JP2007323548A - File management method based on network folder - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a file management method ensuring security without causing deterioration in convenience of a user nor without bothering the user with special operation. <P>SOLUTION: When a file generated in a personal computer is transmitted to a file server via a communication line to be managed in it, security is assured. The personal computer stores a shortcut file to provide an access path to the file. The fact that key information is stored in the folder and authentication is carried out by using the key information, dispenses with special operation and improves user convenience. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a management method for protecting document file data from threats of unauthorized use by a malicious other company, and more particularly to a file management method suitable for improving user convenience without requiring a special operation by the user.

  In recent years, information systemization has progressed and information has been converted to data, so information leakage of corporate information and personal information has become a social problem. With the downsizing of personal computers and data storage media, theft and loss have become opportunities for information leakage.

  Therefore, there are information leakage countermeasure technologies such as data encryption technology and thin client.

JP 2005-327233 A

  The conventional information leakage countermeasure technology is a method of ensuring security by restricting operations that can be used by the user and forcing the user to perform special operations. Therefore, there is a problem that convenience for the user is impaired.

  An object of the present invention is to provide a file management method that ensures security without impairing user convenience and without making the user aware of special operations.

  In order to achieve the above object, in the present invention, software is installed in a personal computer to create and manage special folders and manage key information for authentication. The file server connected to the personal computer via a communication line stores the document file entity and manages the authentication key information.

  In the present invention (feature corresponding to claim 1), the substance of the document file is managed in an area on the file server, and a shortcut that records the path to the file is arranged in the personal computer. The user can use the file by operating the shortcut in the same manner as a normal file. Since it is possible to authenticate to the file server by performing an operation on the shortcut, the user can use the file without performing a special operation.

  In the present invention (feature corresponding to claim 2), authentication key information is assigned to each special folder storing files, and management is performed in a database on the file server.

  The key information is transmitted through a communication line connecting the personal computer and the file server, and is used for authenticating the user. The user can perform authentication without performing a special operation.

  In the present invention (feature corresponding to claim 3), user authentication is performed using key information corresponding to a folder, and only when authentication is performed, the substance of the file managed by the file server is transmitted to the software on the personal computer. To do. Therefore, an unauthenticated user cannot use a file, and can protect information from a threat of unauthorized use.

  According to the present invention (claim 1), the file entity is managed only on the file server, and the shortcut is arranged and managed without placing the entity on the personal computer. Therefore, the personal computer is illegally used and the file is wiretapped. It is possible to protect the information written in the file from such threats.

  Further, according to the present invention (Claim 2 and Claim 3), authentication is performed based on key information assigned to a folder, so that files can be managed without requiring a user to perform a special operation such as inputting a password. There are advantages.

  Hereinafter, embodiments will be described with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of a file management system using a network folder to which the present invention is applied. In FIG. 1, 10 is a personal computer, 11 is a storage area of a disk device connected to the personal computer, 20 is a file server, 21 is a storage area of a disk device connected to the file server, and 30 is a personal computer 10 and a file server. 20 is a communication line connecting 20. In the embodiment of the present invention, only one personal computer is connected. Needless to say, however, more personal computers are actually connected to the file server 20.

  The personal computer has software 40, and similarly the file server 20 has software 41. The software 40 has a role of replacing an address for accessing a file folder or a document file recognized by the operating system of the personal computer. Also, key information is created and assigned to the folder by a predetermined algorithm. This is used as key information for authentication. The personal computer 10 has a folder 50 for storing and managing shortcut files in the storage area 11 of the disk device. The folder has key information 51 for authentication created by the software 40. The authentication key cannot be referred to or updated by a user operation. In the actual situation of the present invention, it is assumed that the key information of folders A, B, and C is a, b, and c, respectively. The folder has a shortcut file 52 for each file. The shortcut file 52 is created every time the user stores a file in a folder. The shortcut file is managed in a folder instead of an actual file and provides information for accessing the file to the user. The software 41 manages key information transmitted from the software 40 in the database 80. The database is stored in the storage area 22 of the disk device so that it cannot be accessed without permission from a personal computer. The file server 20 has a folder having the same configuration as the folder of the personal computer in the storage area 21 of the disk device. In the actual situation of the present invention, it is assumed that the folders A ′, B ′, and C ′ correspond to the folders A, B, and C. Creating a folder with the same structure as a personal computer facilitates file management and search processing.

  The actual file 70 is stored in the folder. Real file 70. Prevent unauthorized access from a personal computer.

  Next, folder creation processing in the file management system using network folders will be described with reference to the flowchart of FIG. The figure shows a case where a user creates a folder. The user activates a folder creation process from the software 40 (S201). The software 41 creates key information for each folder by a predetermined algorithm (S202). The created key information 51 is transmitted to the file server software 41 through the communication line 30 (S203). The software 41 stores the received key information in a database that manages the key information (S204). If the storage result is successful (S205), the software 40 creates a folder and returns a response of the creation result to the user (S207). If the storage result is unsuccessful for some reason (S205), a response that the creation result is unsuccessful is returned to the user (S206).

  The folder deletion process in the file management system using the network folder will be described with reference to the flowchart of FIG. The figure shows a case where a user deletes a folder. The user activates a folder deletion process from the software 40 (S301). The key information 51 stored in the folder is transmitted to the file server software 41 through the communication line 30 (S302). The software 41 searches the database based on the received key information and confirms that there is a folder corresponding to the record having the matched key information (S303). If the authentication result is successful (S304), the software 40 deletes the folder (S306), and the software 41 invalidates the information of the record corresponding to the corresponding folder.

  If the authentication result is unsuccessful for some reason, a response that the creation result is unsuccessful is returned to the user (S305).

  A file creation process in the file management system using a network folder will be described with reference to the flowchart of FIG. The figure shows a case where a user creates a file. The user creates the file 70 by using a file creation word processor application installed in the personal computer (S401). The file 70 is confidential and is stored in a network folder created in advance to prevent unauthorized use (S402). By storing the file in the folder, the file creation process of the software 40 is started. In the file creation process, first, the key information stored in the folder is read, and the key information is transmitted to the file server (S403). The software 41 searches the database based on the received key information and confirms that there is a folder corresponding to the record having the matched key information (S404). If the authentication result is successful (S405), the software 40 transmits the file 70 to the file server 20 (S407). A shortcut file 52 is created by the software 41 for the received file 70 (S408). The shortcut file stores information for accessing the actual file (S409). The software 41 transmits the created shortcut file to the software 40 (S410). The software 40 stores the received shortcut file (S411) in the folder 50 (S412) and deletes the file 70 (S413). Since the file 70 is deleted from the storage area of the disk device connected to the personal computer at this time, it can be protected from unauthorized use. If the authentication result is unsuccessful for some reason, a response that the creation result is unsuccessful is returned to the user (S406).

  The file use processing in the file management system using the network folder will be described with reference to the flowchart of FIG. The figure shows a case where a user uses a file. The user performs an activation process on the shortcut file of the file that the user wants to use (S501). By starting the shortcut file, the file use processing of the software 40 is started. In the file use process, first, the key information stored in the folder is read, and the key information is transmitted to the file server (S502). The software 41 searches the database based on the received key information, and confirms that a folder corresponding to the record having the matched key information exists (S503). If the authentication result is successful (S504), the software 41 transmits the file to the personal computer 10 (S506). The software 40 stores the received file (S507) in the temporary area (S508), and provides access information for the file stored in the temporary area to the application designated by the user (S509). The user edits the file as necessary (S510), and ends the editing operation. (S511). The software 40 transmits the file 70 that has been edited to the file server 20 (S512). A shortcut file 52 is created by the software 41 for the received file 70 (S513). The shortcut file stores information for accessing the actual file (S514). The software 41 transmits the created shortcut file to the software 40 (S515). The software 40 stores the received shortcut file (S516) in the folder 50 (S517) and deletes the file 70 (S518). Since the file 70 is deleted from the storage area of the disk device connected to the personal computer at this time, it can be protected from unauthorized use. If the authentication result is unsuccessful for some reason, a response that the use processing result is unsuccessful is returned to the user (S505).

  The file deletion process in the file management system using the network folder will be described with reference to the flowchart of FIG. The figure shows a case where a user deletes a file. The user deletes the shortcut file stored in the folder (S601). The software 40 first reads the key information stored in the folder and transmits the key information to the file server (S602). The software 41 searches the database based on the received key information, and confirms that there is a folder corresponding to the record having the matched key information (S603). If the authentication result is successful (S604), the file corresponding to the deleted shortcut file is deleted (S606). The software 40 deletes the shortcut file (S607). If the authentication result is unsuccessful for some reason, a response that the use processing result is unsuccessful is returned to the user (S605).

The block diagram which shows embodiment of this invention. The flowchart which shows the procedure of the folder creation process in FIG. The flowchart which shows the procedure of the folder deletion process in FIG. The flowchart which shows the procedure of the file creation process in FIG. The flowchart which shows the procedure of the file utilization process in FIG. The flowchart which shows the procedure of the file deletion process in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 ... Personal computer, 11 ... Disk area, 20 ... File server, 21 ... Disk area, 30 ... Communication line, 40 ... Software introduced into personal computer, 41 ... Software introduced into file server, 50 ... Folder on personal computer side 51 ... Authentication key 52 ... Shortcut file 60 ... File server side folder 70 ... Real file 80 ... Database for managing key information.

Claims (3)

  In a file management system that connects a personal computer and a file server via a communication line and prevents the malicious use of a document file created by the personal computer, the document file itself is stored on the file server. A management method in which a shortcut that records the path to a file is arranged on a personal computer.   In a file management system that connects a personal computer and a file server via a communication line and prevents unauthorized use of document files created by the personal computer for authentication purposes for each folder of the personal computer A management method characterized by managing the assigned key information in a database on a file server. Create a file in a special folder created in advance in a file management system that connects a personal computer and a file server via a communication line to prevent unauthorized use of document files created by a personal computer by a malicious person By performing operations such as browsing and editing, the software on the personal computer sends key information to the file server. The file server authenticates based on the key information, and if the authentication result is correct, the file entity is stored in the temporary area of the personal computer. The management method characterized by transmitting to.

Images