JP2007328400A - Policy management device, policy management method and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To set the use right of a file by dynamically acquiring the information of an access right set in a directory. <P>SOLUTION: The file use right information of a file shared by users is prepared in a file use right management server 4, and the association of a shared directory and a file use right is stored in an association management DB 33 of a file sharing server 3, and when it is detected that the access right of the shared directory has been changed by a right synchronization monitor part 32, the synchronization of the changed access right of the shared directory and the file use right is performed, and the association after the change is stored in the association management DB 33. Furthermore, the shared directory is monitored by a file system monitor part 34, and when it is detected that the file or the shared folder is moved, the pointer of the file use right information is acquired by referring to the association management DB 33, and embedded in the file. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a policy management apparatus, a policy management method, and a computer program that manage access rights to folders and files.

  In an intra-organizational network such as a company, it is common to use a shared file server to manage created electronic files. In order to prevent falsification and leakage of electronic files on the file server, it is common to limit access so that only users with appropriate authority can access the file server. For such access restriction, an access control technique for directories, an access control technique for files, and the like are used. These are described below.

First, an access control technique for a directory will be described.
Access restriction using an access control technique for a directory is realized by an administrator or the like registering an access control policy.
FIG. 11 shows an example of the directory structure of the file server in an organization, and FIG. 12 shows an example of the directory access control policy shown in FIG. For example, the policy “(folder name) F1; internal material in charge, manager in charge of A, (operation) editing, (possible / impossible) possible” registered in the access control policy shown in FIG. This means that the access restriction that “A manager in charge” can “edit” the file in the directory of the folder F1 “in-charge data” shown in FIG. Various existing operating systems that are widely used generally implement a function for restricting access to a file based on such an access control policy in units of directories. With this function, after the user creates an electronic file, it is possible to realize appropriate access control simply by storing the file in a directory where access is restricted.

As described above, the access control technology of the operating system is a technology that automatically realizes access control to files stored in a directory in accordance with an access control policy set in advance for the directory. Here, as a technique for automatically executing a policy control process set in advance when a file is stored in a directory, the following related techniques exist.
Patent Document 1 proposes a method for automatically setting access rights for newly created and edited files by registering a model policy. In addition to directory access control, file-by-file access is proposed. It is possible to control.
Japanese Patent Application Laid-Open No. 2004-228561 proposes a method of performing file transfer processing by FTP (File Transfer Protocol) based on a preset policy when a file is dragged and dropped onto a specific area.
Patent Document 3 proposes a method for converting a file format based on a policy set in advance when a file is dragged and dropped onto a specific area.

Next, an access control technique for files will be described.
There is a technique for setting an access right for a file instead of setting the access right for a directory as described above (see, for example, Non-Patent Document 1 and Non-Patent Document 2). These technologies realize access control to the file itself by the following two methods. In order to avoid confusion, the access right to a file is hereinafter referred to as “file use right”.

(1) File usage right embedding method The file usage right embedding method is a method of embedding access control information such as who is permitted or prohibited to perform what operation, that is, the file usage right in the file itself. is there. This is shown in FIG. In this method, when a file is accessed, the operation for the file is controlled by comparing the access control information embedded in the file with the access subject information.

(2) File usage right pointer embedding method The file usage right pointer embedding method is a place where access control information such as who is permitted / prohibited what kind of operation is stored (this is the file usage right embedding method). Is called a pointer) in the file itself. This is shown in FIG. In this method, when there is an access to a file, an inquiry is made to the usage right management server indicated by the file usage right pointer information embedded in the file, and the file stored in this usage right management server is accessed. This is a method for controlling operations on a file by comparing control information (file usage right) and access subject information.
Japanese Patent Laid-Open No. 2005-99982 Japanese Patent No. 3286312 JP-A-10-307745 “Microsoft Windows Rights Management Solutions for Enterprises: Writing and Applying Permanent Policies on Digital Information”, [online], 2004, Microsoft, [searched April 25, 2006], Internet <http: // www .microsoft.com / japan / windowsserver2003 / techinfo / overview / rm.mspx> “Protecting Electronic Documents with Adobe Security Solutions (Protecting Electronic Documents with Adobe Security Solutions)”, [online], 2003, Abbe, [Search April 25, 2006], Internet <http: // www. adobe.co.jp/security/pdfs/acrobat_security_wp.pdf>

  Just as with the above-described directory access control technology, it is not sufficient to take security measures only by performing access control on the directory. For example, a user who has the right to access the directory of the folder F1 in FIG. 11, that is, the right to edit / copy a file, etc., mistakenly moves a file in the folder F1 to the folder F2, or by e-mail. If it is attached, there is a risk that a user who does not have access right can view and edit the file. In order to prevent this, it is necessary to set appropriate access rights not only for the directory but also for the file itself.

  In general, the fill server is managed by an expert such as a system administrator, and the directory access right is set appropriately, so that the end user does not need to be particularly aware of the access right setting. However, each file stored in the file server is arbitrarily created by the end user, and it is difficult for the system administrator to know when, who, and what it created. For security reasons, the system administrator may not be able to access the file. Therefore, until now, file usage rights had to be set individually by the end user who created the file at his / her own risk. However, file usage right setting is very complicated, and not all users can set appropriate usage rights. For example, there is a case where a general employee B in charge of A creates a file C, and the file usage right is set such that only the manager and the creator B can edit the file C, and the general employee can only view it. . However, each time a file is created, setting such usage rights one by one requires knowledge and is difficult. Further, unlike the access right to the directory, the access right to the file (file use right) needs to be set finely according to the file type. For example, the image file needs to be controlled such that browsing is permitted but printing is prohibited. If it is a document file, editing is possible, but it is necessary to control that copy and paste or macro execution is prohibited.

  Patent Literature 1 and Patent Literature 2 propose a technology for automatically setting a usage right for a file based on a preset policy. According to this technology, a user can set individual file usage rights. There is an advantage that the usage right setting can be realized only by saving the file in the directory without being conscious of it. However, these technologies have the following two problems because the directory access right and file use right are set independently and statically.

The first problem is that an inconsistent policy may be set for the directory access right and the file use right.
For example, the policy of “Only the employee in charge of A can edit” is set in the access right of the directory of the folder F1, and the policy of “Only the employee in charge of B can view” is erroneously set in the file usage right policy stored in this directory. There is a possibility that. If such a policy is set, a file stored in the directory of the folder F1 may be viewed only by the person in charge of B but only the employee in charge of A can access the file. End up. If the access right and the file use right are set apart, there is such a risk and it is difficult to detect it.

The second problem is that each time the directory access right setting is changed, the file use right must also be changed.
For example, it is assumed that a policy “editable only for employees in charge of A” is set in the directory access right of the folder F1. Similarly, it is assumed that a policy of “editable only for employees in charge of A” is set for the file usage right stored in the directory of the folder F1. There is no problem at this point, but the directory in folder F1 is shared and used by the person in charge A and person B due to organizational changes. It may be changed to “Editable”. Then, if the file usage right is not changed appropriately in accordance with this change, the directory access right and the file usage right do not match, and the employee in charge of B cannot edit the file. However, every time the directory access right is changed, the work of changing the file usage right is time-consuming and there is a risk of setting errors.
In order to solve the above two problems, a technique is required that can dynamically acquire access right information set in a directory and set file usage rights.

  The present invention has been made in view of such circumstances, and dynamically acquires access right information set in a directory, sets file usage rights, and accesses the directory and its subordinate files. It is an object of the present invention to provide a policy management apparatus, a policy management method, and a computer program capable of synchronizing rights.

  In order to solve the above problems, the present invention is a policy management device that synchronizes the access right to a shared folder, which is a folder shared by a plurality of users, and the access right to a file shared by a plurality of users. A storage unit that stores information on access rights to the shared folder and information on access rights to files under the shared folder, and the storage unit when the access right information of the shared folder is detected to be changed. A right synchronization monitoring unit that rewrites access right information for a file under the shared folder stored in the storage unit to information on the access right of the shared folder read from the storage unit. Device.

  In addition, the present invention is the policy management apparatus described above, and when it is detected that a new file has been put under the shared folder, the specific information for specifying access right information for the file under the shared folder Is further provided with a file system monitor unit for writing into the newly entered file.

  Further, the present invention is the policy management apparatus described above, wherein the storage unit further holds update information indicating a date and time when access right information for a file under a shared folder is written, and is accessed by a user terminal. The update information corresponding to the access right information specified by the specific information in the file is read from the storage unit, and it is determined that the current date is compared with the date indicated by the read update information. In this case, the information processing apparatus may further include an authentication unit that controls access to the file based on access right information read from the storage unit corresponding to the specific information determined to be valid.

  Further, the present invention is the policy management apparatus described above, wherein the storage unit further stores information associating the shared folder with a synchronization destination shared folder whose access right should be changed in synchronization, and the authority synchronization monitor When it is detected that the access right information of the shared folder has been changed, the information of the synchronization destination shared folder corresponding to the shared folder is read from the storage unit, and the shared folder stored in the storage unit The access right information for the subordinate file and the access right information for the file under the synchronization destination shared folder are rewritten to the access right information of the shared folder read from the storage unit.

  Also, the present invention is the policy management apparatus described above, wherein the access right information includes information on an operation permitted or prohibited and a target user.

  Further, the present invention is the policy management apparatus described above, wherein the access right information includes an operation to be permitted or prohibited and information on a target user, and the storage unit has an access right to the shared folder. Further stores information associating the operation permitted or prohibited by the operation with the operation permitted or prohibited to be set to the access right to the file, and the authority synchronization monitor unit has changed the access right information of the shared folder When the information is detected, the access right information of the shared folder is read from the storage unit, and the access right to the file corresponding to the permitted or prohibited operation information in the read access right information. Read from the storage unit information on permitted or prohibited operations to be set in the shared folder access right information Rewriting the information on the access right to the file under the shared folder stored in the storage unit by rewriting the information on the operation to be stopped or permitted to the information on the operation to be permitted or prohibited to be read. Features.

  The present invention is also a policy management method used in a policy management apparatus that synchronizes the access right to a shared folder that is a folder shared by a plurality of users and the access right to a file shared by a plurality of users. The policy management apparatus has a storage unit that stores information on access rights to the shared folder and information on access rights to files under the shared folder. In the policy management apparatus, the authority synchronization monitor unit However, when it is detected that the access right information of the shared folder has been changed, the information on the access right for the files under the shared folder stored in the storage unit is read from the storage unit. Policy management, comprising a step of rewriting the access right information It is the law.

  The present invention is the policy management method described above, wherein, in the policy management apparatus, when the file system monitor unit detects that a new file has been placed under the shared folder, the policy is managed under the shared folder. The method further comprises the step of writing specific information for specifying access right information for the file in the newly added file.

  The present invention also provides a computer used as a policy management apparatus that synchronizes the access right to a shared folder, which is a folder shared by a plurality of users, and the access right to a file shared by the plurality of users. A storage unit for storing access right information and access right information for files under the shared folder; when it is detected that the access right information of the shared folder has been changed, the storage unit stores the information This is a computer program that functions as an authority synchronization monitor unit that rewrites access right information for a file under the shared folder to information on the access right of the shared folder read from the storage unit.

  In addition, the present invention is the above-described computer program, and further, when it is detected that a new file has been put under the shared folder, a specification for specifying access right information for the file under the shared folder It is made to function as a file system monitor part which writes information in the said newly put file.

  According to the present invention, the policy management apparatus can always automatically maintain the consistency between the directory access right and the file access right (file use right). Therefore, in the conventional technology, it is necessary to set the directory access right and the file usage right independently, and since the respective functions were not linked, along with inconsistent policy setting and complicated management operation, Solve the problem of security problems such as leakage of confidential information. That is, according to the present invention, it is possible to solve the problem of setting a policy inconsistent with the directory access right and the (file use right), and when only the directory access right is set, the file use Since the right setting is automatically performed, the management operation can be reduced. This improves the security of confidential information.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
In the present invention, a file usage right control technology (product) in which the “file usage right (“ file usage right ”indicates an access right for a file) pointer embedding method” shown in the prior art is implemented; The above problem is solved by combining "monitor" and "file system monitor".
That is, the “authority synchronization monitor” constantly monitors the access right of the shared directory in the file server, and detects that the access right of the shared directory has been changed. By this detection, two synchronizations of the access right of the shared directory in the file server and the file usage right of the file usage right control technology (product) are taken, and the correspondence is associated with the management database (hereinafter referred to as “DB”). ”). In addition, the “file system monitor” monitors the file input of the shared directory in the file server, and detects that a file or folder is copied (moved) to the shared directory. By this detection, the file usage right pointer of the file usage right associated with the shared directory is acquired from the association management DB, and the file usage right pointer is embedded in the corresponding file. Note that the shared directory indicates a directory of the shared folder.

<First Embodiment>
FIG. 1 is a diagram for explaining the configuration of a policy management system according to the first embodiment of the present invention. In the figure, the policy management system is formed by connecting a policy management device including a file sharing server 3 and a file usage right management server 4, an administrator terminal 1, and a user terminal 2 via a network.

The file sharing server 3 includes a file storage unit 31, an authority synchronization monitor unit 32, an association management DB 33, and a file system monitor unit 34.
The file storage unit 31 stores directory information of each common folder generated in the file sharing server 3 and files under the shared folder.
The association management DB 33 is a database that stores information that associates a shared directory ID that uniquely identifies a shared directory with a file usage right pointer that specifies a location where the file usage right information is held. A table image held in the association management DB 33 is shown in FIG. Here, it is assumed that the file usage right pointer is stored in the file usage right management server 4 as an XML (extensible markup language) format file. However, the storage format may be arbitrary, for example, file usage It may be managed by another database different from the right management server 4. The association management DB 33 may exist on a computer different from the file sharing server 3.

The authority synchronization monitor unit 32 monitors the shared directory in the file storage unit 31, acquires information on the access right set in the shared directory, the file usage right DB 41 of the file usage right management server 4, and the association It has a function to update the management DB 33. Note that the authority synchronization monitor unit 32 may exist on a computer different from the file sharing server 3.
The file system monitor unit 34 monitors a shared directory in the file storage unit 31 and has a function of embedding a file usage right pointer in a new file created or moved when the file is moved under the shared directory. Have. The file system monitor unit 34 may exist on a computer different from the file sharing server 3.

  The administrator terminal 1 operated by the administrator includes a directory management function unit 11. The directory management function unit 11 has a function of creating / deleting / editing a shared directory on the file sharing server 3. The directory management function unit 11 can also be realized as a function in the file sharing server 3.

  The user terminal 2 operated by the user (user) includes a file access function unit 21. The file access function unit 21 provides a function of accessing a file on the file sharing server 3 via a network. The file access function unit 21 creates, edits, moves, and deletes a file on the file sharing server 3, that is, a file stored in the file storage unit 31 in accordance with a user operation.

The file usage right management server 4 includes a file usage right DB 41 and an authentication unit 42.
The file usage right DB 41 holds information associating a file usage right pointer with a file usage right. A table image held by the file usage right DB 41 is shown in FIG. The file usage right indicates “who” and what “operation” is permitted or prohibited (“permitted / prohibited”).
The authentication unit 42 provides a function of authenticating a user when the user accesses the file and controlling an operation on the file in accordance with the file usage right DB 41.

Next, a processing procedure of the policy management system according to the first embodiment shown in FIG. 1 will be described.
The administrator manages the shared directory on the file sharing server 3 from time to time using the administrator terminal 1. That is, the directory management function unit 11 of the administrator terminal 1 performs new creation / deletion / movement of the shared directory on the file sharing server 3, change of the folder name, and the like according to the operation of the administrator. As a result, information on the newly created, deleted, or moved shared directory (shared file) is written in the file storage unit 31 of the file sharing server 3. Furthermore, the directory management function unit 11 of the administrator terminal 1 sets the access right of the shared directory using the directory access control technology described in the prior art. Thereby, the access right information of the shared directory is written or updated in the file storage unit 31 of the file sharing server 3. The access right information of the shared directory is information that associates information that identifies the shared directory with information about who can perform what operation. The shared directory access right information may be stored in another storage unit such as the association management DB 33.
On the other hand, the user edits the file on the file sharing server 3 by the user terminal 2. That is, the file access function unit 21 of the user terminal 2 accesses the file sharing server 3 via the network in accordance with the user's operation, and creates, edits, moves, and deletes files in the file storage unit 31 as needed. .

FIG. 4 shows the procedure of the authority monitoring monitor process in the policy management system according to the first embodiment shown in FIG.
In the figure, the authority synchronization monitoring unit 32 of the file sharing server 3 searches the shared directory with reference to the file storage unit 31 (step S110). If the shared directory is found (step S120: YES), the following processing is performed. carry out.
That is, the authority synchronization monitor unit 32 acquires information on the access right set in the found shared directory from the file storage unit 31 (step S130). Further, the authority synchronization monitor unit 32 searches the association management DB 33 using the shared directory ID of the found shared directory as a key. For example, the full path name of the shared directory can be used as the shared directory ID.

  When the shared directory ID as a key is not registered in the association management DB 33 (step S140: NO), the authority synchronization monitor unit 32 associates information that associates the shared directory ID with a new file usage right pointer. Registered in the attachment management DB 33 (step S150). Furthermore, the authority synchronization monitoring unit 32 registers information in which the new file usage right pointer is associated with the access right information acquired in step S130 in the file usage right DB 41 of the file usage right management server 4 ( Step S160). Then, when the process for the shared directory of interest is finished and the search for the shared directory is not finished yet (step S180: NO), the process returns to step S110 to search for the next shared directory and thereafter. Repeat the process.

  On the other hand, if the shared directory ID used as the key in step S140 has already been registered in the association management DB 33 (step S140: YES), the authority synchronization monitor unit 32 corresponds to the shared directory ID from the association management DB 33. The file usage right pointer is read, and information on the file usage right corresponding to the read file usage right pointer is acquired from the file usage right DB 41 of the file usage right management server 4. When the content indicated by the acquired file usage right information matches the content indicated by the access right information acquired in step S130 (step S170: YES), the right synchronization monitoring unit 32 performs no processing. If the process for the shared directory that is currently focused on is finished and the shared directory search process is not finished yet (step S180: NO), the process returns to step S110 to search for the next shared directory. Repeat the process.

If the content indicated by the acquired file usage right information does not match the content indicated by the access right information acquired in step S130 (step S170: NO), the access right information acquired in step S130 is used. The file usage right information stored in the file usage right DB 41 of the file usage right management server 4 in association with the file usage right pointer is updated (step S160). Then, when the process for the shared directory of interest is finished and the shared directory search process is not finished yet (step S180: NO), the process returns to step S110 to search for the next shared directory. Repeat the process.
The authority synchronization monitor unit 32 repeats the loop of steps S110 to S180, and when the shared directory search process ends (step S180: YES), the loop ends.

  The file sharing server 3 executes the above-described processing of FIG. 4 at regular intervals. This realizes storing the latest access right information of the shared directory in the association management DB 33.

  The processing procedure shown in FIG. 4 is a method for monitoring the creation of a shared directory and a change in access right at regular intervals. On the other hand, if an OS (operation system) event acquisition function is used, monitoring work at a fixed interval is not necessary, and processing can be executed at the timing when a shared directory creation event or an access right change event occurs. FIG. 5 shows a processing flow when the event acquisition function is used.

In the figure, the authority synchronization monitoring unit 32 of the file sharing server 3 receives a shared directory creation event or a shared directory access right change event from the OS (step S210). The authority synchronization monitor unit 32 acquires information on the access right corresponding to the created shared directory indicated by the received event or the shared directory whose access right has been changed from the file storage unit 31 (step S220).
Thereafter, the processing in steps S230 to S250 after the authority synchronization monitoring unit 32 determines whether or not the shared directory ID is registered in the association management DB 33 is the same as the processing in steps S140 to S170 in FIG. . That is, if the shared directory ID is not registered in the association management DB 33 (step S230: NO), the authority synchronization monitor unit 32 registers information in which the shared directory ID is associated with a new file usage right pointer. At the same time (step S240), information associating the new file usage right pointer with the access right information acquired in step S220 is registered in the file usage right DB 41 of the file usage right management server 4 (step S250). Further, the shared directory ID has already been registered in the association management DB 33 (step S230: YES), the file usage right information in the file usage right DB 41 of the file usage right management server 4 and the access acquired in step S220. If the contents indicated by the right information do not match (step S260: NO), the file usage right information in the file usage right DB 41 of the file usage right management server 4 is updated with the acquired access right information (step S260). S250).

FIG. 6 shows a processing procedure of the file system monitoring process in the policy management system according to the first embodiment shown in FIG.
In the figure, when the monitoring of the shared directory is activated, the file system monitor unit 34 of the file sharing server 3 searches the shared directory with reference to the file storage unit 31 (step S310), and the user terminal of the user 2 to register a newly created file or copy or move a file from another directory to determine whether there is a shared directory containing the file (step S320).

  When the file system monitor unit 34 refers to the file storage unit 31 and detects that a newly created file or a moved file is entered in the shared directory (step S320: YES), the file system monitor unit 34 performs the following processing for all the corresponding files. The file system monitor unit 34 locks the corresponding file so that it cannot be changed by other users or other programs (step S330). The file system monitor unit 34 acquires a file usage right pointer from the association management DB 33 using the shared directory ID that identifies the directory of the shared folder in which the corresponding file is placed as a search key (step S340). Then, the file system monitor unit 34 uses the existing file usage right control technology described in the prior art (or a product using the existing file usage right control technology) to acquire the file in step S340. The file usage right management information in which the file usage right pointer information is set is embedded and overwritten (step S350). The file system monitor unit 34 unlocks the corresponding file (step S360). If the shared directory monitoring process has not been completed yet (step S400: NO), the process returns to step S310 to search for the next shared directory. And repeat the subsequent processing.

In step S320, if it is not detected that a file has been entered in the shared directory (step S320: NO), the file system monitor unit 34 refers to the file storage unit 31 to determine whether there is a deleted shared folder. Judgment is made (step S370). When the file system monitor unit 34 detects the deletion of the shared folder (step S370: YES), it is associated from the association management DB 33 with the shared directory ID that identifies the directory of the deleted shared file and the shared directory ID. The file usage right information is deleted (step S380). Further, the file system monitor unit 34 deletes the deleted file usage right pointer and the file usage right information associated with the file usage right pointer from the file usage right DB 41 of the file usage right management server 4. (Step S390). If the shared directory monitoring process has not been completed yet (step S400: NO), the process returns to step S310, the next shared directory is searched, and the subsequent processes are repeated.
The file system monitor unit 34 repeats the loop of steps S310 to S400, and when the shared directory monitoring process ends (step S400: YES), the loop ends.

  The file sharing server 3 executes the above-described processing of FIG. 6 at regular intervals. As a result, the latest file usage right is stored in the file usage right DB 41 of the file usage right management server 4. Similar to the authority synchronization monitor process, with regard to the file system monitor process, a method of monitoring a directory at regular intervals as shown in FIG. FIG. 7 shows a process flow of the event monitoring file system monitor.

  In the figure, the file system monitor unit 34 of the file sharing server 3 receives an event for notifying that a file under a shared directory (shared folder) has been operated from the OS (step S510). The processing in steps S520 to S590 executed by the file system monitor unit 34 for the shared directory specified by the received event is the same as the processing in steps S320 to S390 in FIG. In other words, when the file system monitoring unit 34 detects that a file has been put into the shared directory specified by the received event by newly creating, copying or moving from another folder (step S520: YES), the file Is locked (step S530). Then, the file usage right pointer is acquired from the association management DB 33 using the shared directory ID that identifies the directory of the shared folder containing the file as a search key (step S540), and information on the acquired file usage right pointer is set. After the usage right management information is embedded in the file and overwritten (step S550), the lock of the file is released (step S560).

  On the other hand, when it is not detected that a file has been put in the shared directory (step S520: NO) and deletion of the shared folder is detected (step S570: YES), the deleted shared folder is deleted from the association management DB 33. Delete the shared directory ID for specifying the directory and the file usage right information associated with the shared directory ID (step S580) and delete the file usage from the file usage right DB 41 of the file usage right management server 4 The right pointer and the file usage right information associated with the file usage right pointer are deleted (step S590).

  When the file access function unit 21 of the user terminal 2 accesses a file under the shared folder stored in the file storage unit 31 of the file sharing server 3 based on the user's operation, the file access function unit 21 The file usage right pointer embedded in the accessed file is read, and the file usage right pointer and the user identification information of the user are notified to the file usage right management server 4. The authentication unit 42 of the file usage right management server 4 reads the file usage right information specified by the file usage right pointer from the file usage right DB 41, refers to the read file usage right information, and identifies the user identification information. The operation prohibited or permitted in response to the above is specified, and the operation to the file in the file access function unit 21 of the user terminal 2 is controlled.

  According to the above embodiment, the file usage right pointer is automatically generated by the right synchronization monitoring unit 32 of the file sharing server 3 with reference to the access right information of the shared directory. Therefore, the problem that the access right of the shared directory differs from the contents of the file usage right for the files under the shared directory due to human error will not occur. As a result, it is possible to solve the problem of the prior art that there is a possibility that contradictory policies may be set for the access right of the shared directory and the file usage right of the files under the shared directory.

  Further, according to the above embodiment, when the access right of the shared directory is changed, the authority synchronization monitor unit 32 detects it and rewrites the file use right of the file under the shared directory according to the changed content. Each time the user accesses the file, control based on the contents described in the file usage right referenced by the file usage right pointer embedded in the file is executed. Therefore, even when the access right of the shared directory is changed, file usage control according to the changed contents is always realized. This can solve the problem of the prior art that the file usage right must be changed each time the setting of the directory access right is changed.

  Next, application examples of the first embodiment described above will be described in the following embodiments. In the following embodiment, differences from the first embodiment will be described.

Second Embodiment
According to the first embodiment described above, the contents of the directory access right and the file usage right of the shared directory (shared folder) are always synchronized. For example, when the access right of the shared directory is changed due to the organization change or the like, the file usage right of the files under the shared directory is also changed immediately. For this reason, some users who have been subject to transfer may not be able to use the files that have been available so far at the same time as the organizational change. Considering the actual work, it may be convenient to be able to use the file in both the pre-change and post-change roles for a certain period of time due to takeover work and the like. In order to realize this, history management may be performed in the file usage right DB 41 of the file usage right management server 4.

FIG. 8 is a diagram showing a table configuration held by the file usage right DB 41 of the file usage right management server 4 according to the second embodiment.
As shown in the figure, the file usage right DB 41 holds information associating the file usage right pointer, the file usage right, and the update date of the record. As described above, the update date and time of the file usage right is managed in the file usage right DB 41, and a plurality of file usage rights can be registered in the order of the update date and time for the same file usage right pointer.

  Thereby, the file sharing server 3 writes the update date and time when updating the file usage right DB 41 of the file usage right management server 4 in step S160 of FIG. 4 (step S250 of FIG. 5). When the user terminal 2 accesses the file of the file sharing server 3, the authentication function unit 42 of the file usage right management server 4 indicates the date of file access from the user terminal 2 and the corresponding file usage right pointer. When the difference from the update date is within a predetermined period such as within 10 days, the file usage right corresponding to the old file usage right pointer is also recognized. Thereby, said problem can be solved.

<Third Embodiment>
In general, only operations that are classified into simple categories such as “Edit” and “Browse” can be set as operations that are permitted or prohibited for directory access right information. In addition, it is possible to perform finer control such as “permit macro”, “permit printing”, “permit copy and paste”, and the like. However, in the above-described embodiment, there is a problem that only the directory access right setting and the file usage right setting are simply synchronized, and the detailed file usage right setting cannot be specified by the administrator. In order to solve this problem, the directory access right-file use which is a conversion table between the directory access right and the file use right in the file use right management server 4 (or in the file sharing server 3). It is only necessary to have a right correspondence table so that the administrator can freely edit it.

  FIG. 9 is a diagram showing a table configuration of a directory access right-file use right correspondence table held in the file use right DB 41 of the file use right management server 4 according to the third embodiment. As shown in the figure, the directory access right-file use right correspondence table holds the operation indicated by the directory access right information and the corresponding file use right, and the file use right is the directory access right. It consists of information indicating that a more detailed level of operation than the operation indicated by the information is permitted or prohibited.

The directory access right-file usage right correspondence table is used in the processing (file usage right DB writing / updating) in step S160 in FIG. 4 (step S250 in FIG. 5). For example, when the directory access right-file usage right correspondence table shown in FIG. 9 is held, the operation indicated by the directory access right information acquired in step S130 in FIG. 4 (step S220 in FIG. 5) is “edit OK”. If there is, the file usage right information indicating “Edit OK”, “Browse OK”, “Macro Execution OK”, “Copy & Paste OK”, and “Print NG” is read out. In step S160 in FIG. 4 (step S250 in FIG. 5), the read file usage right information includes the file usage right pointer and the directory acquired in step S130 in FIG. 4 (step S220 in FIG. 5). The file usage right DB 41 of the file usage right management server 4 is registered in association with the access right information. When the user terminal 2 accesses the file of the file sharing server 3, the authentication unit 42 of the file usage right management server 4 reads the file usage right information of the file from the file usage right DB 41 and reads the read file usage. Perform control according to the rights information. Note that the file usage right information may be read from the directory access right-file usage right correspondence table in accordance with the prohibited operation included in the directory access right information.
As a result, the administrator can set and control finer access control in units of files that could not be realized only by setting the directory access right.

<Fourth embodiment>
Depending on the configuration of the shared directory, the same directory access right may need to be set for different shared directories. For example, in the directory structure shown in FIG. 11, if the person in charge A and the person in charge B are closely related to each other and want to be able to refer to each shared directory, “¥ A person in charge \ material in charge” ( The same access right “editable for both A and B employees” is set in the two shared directories of the in-charge material folder F1) and “¥ B in charge \ in-charge material” (in-charge material folder F3). It will be. As described above, it is assumed that not only the access right is synchronized between the access right of the shared directory and the file use right, but also the access right needs to be synchronized between different shared directories. Such synchronization between shared directories can be realized by the function of the authority synchronization monitor unit 32 of the file sharing server 3. For this purpose, for example, a directory access synchronization table describing a list of a synchronization source directory that is a shared directory to be synchronized with a directory access right and a synchronization destination directory that is a synchronization destination shared directory is prepared. FIG. 10 shows the configuration of the directory access synchronization table held in the association management DB 33 of the file sharing server 3 according to the fourth embodiment.

  The authority synchronization monitoring unit 32 of the file sharing server 3 obtains access right information in the process of step S130 in FIG. 4 (step S220 in FIG. 5), and then refers to the directory access synchronization table described above to share the current process target. If the directory is registered as a synchronization source directory, it is determined that synchronization is necessary, and the corresponding synchronization destination directory is read out. If synchronization is required, the authority synchronization monitor unit 32 sets the acquired access right information in the access right information of the read synchronization destination directory in step S160 of FIG. 4 (step S250 of FIG. 5). Further processing is performed. As a result, it is possible to save the administrator from setting access rights for a plurality of shared directories. Similarly to the file usage right, when the access right of one shared directory is changed, the access right of other shared directories that need to be synchronized is also dynamically changed accordingly.

  According to the policy management system of the embodiment described above, a mechanism for synchronizing the access right of the shared directory set by using the access control technology for the directory and the file usage right is realized, and has the following features: .

That is, the policy management system sets the access right of the shared directory using the directory access control technology, and creates the file usage right information according to the set access right of the shared directory in the file usage right management server 4. The association between the shared directory and the file usage right is stored in the association management DB 33 of the file sharing server 3. When the authority synchronization monitor unit 32 of the file sharing server 3 monitors the shared directory and detects that the directory access right has been changed, the access right after the change of the shared directory is synchronized with the file usage right. The association after the change is stored in the association management DB 33.
Further, in the policy management system, when the file system monitor unit 34 of the file sharing server 3 monitors the shared directory and detects that the file or the shared folder is moved, the policy management system refers to the association management DB 33 to obtain the file usage right information. Acquire and embed the acquired usage rights information in the file.
As a result, the administrator can automatically synchronize with the file usage rights of the files under the directory by managing only the rights of the directory.

In the conventional technology, directory access rights and file usage rights must be set independently, and the respective functions were not linked. Therefore, due to inconsistent policy settings and complicated management operations, leakage of confidential information There was a security problem. However, according to the above-described embodiment, it is possible to always automatically maintain the consistency between the directory access right and the file use right. Therefore, it is possible to solve the security problems that occur in the prior art, and specifically, the following two points are possible.
That is,
(1) The problem of setting inconsistent policies between directory access rights and file usage rights is solved.
Also,
(2) If only the directory access right is set, the file usage right is automatically set, so that the management operation can be reduced.
Therefore, security of confidential information is improved.

  The above-described administrator terminal 1, user terminal 2, file sharing server 3, and file usage right management server 4 have a computer system therein. The directory management function unit 11 of the administrator terminal 1, the file access function unit 21 of the user terminal 2, the authority synchronization monitor unit 32 and the file system monitor unit 34 of the file sharing server 3, and the file usage right management server 4 The operation process of the authentication unit 42 is stored in a computer-readable recording medium in the form of a program, and the above-described processing is performed by the computer system reading and executing this program. The computer system here includes a CPU, various memories, an OS, and hardware such as peripheral devices.

Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case is also used to hold a program for a certain period of time. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

It is a block diagram of the policy management system by the 1st Embodiment of this invention. It is a figure which shows the table structure which the matching management DB of the file sharing server by 1st Embodiment hold | maintains. It is a figure which shows the table structure which file usage right DB of the file usage right management server by 1st Embodiment hold | maintains. It is a figure which shows the process sequence of the policy management system by 1st Embodiment. It is a figure which shows the process sequence of the policy management system by 1st Embodiment. It is a figure which shows the process sequence of the policy management system by 1st Embodiment. It is a figure which shows the process sequence of the policy management system by 1st Embodiment. It is a figure which shows the table structure of file usage right DB of the file usage right management server by 2nd Embodiment. It is a figure which shows the table structure of the directory access right-file utilization right correspondence table | surface by 3rd Embodiment. It is a figure which shows the table structure of the directory access synchronization table by 4th Embodiment. It is a figure which shows the directory structural example of a file server. It is a figure which shows the example of the access control policy of the directory by a prior art. It is a figure for demonstrating the file usage right embedding system by a prior art. It is a figure for demonstrating the file usage right pointer embedding system by a prior art.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Manager terminal 11 ... Directory management function part 2 ... User terminal 21 ... File access function part 3 ... File share server 31 ... File storage part 32 ... Authority synchronous monitor part 33 ... Correspondence management DB
34 ... File system monitor unit 4 ... File usage right management server 41 ... File usage right DB
42 ... Authentication section

Claims (10)

A policy management device that synchronizes the access right to a shared folder, which is a folder shared by a plurality of users, and the access right to a file shared by a plurality of users,
A storage unit that stores information on access rights to the shared folder and information on access rights to files under the shared folder;
When it is detected that access right information of the shared folder has been changed, access right information for the files under the shared folder stored in the storage unit is read from the storage unit. An authority synchronization monitor section that rewrites the authority information,
A policy management apparatus comprising: A file system monitor that writes specific information for specifying access right information for a file under the shared folder into the newly added file when it is detected that a new file has been put under the shared folder And further comprising
The policy management apparatus according to claim 1. The storage unit further holds update information indicating the date and time when access right information for a file under a shared folder was written,
The update information corresponding to the access right information specified by the specific information in the file accessed by the user's terminal is read from the storage unit, and the current date is compared with the date indicated by the read update information. An authentication unit that controls access to the file according to the access right information read from the storage unit corresponding to the specific information that is determined to be valid.
The policy management apparatus according to claim 1, wherein the policy management apparatus is a management apparatus. The storage unit further stores information associating the shared folder with a synchronization destination shared folder whose access right should be changed in synchronization,
When the authority synchronization monitor detects that the access right information of the shared folder has been changed, the authority synchronization monitor reads information on the synchronization destination shared folder corresponding to the shared folder from the storage unit, and stores the information in the storage unit. Rewrite the access right information for the files under the shared folder and the access right information for the files under the synchronization destination shared folder with the access right information of the shared folder read from the storage unit,
The policy management apparatus according to any one of claims 1 to 3, wherein the policy management apparatus is configured as described above.   The policy management apparatus according to any one of claims 1 to 4, wherein the access right information includes information on an operation permitted or prohibited and a target user. The information on the access right includes information on the permitted or prohibited operation and the target user,
The storage unit further stores information associating an operation permitted or prohibited by an access right to the shared folder with an operation permitted or prohibited to be set to the access right to the file,
The authority synchronization monitor unit reads the access right information of the shared folder from the storage unit when detecting that the access right information of the shared folder has been changed, and further includes the access right information in the read access right information. Corresponding to the information on the permitted or prohibited operation, the information on the permitted or prohibited operation to be set to the access right to the file is read from the storage unit, and the prohibited or permitted in the access right information of the shared folder The information on the access right for the file under the shared folder stored in the storage unit is rewritten by the information on the operation to be performed, the information rewritten to the read permitted or prohibited operation information,
The policy management apparatus according to any one of claims 1 to 3, wherein the policy management apparatus is configured as described above. A policy management method used in a policy management apparatus for synchronizing access rights to a shared folder that is a folder shared by a plurality of users and access rights to a file shared by a plurality of users,
The policy management device has a storage unit that stores information on access rights to shared folders and information on access rights to files under the shared folders,
In the policy management device,
When the authority synchronization monitoring unit detects that the access right information of the shared folder has been changed, the access right information for the files under the shared folder stored in the storage unit is read from the storage unit. Rewriting the access rights information of the shared folder,
A policy management method comprising: In the policy management device,
When the file system monitor unit detects that a new file has been placed under the shared folder, the specific information for specifying access right information for the file under the shared folder is added to the newly added file. Further comprising the step of writing in,
The policy management method according to claim 7. A computer used as a policy management device that synchronizes the access right to a shared folder that is a folder shared by a plurality of users and the access right to a file shared by a plurality of users,
A storage unit for storing access right information to the shared folder and access right information to the files under the shared folder;
When it is detected that access right information of the shared folder has been changed, access right information for the files under the shared folder stored in the storage unit is read from the storage unit. Right synchronization monitor part to rewrite to right information,
A computer program that functions as a computer program. Furthermore, when it is detected that a new file has been placed under the shared folder, a file to which specific information for specifying access right information for the file under the shared folder is written into the newly placed file System monitor,
The computer program according to claim 9, wherein the computer program is made to function as:

Images