shifts the output permission state in the external output means to the access permission output permission state specified from the received output environment restriction data. It is characterized by providing a means.
According to this feature, the output environment restriction data corresponding to the management target data is transmitted to the information processing terminal as the access target, and the access permission output enable / disabled state specified from the output environment restriction data is changed to the external state in the information processing terminal. Since the output enable / disable state of the output means is automatically shifted, information processing related to the management target data and post-process data is processed only in the access permission output enable / disable state in which the functions of these external output means are limited. Since it can be implemented in the terminal, the same effect as the thin client server system can be obtained at low cost.

An information processing system according to claim 2 of the present invention is the information processing system according to claim 1,
The server computer
In association with the management target data, in addition to the output environment restriction data, storing verification data for authenticating an access user permitted to access the management target data,
Authentication data acquisition means for acquiring authentication data for authentication from the information processing terminal in response to access from the information processing terminal;
Whether or not the access is an access by an access user having access authority based on the verification data corresponding to the management target data to be accessed and the authentication data acquired by the authentication data acquisition means An authentication means for performing authentication;
When the authentication result by the authentication means is an authentication result that the access user having access authority does not access, the information processing terminal cannot access the management target data, while the authentication result by the authentication means An access control means for permitting access by the information processing terminal to the management target data when the authentication result indicates that the access is by an access user having an access right;
It is characterized by having.
According to this feature, only the access user who is permitted to access can access the management target data, so that the security can be further improved.

An information processing system according to claim 3 of the present invention is the information processing system according to claim 1 or 2,
The information processing terminal includes an internal storage device that stores a plurality of application programs that can be executed in the information processing terminal for performing information processing related to the management target data.
The output environment restriction data further includes start-permitted application information that can identify an application program that is permitted to be executed in the information processing terminal that has accessed when permitting access to the corresponding management target data,
The server computer, in response to access from the information processing terminal, transmits the activation permission application information included in the output environment restriction data corresponding to the management target data to be accessed to the information processing terminal. Comprising information transmission means,
In response to reception of the activation permitted application information, the information processing terminal receives only the application program specified from the received activation permitted application information from among the plurality of application programs stored in the internal storage device. It is characterized by comprising application state transition means for transitioning to an access permission application state executable in the processing terminal.
According to this feature, the activation permitted application information included in the output environment restriction data corresponding to the management target data to be accessed is transmitted to the information processing terminal, and the access permitted application state specified from the activation permitted application information is automatically set. Therefore, information processing related to managed data and post-processing data can be performed only in an access-permitted application state in which only these specific application programs can be executed. Since the output of information to the outside by using an application program other than a specific application program can be avoided, security can be further improved.

An information processing system according to a fourth aspect of the present invention is the information processing system according to any one of the first to third aspects,
The output environment restriction data is output environment restriction data capable of specifying an individual access permission output permission state and / or an access permission application state corresponding to the location of the information processing terminal,
The information processing terminal includes location information acquisition means for acquiring location information that can identify the location of the information processing terminal,
The output permission state transition unit and / or the application state transition unit are identified from the received output environment restriction data and / or the activation permission application information and the location information acquired by the location information acquisition unit. It is characterized in that a transition to an access permission output permission state and / or an access permission application state corresponding to a location is performed.
According to this feature, it is possible to shift to an access permission output permission state and / or an access permission application state depending on where the information processing terminal is located, for example, in the office and outside the office, depending on the location. The information processing terminal can be easily transferred to the restricted state.

An information processing system according to a fifth aspect of the present invention is the information processing system according to any one of the first to fourth aspects,
The output environment restriction data is XML data described in an XML (eXtensible Markup Language) description format.
According to this feature, the output environment restriction data can be used without depending on the platform of the information processing terminal, and the data capacity can be suppressed to a relatively small amount.

An information processing system according to a sixth aspect of the present invention is the information processing system according to any one of the first to fifth aspects,
The information processing terminal includes an internal storage device capable of storing the management target data or the processed data,
The access permission output permission / prohibition state specified from the output environment restriction data includes a state in which the management target data or the processed data cannot be stored in the internal storage device.
According to this feature, storage to the internal storage device is disabled by accessing the management target data, so that the management target data and the processed data are not stored in the internal storage device, and these information processing The risk of information leakage due to loss of the terminal can be greatly reduced.

An information management program according to claim 7 of the present invention provides:
It is connected to the data communication network so that data communication is possible, and is executed in a first program execution unit of a server computer that stores management target data including management target information to be managed,
Data communication means for performing data communication with the server computer via the data communication network, and external output means capable of outputting the management target data or processed data after processing the management target data to an external device At least, the management target data stored in the server computer is accessed through the data communication means, and is executed in a second program execution unit of an information processing terminal that performs information processing on the accessed management target data An information management program,
The server computer stores, in association with the management target data, output environment restriction data capable of specifying an access permission output permission state that is an output permission state of the external output means that permits access to the management target data. And
Causing the first program execution unit to function as output environment restriction data transmission means for transmitting output environment restriction data corresponding to management target data to be accessed to the information processing terminal in response to access from the information processing terminal;
Output permission / inhibition that causes the second program execution unit to shift the output permission / prohibition state in the external output means to the access permission output permission / inhibition state specified from the received output environment restriction data in response to reception of the output environment restriction data It is characterized by functioning as state transition means.
According to this feature, the output environment restriction data corresponding to the management target data is transmitted to the information processing terminal as the access target, and the access permission output enable / disabled state specified from the output environment restriction data is changed to the external state in the information processing terminal. Since the output enable / disable state of the output means is automatically shifted, information processing related to the management target data and post-process data is processed only in the access permission output enable / disable state in which the functions of these external output means are limited. Since it can be implemented in the terminal, the same effect as the thin client server system can be obtained at low cost.

An information management program according to claim 8 of the present invention is the information management program according to claim 7,
The server computer stores verification data for authenticating an access user who is permitted to access the management target data in addition to the output environment restriction data in association with the management target data.
The first program execution unit is
Authentication data acquisition means for acquiring authentication data for authentication from the information processing terminal in response to access from the information processing terminal;
Whether or not the access is an access by an access user having access authority based on the verification data corresponding to the management target data to be accessed and the authentication data acquired by the authentication data acquisition means An authentication means for performing authentication;
When the authentication result by the authentication means is an authentication result that the access user having access authority does not access, the information processing terminal cannot access the management target data, while the authentication result by the authentication means An access control means for permitting access by the information processing terminal to the management target data when the authentication result indicates that the access is by an access user having an access right;
It is characterized by functioning.
According to this feature, only the access user who is permitted to access can access the management target data, so that the security can be further improved.

An information management program according to claim 9 of the present invention is the information management program according to claim 7 or 8,
The information processing terminal includes an internal storage device that stores a plurality of application programs that can be executed in the information processing terminal for performing information processing on the management target data.
The output environment restriction data further includes start-permitted application information that can identify an application program that is permitted to be executed in the information processing terminal that has accessed when permitting access to the corresponding management target data,
In response to an access from the information processing terminal, the first program execution unit transmits the activation permission application information included in the output environment restriction data corresponding to the management target data to be accessed to the information processing terminal. Let it function as an activation permission application information transmission means,
In response to the reception of the activation permission application information, the second program execution unit only selects an application program specified from the received activation permission application information among the plurality of application programs stored in the internal storage device. It is characterized by functioning as an application state transition means for shifting to an access permission application state executable in the information processing terminal.
According to this feature, the activation permitted application information included in the output environment restriction data corresponding to the management target data to be accessed is transmitted to the information processing terminal, and the access permitted application state specified from the activation permitted application information is automatically set. Therefore, information processing related to managed data and post-processing data can be performed only in an access-permitted application state in which only these specific application programs can be executed. Since the output of information to the outside by using an application program other than a specific application program can be avoided, security can be further improved.

An information management program according to claim 10 of the present invention is the information management program according to any one of claims 7 to 9,
The output environment restriction data is output environment restriction data capable of specifying an individual access permission output permission state and / or an access permission application state corresponding to the location of the information processing terminal,
The second program execution unit is
Location information acquisition means for acquiring location information that can identify the location of the information processing terminal;
Access permission output permission status and / or access permission corresponding to the location specified by the location information acquired by the location information acquired by the output environment restriction data and / or the activation license application information received by the location information acquisition means. The output enable / disable state transition means and / or application state transition means for transitioning to an application state;
It is characterized by functioning.
According to this feature, it is possible to shift to an access permission output permission state and / or an access permission application state depending on where the information processing terminal is located, for example, in the office and outside the office, depending on the location. The information processing terminal can be easily transferred to the restricted state.

An information management program according to claim 11 of the present invention is the information management program according to any one of claims 7 to 10,
The output environment restriction data is XML data described in an XML (eXtensible Markup Language) description format.
According to this feature, the output environment restriction data can be used without depending on the platform of the information processing terminal, and the data capacity can be suppressed to a relatively small amount.

An information management program according to claim 12 of the present invention is the information management program according to any one of claims 7 to 11,
The information processing terminal includes an internal storage device capable of storing the management target data or the processed data.
The access permission output permission / prohibition state specified from the output environment restriction data includes a state in which the management target data or the processed data cannot be stored in the internal storage device.
According to this feature, storage to the internal storage device is disabled by accessing the management target data, so that the management target data and the processed data are not stored in the internal storage device, and these information processing The risk of information leakage due to loss of the terminal can be greatly reduced.

  Examples of the present invention will be described below.

  An embodiment of the present invention will be described with reference to the drawings. First, FIG. 1 is a system configuration diagram showing an overview of an information processing system of the present embodiment to which the present invention is applied.

  The information processing system according to the present embodiment uses an information management server 4 as a server computer according to the present invention, and the information management server 4 and a network 5 that serves as a data communication network according to the present invention. And a notebook personal computer 1 as an information processing terminal of the present invention used by a person.

  The information management server 4 of the present embodiment is a server control unit (not shown) that is a first program execution unit of the present invention, which includes a CPU (Central Processing Unit), a RAM (Random Access Memory), and a ROM (Read Only Memory). And a server storage unit (not shown) for storing various data and a server communication unit (not shown) for transmitting and receiving data via the network 5 such as a LAN (Local Area Network) or the Internet. The As the information management server 4 used in this embodiment, a general server computer can be preferably used.

  The notebook personal computer 1 of the present embodiment includes a control unit (not shown) serving as a second program execution unit of the present invention including a CPU (Central Processing Unit), a RAM (Random Access Memory), and a ROM (Read Only Memory). A communication unit (not shown) serving as a data communication means of the invention for transmitting and receiving data via an internal storage device (not shown) of the present invention such as a hard disk drive and a network 5 such as a LAN (Local Area Network) or the Internet. And a USB interface unit 3 including a connector to which the USB memory 2 is attached and a USB communication unit that transmits and receives data to and from the USB memory 2.

  As the notebook personal computer 1 used in the present embodiment, a general personal computer including an input device such as a display and a keyboard capable of displaying various information can be suitably used.

  In the notebook personal computer 1, the display driver (not shown) is released to output (display) data on a display, the data is output (transmitted) to a network via a communication unit (not shown), or the communication unit ( The data can be output (printed) to a printer via the USB interface unit 3 (not shown). Furthermore, the data is output to various applications such as word processors and spreadsheets, processed to create new post-processing data, and the post-processing data is external devices of the present invention such as a display, a network, and a printer. Can also be output. The driver, the communication unit, and the USB interface unit 3 for outputting to the external output device are the external output means of the present invention.

  As shown in FIG. 1, a USB memory 2 connected to the USB interface unit 3 of the notebook computer 1 is a storage medium having a square bar shape in cross section, and a flash memory (not shown) that is a non-volatile memory is included therein. ) Is installed.

  As shown in FIG. 1, there are two types of places where the notebook computer 1 is used: inside the company where the user is employed (inside the company) and as shown in FIG.

  As shown in FIG. 1, in the case of using in-house, the notebook personal computer 1 is connected to the in-house network 5, and the user stores data stored in the information management server 4 connected to the network 5. Can be displayed on the notebook personal computer 1, displayed, printed, processed using an application, or stored in the USB memory 2. Some of the data acquired from the information management server 4 is confidential, and it is necessary to manage the data output environment so that such data is not leaked to a third party.

  On the other hand, as shown in FIG. 2, when the notebook computer 1 is connected to a network 5 ′ capable of data communication with the information management server 4 at home or outside, the user can use the network. The data stored in the information management server 4 connected to 5 'is acquired and displayed on the notebook computer 1, displayed, printed, processed using an application, or a USB memory. 2 can be stored.

  Note that the network 5 ′ for connecting to the information management server 4 from home or outside, specifically, depending on the line to which the server communication unit (not shown) of the information management server 4 is connected, These can be suitably used depending on whether the mobile phone network or the public line network is connected.

  In the present embodiment, data that needs to manage the data output environment so as not to be leaked to a third party is collectively referred to as management target data.

  As shown in FIG. 4, the information management server 4 of this embodiment stores management target data, user data for appropriately controlling the output environment of the management target data, and output environment restriction data. .

  The user data and output environment restriction data are XML data described in an XML (eXtensible Markup Language) description format, as shown in FIGS.

  In other words, the output environment restriction data in this embodiment is XML data described in the XML (eXtensible Markup Language) description format, and corresponds to the output environment restriction data in claims 5 and 11 of the present invention.

  As shown in FIGS. 3A and 3B, the user data includes a group name (ID), password, and group name as identification information of the user's group. Multiple settings are possible). The group name is predetermined.

  For example, FIG. 3A describes user data in which the ID is “user_1”, the password is “PASSWORD_1”, and the group is “general user”. FIG. 3B describes user data having an ID of “user_2”, a password of “PASSWORD_2”, a group of “general user” and “administrator”.

  As shown in FIGS. 4 and 5, the output environment restriction data includes management target data information that is specific information of the management target data that is the target of output environment restriction, and restrictions that serve as a method for limiting the output environment of the management target data. It consists mainly of rules (multiple settings are possible).

  First, the management target data information will be described. As shown in FIG. 4, the management target data information includes a server position, an external position, and an apparent position.

  As the server position, data serving as a storage position of management target data in the information management server 4 is stored. The external location is data stored when the management target data is management target data acquired from the in-house information management server 4 (see FIG. 1) and stored in the USB memory 2. Data that is the storage position of the target data is stored. In the apparent position, data serving as an apparent storage position for the user to access the management target data stored in the information management server 4 is stored.

  For example, in the apparent position, a “personal folder” determined in advance so that the user can select with few operations in the OS (Operating System) of the notebook personal computer 1 is stored. Based on this information, the user can access the management target data stored in the external location by a simple operation of selecting “personal folder”.

  Next, the restriction rule (multiple settings are possible) will be described. As shown in FIGS. 4 and 5, the restriction rule includes application conditions and restriction contents. In this embodiment, the restriction rule is called a restriction rule in the sense that when the application condition is satisfied, the restriction content is applied to the management target data.

  The application condition includes a user to be applied (multiple settings are possible), a group to be applied (multiple settings are possible), and a location to be applied (multiple settings are possible). When all the conditions regarding the user, group, and place that constitute the application condition are satisfied, the restriction rule is selected as an application target. If you want to apply regardless of the user, group, or location, you do not have to describe the items you do not want to be related.

  In the user, the ID of the user to be applied is described. In addition, all registered users are defined as special IDs, which conform to the IDs of all users. In the group, a group name to be applied is described. In the place, a place name is described as identification information of a place to be applied. The place name is predetermined.

  That is, the item of the location constituting the output environment restriction data of this embodiment corresponds to the location of the information processing terminal, and the output environment restriction data of this embodiment is output in claims 4 and 10 of the present invention. Corresponds to environmental restriction data.

  The restriction content includes restriction content of the user interface, restriction content of the device, and restriction content of the permitted application, and corresponds to the access permission output permission / prohibition state of the present invention.

  The user interface describes whether to permit output of management target data to the desktop and whether to permit output to the screen for each item registered in advance in the menu.

  Whether to allow the device to output (transmit) the management target data to a communication unit (not shown) for data communication via the network, or permit the management target data to be output (printed) to the printer. Whether to allow output (save) of management target data to an internal storage device (not shown), output of management target data to a medium writing device loaded with a writable medium (writing) ) Is permitted or not.

  Note that the network item constituting the output environment restriction data only sets whether to permit output (transmission) to the network, but the data of a specific server (server name) It may be possible to set whether to permit output, output of specific data (other than management target data), and output of data to a specific network (a predetermined range of IP addresses).

  That is, the setting value of the item of the internal storage device constituting the output environment restriction data of the present embodiment includes a state incapable of storing (inhibited) the management target data or the processed data in the internal storage device. The output environment restriction data in the example corresponds to the output environment restriction data in claims 6 and 12 of the present invention.

  In the permitted application, identification information of all applications permitted to output the management target data is described. Outputting to these applications means that the display and change of the management target data are allowed and the post-processing data of the present invention is created.

  In other words, the permitted application items constituting the output environment restriction data of this embodiment correspond to the activation permitted application information in claims 3 and 9 of the present invention.

  With the items as described above, as shown in FIG. 4, it is possible to describe a restriction rule that applies loose restrictions when the location is in the company. Specifically, as an application condition, when access to the management target data is desired, the user of the notebook computer 1 is a registered user who is registered in advance and belongs to the general user group. It is described that the location of the notebook computer 1 is in-house. Further, as restrictions, output of management target data to the desktop, output of all menus, output of management target data to the network, output of management target data to the external storage device (USB memory 2 in this embodiment), It describes that output of management target data to the specified application is permitted. On the other hand, in consideration of being a general user group rather than an administrator, output of management target data to a printer, output of management target data to an internal storage device, output of management target data to a medium writing device, Is described as prohibition.

  FIG. 5 illustrates a restriction rule that applies strict restrictions when the location is outside the company. Specifically, as an application condition, when access to the management target data is desired, the user of the notebook computer 1 is a registered user registered in advance as a user and belongs to any group, and It is described that the location of the notebook computer 1 is outside the company, that is, all registered users. In addition, as a restriction content, it is described that output of a part of menus such as e-mails and output of management target data to an external storage device are permitted. On the other hand, output of management target data to the desktop, output of most menus, output of management target data to the network, output of management target data to the printer, output of management target data to the internal storage device, medium writing device It is described that the output of management target data to and the output of management target data to applications are prohibited.

  FIG. 6 is a diagram illustrating an example of restriction contents according to the location. In this example, the inside and outside of the company are defined first, and also in the company, a case where there are a section that handles confidential information (confidential section) and a section that does not handle confidential information (general section) is defined. Confidential areas are, for example, development areas for new products. In these confidential areas, many employees are highly aware of information leaks, and there are many cases where measures are taken. There is no need. Even when there are three sections with different restriction contents to be applied in this way, if the restriction rule description method of this embodiment is used, the most restrictive restriction contents (for example, only mail prohibition) are applied to the confidential section. Although the section is not as loose as the confidential section, it has sufficient restrictions (for example, email prohibition, printing prohibition, installation prohibition) necessary for business operations, and severe restrictions for external information leakage countermeasures (for example, application restrictions) , Copy prohibition, and network prohibition) can be described.

  In the present embodiment, the location is set as in-house or outside, but the present invention is not limited to this, and can be determined (specified) by location-location information acquisition (specific) processing described later. Any setting may be used. For example, a necessary number of homes, stations, business partners, etc. may be set as appropriate.

  The notebook personal computer 1 used in the present embodiment has a dedicated application program (hereinafter referred to as the following) that provides a function for restricting the output environment of the management target data based on the above-described output environment restriction data shown in FIGS. (Referred to as a restriction application) is installed and is always running. This restriction application constantly monitors the access to the management target data, the output of the management target data to the network, the output to the printer, and the output to the output destination described in the output environment restriction data. The output is restricted according to the output environment restriction data.

  Although the configuration is such that the restriction application is always executed, the present invention is not limited to this. Each time access to the management target data predetermined in the output environment restriction data or to the output destination is performed. A configuration may be adopted in which a restriction application is incorporated into the OS so that it is executed only when necessary for each output.

  The processing contents of the restriction application of this embodiment will be described based on the sequence diagram of FIG. 9 and the screen diagram of FIG.

  The notebook personal computer 1 that is an information processing terminal can output data to a network 5 and a printer. Various internal applications are stored in an internal storage device, and a USB memory 2 that is an external storage device. Is connected.

  A plurality of management target data is stored in the information management server 4 connected to be capable of data communication via the network 5, and a plurality of output environment restriction data is stored in association with these management target data. Further, a plurality of user data of users who can use the information management server 4 are stored.

  For example, one output environment restriction data for management target data consisting of a folder containing four files, one output environment data for management target data consisting of a folder containing five files, and one management target consisting of one file The data is stored in association with one output environment restriction data.

  In this embodiment, as shown in FIG. 4, output environment restriction data for management target data whose apparent position is “personal folder” is stored as output environment restriction data. It is also assumed that output environment restriction data for management target data having other apparent positions, for example, “contract document folder” is also stored.

  Here, when the user inputs an ID and password in the notebook computer 1 and performs a login operation, the restriction application transmits authentication data including the ID and password to the information management server 4. The authentication data is stored in an internal storage device (not shown).

  The information management server 4 performs authentication data acquisition processing and acquires authentication data. Then, an authentication process is performed to determine whether user data in which an ID and a password included in the authentication data are associated with each other is stored, and the determination result is transmitted to the notebook computer 1.

  If the control application of the notebook personal computer 1 that has received the determination result of the authentication process is the determination result indicating that the authentication process is stored, the login application is permitted and the predetermined login process is performed. If it is, login is refused.

  In a state where the login is permitted, the restriction application accepts an access operation to the management target data stored in the information management server 4 from the user (S101). For example, in the screen of FIG. 7, when the “private document 1” stored in the “personal folder” corresponding to the apparent position of the management target data is double-clicked with the mouse, the data is sent to the word processor application. Is accepted to output.

  The restriction application performs an output environment restriction data acquisition process (S102), and the authentication data stored in the internal storage device (not shown) in the information management server 4 is information that can identify the received management target data ( A file name “external secret document 1”) is transmitted.

  The information management server 4 performs authentication data acquisition processing (S111) and acquires authentication data.

  In other words, the authentication data acquisition process (S111) acquires authentication data for authentication from the information processing terminal in response to access from the information processing terminal (notebook computer 1). The information management server 4 including a server control unit (not shown) that performs the acquisition process forms authentication data acquisition means according to claims 2 and 8 of the present invention.

  The information management server 4 that has acquired the authentication data performs an authentication process (S112), and determines whether user data in which an ID and a password included in the authentication data are associated with each other is stored (OK).

  The information management server 4 that has performed the authentication process performs a determination process (S113) to determine whether the result of the authentication process is OK or NG. Send to app.

  If the information management server 4 determines that the result of the authentication process is OK in S113, the information management server 4 performs the output environment restriction data transmission process (S114), and registers “personal folder” as the apparent position of the management target data. The output environment restriction data is specified, and the output environment restriction data is transmitted to the restriction application of the notebook computer 1.

  In other words, the information management server 4 transmits that the result of the authentication process is NG or the output environment restriction data to the restriction application of the notebook computer 1.

  As described above, the output environment restriction data of the present embodiment associates the management target data with the ID of the user who is permitted to access the management target data. The data associates an ID of a user who is allowed to access the management target data with a password for authenticating the user.

  In other words, the output environment restriction data and the user data of the embodiment are associated with the management target data to authenticate an access user who is permitted to access the management target data in addition to the output environment restriction data. Data is stored and corresponds to the verification data in claims 2 and 8 of the present invention.

  Further, the authentication process (S112) in the information management server 4 includes verification data (output environment restriction data and user data) corresponding to the management target data to be accessed and authentication data acquisition means (authentication data acquisition process). And a server control unit (not shown) for performing the authentication process, based on the authentication data acquired in this step, for authenticating whether or not the access is an access by an access user having access authority. The information management server 4 forms authentication means in claims 2 and 8 of the present invention.

  When the information management server 4 transmits that the result of the authentication process is NG, the restriction application that performs the output environment restriction data acquisition process (S102) does not perform the subsequent processes. A message indicating that access is prohibited or that the management target data is absent is output (displayed).

  When the information management server 4 has transmitted the output environment restriction data, the restriction application receives the transmitted output environment restriction data based on the execution of the output environment restriction data acquisition process (S102). To do.

  That is, the output environment restriction data transmission process (S114) transmits the output environment restriction data corresponding to the management target data to be accessed to the information processing terminal in response to the access from the information processing terminal (notebook computer 1). The information management server 4 including a server control unit (not shown) that performs the output environment restriction data transmission process forms output environment restriction data transmission means according to claims 1 and 7 of the present invention.

  In addition, the output environment restriction data transmission process (S114), in response to an access from the information processing terminal (notebook computer 1), starts-permitted application information (permissions included in the output environment restriction data corresponding to the management target data to be accessed). The information management server 4 that transmits the application) to the information processing terminal and includes a server control unit (not shown) that performs the output environment restriction data transmission processing is activated in claims 3 and 9 of the present invention. A licensed application information transmission unit is formed.

  Also, the location information acquisition (identification) processing is performed (S103), and the location is identified. In this embodiment, if output to the network is possible, that is, if it is connected to the network, it is specified as in-house, and if output to the network is impossible, it is specified as outside.

  In other words, the location information acquisition (identification) processing (S103) acquires location information that can identify the location of the information processing terminal, and executes the location information acquisition (identification) processing ( A notebook personal computer 1 having a not-shown configuration forms location information acquisition means according to claims 4 and 10 of the present invention.

  The location may be acquired (specified) by connecting the GPS device to the notebook computer 1. In this case, the GPS information is acquired from the GPS device by the location information acquisition (specific) processing. Then, it is only necessary to acquire (specify) the location.

  If the RFID (Radio Frequency IDentification) reader / writer is mounted on the notebook computer 1 and an RFID tag that can identify the location is attached to the location, the location can be read by reading the RFID tag from the notebook computer 1. Can be specified. In this case, the location information may be acquired (specified) by acquiring information of the RFID tag in the location information acquisition (specification) processing.

  Then, the restriction application specifies output environment restriction data to be applied based on the user data and the location (S104). Specifically, among the multiple restriction rules included in the output environment restriction data in which “personal folder” is registered as the apparent position of the management target data, the user data of the currently logged-in user and the specified location Identify restriction rules with applicable conditions that fall under. If there is no applicable application condition, no restriction rule is specified.

  The restriction application that specified the restriction rule performs output permission / prohibition state transition processing (S105), and sets the output permission / prohibition state of various output environments according to the restriction contents included in the restriction rule. As a result, for example, the menu is restricted as shown in FIG. 7, or output to the printer is prohibited. In S104, if no restriction rule is specified, an output permission state is set in which all outputs are rejected.

  That is, in the output permission / prohibition state transition process (S105), in response to the reception of the output environment restriction data, the output permission / prohibition state in the external output means is changed to the access permission output permission / prohibition state (restriction) specified from the received output environment restriction data. The notebook personal computer 1 having a control unit (not shown) that performs the output permission / prohibition state transition processing forms output permission / prohibition state transition means according to claims 1 and 7 of the present invention.

  In the output permission / prohibition state transition process (S105), the control content of the restriction application is set so that execution of the application is permitted or rejected based on the setting value of the permitted application that constitutes the restriction content.

  In other words, the output permission / prohibition state transition process (S105) is executed in response to the reception of the start permission application information (output environment restriction data including the permission application) of a plurality of application programs stored in the internal storage device (not shown). Among them, only the application program specified from the received start-permitted app information is transferred to the access-permitted app state (restricted contents) that can be executed in the information processing terminal, and the control unit that executes the output permission / prohibition state transfer processing A notebook personal computer 1 having (not shown) forms application state transition means in claims 3 and 9 of the present invention.

  In the output permission / prohibition state transition process (S105), the control content of the restriction application is set so that the output of data to the network is permitted or rejected based on the setting value of the network constituting the restriction content. . As a result, the control content of the restriction application is set so that data output from any application to the network is permitted or denied.

  Even when data output to the network is prohibited by the control application, an output environment restriction data acquisition process for determining whether to allow access to the management target data from the control application ( It is assumed that the output of data targeted for transmission / reception by the information management server 4 in S102) is allowed.

  Further, in the output permission / prohibition state transition process (S105), based on the setting value of the internal storage device constituting the restriction content, the control content of the restriction app so that the output of data to the internal storage device is permitted or rejected. Is set. As a result, the control content of the restriction application is set so that output of data from any application to the internal storage device is permitted or denied.

  The restriction application that sets the output permission status of various output environments according to the restriction contents of the output environment restriction data performs the management object data acquisition process (S106), and the management object data acquisition request that the user tried to access in S101. Is transmitted to the information management server 4, the management target data is acquired from the information management server 4, and output processing corresponding to the user's access is performed. If the output corresponding to the user's access is not permitted in the output enabled / disabled state, the management target data acquisition process (S106) is not performed and the access is prohibited or the management target Output (display) a message that data is absent.

  As described above, based on the output environment restriction data, the output environment of the management target data is restricted according to the user and the location.

  That is, the determination process (S113) and the output environment restriction data transmission process (S114) in the information management server 4 are authentication results indicating that the authentication result by the authentication means (authentication process) is not an access by an access user having access authority. In some cases (when it is determined in S113 that the result of the authentication process is NG), the information processing terminal cannot access the management target data (by not transmitting the output environment restriction data, the notebook computer 1 control application is not allowed to execute the processing of S103 to S106, and in particular, the processing of transmitting the acquisition request of the management target data (S106) is not executed). If the result is an authentication result indicating access by the user, Access is permitted by the information processing terminal (the process of transmitting the acquisition request for the management target data to the control application of the notebook personal computer 1 is performed by transmitting the output environment restriction data) (S106). The information management server 4 including a server control unit (not shown) that performs processing and output environment restriction data transmission processing forms access control means in claims 2 and 8 of the present invention.

  In addition, the output permission / prohibition state transition process (S105) includes the received output environment restriction data and / or activation permitted application information (output environment restriction data including a permitted application), and location information acquisition means (location information acquisition (specification)). The access permission output status (restricted content) and / or access permitted application status (restricted content) corresponding to the location specified from the location information acquired in (Process) The notebook computer 1 provided with a control unit (not shown) for performing the state transition process forms output enable / disable state transition means and / or application state transition means according to claims 4 and 10 of the present invention.

  In the notebook computer 1 or the information management server 4 used in this embodiment, a dedicated application program (hereinafter referred to as a “creation application”) for creating the output environment restriction data shown in FIGS. 4 and 5 is installed. Has been.

  The processing contents of the creation application of this embodiment will be briefly described based on the screen diagram of FIG. As described above with reference to FIGS. 4 and 5, the output environment restriction data is mainly composed of management target data information and restriction rules (multiple settings are possible) that are methods for limiting the output environment of the management target data. Is done. The restriction rule is composed of application conditions and restriction contents.

  The upper part of FIG. 8 is an input area for management target data information, and the lower part of FIG. 8 is an area for inputting one restriction rule. The lower part of FIG. 8 further includes an application condition input area and restriction content input areas (three).

  As an input procedure, the user inputs the managed data information, and operates the “Add restriction rule” button located at the bottom of the input area of the managed data information. In order to start editing a new restriction rule associated with the data information, the application condition and the input contents of the restriction contents are initialized (for example, all are not restricted).

  Then, when the user inputs the application condition and the restriction content and operates the “Register editing rule” button arranged at the bottom of the input area of the management target data information, the creation application A restriction rule composed of the input contents of restriction contents is newly associated with the management target data information, and output environment restriction data is generated and stored.

  In addition, a plurality of restriction rules can be associated with the management target data information. However, when the “rule list” button arranged at the lower part of the input area of the management target data information is operated, it is associated with the management target data information. A rule list screen (not shown) that displays the list of the restricted rules that can be selected is output. When the user selects one restriction rule on the rule list screen, the application condition and restriction content of the selected restriction rule are reflected in the application condition and restriction content input content in the lower part of FIG.

  In this situation, the application for creation is output by the user entering the applicable conditions and restrictions, and operating the “Register editing rule” button located at the bottom of the input area of the managed data information. A restriction rule composed of application conditions and restriction contents registered in association with the management target data information in the environment restriction data is updated based on the input contents.

  On the other hand, when the user operates the “Delete rule being edited” button located at the bottom of the input area of the management target data information, the creation application is registered in association with the management target data information. Delete restriction rules consisting of conditions and restriction contents from the output environment restriction data.

  Next, an information processing system to which the information processing terminal according to the second embodiment is applied will be described with reference to FIG. As a feature of the second embodiment, in the first embodiment, the information management server 4 stores a plurality of output environment restriction data in association with the management target data, and the user tries to access the management target data. When the corresponding output environment restriction data is specified and the output permission / prohibition state transition processing is performed according to the output environment restriction data each time, the information management server 4 outputs the output environment restriction data as the management target data. The output environment restriction data is specified when the user logs in, and the output permission / prohibition state transition process is executed once according to the output environment restriction data at the time of login. Yes, since the other system configuration is the same as the information processing system of the first embodiment, the description of the same part is omitted. It will be described below characteristic part of the changes to become the second embodiment from Example 1.

  Hereinafter, the processing contents of the restriction application of the second embodiment will be described based on the sequence diagram of FIG. 10 and the screen diagram of FIG.

  In the notebook personal computer 1 which is an information processing terminal according to the second embodiment, data output to a network and a printer is possible, and various applications are stored in a built-in internal storage device. A USB memory 2 is connected.

  The information management server 4 connected to be communicable via the network 5 stores a plurality of management target data, and stores only one output environment restriction data in association with all the management target data. . Further, a plurality of user data of users who can use the information management server 4 are stored.

  For example, only one output environment restriction data is stored for management target data including a folder including 10 files.

  As described with reference to FIGS. 4 and 5, the output environment restriction data can describe a plurality of restriction rules therein, and the restriction rules have restriction contents according to users and places. Therefore, even when only one output environment restriction data is stored, a plurality of restriction contents associated with users and places can be described.

  In this embodiment, as the output environment restriction data, as shown in FIG. 4, only the output environment restriction data for the management target data whose apparent position is “personal folder” is stored, and the management is the other apparent position. It is assumed that the target data is not stored and the output environment restriction data is not stored.

  In such a case, after logging in, there is no need to limit the output environment according to the management target data to be accessed. Limit the environment.

  The user performs login operation by inputting the ID and password in the notebook computer 1 (S201).

  The restriction application performs output environment restriction data acquisition processing (S102), and transmits authentication data including an ID and a password to the information management server 4. The authentication data is stored in an internal storage device (not shown).

  The information management server 4 performs authentication data acquisition processing (S211), and acquires authentication data.

  The information management server 4 that has acquired the authentication data performs an authentication process (S212), and determines whether user data in which an ID and a password included in the authentication data are associated with each other is stored (OK).

  The information management server 4 that has performed the authentication process performs a determination process (S213) to determine whether the result of the authentication process is OK or NG. Send to app.

  If the information management server 4 determines that the result of the authentication process is OK in S213, the information management server 4 performs the output environment restriction data transmission process (S214), and registers “personal folder” as the apparent position of the management target data. The output environment restriction data is specified, and the output environment restriction data is transmitted to the restriction application of the notebook computer 1.

  In other words, the information management server 4 transmits that the result of the authentication process is NG or the output environment restriction data to the restriction application of the notebook computer 1.

  When the information management server 4 has transmitted that the result of the authentication process is NG, the restriction application that performs the output environment restriction data acquisition process (S202) does not perform the subsequent processes. Output (display) a message that login is prohibited. This corresponds to the login being rejected.

  When the information management server 4 has transmitted the output environment restriction data, the restriction application receives the transmitted output environment restriction data based on the execution of the output environment restriction data acquisition process (S202). To do. This corresponds to the fact that login is permitted.

  The restriction application that permits login performs location location information acquisition (identification) processing (S203), and identifies the location. In this embodiment, if output to the network is possible, that is, if it is connected to the network, it is specified as in-house, and if output to the network is impossible, it is specified as outside.

  Then, the restriction application specifies output environment restriction data to be applied based on the user data and the location (S204). Specifically, among the plurality of restriction rules included in the output environment restriction data, a restriction rule having application conditions corresponding to the user data of the currently logged-in user and the specified location is specified. If there is no applicable application condition, no restriction rule is specified.

  The restriction application that specified the restriction rule performs output permission / prohibition state transition processing (S205), and sets the output permission / prohibition state of various output environments according to the restriction content included in the restriction rule. As a result, for example, the menu is restricted as shown in FIG. 7, or output to the printer is prohibited. In S204, if no restriction rule is specified, the output permission / rejection state is set in which all outputs are rejected.

  In the output permission / prohibition state transition process (S205), the control content of the restriction application is set so that the execution of the application is permitted or rejected based on the setting value of the permitted application that constitutes the restriction content.

  Further, in the output permission / prohibition state transition process (S205), the control contents of the restriction application are set so that the output of data to the network is permitted or rejected based on the setting value of the network constituting the restriction contents. . As a result, the control content of the restriction application is set so that data output from any application to the network is permitted or denied.

  Even when data output to the network is prohibited by the control application, an output environment restriction data acquisition process for determining whether to allow access to the management target data from the control application ( It is assumed that the output of data targeted for transmission / reception by the information management server 4 in S202) is allowed.

  Further, in the output permission / prohibition state transition process (S205), based on the setting value of the internal storage device constituting the restriction content, the control content of the restriction app so that the output of data to the internal storage device is permitted or rejected. Is set. As a result, the control content of the restriction application is set so that output of data from any application to the internal storage device is permitted or denied.

  At this point, since the output environment is limited corresponding to all the management target data, the user can safely access the management target data without performing the output permission state transition process thereafter. The access (acquisition) of the management target data after the output enable / disable state transition processing is the same as in the first embodiment, and thus detailed description and illustration in FIG. 10 are omitted.

  The restriction application that sets the output permission status of various output environments in accordance with the restriction contents of the output environment restriction data transmits a request to acquire management target data to be accessed by the user to the information management server 4. The management target data is acquired from the above, and output processing corresponding to the user's access is performed. If output corresponding to the user's access is not permitted in the output enabled / disabled state, a message indicating that access is prohibited or that the management target data is absent is output (displayed). To do.

  As described above, based on the output environment restriction data, the output environment of the management target data is restricted according to the user and the location.

  When only one output environment restriction data is stored in the information management server 4 as in the present embodiment, and it is only necessary to perform the output permission state transition process at the time of login, the OS reads only once at the time of login. The output environment can be restricted by changing the setting data before the OS reads it. For example, it is possible to set whether to output to a network or a printer, and output contents of a menu.

  However, depending on the specifications of the OS, there are output destinations that cannot be restricted by setting data. In such a case, a special restriction application for restricting output to the output destination may be incorporated into the OS.

  Next, an information processing system to which the information processing terminal according to the third embodiment is applied will be described with reference to FIG. As a feature of the third embodiment, in the first and second embodiments, the restriction app of the information processing terminal performs the output permission / prohibition state transition process according to the output environment restriction data regardless of the current function restriction state. On the other hand, it is determined whether or not the current function restriction state is less than or equal to the restriction content of the output environment restriction data, and when it is less than or equal to the restriction content, the output permission state transition process is performed. Since other system configurations are the same as those of the information processing system of the first embodiment, the description of the same parts will be omitted, and the features of the third embodiment that are changes from the first embodiment will be omitted. The part will be described below.

  Hereinafter, the processing content of the restriction application of the third embodiment will be described based on the sequence diagram of FIG. 11 and the screen diagram of FIG.

  The notebook personal computer 1 that is an information processing terminal can output data to a network and a printer. Various applications are stored in the internal storage device, and a USB memory 2 that is an external storage device is provided. It is connected.

  The information management server 4 connected to be communicable via the network 5 stores a plurality of management target data, and stores a plurality of output environment restriction data in association with these management target data. . Further, a plurality of user data of users who can use the information management server 4 are stored.

  For example, one output environment restriction data for management target data consisting of a folder containing four files, one output environment data for management target data consisting of a folder containing five files, and one management target consisting of one file The data is stored in association with one output environment restriction data.

  In this embodiment, as shown in FIG. 4, output environment restriction data for management target data whose apparent position is “personal folder” is stored as output environment restriction data. It is also assumed that output environment restriction data for management target data having other apparent positions, for example, “contract document folder” is also stored.

  Here, when the user inputs an ID and password in the notebook computer 1 and performs a login operation, the restriction application transmits authentication data including the ID and password to the information management server 4. The authentication data is stored in an internal storage device (not shown).

  The information management server 4 performs authentication data acquisition processing and acquires authentication data. Then, an authentication process is performed to determine whether user data in which an ID and a password included in the authentication data are associated with each other is stored, and the determination result is transmitted to the notebook computer 1.

  If the control application of the notebook personal computer 1 that has received the determination result of the authentication process is the determination result indicating that the authentication process is stored, the login application is permitted and the predetermined login process is performed. If it is, login is refused.

  In a state where this login is permitted, the restriction application accepts an access operation to the management target data stored in the information management server 4 from the user (S301). For example, in the screen of FIG. 7, when the “private document 1” stored in the “personal folder” corresponding to the apparent position of the management target data is double-clicked with the mouse, the data is sent to the word processor application. Is accepted to output.

  The restriction application performs output environment restriction data acquisition processing (S302), and the authentication management data stored in the internal storage device (not shown) in the information management server 4 is information that can identify the received management target data ( A file name “external secret document 1”) is transmitted.

  The information management server 4 performs authentication data acquisition processing (S311) and acquires authentication data.

  The information management server 4 that has acquired the authentication data performs an authentication process (S312), and determines whether user data in which an ID and a password included in the authentication data are associated with each other is stored (OK).

  The information management server 4 that has performed the authentication process performs a determination process (S313) to determine whether the result of the authentication process is OK or NG. Send to app.

  If the information management server 4 determines that the result of the authentication process is OK in S313, the information management server 4 performs the output environment restriction data transmission process (S314), and registers “personal folder” as the apparent position of the management target data. The output environment restriction data is specified, and the output environment restriction data is transmitted to the restriction application of the notebook computer 1.

  In other words, the information management server 4 transmits that the result of the authentication process is NG or the output environment restriction data to the restriction application of the notebook computer 1.

  If the restriction application that performs the output environment restriction data acquisition process (S302) transmits that the result of the authentication process is NG, the information management server 4 does not perform the subsequent processes. A message indicating that access is prohibited or that the management target data is absent is output (displayed).

  When the information management server 4 transmits the output environment restriction data, the restriction application receives the output environment restriction data transmitted based on the execution of the output environment restriction data acquisition process (S302). To do.

  Also, the location information acquisition (identification) process is performed (S303), and the location is identified. In this embodiment, if output to the network is possible, that is, if it is connected to the network, it is specified as in-house, and if output to the network is impossible, it is specified as outside.

  The location may be acquired (specified) by connecting the GPS device to the notebook computer 1. In this case, the GPS information is acquired from the GPS device by the location information acquisition (specific) processing. Then, it is only necessary to acquire (specify) the location.

  Further, if an RFID reader / writer is mounted on the notebook computer 1 and an RFID capable of specifying the location is attached to the location, the location can be specified by reading the RFID from the notebook computer 1. In this case, the location information may be acquired (specified) by acquiring RFID in the location information acquisition (specific) processing.

  Then, the restriction application specifies output environment restriction data to be applied based on the user data and the location (S304). Specifically, among the multiple restriction rules included in the output environment restriction data in which “personal folder” is registered as the apparent position of the management target data, the user data of the currently logged-in user and the specified location Identify restriction rules with applicable conditions that fall under. If there is no applicable application condition, no restriction rule is specified.

  Further, the restriction application performs a function restriction state determination (specification) process (S305), and determines (specifies) the output enable / disable states of various output environments at the present time. For example, it is determined (specified) whether the menu is restricted as shown in FIG. 7 or output to the printer is prohibited. Any method may be used as the determination (identification) method. In this embodiment, the determination is made by storing the output availability state that was transferred when the access request to the previous management target data was received. . In such a case, when an access request to the first management target data is received, the output availability state is not stored, but if it is not stored, it is specified that determination (specification) cannot be made. It ’s fine.

  Further, in the function restriction state determination (specification) process (S305), based on the restriction rule specified in S304 and the function restriction state determined (specified), whether or not the function restriction state is equal to or less than the output environment restriction data. Determine whether. In the function restriction state, if all outputs prohibited by the restriction rule are prohibited, it is determined that the following is true. That is, the following means that in addition to the output prohibited by the restriction rule, the output permitted by the restriction rule may be further prohibited. When the function restriction state is not stored and is not determined (specified), it is always determined that it is not the following.

  Further, in the function restriction state determination (specific) processing (S305), the output environment restriction is based on the storage status of the output enable / disable state of various output environments at the current time and the permitted application that constitutes the restriction contents of the output environment restriction data. It is determined whether execution of an application prohibited in the data is rejected.

  Further, in the function restriction state determination (specific) processing (S305), the output environment restriction data is based on the storage status of the output enable / disable states of the various output environments at the present time and the network constituting the restriction contents of the output environment restriction data. When it is prohibited in the above, it is determined whether the output of data to the network is rejected.

  The restriction application that has determined whether the function restriction state is equal to or less than the output environment restriction data (restriction rule) performs an access control process according to the determination content (S306). When it is determined that the following (YES), the process proceeds to S308, and when it is determined that it is not the following (NO), the process proceeds to S307.

  The restriction application that has not been determined that the function restriction state is equal to or less than the output environment restriction data (restriction rule) (determined as NO) performs the output permission / prohibition state transition process (S307), and in accordance with the restriction contents included in the restriction rule, Set the output status of the output environment. As a result, for example, the menu is restricted as shown in FIG. 7, or output to the printer is prohibited. The set output enable / disable state is stored in the internal storage device and used in the next function restriction state determination (specification) process. In S304, when the restriction rule is not specified, the output permission / rejection state is set in which all outputs are rejected.

  Further, in the output permission / prohibition state transition process (S307), the control contents of the restriction application are set so that the execution of the application is permitted or rejected based on the setting value of the permitted application constituting the restriction contents.

  In addition, in the output permission / prohibition state transition process (S307), the control content of the restriction application is set so that the output of data to the network is permitted or rejected based on the setting value of the network constituting the restriction content. . As a result, the control content of the restriction application is set so that data output from any application to the network is permitted or denied.

  Even when data output to the network is prohibited by the control application, an output environment restriction data acquisition process for determining whether to allow access to the management target data from the control application ( It is assumed that the output of data targeted for transmission / reception by the information management server 4 in S302) is allowed.

  Further, in the output permission / prohibition state transition process (S307), based on the setting value of the internal storage device constituting the restriction content, the control content of the restriction application so that the output of data to the internal storage device is permitted or rejected. Is set. As a result, the control content of the restriction application is set so that output of data from any application to the internal storage device is permitted or denied.

  As in the second embodiment, only one output environment restriction data is stored in the information management server 4, and in the case of a restriction application that executes the output permission / prohibition state transition process only when logging in, First, in an access control process performed in conjunction with access to the management target data, the user is logged out centrally, a login screen is displayed, and the user is prompted to log in again. Then, in the output permission / prohibition state transition process associated with the user login, the output permission / prohibition state may be shifted.

  The restriction application that determines that the function restriction state is equal to or less than the output environment restriction data (determined YES) or sets the output permission state of various output environments according to the restriction contents of the output environment restriction data, performs the management target data acquisition process. In step S <b> 308, the management target data acquisition request that the user tried to access is transmitted to the information management server 4, and the management target data is acquired from the information management server 4 to be accessed by the user. Perform the corresponding output process. If the output corresponding to the user's access is not permitted in the output enabled / disabled state, the management target data acquisition process (S308) is not performed and a message indicating that the access is prohibited is output ( indicate.

  As described above, based on the output environment restriction data, the output environment of the management target data is restricted according to the user and the location.

  As described above, according to each of the embodiments, the output environment restriction data corresponding to the management target data is transmitted to the notebook personal computer 1 and the access permission output permission / prohibition state (restriction contents) specified from the output environment restriction data is transmitted. ), The output enable / disable state of the external output means in the notebook personal computer 1 is automatically shifted. Therefore, the external output means such as the communication section with the network and printer, the USB interface section 3 and the display driver of the display are used. Information processing related to data to be managed and post-processing data can be executed in the information processing terminal only in the access permission output enabled / disabled state where the function is limited, so that the same effect as the thin client server system can be obtained at low cost. be able to.

  Further, according to each of the above embodiments, only the access user who is permitted to access can access the management target data, so that the security can be further improved.

  Further, according to each of the embodiments, the activation permitted application information (permitted application) included in the output environment restriction data corresponding to the management target data to be accessed is transmitted to the notebook computer 1 and specified from the activation permitted application information. Information processing related to managed data and post-processing data only in the access permission application state in which only these specific application programs can be executed. Therefore, it is possible to avoid the easy output of information to the outside by using an application program other than these specific application programs, so that the security can be further improved.

  In addition, according to each of the above embodiments, the access permission output permission status (restricted contents) and / or the access permission application status that differ depending on the location of the notebook computer 1, for example, in the office and outside the office. (Restriction content) can be transferred, and the notebook computer 1 can be easily transferred to a restricted state according to the location.

  Further, according to each of the embodiments, not only the output environment restriction data can be used without depending on the platform of the notebook personal computer 1, but also the data capacity can be suppressed to a relatively small amount.

  In addition, according to each of the embodiments, since the storage to the internal storage device is disabled when accessing the management target data, the management target data and post-processing data are stored in the internal storage device. The risk of information leakage due to loss of the notebook computer 1 can be greatly reduced.

  In addition, according to each of the above embodiments, when accessing the management target data, since it automatically shifts to the output restriction state set in the management target data, the owner or administrator of the management target data Can forcibly shift to the output restriction state, and can reliably prevent unauthorized use and leakage of the management target data.

  Although the embodiments of the present invention have been described with reference to the drawings, the specific configuration is not limited to these embodiments, and modifications and additions within the scope of the present invention are included in the present invention. It is.

  For example, in the above-described embodiment, the USB memory 2 including the USB interface unit is used as an external storage device that can be connected to the information processing terminal. However, the present invention is not limited to this, and the USB memory is not limited thereto. The external storage device such as 2 may not be provided, and the external storage device may be a storage device other than the USB memory 2, for example, a hard disk drive including a USB interface unit. Alternatively, the mobile phone 7 may be a mobile phone 7 that has a built-in hard disk drive 8 and is capable of wireless data communication with a notebook computer 1 ′ (not shown) having a wireless communication unit. For such a wireless communication system, infrared rays, a wireless LAN, or the like can be used.

  When these mobile phones 7 are used as external storage devices, as described above, the location is acquired by connecting a GPS device to the notebook personal computer 1 serving as an information processing terminal or mounting an RFID reader / writer. In the same manner as described above, when the mobile phone 7 has a GPS function or is equipped with an RFID reader / writer, GPS information and tags for specifying the location from the mobile phone 7 are used. Data may be acquired.

  Further, in the above-described embodiment, it is configured to determine whether it is external or in-house depending on the presence / absence of connection to the information management server 4, but the present invention is not limited to this and is determined based on other criteria. May be. For example, even if there is a network connection, it may be configured to determine whether the server that outputs special data that can be identified as being in-house can be detected via the network, whether it is in-house or outside the company. good. Further, as described in the embodiments, the location may be determined using a GPS or an RFID tag.

  In the embodiment, both the output restriction of the management target data to the external device such as the communication unit with the network or the printer, the USB interface unit 3 and the display driver of the display and the output restriction to the management target data to the application are both performed. Although the configuration is implemented, the present invention is not limited to this, and may be configured to only limit output of management target data to an external device.

  In the embodiment, the information management server 4, which is a server computer, stores data to be managed, output environment restriction data, and user data. The notebook personal computer 1 is always connected to the information management server 4 from the information management server 4. The output environment restriction data and other data are read out, but the present invention is not limited to this, and the output environment restriction data and other data read out from the information management server 4 are transferred from the information management server 4 to the network. 5 is cached (temporarily stored) in the internal storage device of the notebook personal computer 1 or the USB memory 2 that can be read out at a relatively high speed compared with the data obtained through the data storage 5 and the cached output environment restriction data is used. You may perform the process mentioned above. According to this configuration, high-speed processing is possible.

  Instead of caching the output environment restriction data and other data that have been read once, all the data may be read out and cached on condition that the information management server 4 detects the connection.

  In addition, in such a configuration, the management target data may be cached. However, if these caches are executed, the possibility that the management target data leaks from the cached data increases. A configuration in which the management target data is not cached may be used.

  In the above-described embodiment, the apparent position is “personal folder”, but the present invention is not limited to this, and the apparent position can be any folder or the like, for example, a confidential folder. It is good as it is.

  In the embodiment, the authentication process is performed based on the user data and the authentication data, which are verification data. However, the present invention is not limited to this, and these authentication processes are performed. It is good also as a structure which is not implemented.

  As an application example of the present invention, management target data is stored in a content server serving as the information management server 4 as, for example, music or video content data, and the information processing terminal is connected to the Internet network or video or audio recording is performed. When accessing such content data, such as a hard disk recorder having a function, by restricting storage of the content data to a hard disk, which is an internal storage device of the hard disk recorder, and output to an external storage device, these contents It is considered possible to utilize the present invention to prevent unauthorized use and unauthorized copying of data.

It is a figure which shows the utilization condition in the company of the information processing terminal in the Example of this invention. It is a figure which shows the utilization condition outside the information processing terminal in the Example of this invention. (A), (b) is a figure which shows the structure of user data. It is a figure which shows the structure of output environment restriction data. It is a figure which shows the structure of output environment restriction data. It is a figure which shows the restriction | limiting condition of the output environment according to a location. It is a screen figure which shows the restriction | limiting condition of the output environment of the information processing terminal to which output environment restriction data was applied. It is a screen figure which shows the setting screen of output environment restriction data. It is a figure which shows the process of the application for output environment restrictions. It is a figure which shows the modification of the process of the application for output environment restrictions. It is a figure which shows the modification of the process of the application for output environment restrictions.

Explanation of symbols

1 Notebook PC 1 (information processing terminal)
2 USB memory 3 USB interface unit 4 Information management server (server computer)
5 Network (data communication network)

Claims (12)

A server computer that is connected to a data communication network so as to be capable of data communication and stores management target data including management target information to be managed;
Data communication means for performing data communication with the server computer via the data communication network, and external output means capable of outputting the management target data or processed data after processing the management target data to an external device At least an information processing terminal for accessing the management target data stored in the server computer through the data communication means and performing information processing on the accessed management target data;
An information processing system comprising:
The server computer
In association with the management target data, storing output environment restriction data capable of specifying an access permission output permission / non-permission state which is an output permission / non-permission state of the external output means permitting access to the management target data;
In response to access from the information processing terminal, output environment restriction data transmitting means for transmitting output environment restriction data corresponding to management target data to be accessed to the information processing terminal,
In response to reception of the output environment restriction data, the information processing terminal shifts the output permission state in the external output means to the access permission output permission state specified from the received output environment restriction data. An information processing system comprising means. The server computer
In association with the management target data, in addition to the output environment restriction data, storing verification data for authenticating an access user permitted to access the management target data,
Authentication data acquisition means for acquiring authentication data for authentication from the information processing terminal in response to access from the information processing terminal;
Whether or not the access is an access by an access user having access authority based on the verification data corresponding to the management target data to be accessed and the authentication data acquired by the authentication data acquisition means An authentication means for performing authentication;
When the authentication result by the authentication means is an authentication result that the access user having access authority does not access, the information processing terminal cannot access the management target data, while the authentication result by the authentication means An access control means for permitting access by the information processing terminal to the management target data when the authentication result indicates that the access is by an access user having an access right;
The information processing system according to claim 1, further comprising: The information processing terminal includes an internal storage device that stores a plurality of application programs that can be executed in the information processing terminal for performing information processing related to the management target data.
The output environment restriction data further includes start-permitted application information that can identify an application program that is permitted to be executed in the accessed information processing terminal when permitting access to the corresponding management target data.
The server computer, in response to access from the information processing terminal, transmits the activation permission application information included in the output environment restriction data corresponding to the management target data to be accessed to the information processing terminal. Comprising information transmission means,
In response to reception of the activation permitted application information, the information processing terminal receives only the application program specified from the received activation permitted application information from among the plurality of application programs stored in the internal storage device. The information processing system according to claim 1, further comprising an application state transition unit that transitions to an access permission application state executable in the processing terminal. The output environment restriction data is output environment restriction data capable of specifying an individual access permission output permission state and / or an access permission application state corresponding to the location of the information processing terminal,
The information processing terminal includes location information acquisition means for acquiring location information that can identify the location of the information processing terminal,
The output permission state transition unit and / or the application state transition unit are identified from the received output environment restriction data and / or the activation permission application information and the location information acquired by the location information acquisition unit. 4. The information processing system according to claim 1, wherein a transition to an access permission output permission state and / or an access permission application state corresponding to a location is performed.   5. The information processing system according to claim 1, wherein the output environment restriction data is XML data described in an XML (eXtensible Markup Language) description format. The information processing terminal includes an internal storage device capable of storing the management target data or the processed data,
The access permission output permission / prohibition state specified from the output environment restriction data includes a state in which the management target data or the processed data cannot be stored in the internal storage device. Information processing system described in 1. It is connected to the data communication network so that data communication is possible, and is executed in a first program execution unit of a server computer that stores management target data including management target information to be managed,
Data communication means for performing data communication with the server computer via the data communication network, and external output means capable of outputting the management target data or processed data after processing the management target data to an external device At least, the management target data stored in the server computer is accessed through the data communication means, and is executed in a second program execution unit of an information processing terminal that performs information processing on the accessed management target data An information management program,
The server computer stores, in association with the management target data, output environment restriction data capable of specifying an access permission output permission state that is an output permission state of the external output means that permits access to the management target data. And
Causing the first program execution unit to function as output environment restriction data transmission means for transmitting output environment restriction data corresponding to management target data to be accessed to the information processing terminal in response to access from the information processing terminal;
Output permission / inhibition that causes the second program execution unit to shift the output permission / prohibition state in the external output means to the access permission output permission / inhibition state specified from the received output environment restriction data in response to reception of the output environment restriction data An information management program that functions as state transition means. The server computer stores verification data for authenticating an access user who is permitted to access the management target data in addition to the output environment restriction data in association with the management target data.
The first program execution unit is
Authentication data acquisition means for acquiring authentication data for authentication from the information processing terminal in response to access from the information processing terminal;
Whether or not the access is an access by an access user having access authority based on the verification data corresponding to the management target data to be accessed and the authentication data acquired by the authentication data acquisition means An authentication means for performing authentication;
When the authentication result by the authentication means is an authentication result that the access user having access authority does not access, the information processing terminal cannot access the management target data, while the authentication result by the authentication means An access control means for permitting access by the information processing terminal to the management target data when the authentication result indicates that the access is by an access user having an access right;
The information management program according to claim 7, wherein the information management program is made to function. The information processing terminal includes an internal storage device that stores a plurality of application programs that can be executed in the information processing terminal for performing information processing on the management target data.
The output environment restriction data further includes start-permitted application information that can identify an application program that is permitted to be executed in the accessed information processing terminal when permitting access to the corresponding management target data.
In response to an access from the information processing terminal, the first program execution unit transmits the activation permission application information included in the output environment restriction data corresponding to the management target data to be accessed to the information processing terminal. Let it function as an activation permission application information transmission means,
In response to the reception of the activation permission application information, the second program execution unit only selects an application program specified from the received activation permission application information among the plurality of application programs stored in the internal storage device. The information management program according to claim 7 or 8, wherein the information management program functions as an application state transition unit that shifts to an access-permitted application state executable in the information processing terminal. The output environment restriction data is output environment restriction data capable of specifying an individual access permission output permission state and / or an access permission application state corresponding to the location of the information processing terminal,
The second program execution unit is
Location information acquisition means for acquiring location information that can identify the location of the information processing terminal;
Access permission output permission status and / or access permission corresponding to the location specified by the location information acquired by the location information acquired by the output environment restriction data and / or the activation license application information received by the location information acquisition means. The output enable / disable state transition means and / or application state transition means for transitioning to an application state;
The information management program according to claim 7, wherein the information management program is made to function.   11. The information management program according to claim 7, wherein the output environment restriction data is XML data described in an XML (eXtensible Markup Language) description format. The information processing terminal includes an internal storage device capable of storing the management target data or the processed data.
The access permission output permission / prohibition state specified from the output environment restriction data includes a state in which the management target data or the processed data cannot be stored in the internal storage device. Information management program described in 1.

Images