JP2008040745A - Log information management system and log information management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a log information management system for changing the form of stored log information according to the security level of a user and reducing the capacity of the log information. <P>SOLUTION: A user carries an IC card 1, and a user ID as information for identifying the user and status information indicating the security level acquired by the user by succeeding in user authentication are stored in the IC card 1. A user authentication means which utilizes the IC card 1 is provided in a gate device 4 installed in each room 5. A PC 2 and a monitoring camera system 3 store the log information collected in the form based on the status information read from the IC card 1. Also, when the user newly acquires a higher security level, the form of the stored log information is updated to the form based on the newly acquired security level. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a system and method for collecting and storing log information, and more particularly to a technique for reducing the capacity of stored log information.

  In order to prevent the leakage of confidential information, companies have collected various log information and stored and analyzed the collected log information. For example, a personal computer (PC) in which confidential information is stored stores a user's operation status as log information, and a monitoring camera that captures an image of a PC is used for monitoring the unauthorized operation of the PC. It is not unusual to be installed in

  Log information collected using a PC, a surveillance camera, or the like is stored in a large-capacity information storage device, and the log information stored in the information storage device is analyzed when a trouble occurs or at regular intervals. However, although the capacity is large, the capacity of log information that can be stored in the information storage device is limited, and thus it is necessary to reduce the capacity of log information stored in the information storage device.

  As a technique for reducing the capacity of log information stored in the information storage device, a technique for compressing log information stored in the information storage device is widely used. Further, when the video of the monitoring camera is stored in the information storage device as log information, the number of pixels of the video may be lowered in order to reduce the capacity of the log information stored in the information storage device.

However, if the resolution of the video captured by the surveillance camera is lowered, the pixels become coarse when the video is played back. Therefore, in Patent Document 1, the video in the important area and the video in the other area are stored. An invention for changing the number of pixels when doing so is disclosed.
JP 2003-1111017 A

  However, the technique disclosed in Patent Document 1 is effective only for log information that is a video of a surveillance camera, and, of course, can be applied to log information other than video such as a PC operation log. I can't.

  In Patent Document 1, the number of pixels of the video is changed depending on the area captured by the monitoring camera. However, the user who operates the PC, the user who is capturing the image with the monitoring camera, etc. The format of log information stored in the information storage device cannot be changed depending on the security level.

  Accordingly, the present invention provides a log information management system capable of changing the format of log information in accordance with the security level of the user who is the target of log information and reducing the capacity of the log information stored in the information storage device, An object is to provide a log information management method.

  A first invention that solves the above-described problem is a log information management system that stores and manages log information, the log information management system including a device that collects user usage status as the log information, and the device A token possessed by the user using the token, and a plurality of user authentication devices that authenticate the user using the token, and the token includes a user ID that is information for identifying the user And status information indicating the security level acquired by the user, and the user authentication device authenticates the user using the token in a manner corresponding to the security level set in the user authentication device. And the status read from the token when the user authentication is successful Only when the security level indicated in the information is lower than the security level set in the user authentication device, the status information indicating the security level set in the user authentication device is written in the token, and the read out from the token Means for transmitting the user ID and the status information written in the token to the device, wherein the device reads the user ID and the status information from the token; Status information management means for holding the status means in association with a user ID, log information storage means for storing the usage status of the user specified by the user ID as log information, and the user specified by the user ID The usage status of In a format based on the status information of the user read from the token, characterized in that the collected the log information includes the log information collection means for storing the log information storage means.

  In the present invention, a token means a portable device that has a function of data communication with an external terminal device and stores ID data for identifying a user. Specifically, an IC card, a USB token, and a portable device Means a device such as a telephone.

  Further, the second invention is the log information management system according to the first invention, wherein the status management means provided in the device transmits the user ID and the status information from the user authentication device. Then, the security level indicated by the status information held in association with the transmitted user ID is indicated by the security level indicated by the status information held in association with the transmitted user ID. The status information held in association with the transmitted user ID is updated to the transmitted status information, and the device is stored in the log information storage unit. The format of the log information of the user specified by the user ID is based on the updated status information. Characterized in that it comprises a log information updating means for updating the format.

  In the log information management system according to the first or second invention, the user authentication device is preferably a gate device installed in a room such as an office. Further, the device is a personal computer that collects the operation log of the user as the log information, and the log information changing unit is configured to store the operation log stored in the log information storage unit based on the status information. It is desirable to be means for reducing the items to be included or means for deleting the operation log. In addition, the device is a monitoring camera that captures the user's video as the log information, and the log information changing unit stores the video stored in the log information storage unit based on the status information. Desirably, it is means for erasing or reducing the pixels of the video.

  Further, the third invention is a log information management method for storing and managing log information, and this log management method includes steps to be described, which includes a user ID which is information for identifying a user, The user is authenticated using a token storing status information indicating the security level acquired by the user, and when the user authentication of the user is successful, the security level indicated by the status information read from the token Only when the security level is lower than the security level set for the user authentication, a user authentication step of writing status information indicating the security level corresponding to the user authentication into the token, and log information indicating the usage status of the device used by the user Corresponding to the status information collected and read from the token In that format, it is characterized in that there in the log information storage step of storing the collected the log information to the information storage device.

  Furthermore, a fourth invention is the log information management method according to the third invention, wherein when the user authentication is successful in the user authentication step and the user newly acquires a higher security level, the information storage is performed. A log information update step of updating the log information format of the user stored in the device to a format based on a security level newly acquired by the user and storing the updated log information in the information storage device; It is characterized by being.

  According to the present invention described above, the status information indicating the security level corresponding to the user authentication is written in the token possessed by the user, and the format of the stored log information is changed based on the status information stored in the token. Thus, by simplifying the log information to be stored according to the security level of the user who is the target of the log information, the capacity of the log information can be reduced.

  In addition, by changing the log information to a format corresponding to a higher security level newly acquired by the user, the stored log information is also subject to log information. By simplifying the log information according to the security level of the user, the capacity of the log information can be reduced.

  In a company, since the security level is generally set for each room, the user authentication device is preferably provided in the gate device. Further, when the device is a personal computer, the capacity of the log information can be reduced by reducing the items of the operation log serving as log information or deleting the operation log itself. In addition, when the device is a monitoring camera, the capacity of log information can be reduced by reducing the number of pixels of video as log information or by erasing the video.

  From here, the log information management system according to the present invention will be described in detail with reference to the drawings. FIG. 1 shows an example in which the log information management system according to the present invention is applied to an office. As shown in FIG. 1, a personal computer 2 (hereinafter, referred to as a device for collecting log information) PC) and surveillance camera system 3 are installed. The PC 2 collects and stores the operation log of the PC 2 as log information, and the surveillance camera system 3 collects and stores the video of the operation status of the PC 2 as log information.

  In FIG. 1, a user possesses an IC card 1 as a token, and this IC card 1 stores a user ID, which is information for identifying the user. When the user succeeds in user authentication, the acquired security level is displayed. Status information is stored. User authentication means for authenticating a user using the IC card 1 is provided in the gate device 4 installed in each room 5.

  In FIG. 1, a gate device 4 (hereinafter referred to as the gate device 4_1) is provided at the entrance / exit of the room 5 (hereinafter referred to as the room 5_1), and the room 5 of the number 2 that can be entered only through the room 5_1. At the entrance / exit of the room 5 (hereinafter referred to as room 5_2), a gate device 4 of number 2 (hereinafter referred to as gate device 4_2) is provided.

  A security level is set for each room 5, the security level of the room 5_1 is “1”, the security level of the room 5_2 is higher than the security level of the room 5_1, and the security level of the room 5_2 is “2”. As a matter of course, the gate device 4_2 is provided with user authentication means stronger in security than the user authentication means provided in the gate device 4_1.

  In the present embodiment, the user authentication means provided in the gate device 4_1 is only a means for confirming the user ID stored in the IC card 1, and the user authentication means in the gate device 4_2 is stored in the IC card 1. This is means for confirming the user ID and collating the biometric information of the user.

  Successful user authentication by the user authentication means provided in the gate device 4 means that the user has acquired the security level set in the room 5, and the security level acquired by the user is the status information. Is stored in the IC card 1.

  For example, a user who has passed through the gate device 4_1 means that the security level “1” has been acquired, status information indicating the security level “1” is stored in the IC card 1, and the user has a higher security level than the gate device 4_1. Is acquired, the status information stored in the IC card 1 is updated.

  In FIG. 1, it means that the user who has passed through the gate device 4_2 has acquired a higher security level “2” than the gate device 4_1, and the status information stored in the IC card 1 indicates the security level “2”. Updated to status information. Note that the status information stored in the IC card 1 is initialized by the gate device_1 when the user leaves the room 5_1, that is, no security level is acquired.

  When the PC 2 which is a device according to the present invention reads the user ID and status information from the IC card 1 possessed by the user, the status information is held in the memory in the read user ID, and based on the status information held in the memory, The format of the log information (in this case, the operation log) of the user specified by the user ID is determined, and the operation log is stored in the determined format.

  The user ID and status information read by the PC 2 from the IC card 1 are transmitted from the PC 2 to the monitoring camera system 3, and the monitoring camera system 3 holds the status information in association with the user ID, and the status information held in the memory. The format of the log information (here, video) is determined based on, and the operation log is stored in the determined format.

  The gate device 4_2 is connected to the PC 2 and the surveillance camera system 3, and when the user authentication performed by the gate device 4_2 is successful, the user ID of the user who has succeeded in the user authentication and the user authentication by the gate device 4_2 are performed, so that the user is authenticated. Status information indicating the security level “2” to be acquired is transmitted to the PC 2 and the surveillance camera system 3.

  When the status information indicating the user ID and the security level “2” is transmitted from the gate device 4_2, the PC 2 and the monitoring camera system 3 store the status information stored in association with the transmitted user ID and the transmitted status. The information is compared, and if the transmitted status information indicates a high security level, the status information is updated to the transmitted status information. When the log information of the user with the transmitted user ID is stored, the log information is updated in a format based on the updated status information.

  FIG. 2 is a block diagram of the log information management system shown in FIG. As shown in FIG. 2, the user possesses the IC card 1, the user ID is stored in the IC card 1, and when the user authentication is successful in the gate device 4, the highest security level obtained by the user is obtained. Status information indicating the security level is stored.

  The gate device 4_1 includes status information indicating the security level set for the room 5_1, user authentication means 40_1 corresponding to the security level set for the room 5_1, and opening / closing means 41_1 for opening and closing the lock of the gate device 4.

  The gate device 4_2 includes status information indicating the security level set for the room 5_2, user authentication means 40_2 corresponding to the security level set for the room 5_2, and opening / closing means 41_2 for opening and closing the lock of the gate device 4.

  In the present embodiment, the user authentication means 40_2 provided in the gate device 4_1 is a user authentication means using the IC card 1, reads the user ID stored in the IC card 1 possessed by the user, The user is authenticated by confirming whether it is registered in 4_1.

  If the user authentication is successful, the user authentication means 40_1 compares the status information stored in the IC card 1 with the status information held in the gate device 4_1 and indicates the status information held in the gate device 4_1. When the security level is high, the status information value of the IC card 1 is updated to the status information value held in the gate device 4_1, and a signal for releasing the lock is transmitted to the opening / closing means 41_1, and the gate device Release the lock of 4_1.

  The user authentication means 40_2 provided in the gate device 4_2 is an authentication means stronger in security than the user authentication means 40_1 provided in the gate device 4_1. Here, user biometric information (for example, fingerprint information) is used. Authentication means. Note that information collated with the biometric information read from the user may be stored in the IC card 1 or may be stored in the gate device 4_2.

  When the user authentication is successful, the user authentication means 40_2 compares the status information stored in the IC card 1 with the status information held in the gate device 4_2, and indicates the status information held in the gate device 4_2. When the security level is high, the status information value of the IC card 1 is updated to the value of the status information held in the gate device 4_2, and a signal for releasing the lock is transmitted to the opening / closing means 41_2. Unlock 4_2.

  A log-in means 25 that reads the user ID from the IC card 1 possessed by the user operating the PC 2 and permits the use of the PC 2 only to a predetermined user is included in the PC 2 that is a device that collects operation logs as log information. The status information management means 22 for managing the status information held in the PC 2, the operation log collection means 20 for collecting and storing the operation logs of the PC 2, and the operation log database 23 (DB: Date Base), operation log update means 21 for updating the format of the operation log stored in the operation log DB 23, and a format table 24 indicating the format of the operation log corresponding to the security level for each security level that can be acquired by the user. Is remembered.

  The PC 2 includes a CPU, a memory, a network communication device, and the like. However, these are general contents and are not shown. In FIG. 2, only functions provided for the PC 2 are provided to realize the present invention. Is illustrated. As a matter of course, these functions are realized by a program for operating the CPU of the PC 2 using a memory or a network communication device.

  The log-in means 25 provided in the PC 2 is a means for identifying the user who operates the PC 2, and identifies the user who operates the PC 2 by reading the user ID from the IC card 1 possessed by the user who operates the PC 2. To do. When the login unit 25 identifies a user, user authentication such as password verification may be performed.

  In the present embodiment, the log-in means 25 reads the status information from the IC card 1 together with the user ID, and the read user ID and status information are delivered to the status information management means 22. The status information management unit 22 holds status information in association with a user ID for each user using a data table or the like.

  The status information managed by the status information management unit 22 is referred to by the operation log collection unit 20 and the operation log update unit 21 of the PC 2, and the operation log is stored in the operation log DB 23 in the format shown in the format table 24.

  When the status information management unit 22 receives a user ID and status information that have been successfully authenticated from the gate device 4_1 or the gate device 4_2, the status information management unit 22 checks whether there is status information of the received user ID in the status information that is held. To do.

  When the status information of the received user ID is not stored, the information transmitted from the gate device 4_1 or the gate device 4_2 is ignored. When the status information of the user ID is stored, it is stored as status information. Status information is compared, and it is confirmed whether the user has acquired a security level higher than the security level indicated by the stored status information.

  When the user acquires a security level higher than the security level indicated by the stored status information, the status information management means 22 updates the stored status information to the received status information, and further, the operation log The change means 21 is notified that the status information has been updated.

  For example, the status information of the user who has acquired the security level “1” is updated to the status information indicating the security level “2” when the user is authenticated by the gate device 4_2, and the status information of the user is updated. Is notified to the operation log changing means 21.

  FIG. 3 is a diagram illustrating a format table 24 that defines a format for storing operation logs. The format table 24 provided in the PC 2 describes items to be included in the operation log as the format of the operation log stored in the operation log DB 23 of the PC 2 for each security level that can be acquired by the user.

  For example, as the operation log of the user who has acquired the security level “1”, detailed contents such as the use date and time of the PC 2 by the user, the file accessed by the user, and the access time of the file are stored. Further, since the user who has acquired the security level “2” can be determined as a reliable user, the operation log includes only the use date and time of the PC 2.

  The operation log collection means 20 of the PC 2 collects operation logs of the user operating the PC 2 and stores them in the operation log DB 23 in a format based on the status information read from the IC card 1 possessed by the user operating the PC 2. Means.

  For example, when a user who has not entered the room 5_2, that is, a user who has acquired only the security level “1” uses the PC 2, the use date and time of the PC 2, the file accessed by the user, the access time of the file, etc. Is collected as an operation log, and the collected operation log is stored in the operation log DB 23 in association with the user ID.

  When a user who enters the room 5_2, that is, a user who has acquired the security level “2” uses the PC 2, the user's use date and time is collected as log information, and the collected log information is associated with the user ID. Store in the log DB 23.

  The operation log update unit 21 of the PC 2 is a unit that operates the operation log stored in the operation log DB 23 based on the security level acquired by the user after using the PC 2, and the operation log update unit 21 is a status information management unit. When the fact that the status information has been updated is notified from 22, the format of the operation log stored in association with the user ID whose status information has been updated is changed to a format based on the updated status information.

  For example, an operation log of a user who uses the PC 2 by acquiring the security level “1” is obtained when the user acquires the security level “2” after using the “C2”, the user's use date and time of the PC 2, and the file accessed by the user. From the detailed contents such as the file access time, it is updated only to the use date and time of the PC 2.

  The surveillance camera system 3 that is a device that collects video as log information includes a status information management unit 32 that manages status information indicating a security level acquired by a user, a video imaging unit 30 that captures video, and a video. Video database 33 (DB: Date Base) for storing video, video update means 31 for changing the format of video stored in video DB 33, and PC 2 correspond to the security level for each security level that can be acquired by the user. A format table 34 indicating the format of the operation log to be stored is stored.

  In the present embodiment, the monitoring camera system 3 does not have means for reading out the user ID and status information from the IC card 1 of the user to be imaged, and the log-in means 25 provided in the PC 2 is the means of the monitoring camera system 3. It becomes.

  That is, when the login unit 25 of the PC 2 reads the user ID and status information from the IC card 1 possessed by the user operating the PC 2, the read information is transmitted to the surveillance camera system 3 and the status information management unit 32. Holds the status information transmitted from the PC 2 in association with the user ID.

  Similarly to the status information management unit 22 of the PC 2, the status information management unit 32 of the monitoring camera system 3 receives the status information indicating the user ID successfully authenticated and the security level acquired by the user from the gate device 4. Whether the status information of the user ID is stored. When the user acquires a security level higher than the security level indicated by the stored status information, the status information is updated and the video update means 31 is notified that the status information has been updated.

  FIG. 4 is a diagram for explaining a format table 34 that defines a format for storing video. The format table 34 provided in the surveillance camera system 3 describes the number of pixels of the video as the format of the video stored in the video DB 33 for each security level that can be acquired by the user.

  In FIG. 4, the number of pixels of the video of the user who has acquired the security level “1” is 500,000 pixels, and the user who has acquired the security level “2” can be determined as a reliable user. The number of pixels is 100,000.

  The image capturing unit 30 of the surveillance camera system 3 is a unit corresponding to the operation log collecting unit 20 of the PC 2 and continuously captures images of the PC 2 with a CCD camera. The image capturing unit 30 captures the captured images at regular intervals. Then, it is stored in the video DB 33 in a format corresponding to the status information when read from the IC card 1 possessed by the user operating the PC 2.

  For example, the number of pixels of an image of a user who has not entered the room 5_2, that is, a user who has acquired only the security level “1” is 500,000 pixels, and the user who has entered the room 5_2, that is, the security level “2”. When the acquired user uses the PC 2, the number of pixels of the user's video is 100,000 pixels.

  The video update unit 31 of the surveillance camera system 3 is a unit that changes the video stored in the video DB 33 based on the security level acquired by the user after using the PC 2. The video update unit 31 is a status information management unit 32. Is notified that the status information has been updated, the number of pixels of the video stored in association with the user ID whose status information has been updated is updated to the number of pixels based on the updated status information. For example, when the user acquires the security level “2”, the number of pixels of the video of the user who acquired the security level “2” is updated from 500,000 pixels to 100,000 pixels.

  According to the log information management system described above, the status information indicating the security level corresponding to the user authentication is written in the IC card 1 possessed by the user, and the log information stored based on the status information stored in the IC card 1 By changing the format, it is possible to reduce the capacity of log information to be stored by reducing the capacity of log information of a user who has acquired a high security level.

  In addition, when a user who stores log information acquires a higher security level, the log information is updated to a format corresponding to the higher security level, thereby reducing the amount of log information already stored. Can do.

  From here, the log information management method according to the present invention will be described taking the log information management system described in this embodiment as an example. FIG. 5 is a diagram for explaining the steps included in the log information management method according to the present invention.

  As shown in FIG. 5, the log information management method according to the present invention includes three steps. Corresponding to the user authentication process P1 for authenticating the user, the log information storage process P2 for collecting log information and storing the log information in a format based on the status information stored in the token, and the security level newly acquired by the user The log information update process P3 updates the format of the log information stored in the log information storage process P2.

  As shown in FIG. 5, each process is not a sequential process. When the user authentication is successful in the user authentication step P1, status information indicating the security level acquired by the user by the user authentication is stored in the token of the user who has succeeded in the user authentication.

  In the log information storing step P2, when storing the log information of the user, the status information is read from the token possessed by the user, and the log information is stored in a format based on the security level indicated by the read status information. When the user acquires a new higher security level, in the log information update step P3, the format of the log information stored in the log information storage step P2 is updated to a format based on the newly acquired security level. .

  FIG. 6 is a flowchart showing a detailed procedure of the user authentication process P1. The first step S1 of this procedure is a step of reading the user ID and status information from the token possessed by the user. In this step, if no status information is stored in the token held by the user, this means that user authentication has never been successful, that is, the user has not acquired any security level. Means.

  The next step S2 is a step of performing user authentication using a token. The user authentication method executed in this step differs depending on the security level acquired by the user. For example, in the log information management system of FIG. 1, the user authentication unit 40_1 of the gate device 4_1 only confirms the user ID, and the user authentication unit 40_2 of the gate device 4_2 uses biometric information. If the user authentication is successful, the process proceeds to step S3. If the user authentication is unsuccessful, the procedure ends.

  The next step S3 is a step of comparing the security level acquired by the user by successful user authentication in step S2 and the security level indicated by the status information read from the token in step S1. If a security level higher than the security level indicated by the status information read from the token is acquired in step S2, the process proceeds to step S4. If the user has not acquired a higher security level, this procedure is terminated.

  In step S4, which is executed when the user has acquired a higher security level, the status information stored in the token is updated to the status information indicating the security level acquired by the user in step S2, and this procedure ends.

  FIG. 7 is a flowchart showing a detailed procedure of the log information storing step P2 for collecting log information and storing the log information in a format based on the status information stored in the token. The first step S10 of this procedure is a step of reading status information stored in a token possessed by the user.

  The next step S11 is a step of collecting log information. The log information collected in this step is an operation log of a personal computer, a video taken by the surveillance camera system, or the like.

  In the next step S12, the log information collected in step S11 is stored in the information storage means in a format based on the status information read from the token in step S10. In this step, the higher the security level indicated by the status information read from the token in step S10, the more the log information content is simplified and the log information capacity is reduced. This procedure ends with this step.

  It is the flowchart which showed the detailed procedure of the log information update process P3 which responds to the security level newly acquired by the user and updates the format of the log information stored in the log information storage process P2.

  The first step S20 of this procedure is a step of acquiring status information indicating the user ID of the user who has succeeded in user authentication and the acquired security level in the user authentication step P1. For example, in the log information management system shown in FIG. 1, the user authentication result of the gate device 4_2 is transmitted to the PC 2 and the monitoring camera system 3, so that the PC 2 and the monitoring camera system 3 have the user who has succeeded in the user authentication. Status information indicating the user ID and the acquired security level is acquired.

  In the next step S21, the status information when the log information of the user specified by the user ID acquired in step S20 is stored in the information storage means is compared with the status information acquired in step S20. This is a step of confirming whether the user has acquired a higher security level than the security level acquired by the user when stored in the storage means.

  If a higher security level is acquired in this step, the process proceeds to step S22, and if the user has not acquired a higher security level, this procedure is terminated.

  In step S22 executed when the user has acquired a higher security level, the format of the log information stored in the information storage means is acquired in step S20 in the format based on the status information acquired in step S20. The information is updated to a format based on the status information, and the updated log information is stored in the information storage means.

The figure which showed the example which applied the log information management system to the office. The block diagram of a log information management system. The figure explaining the format table which determines the format which memorize | stores an operation log. The figure explaining the format table which determines the format which memorize | stores an image | video. The figure explaining the process included in a log information management method. The flowchart which showed the detailed procedure of the user authentication process. The flowchart which showed the detailed procedure of the log information storage process. The flowchart which showed the detailed procedure of the log information update process.

Explanation of symbols

1 IC card 2 Personal computer (PC)
20 operation log collection means, 21 operation log update means, 22 status information management means,
23 operation log DB, 24 format table, 25 login means 3 surveillance camera system 30 video imaging means, 31 imaging update means, 32 status information management means,
33 Video DB, 34 Format table 4 Gate device 40 User authentication means, 41 Opening / closing means

Claims (7)

  A log information management system for storing and managing log information, wherein the log information management system includes a device that collects user usage status as the log information, a token possessed by the user using the device, A plurality of user authentication devices that authenticate the user using a token, and the token includes a user ID, which is information for identifying the user, and a status indicating a security level acquired by the user Information is stored, and the user authentication device succeeds in user authentication with the user authentication means for authenticating the user using the token in a method corresponding to the security level set in the user authentication device. When the security level indicated by the status information read from the token is Only when the security level is lower than the security level set in the user authentication device, status information indicating the security level set in the user authentication device is written in the token, and the user ID read from the token and the token are written in the token. Means for transmitting said status information to said device, said device reading said user ID and said status information from said token, said status means associated with said user ID in said device memory Status information management means for storing log information, log information storage means for storing the usage status of the user specified by the user ID as log information, and the usage status of the user specified by the user ID as the log information Collected and read from the token Serial format based on the status information, the log information management system characterized in that it comprises a log information collection means for storing the log information in the log information storage means collected.   2. The log information management system according to claim 1, wherein when the user ID and the status information are transmitted from the user authentication device, the status management unit provided in the device transmits the user ID. If the security level indicated by the status information held in the device in association with the security information is higher than the security level indicated in the status information held in association with the transmitted user ID Means for updating the status information held in association with the user ID to the transmitted status information; and the device is stored in the log information storage means and specified by the user ID. Log that updates the format of the log information of the user to a format based on the updated status information Log information management system characterized by comprising a multi-address updating means.   3. The log information management system according to claim 1, wherein the user authentication device is a gate device installed in a room such as an office.   4. The log information management system according to claim 1, wherein the device is a personal computer that collects the operation log of the user as the log information, and the log information changing unit includes the status information. A log information management system, comprising: means for reducing items included in the operation log stored in the log information storage means based on information; or means for erasing the operation log.   4. The log information management system according to claim 1, wherein the device is a monitoring camera that captures an image of the user as the log information, and the log information changing unit includes the status information. Based on the log information management system, the log information management system is a means for erasing the video stored in the log information storage means or for reducing the pixels of the video.   A log information management method for storing and managing log information, the log management method including steps to be described, which includes a user ID which is information for identifying a user and a security level acquired by the user When the user authentication is successful using the token stored with the status information indicating the security information, the security level indicated by the status information read from the token is set in the user authentication. Only when the security level is lower than the security level, the user authentication step of writing status information indicating the security level corresponding to the user authentication to the token, and the usage status of the device used by the user are collected as log information and read from the token Collected in a format corresponding to the status information The log information management method which is characterized in that there in the log information storage step of storing the serial log information to the information storage device. The log information management method according to claim 6, wherein when the user authentication is successful and the user newly acquires a higher security level in the user authentication step, the user stored in the information storage device Log information management comprising: a log information update step for updating a log information format to a format based on a security level newly acquired by a user and storing the updated log information in the information storage device Method.

Images