JP2008299395A - System, device, and program for managing document operation authority information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To easily change the document operation authority of users by specifying the users of a distribution destination and a re-distribution destination even under a situation where a document is distributed and re-distributed. <P>SOLUTION: When a document access right change control part 245 receives a document access right change request message which is transmitted by a client terminal 10 when receiving the setting operation of document access right change/erasion with respect to the distribution destination of a certain document from the user, the user IDs of the whole transmission destinations and retransmission destinations with a transmission source user ID as a transmission source are specified by tracking the transmission history of the document in a document operation history management table 223, based on the document ID included in the reception message and the transmission source user ID, and then, the access right of the document which is set in a document access right management table 222 corresponding to the user ID, is changed and set based on the change designation content of access right of the document included in the received message. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a document operation authority information management system, a document operation authority information management apparatus, and a document operation authority information management program.

  In a conventional electronic document access right management system, an access right of each user is assigned to an electronic document for management, and contents can be browsed, edited, printed, and the like.

  In this case, it is common for the access right manager to centrally manage user registration and granting of access rights for each user-related document. If the distribution destination cannot be specified in advance by a group or the like, access right management is performed. The user grants the access right whenever necessary, and sometimes the document access right is set for a group in which more users than necessary are registered.

  Also, when sharing an electronic document using a document sharing database, conventionally, when a file is registered, the access right set in the upper folder is automatically inherited and set in the lower folder or file. Was common.

  With regard to this type of conventional access right management system, the following Patent Document 1 discloses that a server that mediates file transmission manages a mail address of a distribution destination and an access right level of the distribution destination in association with each other. Discloses a technique for transmitting a document to the distribution destination after setting an access right associated with the transmission destination.

Further, in Patent Document 2 below, when an electronic document stored in a database is transmitted to another user, if the transmission destination user has no access right for the electronic document, the electronic document is transmitted to the access right list of the electronic document. There has been disclosed a technique for adding the previous user and notifying the administrator of the document that the access right has been updated.
JP 2004-310637 A JP-A-2005-85152

  The present invention can automatically set the operation authority of the document regarding the distribution destination user at the time of distribution of the document, and the distribution destination and redistribution destination users can be controlled even in the situation where the document is distributed and redistributed. An object of the present invention is to provide a document operation authority information management system, a document operation authority information management device, and a document operation authority information management program that can easily change the user's operation authority for the document.

  In order to achieve the above object, an invention of a document operation authority information management system according to claim 1 is directed to a management apparatus that manages operation authority information of a document corresponding to a document, and an operation authority managed by the management apparatus. A plurality of document operation devices that operate the document based on information, the document operation device distributing a document to a predetermined distribution destination, and the document when the distribution unit distributes the document Setting request means for requesting the management apparatus to set the operation authority information at the distribution destination, and the management apparatus distributes the distribution information related to the distribution of the document included in the setting request by the setting request means. And setting information for setting the operation authority information of the document corresponding to the distribution destination of the document, and distribution information related to distribution of the document included in the setting request by the setting requesting unit. Hazuki; and a distribution history management means for managing the distribution history of the document.

  The invention according to claim 2 is the invention according to claim 1, wherein the distribution information relating to the distribution includes document identification information for identifying a document to be distributed, and user identification for identifying a user of a distribution source of the document to be distributed. Information, destination information indicating a document distribution destination, and operation authority information.

  The invention according to claim 3 is the invention according to claim 1 or 2, wherein the distribution information relating to the distribution includes document identification information for identifying a document to be distributed, and identification for identifying a user of a distribution source of the document to be distributed. Identification information, storage means identification information for identifying the external storage means to which the document is distributed, and operation authority information. The setting means corresponds to the storage means identification information included in the setting request by the setting request means. The operation authority information of the document is set corresponding to the user identification information managed in advance.

  According to a fourth aspect of the present invention, in the invention according to any one of the first to third aspects, the document operation device further includes a change request unit that requests the management device to change the operation authority information. The management means includes a changing means for changing the operation authority information at the corresponding distribution destination of the corresponding document based on the distribution history managed by the distribution history management means when the change request is made by the change request means. To do.

  The invention according to claim 5 is the invention according to claim 4, wherein the changing means includes user identification information for identifying a change request source user included in the change request by the change request means, and a document to be changed. Use for identifying the requesting user from the document distribution history corresponding to the document identification information managed by the distribution history management means, based on the document identification information for identifying the document and the information on the change setting contents of the document operation authority User identification information for identifying all the distribution destination and redistribution destination users of the document whose distribution source is the user identification information is specified, and is set by the setting means corresponding to the user identification information The document operation authority information regarding the document is changed according to the change setting contents.

  The invention according to claim 6 is the invention according to claim 5, wherein the operation history management means identifies the source document identification information for identifying the source document of the document as the distribution history of the document. And managing the document identification information in association with the document identification information included in the distribution history management means corresponding to the document identification information included in the change request by the change request means. When the derivation source document identification information exists, the user identification information of the distribution destination and redistribution destination users of the derivation source document is specified from the document distribution history corresponding to the derivation source document identification information, and the specified The document operation authority information regarding the derivation source document corresponding to the user identification information is further changed according to the change setting contents.

  According to a seventh aspect of the invention, in the invention according to any one of the first to sixth aspects of the invention, the document operation device performs a registration request for registering an operation history of the document to the management device when operating the document. Requesting means, display requesting means for requesting display of the operation status of the document to the management apparatus, receiving display control information transmitted by the management apparatus in response to the display request by the display requesting means, Display means for displaying the distribution history and operation history of the document based on display control information, and the management means is based on operation information related to the operation of the document included in the registration request by the registration request means. An operation history management unit that manages an operation history of the document; a distribution history of the document that is managed by the distribution history management unit when the display request is made by the display request unit; It generates display control information for displaying the distribution history and the operation history of the document based on the document operation history managed by the operation history management unit comprises a transmitting means for transmitting to the document operation apparatus.

  The document operation authority information management apparatus according to claim 8 is a distribution unit that distributes a document to a predetermined distribution destination, and setting of operation authority information at the distribution destination of the document when the distribution unit distributes the document. A setting request means for making a request to the management apparatus, and a plurality of document operation apparatuses having a change request means for making a change request for the operation authority information to the management apparatus. Setting means for setting operation authority information of the document corresponding to the distribution destination of the document based on distribution information relating to distribution of the document included in the setting request by the means, and included in the setting request by the setting request means Distribution history management means for managing the distribution history of the document based on distribution information relating to the distribution of the document, and the distribution request upon the change request by the change request means ; And a changing means for changing the operation authority information in the distribution destination corresponding to the appropriate document for on the basis of the distribution history managed by gravel management means.

  The invention of the document operation authority information management program according to claim 9 comprises: a distribution means for distributing a document to a predetermined distribution destination; and an operation authority at the distribution destination of the document when the document is distributed by the distribution means. A management requester configured to communicate with a plurality of document operation devices having a setting requesting unit for requesting information to the management device and a change requesting unit for requesting the management device to change the operation authority information; Each setting means, setting means for setting the operation authority information of the document corresponding to the distribution destination of the document based on distribution information related to distribution of the document included in the setting request by the setting request means; A distribution history management means for managing a distribution history of the document based on distribution information relating to the distribution of the document included in the setting request by the setting request means; In the change request by, to function as changing means for changing the operation authority information in the distribution destination corresponding documents relevant based on the distribution history managed by the distribution history management means.

  According to the invention of the document operation authority information management system according to the first aspect, when distributing a document, it is possible to automatically set the operation authority of the document regarding the distribution destination user.

  According to the invention described in claim 2, in the invention described in claim 1, when distributing a document, it is possible to set a document operation authority for each user ID of the distribution destination corresponding to the document ID, and the document Corresponding to the ID, it is possible to register and manage a document distribution history that shows the correspondence between the user ID of the distribution source and the distribution destination.

  According to the invention described in claim 3, in the invention described in claim 1 or 2, even when the document is stored in the external storage means, the document operation authority for the owner of the external storage means for the document stored in the document is given. Can be set.

  According to the invention described in claim 4, in the invention described in any one of claims 1 to 3, by performing an operation authority change request operation for the document, the corresponding distribution destination of the document based on the distribution history of the document The operation authority information in can be changed.

  According to the invention described in claim 5, in the invention described in claim 4, the distribution and redistribution process of the document is accumulated as a history, and the user who distributed the document can re-distribute from the distribution destination and the distribution destination after distribution. If you want to revoke or revoke the document operation authority for the document from the distribution destination, you can revoke the document operation authority to the redistribution destination by following the distribution destination history of the document or change the document operation authority. can do.

  According to the invention described in claim 6, in the invention described in claim 5, not only the distribution destination and redistribution destination of the document but also the derivation source of the document is instructed to change or delete the operation authority for the document. The document operation authority for the document distribution destination and redistribution destination can also be changed or deleted.

  According to a seventh aspect of the invention, in the invention according to any one of the first to sixth aspects, the user of the document operation device designates the document and performs the operation status display start operation, thereby distributing the document. Distribution and operation histories such as browsing and editing can be viewed in a tree shape, for example.

  According to the invention of document operation authority information management according to claim 8, the managing device accumulates and manages the distribution and redistribution process of the document as a history, and the user who distributed the document distributes the distribution destination and distribution after distribution. If you want to cancel or delete the grant of document operation authority to the redistribution destination from the destination, simply specify the change or deletion using the document operation device, and trace the distribution destination history of the document to the redistribution destination. The document operation authority can be revoked or canceled.

  According to the invention of the document operation authority information management program according to claim 9, the document distribution / redistribution process is accumulated as a history by implementing it in a document database management system for storing and sharing an electronic document, and the document is distributed. If the registered user wants to revoke or cancel the grant of document operation authority to the distribution destination and the redistribution destination from the distribution destination after distribution, the user can operate the document to the redistribution destination by following the distribution destination history of the document. It is possible to perform control to cancel the grant of authority or change the document operation authority.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 is a block diagram showing the overall configuration of a document access right management system according to the present invention.

  This system includes a plurality of client terminals 10 (10-1, 10-2, 10-3,..., 10-n) used for each user to access a document stored in a document database, and the document. A document access right management apparatus 20 that holds a database and manages the access right (operation authority information) to the document managed by the document database for the user of each client terminal 10, a LAN (Local Area Network), It is configured to be connected via a network (NW) 50 configured by a WAN (Wide Area Network) or the like.

  In this system, a plurality of client terminals 10 share a document database (for example, a storage device 23 described later) provided in the document access right management device 20 and perform processing such as document generation and storage.

  The document access right management apparatus 20 manages the documents on the document database, manages the access rights of each user regarding the documents on the document database, and accesses the documents from each user using the client terminal 10. In response to the request, control is performed to permit or prohibit the access (viewing, editing, printing, etc.) based on the access right of the user to the document.

  As a method for setting the access right used for this access control, for example, when a document generated by a user at each client terminal 10 is registered in a document database, the user's access right for the document is set. is there.

  In this case, when the client terminal 10 instructs to save the generated electronic document in the document database, a document registration request message including the user ID for identifying the user and the electronic document is generated, and the document access right management apparatus When the document access right management apparatus 20 receives the document registration request message, it generates a document ID from the electronic document contained therein and registers the electronic document.

  Further, the document access right management apparatus 20 generates access right information corresponding to the document ID of the registered electronic document, and sets the access right by associating it with the user ID included in the received message.

  Further, after the access right setting is completed, the document access right management apparatus 20 transmits a registration completion message including only the document ID of the registered document to the client terminal 10 that is the registration request source, and the client terminal 10 receives the received message. A document reference file including only the document ID included in the file ID is generated and controlled so as to be placed in a directory on the same file path where the registered document exists.

  Thereafter, the user can access a document registered in the document database or a document reference file having only the document ID of the document by using the document access right set for the user. It is also possible to send the document or document reference file to one or more other users by e-mail.

  Here, considering the subsequent operation (email transmission etc.) for the document registered in the document database or the document reference file, the user who grants the access right to the document at the time when the document is created and registered. Situations that are difficult to identify can also occur.

  Even under such circumstances, the present invention automatically grants access rights to the document in association with transmission / reception of the document (or document reference file), and implements the function. The configuration of the client terminal 10 and the document access right management device 20 will be described.

  Each of the client terminal 10 and the document access right management device 20 includes a CPU (Central Processing Unit), a ROM (Read Only Memory) or a RAM (Random Access Memory) as a main storage unit, and a peripheral storage unit. It is composed of a hard disk, an input interface, a communication interface, etc., and its detailed functional configuration will be described with reference to FIGS.

  FIG. 2 is a block diagram showing a functional configuration of the client terminal 10 in FIG.

  The client terminal 10 is realized by a general-purpose computer such as a PC (Personal Computer). As shown in FIG. 2, the input / operation unit 11 including an input device such as a keyboard and a mouse, various kinds of information such as operation guidance and operation state. A display unit 12 for displaying the information, a storage unit 13 for storing various information such as operation programs, a control unit 14 for controlling the entire apparatus, and a communication that controls a communication interface when communicating with the document access right management apparatus 20 via the NW 50 An interface (I / F) unit 15 is provided.

  In the client terminal (PC) 10, the control unit 14 has various operations [generation, storage, display (viewing), editing, printing of a document file (electronic document data) in accordance with a predetermined operation in the input / operation unit 11. Etc.] is provided.

  The control unit 14 includes a document access right setting request control unit 141, a document-based transmission / reception history management unit 142, a document operation history registration request control unit 143, a document access control unit 144, a document access right change request control unit 145, and a document. A distribution history display control unit 146 is provided.

  When distributing (transmitting) a document from the client terminal 10 to a user of another client terminal 10, the document access right setting request control unit 141 sends the document destination user to the document access right management apparatus 20. Control for requesting setting of the access right (viewing, editing, registration, printing, etc.) of the document.

  The document transmission / reception history management unit 142 manages the document transmission / reception history for each document using the document transmission / reception history management table (TB) 131 provided in the storage unit 131, for example.

  FIG. 3 is a table showing an example of holding document-specific transmission / reception history information in the document-specific transmission / reception history management table 131.

  In the document-specific transmission / reception history management table 131 of this example, for each document transmitted from the client terminal 10, document identification information (document ID) for identifying the document, destination information (destination mail address) of the destination, and The information of the date and time of transmission is registered in association with each other.

  The document operation history registration request control unit 143 registers the operation history of the document with respect to the document access right management apparatus 20 when any document operation is performed on the document by the user at the client terminal 10. Control to request.

  1, since the client terminal 10 is not always connected to the NW 50, the document operation history memory (M) 132 configured by a cache memory is included in the client terminal 10. (In this example, provided in the storage unit 13), and the client terminal 10 is not connected to the NW 50, the document operation history registration request control unit 143 displays information related to the operation history related to the document performed by the user. Once stored in the document operation history memory 132, when the client terminal 10 is connected to the NW 50, the registration request is issued to the document access right management apparatus 20 based on the document operation history information stored in the document operation history memory 132. It is the composition which does

  FIG. 4 is a table showing an example of document operation history information held in the document operation history memory 132. The operation date / time, operation type, and derivation source corresponding to the document 1D of the operated document. The document ID of the document is held.

  When a document is selected by the user and a predetermined operation for starting a document access right acquisition request for the document is performed, the document access control unit 144 instructs the document access right management apparatus 20 to display the document of the user. In response to the request, the document access right management apparatus 20 sends a response to the client terminal 10 when it is determined that the requesting user has the right to access the document. The access key is received, and the access to the document is controlled using the access key.

  When a document is selected by the user at the client terminal 10 and a document access right change process is selected from the processing menu of the document, the document access right change request control unit 145 sends the document transmission destination (document Search and list the separate transmission / reception management table 131), display a predetermined operation screen on which the access right setting change tool of the document is displayed, select the transmission destination of the document, and access the document of the document A right setting change is accepted, and control is performed to request the document access right management apparatus 20 to change the document access right of the document based on the transmission destination of the selected document and the access right change setting contents.

  When a document is selected by the user at the client terminal 10 and a document distribution history display process is selected from the processing menu of the document, the document distribution history display control unit 146 notifies the document access right management apparatus 20. Requesting the acquisition of the operation history of the document, and receiving a response signal including display control information for displaying the operation history of the document in a predetermined manner as a response from the document access right management apparatus 20 in response to the request Then, based on the display control information, the operation history of the document is controlled to be displayed in a predetermined mode (for example, a tree shape).

  FIG. 5 is a block diagram showing a functional configuration of the document access right management apparatus 20 in FIG.

  The document access right management device 20 is composed of a general-purpose computer, and as shown in FIG. 5, a communication interface (I / F) unit 21 that controls a communication interface when communicating with the client terminal 10 via the NW 50, an operation program, and the like. A storage unit 22 for storing various information, for example, a hard disk drive (HDD), a storage device 23 having a document database area for storing information such as electronic documents requested for registration from the client terminal 10, A control unit 24 that performs control is provided.

  The control unit 24 includes an information management unit 241, a document access right setting control unit 242, a document operation history management unit 243, a document access right notification control unit 244, a document access right change control unit 245, and a document distribution history notification control unit 246. Provided.

  For example, the information management unit 241 uses the user management table 221 provided in the storage unit 22 to manage information about the users of the client terminals 10 included in the system.

  FIG. 6 is a table showing an example of user information registration in the user management table 221.

  According to this example, as user information, corresponding to user identification information (user ID) for identifying a user, the user name (name) and the destination information (email address) of the user Each information is registered.

  The document access right setting control unit 242 receives the document access right setting request from the document access right setting request control unit 141 of the client terminal 10 and, for example, stores the document access right in the document access right management table 222 provided in the storage unit 22. Based on the document ID included in the right setting request and the user ID of the transmission destination user, the access right of the document to the transmission destination user is set.

  FIG. 7 is a table showing an example of setting document access right information in the document access right management table 222, and the use of the destination client terminal 10 corresponding to the document ID of the document sent from the client terminal 10. A user ID of the user and a document access right for the document [document operation type permitted to access the user (viewing, editing, registration, printing, etc.)] are set.

  The document operation history management unit 243 receives the document operation history registration request from the document operation history registration request control unit 143 of the client terminal 10, and stores a document operation history related to the requested document in, for example, the document provided in the storage unit 22. Register and manage in the operation history management table 223.

  FIG. 8 is a table showing an example of registration of document operation history information in the document operation history management table 223.

  In this example, as the document operation history information, the user ID of the user who performed the operation corresponding to the document ID of the document operated by the user of the client terminal 10 as the registration request source, and the operation are performed. The date and time, the type of operation, and the document ID of the derivation source document are registered in association with each other.

  When the document operation is a document transmission, destination information (destination set: mail address) of the user of the transmission destination is further registered in association with the information.

  The document access right notification control unit 244 receives the document access right acquisition request from the document access control unit 144 of the client terminal 10, and accesses the document using the document ID included in the request and the user ID of the requesting user as a key. The right management table 222 is searched to check whether or not the user has the access right for the document. If the document access right is set, the document access right acquisition response including the access key to the document is obtained. Is transmitted to the client terminal 10 of the request source.

  The document access right change control unit 245 receives the document access right change request from the document access right change request control unit 145 of the client terminal 10, and includes the document ID, the user ID of the requesting user included in the request, Extract each information of the transmission destination and document access right change setting of the document, use the requesting user as a distribution source, and use all the transmission destinations and re-transmission destinations of the document via the transmission destination user The user is specified from the operation history of the document registered in the document operation history management table 223, and is set in the document access right management table 222 corresponding to the specified transmission destination and re-transmission destination user. Control is performed to change the access right of the document in accordance with the document access right change setting contents extracted from the request.

  The document distribution history notification control unit 246 receives the document operation history acquisition request from the document distribution history display control unit 146 of the client terminal 10, reads the operation history of the document from the document operation history management table 223, and the document operation history. Is generated in a tree shape, and a response signal including the display control information is transmitted to the requesting client terminal 10.

  In the configuration described above, the document access right setting request control unit 141, the document-based transmission / reception history management unit 142, the document operation history registration request control unit 143, the document access control unit 144, and the access right in the client terminal 10 (see FIG. 2). The change request control unit 145 and the document distribution history display control unit 146 operate as a document access right management client (implemented by software), while the information management unit 241 and the document access in the document access right management apparatus 20 (see FIG. 5). The right setting control unit 242, the document operation history management unit 243, the document access right notification control unit 244, the document access right change control unit 245, and the document distribution history notification control unit 246 operate as a document access right management server. Executes client / server type communication.

  In this case, each processing request from the document access right management client and a response from the document access right management server to the request are performed by message exchange by TCP / IP.

  Hereinafter, in the system of the present invention, various processes related to document access right management realized by the above message exchange between the client terminal 10 (document access right management client) and the document access right management apparatus 20 (document access right management server). The function will be described in more detail with reference to each embodiment.

  FIG. 9 is a flowchart showing the document access right setting request processing operation at the client terminal 10 in the document access right setting process of the system according to the first embodiment. FIG. It is a flowchart which shows an access right setting request response process operation.

  The document access right setting request process in the client terminal 10 is started when the user performs an operation of transmitting a document to a user of another client terminal 10.

  In FIG. 9, in the client terminal 10, the document access right setting request control unit 141 monitors a Simple Mail Transfer Protocol (SMTP) message passing over the network port of the client terminal 10 as the document transmission operation that is the activation condition. Then, it is checked whether or not the STMP message of the electronic mail is received (detected) by the user transmitting the electronic mail (step S102).

  Here, when the STMP message is received (step S102 YES), the document access right setting request control unit 141 analyzes the SMTP message data (data in MIME format, etc.) of the e-mail and determines whether the attached document is attached. (Step S103).

  If it is detected that the attached document is included in the e-mail message (YES in step S103), the document access right setting request control unit 141 extracts the “destination e-mail address set” extracted from the e-mail message. ”,“ User ID ”,“ Date / Time ”information,“ Document ID ”of the attached document generated based on the document (electronic document) attached to the message, and generated corresponding to transmission of the document The document access right setting request message (which further includes a message ID for identifying the document access right setting request message) including the information on the “access right” is generated, and the IP of the document access right management apparatus 20 registered in advance is generated. Using the address, the document access right setting request message is transmitted to the document access right management apparatus 20 (step S104).

  The “user ID” included in the document access right setting request message is the user ID of the user who sent the e-mail, “date and time” is the e-mail transmission date and time, and “document ID” is the e-mail A unique hash value corresponding to the content obtained by applying a hash function (such as SHA-256) using the document content as a key (strictly, a value that does not cause a probability collision), and “access right” is the default As the access right to be set, for example, “browsing, editing, printing (indicating that browsing, editing, and printing are permitted)” is set.

  After transmitting the document access right setting request message in step S104, the document access right setting request control unit 141 shifts to a waiting state for receiving a response message from the document access right management apparatus 20 (step S105). It is monitored whether or not a document access right setting completion message transmitted as a response from the apparatus 20 is received (step S106).

  Here, when the document access right setting completion message transmitted as a response from the document access right management apparatus 20 is received (YES in step S106), the message ID included in the received message is extracted, and the message ID is the above step S105. For example, a document access right setting notification screen (hereinafter referred to as a notification screen) 121 having the display contents shown in FIG. 11 is displayed on the display unit 12 on the condition that the message ID assigned to the document access right setting request request message transmitted in FIG. (Step S107).

  As a result, the user of the client terminal 10 (the sender of the e-mail) can access the document transmitted by the e-mail from the display content of the notification screen 121 to the user of the e-mail transmission destination. You can confirm that the setting is complete.

  Thereafter, when the user of the client terminal 10 performs a confirmation operation of pressing the “confirm” button on the notification screen 121 (YES in step S108), the document access right setting request control unit 141 closes the notification screen 121, The process ends.

On the other hand, in FIG. 10, the document access right management apparatus 20 is in a state of waiting for reception of a document access right setting request message (step S201), and the document access right setting control unit 242 receives a document access right setting request message from the client terminal 10. Whether or not is received (step S202),
Here, when the document access right setting request message is received (YES in step S202), the document access right setting control unit 242 searches the user management table 221 using the destination mail address set included in the received message as a key. (Step S203), it is checked whether or not the destination mail address set is registered, that is, whether or not the transmission destination is a registered user (Step S204).

  If the destination mail address set is not retrieved from the user management table 221 and it is determined that the transmission destination is not a registered user (NO in step S204), after performing a predetermined setting error process (step S205), the process Exit.

  On the other hand, when the destination mail address set is searched from the user management table 221 and it is determined that the transmission destination is a registered user (YES in step S204), the document access right setting control unit 242 Each user ID (user ID of each transmission destination) corresponding to the destination mail address set is searched from the user management table 221 (step S206), and the searched user ID (transmission destination user ID) is obtained. Then, the document is added to the access right (consisting of the correspondence between the user ID and the access right) of the document (document corresponding to the document ID included in the received message) in the document access right management table 222 (step S207).

  Specifically, the destination user ID searched in step S206 and the access right information included in the received message are stored in the received message in the document access right management table 222 (see FIG. 7). Are additionally set in the user ID column and the access right column corresponding to the document ID included in the.

  If there is no access right list corresponding to the document ID included in the received message in the document access right management table 222, the document ID is added to the document ID column, and the user corresponding to the document ID is added. In the ID column and the access right column, the user ID (destination user ID) searched in step S206 and the access right information in the received message are newly set.

  Next, the document operation history management unit 243 generates a new “transmission / reception history” entry on the document operation history management table 223 (see FIG. 8) as the transmission / reception history related to the document corresponding to the document ID included in the received message. , Based on a plurality of information included in the received message, the “document ID”, “user ID”, “date / time”, “operation”, “derivation source document”, and “destination set” constituting the entry Information corresponding to each column is written, and the document operation history of the document is registered (step S208).

  In this case, the “document ID” is the document ID in the received message, the “user ID” is the “user (user who sent the document)” in the received message, and the “date and time” is the “user ID” in the received message. “Send date”, “Operation” is “Send”, “Derived source document” is “NULL”, and “Destination set” is a set of destination mail addresses in the received message.

  When the document operation history registration process for the document in the document operation history management table 223 in step S208 is completed, the document access right setting control unit 242 displays the document access right setting completion message indicating that the access right has been set. (Including the message ID included in the message received in step S202) is returned to the client terminal 10 of the document access right setting request source (transmission source of the document) (step S209), and the process ends.

  As shown in FIGS. 9 and 10, in the system of this embodiment, when the client terminal 10 distributes (sends) a document to a user of another client terminal 10, a document access right setting request message [the message Message ID for identifying the user, the user ID for identifying the user of the transmission source, the document ID for identifying the document to be transmitted], the transmission date and time of the document, the destination information group of the transmission destination (destination mail address set), and the respective transmissions Information on the operation type (document access right) of the document permitted to the destination is included. ] Is transmitted to the document access right management apparatus 20, and when the document access right management apparatus 20 receives the document access right setting request message from the client terminal 10, the document ID and destination mail address included in the received message are received. Based on the information on the set (destination) and access right, the access right of the document for the user of the destination (retrieved from the user management table 221 (see FIG. 6) using the destination mail address set as a key) It is set and managed in the access right management table 222 (see FIG. 7).

  Further, the document access right management apparatus 20 determines the document based on information such as the document ID, the transmission source user ID, the transmission date and time, and the destination mail address set included in the document access right setting request message received from the client terminal 10. Is registered in the document operation history management table 223.

  In the system of this embodiment, for a document for which an access right is set by the document access right setting process shown in FIGS. 9 and 10, a user who has been given an access right for the document (in the document access right management table 222 Only a user having a user ID set in the access right list corresponding to the document ID can access the document.

  At that time, the user selects the document at the client terminal 10, obtains an access key related to the document from the document access right management server 20, and uses the access key to permit an operation on the electronic document. It has become.

  When the access key is not obtained or when the access key is invalid, the operation relating to the electronic document is not permitted.

  The access key is valid only while the document access right management client of the client terminal 10 is activated and operating, and is deleted and invalidated when the access right management client is stopped by logout or shutdown. .

  Next, in the system of this embodiment, an operation when an electronic document exchanged between users is operated (viewed, edited, printed, etc.) based on the access right set for the document will be described. .

  FIG. 12 is a flowchart showing the document access right acquisition request processing operation in the client terminal 10 in the document access right acquisition process of the system according to the present embodiment. FIG. It is a flowchart which shows an access right acquisition request response process operation.

  The document access right acquisition request process in the client terminal 10 is activated by a user's desired document selection operation (for example, double click).

  In FIG. 12, the client terminal 10 is in a document operation monitoring state (step S111), and the document access control unit 144 monitors whether a document selection operation has been performed (step S112).

  Here, when a document is selected (YES in step S112), the document access control unit 144 receives a document access right acquisition request message (requesting user) for requesting acquisition of an access key related to the selected electronic document. And a document access right acquisition request message are transmitted to the document access right management apparatus 20 (step S113).

  Here, the document access right acquisition request message includes, for example, a message ID for identifying the message, a user ID for identifying the requesting user, and a document for which the access right is to be acquired (selected by the user in step S112 above). Each piece of document ID information for identifying a document).

  After transmitting the document access right acquisition request message, the client terminal 10 shifts to a reception waiting state for a document access right acquisition response message from the document access right management apparatus 20 (step S114), and the document access control unit 144 It is monitored whether or not a document access right acquisition response message is received (step S115).

  Here, when the document access right acquisition response message sent by the document access right management device 20 is received (YES in step S115), the message ID included in the received document access right acquisition response message (reception message) is transmitted. On the condition that the received message matches the message ID assigned to the acquired document access right acquisition request message, it is checked whether or not the received message contains an access key (step S16).

  Here, when the access key is not included in the received message (NO in step S116), control is performed so as to prohibit the operation on the document (not shown), and the process ends.

  As an example of the document operation prohibition control, for example, based on the information included in the received message indicating that “the user is not a document access right”, the fact is notified to the user. May be.

  On the other hand, if the received message includes an access key (YES in step S116), the access key is used to open the document (the document selected in step S112), and the user has access rights to the document. The document is operated within the range (step S117).

  On the other hand, in FIG. 13, the document access right management apparatus 20 is in a state of waiting for reception of a document access right acquisition request message from the client terminal 10 (step S211), and the document access right notification control unit 244 acquires the document access right acquisition. It is monitored whether a request message has been received (step S212).

  Here, when the document access right acquisition request message is received from the client terminal 10 (YES in step S212), the document access right notification control unit 244 uses the document ID and the requesting user ID included in the received message as keys. The document access right management table 222 is searched (step S213), and it is checked whether or not the requesting user ID is set in the access right list corresponding to the document ID (step S214).

  If the requesting user ID is set in the access right list corresponding to the document ID (YES in step S214), an access key used to access the document is generated, and the access key and the message ID are generated. Is sent to the client terminal 10 as the acquisition request source (step S215), and the process ends.

  On the other hand, when the user ID of the request source is not set in the access right list corresponding to the document ID (NO in step S214), information indicating that the access right is not set and the message ID are displayed. The received document access right acquisition response message is transmitted to the client terminal of the document access right acquisition request source (step S216), and the process ends.

  As shown in FIGS. 12 and 13, in the system of this embodiment, the client terminal 10 and the document access right management apparatus 20 cooperate, and the client terminal 10 selects a document including a user ID and a document ID when selecting a document. When the access right acquisition request message is transmitted and the document access right management apparatus 20 receives the message, the user has the right to access the document based on the user ID and the document ID included in the received message. The access key is returned only in the case, and the client terminal 10 is controlled to access (manipulate) the document using the returned access key.

  Through this document access right acquisition process, when the client terminal 10 acquires an access key from the document access right management device 20 and a document operation such as browsing, editing, printing, etc. is performed on the document, a history related to the document operation is obtained. Are registered and managed in the document access right management apparatus 20.

  Next, document operation history registration processing in the system of this embodiment will be described.

  FIG. 14 is a flowchart showing the document operation history registration request processing operation at the client terminal 10 in the document operation history registration processing of the system according to the present embodiment. FIG. It is a flowchart which shows operation history registration response processing operation.

  The document operation history registration request process in the client terminal 10 is started each time a document is selected by the user and a document operation is executed on the selected document based on the document access right acquisition process shown in FIGS. Is done.

  In FIG. 14, the client terminal 10 is in a state waiting for occurrence of a document operation (step S121), and the document operation history registration request control unit 143 monitors whether or not a document operation has been performed (step S122). .

  When a document operation is performed (YES in step S122), the document operation history registration request control unit 143 determines the document ID, operation date and time of the operated document according to the document operation status such as browsing, editing, and printing. The information of the operation type and the derivation source document (document ID) is stored in the document operation history memory 132 as the document operation history of the document (step S123).

  After storing the document operation history in the document operation history memory 132, the document operation history registration request control unit 143 determines whether the client terminal 10 is connected to the NW 50 (whether it is communicable) or not ( Whether communication is impossible is checked (step S124).

  Here, when the client terminal 10 is not connected to the NW 50 (when communication is disabled: NO in step S124), the processing from step S121 is continued.

  The document operation history information stored in the document operation history memory 132 when the client terminal 10 is not connected to the NW 50 is described later when the client terminal 10 is connected to the NW 50 and can communicate. In step S125 and subsequent steps, the document operation history registration request message is used to send the document access right management apparatus 20.

  On the other hand, when the client terminal 10 is connected to the NW 50 (when communication is possible: YES in step S124), the document operation history registration request control unit 143 displays the user ID of the user who operated the document, A document operation history registration request message including each information of the document ID of the operated document, the operation date and time, the type of operation, and the document ID of the derivation source document and assigned with the message ID is generated (step S125). A document operation history registration request message is transmitted to the document access right management apparatus 20 (step S126).

  Thereafter, the client terminal 10 enters a waiting state for receiving a document operation history registration completion message from the document access right management apparatus 20 (step S127), and the document operation history registration request control unit 143 receives the document operation history registration completion message. Is monitored (step S128).

  Here, when the document operation history registration completion message is received (YES in step S128), the message ID included in the received message matches the message ID given to the document operation history registration request message transmitted in step S126. On a predetermined notification screen [for example, on the document access setting notification screen 121 (see FIG. 11), instead of the access right setting completion notification message, the registration of the document operation history is notified. Is displayed on the display unit 12 (step S129).

  Thereafter, when the user presses the “confirm” button on the notification screen (step S130 YES), the notification screen is closed and the process is terminated.

  On the other hand, in FIG. 15, the document access right management apparatus 20 is waiting to receive a document operation history registration request message transmitted from the client terminal 10 (step S 221), and the document operation history management unit 243 receives the document operation history management message 243. It is monitored whether or not a registration request message has been received (step S222).

  Here, when the document operation history registration request message is received from the client terminal 10 (YES in step S222), the document operation history management unit 243 newly creates an entry of “document operation history” regarding the document ID included in the received message. Among the items generated and constituting this entry, “User ID” indicates the user ID of the document operation history registration request source included in the received message, and “Date” indicates the operation date included in the received message. “Operation” includes an operation type such as “edit” or “print” included in the received message, and “derivation source document ID” includes an edit source included in the received message when the content is changed by editing or the like. Each document ID of the document is written and registered in the document operation history management table 223 as the operation history of the document (step S223).

  If the document operation is not an e-mail transmission (in this case, the document operation history (document transmission / reception history) by the processing of S208 in FIG. 10 is registered), nothing is stored in the destination set (destination mail address). Not registered.

  When the registration of the document operation history in step S223 is completed, the document operation history management unit 243 completes the document operation history registration completion message with the message ID included in the document operation history registration request message received in step S222. Is transmitted to the client terminal 10 (step S224), and the process ends.

  As shown in FIGS. 14 and 15, in the system of this embodiment, the client terminal 10 and the document access right management device 20 cooperate to operate the document when the client terminal 10 operates the document by the user. History registration request message (message ID for identifying the message, user ID for identifying the user of the registration request source, document ID for identifying the operated document, operation date / time of the document, type of operation, derivation source document When the document access right management device 20 receives the document operation history registration request message, the user ID and the document included in the received message are transmitted to the document access right management device 20. Based on the ID, operation date / time, operation type, and document ID of the derivation source document, the operation history of the document having the document ID is stored in the document operation history management table 22. Registers (see Figure 8).

  Here, a specific example of document exchange between users of the client terminal of the system according to the present embodiment, and the document access right set based on the document access right acquisition processing shown in FIGS. A specific example and a specific example of the document operation history will be described.

  FIG. 16 is a conceptual diagram showing a specific example of document exchange (document distribution) between users performed using each client terminal 10 of the system of this embodiment.

  In FIG. 16, in particular, Fuji Taro (user ID = 00001) is moved from the client terminal 10-1 to Hanako Fuji (user ID = 000002: user of the client terminal 10-2), and Tomita Suzuki (user ID). = 00003: Document A (document ID = docu010) is transmitted to the client terminal 10-3, and then Tomita Suzuki (user ID = 00003) is sent from the client terminal 10-3 to Tomiko Tanaka (user ID). = 00004: user of client terminal 10-4) and Fujio Yamada (user ID = 00005: user of client terminal 10-5), and further, Fujio Yamada (user ID = 00005) sends the document A to Fujiko Nakayama (user ID = 00006: user of the client terminal 10-6) from the client terminal 10-5. It illustrates the flow distribution in the case of retransmission.

  In the course of the distribution and redistribution of document A in FIG. 16, each user performs document operations other than distribution, such as viewing and editing of document A. In FIG. Document operations are omitted.

  In the flow of distribution and redistribution of document A in FIG. 16, transmission of document A from Fuji Taro (user ID = 00001) to Fuji Hanako (user ID = 00000) [in the figure, reference numeral [1] 9 and 10, the document access right setting request message including the document ID of the document A = document 010 and the destination mail address = (F. Hanako @ bbb) is obtained by the document access right registration process shown in FIGS. The document access right management device 20 extracts the document ID = docu010 and the destination mail address = (F. Hanako @ bbb) included in the document access right setting request message. The user ID = 00000 of the destination corresponding to the destination mail address = (F. Hanako @ bbb) is the user management table. 221 (see FIG. 6) and the access right (for example, browsing) for the user ID = 00002 of the transmission destination in the document access right management table 222 (see FIG. 7) corresponding to the document ID = docu010. , Edit, and print) are set.

  Further, at this time, the document operation history management table 223 corresponds to the document ID = document010 as indicated by the reference numeral (1) for the sake of convenience in FIG. Thus, there is a document operation history (transmission / reception history) composed of combinations of user ID = 00001, date = 2006.9.11 10:31, operation = transmission, destination mail address = (F. Hanako @ bbb). be registered.

  Similarly, transmission of document A from Fuji Taro (user ID = 000001) to Tomita Suzuki (user ID = 00003) (indicated by reference numeral [2] in the figure), Tomita Suzuki (user ID = 00003) ) To Reiko Tanaka (user ID = 00004) [indicated by symbol [3] in the figure], Tomita Suzuki (user ID = 00003) to Fujio Yamada (user ID = 00005) Re-transmission of document A to the user (indicated by reference numeral [4] in the figure), re-transmission of document A from Fujio Yamada (user ID = 00005) to Fujiko Nakayama (user ID = 00006) [in the figure [5]], in the access right list of the document ID = document 010 of the document access right management table 222 (see FIG. 7), the user ID = 00003 of the transmission destination of the document A, the retransmission destination User ID = 0000 , The same user ID = 00004, of again and again the destination the user ID = 00006, in each case, are additional settings.

  At this time, every time document transmission, re-transmission, and re-transmission indicated by reference numerals [2] to [5] in FIG. 16 are performed in the document operation history management table 223 in FIG. As a matter of convenience, as clearly shown with reference numerals (2) to (5), “user ID = 00001, date = 2006.9.14 14:23 corresponding to document ID = docu010, respectively. , Operation = transmission, destination mail address = (S.futa@ccc) ”,“ user ID = 00003, date = 2006.9.13 10:13, operation = transmission, destination mail address = (T.fuko @Dd) ”,“ user ID = 00003, date = 2006.9.13 10:25, operation = transmission, destination email address = (Y.fujio@eeee) ”,“ user ID = 0 ” 005, date = 2006.9.13 11:11, operation = transmission, destination mail address = (N.Fujikoattofff) "document operation history made in combination of information (document reception history) are registered.

  In FIG. 8, the document operation history management table 223 also stores the document operations other than the document transmission performed during each document operation (document transmission) denoted by reference numerals (1) to (5). An operation history is registered. The document operation history other than the document transmission is registered by the document operation history processing shown in FIGS.

  After the setting of the document access right and the registration of the document operation history are performed, each user of the transmission destination, the retransmission destination, and the retransmission destination of the document A is set for each user. Based on the document access right for the document A, an access key can be acquired, and the document A can be accessed and the document operation defined by the access right can be performed.

  Under the distribution status of the document A, a user who distributes the document A, for example, Taro Fuji (user ID = 00001), distributes the distribution destination of the document A [Hanako Fuji (user ID = 00000), Fuji Tomita (user ID = 00003)], and each redistribution user [Tomiko Tanaka (user ID = 00004), Fujio Yamada (user ID = 00005), Fujiko Nakayama (user) ID = 00006)] may be requested to change or delete the document access right.

  Processing for changing / erasing the document access right for the document distribution destination user in this case will be described below.

  FIG. 17 is a flowchart showing the document access right change request processing operation at the client terminal 10 in the document access right change process of the system according to the first embodiment. FIG. It is a flowchart which shows an access right change request response process operation.

  The document access right change request process in the client terminal 10 is started when the user selects a document for which the access right is to be changed and designates the document access right change process from the document processing menu.

  In FIG. 17, the client terminal 10 monitors the user's document selection operation (step S141). During this time, when the user selects a desired document (step S141 YES), for example, A display process menu [context menu] 123 having the display mode shown in FIG. 19 is displayed on the display unit 12 (step S142).

  Subsequently, the document access right change request control unit 145 changes or deletes the document access right set for the transmission destination / retransmission destination user from the context menu 123 of the document by the user. It is monitored whether or not an operation for selecting a menu item “change / delete of distribution destination access right” has been performed (step S143).

  If a menu item other than “change / delete of distribution destination access right” is selected (NO in step S143), a process corresponding to the selected menu item is executed (step S151), and the process is completed. Then, the process returns to step S141.

  On the other hand, when the selection operation of the menu item “change / delete distribution destination access right” is performed (YES in step S143), the document access right change request control unit 145 uses the distribution destination that distributed the document by e-mail. A screen (document access right change setting screen) 125 for setting the access right change / deletion related to the user is generated and displayed on the display unit 12, and the processing shifts to a document access right setting change acceptance process (step S144). .

  FIG. 20 is a diagram illustrating a display example of the document access right change setting screen 125. The document access right change setting screen 125 corresponds to the distribution destination display column for displaying the user name of the distribution destination of the document selected by the user in step S141 and the user displayed in the distribution destination display column. A plurality of setting operation tools configured with designation buttons for designating access rights by type are displayed.

  In step S144, the document access right change request control unit 145 receives the selection of the menu item “change / delete distribution destination access right” in step S143. From the transmission history of the document stored in the table 131 (see FIG. 3), information on the transmission destination (transmission destination mail address) of the document is read, and the setting operation tools corresponding to the number of the read transmission destinations are read. A document access right change setting screen 125 in which the destination mail address is embedded and the destination is listed is generated and displayed.

  On the displayed document access right change setting screen 125, the user operates a designation button corresponding to the user for each user to whom the document has been transmitted, and selects “delete”, “view” ”,“ Edit ”,“ print ”, and the like, the setting contents of the access right can be specified for each type.

  In this case, it can be considered that each time the designation button is pressed, the designated content of the access right corresponding to the designation button is switched in order between “setting” and “non-setting”.

  In step S144, the document access right change request control unit 145 displays the document access right change setting screen 125, and continues to accept changes in the document access right and designation of cancellation (change setting) from the user. It is monitored whether or not the change setting has been completed (step S145).

  Here, when it is determined that the change setting has been completed by an instruction to execute the change process (pressing the “execute” button) by the user (YES in step S145), the document access right change request control unit 145 transmits User ID of the original user (request for change), document ID of the selected document (document whose document access right is to be changed), and user who is the transmission destination of the selected document (user whose document access right is to be changed) Generating a document access right change request message to which the message ID for identifying the message is added, and each information of the destination information (destination e-mail address set), the specified contents of the change setting related to the access right of the document, The document access right change request message is transmitted to the document access right management apparatus 20 (step S146).

  After transmitting the document access right change request message, the document access right change request control unit 145 shifts to a reception waiting state for a response message from the document access right management device 20 (step S147). It is monitored whether or not a document access right change completion message transmitted in response is received (step S148).

  Here, when a document access right change completion message returned from the document access right management apparatus 20 (see step S245 in FIG. 18) is received (YES in step S148), the message ID included in the received message is changed in step S146. On the condition that it matches the message ID assigned to the transmitted document access right change request message, for example, as shown in FIG. 21 based on “information indicating that the document access right has been changed” included in the received message. As described above, the display unit 12 displays the document access right change notification screen 127 including the message that the access right has been changed, the transmission destination whose access right has been changed, and the name of the user at the retransmission destination (step S149). ).

  By viewing the notification screen 127, the user can confirm that the change of the access right of the document to the transmission destination having the displayed destination mail address has been completed.

  Thereafter, when the user presses the “confirm” button on the notification screen 127 (step S150 YES), the notification screen 127 is closed and the process is terminated.

  On the other hand, in FIG. 18, the document access right management device 20 is in a waiting state for receiving a document access right change request message (step S241), and the document access right change control unit 245 receives a document access right change request message from the client terminal 10. Is monitored (step S242).

  When the document access right change request message is received from the client terminal 10 (YES in step S242), the document access right change control unit 245 includes the document ID and the user ID (use of the change request source) included in the received message. A user's user) is extracted, and the document transmission history with the user ID of the document stored in the document operation history management table 223 as the transmission source is traced, and all transmissions with the user ID as the transmission source are traced First, the user ID of the re-transmission destination is specified (step S243).

  In this process, the document access right change control unit 245 first specifies the destination mail address of the transmission destination registered in the document operation history management table 223 corresponding to the user ID extracted from the received message. A user ID (transmission destination user ID) corresponding to the destination mail address is specified from the user management table 221. Next, the document operation history management table 223 corresponding to the specified transmission destination user ID. After specifying the destination mail address of the transmission destination (retransmission destination) registered in, the user ID (user ID of the retransmission destination) corresponding to the destination mail address is specified from the user management table 221. The process is repeated until the last transmission destination user ID is specified.

  Next, the document access right change control unit 245 corresponds to each of the user IDs of all the transmission destinations and re-transmission destinations specified by the above processing (the user ID extracted from the received message is the transmission source). The access right of the document set in the access right management table 222 (the access right currently being set) is changed and set so as to be the contents of the access right change designation included in the received message (step S244).

  In this change setting process, the user ID corresponding to the set of destination mail addresses included in the received message is retrieved from the user management table 221 and the user ID (from the user who requested the access right change request for the document) is retrieved. The access right corresponding to the transmission destination) is changed and set to the contents designated for the destination mail address set on the document access right change setting screen 125 by the user who requested the access right change, The access right corresponding to the user ID of the transmission destination and retransmission destination of the document via the user ID is changed and set to the same content as the access right for the user ID.

  Also, in this change setting process, if the access right change designation content included in the received message is “periphery”, the document access right is deleted.

  When the document access right change process in step S244 is completed, the document access right change control unit 245 generates a document access right change completion message including information indicating that the document access right has been changed, and the document access right change A change completion message is transmitted to the client terminal 10 that is the document access right change request source (step S245), and the process is terminated.

  The information indicating that the document access right has been changed includes, for example, the name of the user having the user ID whose access right has been changed in step S244 and the change of the document access right for these users. A method using a message indicating completion is conceivable.

  As shown in FIGS. 17 and 18, in the system of the present embodiment, the client terminal 10 selects a document by the user and accepts a document access right change / delete setting operation for the distribution destination of the document. A document access right change request message including each information of a transmission source user ID, a document ID, a destination mail address set of the transmission destination of the document, and a change designation content regarding the access right is transmitted to the document access right management apparatus 20, and the document access Upon receiving the document access right change request message, the right management apparatus 20 transmits the transmission source user ID by tracing the transmission history of the document based on the document ID and the transmission source user ID included in the received message. All the transmission destinations and retransmission destination user IDs are specified, and the access right currently set corresponding to the user ID is included in the received message. Change set based on the change designation of access rights.

  Here, as a specific example of the document access right changing process shown in FIGS. 17 and 18, the document distribution state shown in FIG. 16 will be described as an example.

  As shown in FIG. 16, in a situation where the document A is distributed to Fujiko Nakayama with Fuji Taro (user ID = 00001) as a transmission source, for example, in the client terminal 10-1, Fuji Taro (user ID = 00001). ) Activates the document access right change processing for the document A, based on the document transmission history of the document A, Fuji Hanako (user ID = 000002) as the transmission destination of the document, and Tomita Suzuki (user A destination e-mail address (F. hanako @ bbb) with ID = 00003) and (S.futa@ccc) are listed, and a document access right change setting screen 125 for setting each of these destination e-mail addresses as a document access right change target. (See FIG. 20) is displayed.

  Here, the user (Taro Fuji), among the transmission destinations (F. hanako @ bbb) and (S.futa@ccc) of the document A listed up on the document access right change setting screen 125, For example, when (S.futa@ccc) is designated to change the access right from (browsing, editing, printing) to (browsing) and an execution operation is performed, the document ID of document A (= docu010) is transmitted. Document including each information of former user (Taro Fuji) user ID (= 00001), destination address (change target) destination address (=S.futa@ccc), and change designated access right (= view) An access right change request message is sent to the document access right management apparatus 20.

  On the other hand, when receiving the document access right change request message, the document access right management device 20 uses the document ID (= docu010) included in the received message as a key to read the document corresponding to the document ID from the document operation history management table 223. Following the operation history, the user ID (= 00001) of the change request source is the transmission source, and the destination address (=S.futa@ccc) of the user to be changed (Tomita Suzuki) included in the received message ) All the transmission destinations and re-transmission destination users [(Tomita Suzuki), (Tomiko Tanaka), (Fujio Yamada), (Fujiko Nakayama)] of the document A via []. futa @ ccc), (T.fuko@ddd), (Y.fujio@eeee), (N.fujiko@fff)], and the extracted transmissions. User ID corresponding to the mail address [(00003), (00004), (00005), (00006)] searches the user management table 221.

  All the transmission destinations and re-transmission destination user IDs [(00003), (00004), (00005), (00006) of the document whose source is the user ID (= 00001) of the change request source. ], The access right (= browsing, editing, printing) set in the document access right management table 222 is changed to the access right (= browsing) specified in the received message.

  As a result, after the user Taro Fuji, who is the user of the client terminal 10-1, selects the document A, the document access right change setting is displayed after selecting change / deletion of the document access right from the processing menu of the document. On the screen 125, it is one of the distribution destinations of the document A [S. futa @ ccc: (user name is Tomita Suzuki)], by specifying the change of the document access right, the user of the destination of the document A (Tomita Suzuki) and the user of the destination The document access right for the document A is changed to the specified content for the users (Tomiko Tanaka), (Fujio Yamada), and (Fujiko Nakayama) to whom the document A is redistributed from (Tomita Suzuki). .

  Similarly, it is another distribution destination of the document A on the document access right change setting screen 125 [F. Even if the document access right change is specified for hanako @ bbb (user name is Fuji Hanako), the user (Hanako Fuji) and the redistribution destination from the user are also subject to the specification. The document access right for the document A is changed for all users.

  Further, on the document access right change setting screen 125, the distribution destination of the document A [F. Hanako @ bbb (user name is Hanako Fuji), [S. futa @ ccc: (user name is Tomita Suzuki)], when “deletion” of the document access right is specified, the user (Hanako Fuji) and the redistribution destination user from there, In addition, the document access right to the document A for the user (Tomita Suzuki) and the redistribution destination user is deleted.

  As described above, according to the system of the present embodiment, even if a document is redistributed from a destination user to whom an access right is granted to another user, the transmission / reception relationship of the redistribution is recorded as a history. Because it is held, if you want to revoke the access right for the recipient users who have been granted access rights and the redistributed user set, just redistribute them by disabling the access rights of the distribution destinations. The access rights for a given user set can also be revoked or changed.

  Further, in the system of this embodiment, in cooperation with the automatic setting function of access right at the time of document distribution (see FIGS. 9 and 10), it is possible to manage fine access rights in units of documents, which is necessary in the conventional system. It is possible to reduce the management cost of the group of users who are allowed access (operations required for management such as creation of user groups and addition / deletion of users to / from groups).

  Although not illustrated in the document operation history management table 223 shown in FIG. 8, in this system, for example, the document A is edited at the client terminal 10, and the edited document AA is sent to other users. When distributed, the document transmission history (editing history) corresponding to the document ID (for example, document 110) of the document AA is registered, and the document ID of the document A (= docu010) is entered in the column of the derivation source document ID therein. ) Is set.

  When distributing the document AA, an access right for the document ID (= document 110) of the document AA is set for the distribution destination.

  Registration of the document operation history (transmission / reception history) and setting of the access right when distributing the derived document AA can be performed according to the flowcharts shown in FIGS.

  However, in this case, the document access right setting request message transmitted from the client terminal 10 when distributing the derived document AA includes the document ID of the derived document AA, the document ID of the derived document A, and the distribution source user of the derived document AA. The document access right management apparatus 20 that has received the message includes the document operation history of the derived document AA (the document ID of the derived source document A is based on the received message). Registration) and access right setting processing.

  As described above, in this system, even when a document is edited, the document access history management apparatus 20 manages the document operation history and the document access right of the original document and the edited document. In the document access right changing process shown in FIG. 18, even when the document is edited at the transmission destination, it is derived from the document by tracing the operation history (edit history) regarding the document. You can change or revoke access rights for all redistributed documents.

  Next, the document distribution history display function in the system of this embodiment will be described.

  FIG. 22 is a flowchart showing the document distribution history acquisition / display processing operation at the client terminal 10 in the document distribution history display processing of the system according to the first embodiment. FIG. It is a flowchart which shows document operation log | history notification process operation | movement.

  The document distribution history acquisition / display process in the client terminal 10 is started when the user selects a document for which the distribution history is desired to be displayed, and designates the document distribution history display process from the document processing menu. .

  In FIG. 22, the client terminal 10 monitors the user's document selection operation (step S161). During this time, when the user selects a desired document (step S161 YES), for example, A context menu 123 having the display mode shown in FIG. 19 is displayed on the display unit 12 (step S162).

  Subsequently, the document distribution history display control unit 146 performs an operation by the user to select a menu item “display document operation history list” from the context menu 123 of the document for designating an overhead view display of the operation history of the document. It is monitored whether or not has been made (step S163).

  When a menu item other than the “document operation history list display” is selected (NO in step S163), a process corresponding to the selected menu item is executed (step S169), and after the process is completed, The process returns to step S161.

  On the other hand, when the selection operation of the menu item “document operation history list display” is performed (YES in step S163), the document distribution history display control unit 146 selects the user of the transmission source (document operation history acquisition request source). Generating a document operation history acquisition request message (which also includes a message ID for identifying the message) including each information of a user ID to be identified and a document ID for identifying the selected document (document for which the operation history is to be acquired); The document operation history acquisition request message is transmitted to the document access right management apparatus 20 (step S164).

  After transmitting the document operation history acquisition request message, the document distribution history display control unit 146 shifts to a reception waiting state for a response message from the document access right management device 20 (step S165) and responds from the document access right management device 20. It is monitored whether or not a document operation history notification message to be transmitted has been received (step S166).

  When a document operation history notification message returned from the document access right management device 20 (see step S265 in FIG. 23) is received (YES in step S166), the message ID included in the received message is the above step S164. The display control information (document operation history tree to be described later) included in the received message is extracted on the condition that it matches the message ID assigned to the document operation history acquisition request message transmitted in step, and the document is based on the display control information. The operation history of the document selected in step S161 is displayed on the Web browser (step S167).

  FIG. 24 is a diagram showing an example of a document operation history display screen 129 for displaying the document operation history. Each document operation (new generation, download, browsing, transmission, etc.) indicates an icon and the content of the document operation. A tree (tree-type directory) that is represented by a pair with information (operation name, operator, operation time, etc.) and that icons corresponding to each document operation are connected by lines according to the hierarchical relationship of each document operation. Structure) document operation history is displayed.

  In particular, FIG. 24 shows a document operation history display screen 127 displayed based on the document operation history set of document A (document ID = document 010) registered in the document operation history management table 223 of the document access right management apparatus 20. FIG. 17 shows a display example, each icon indicating each history (transmission history) related to the distribution and redistribution of the document A shown in FIG. 16, and each document performed by the user of each client terminal 10 in the meantime. Each icon indicating an operation history (operations other than transmission: document creation by Taro Tanaka, download, browsing by Ichiro Suzuki, browsing by Ichiro Tanaka, browsing by Saburo Yamada) is displayed in a tree shape.

  When the user who has confirmed the contents of the document distribution history performs a confirmation end operation (for example, pressing the “Close” button) on the document operation history display screen 129 (YES in step S148), the document operation history display screen 1297 is displayed. Close and end processing.

  On the other hand, in FIG. 23, the document access right management apparatus 20 is in a waiting state for receiving a document operation history notification message (step S261), and the document distribution history notification control unit 246 receives a document operation history acquisition request message from the client terminal 10. It is monitored whether or not it has been received (step S262).

  Here, when a document operation history acquisition request message is received from the client terminal 10 (YES in step S262), the document distribution history notification control unit 246 stores the document operation history management table 223 using the document ID included in the received message as a key. Searching is performed, and all information relating to the document operation history corresponding to the document ID is extracted from the document operation history management table 223 (step S263).

  Next, display control information [document operation history tree “script by Java (registered trademark) Script”] for displaying the operation history of the document in a tree shape based on the set of information of the extracted document operation history is displayed. A document operation history notification message including the display control information and assigned with the message ID included in the document operation history acquisition request message received in step S242 is generated (step S264).

  Thereafter, the document operation history notification message is transmitted to the client terminal 10 as the document operation history acquisition request source (step S265), and the process is terminated.

  As shown in FIGS. 22 and 23, in the system of this embodiment, the client terminal 10 accepts an operation for selecting the document and starting the document operation history display from the user who owns the document reference file. And a document operation history acquisition request message [including the message ID, the user ID of the transmission source (document operation history acquisition request source), and the document ID of the selected document (operation history acquisition target document)] When the document access right management device 20 receives the document operation history acquisition request message, the document access right management device 20 reads out the document operation history corresponding to the document ID included in the received message from the document operation history management table 221, and Display control information that can be displayed as a history tree and included in the document operation history notification message Transmitted to the terminal 10, further, the client terminal 10, when receiving the document operation history notification message, based on the display control information included in the received message, displays the document operation history of the document as a tree.

  According to the document operation history display control in which the client terminal 10 and the document access right management device 20 cooperate, the user who owns the document reference file selects the document and gives an instruction to start the document operation history display. By looking at the history tree displayed on the Web browser, it is possible to easily confirm (overlook) the distribution status and operation history of the document specified by the user.

  In addition, by using this function, users with access rights to the document can browse each other, so it is possible to know the document disclosure process and distribute document references to unrelated parties. The psychological suppression effect regarding can be aimed at.

  The document access right management system according to the second embodiment has an offline document exchange function in addition to a function for giving a document access right in response to an online document exchange (document distribution) operation (see the first embodiment). For example, it has a function of giving a document access right in response to an operation of “copying to external memory (copy)”.

  FIG. 25 is a block diagram illustrating a functional configuration of the client terminal 10b of the system according to the second embodiment, and functional units performing the same functions as the functional units of the client terminal 10 according to the first embodiment are denoted by the same reference numerals. It is attached.

  The client terminal 10b is provided with an external connection terminal (for example, USB connector) 16 for connecting an external memory (for example, USB memory) 30 as necessary.

  In the client terminal 10b, the control unit 14 has a document processing function for writing (copying) an electronic document to the external memory 30 connected to the external connection terminal 16.

  In the client terminal 10b, the storage unit 13 is provided with a document operation history memory 132b that stores a document operation history including a copy of the document to the external memory 30, instead of the document operation history memory 132 according to the first embodiment. It is done.

  FIG. 26 is a table showing an example of document operation history information held in the document operation history memory 132b.

  In the document operation history memory 132b, in correspondence with the document ID of the document distributed online, the date and time of the document operation, the operation type, and the document ID information of the derivation source document are stored and copied to the external memory 30. Corresponding to the document ID of the selected document, the date and time of the document operation, the operation type (= copy to external memory), the document ID of the derivation source document, and the memory ID for identifying the external memory 30 of the exchange destination (copy destination) Each information is retained.

  FIG. 27 is a block diagram illustrating a functional configuration of the document access right management device 20b of the system according to the second embodiment, and functional units that perform the same functions as the functional units of the document access right management device 20 according to the first embodiment. Are denoted by the same reference numerals.

  In the document access right management apparatus 20b, the storage unit 12 includes a user management table 221b and a document operation history management table 223b, respectively, instead of the user management table 221 and the document operation history management table 223 according to the first embodiment. Provided.

  FIG. 28 is a table showing an example of holding user management information in the user management table 221b.

  In the user management table 221b of this example, in addition to the user ID, the user name, and the mail address similar to those in the first embodiment, the memory for identifying the external memory 30 owned (used) by the user having the user ID. The ID is further held in association with the user ID.

  FIG. 29 is a table showing an example of holding document operation history information in the document operation history management table 223b.

  In the document operation history management table 223b of this example, the document ID, user ID, date and time, operation, derivation source document, and destination mail address similar to those in the first embodiment are stored in association with each other, and document exchange is performed in the external memory 30. In the document operation history information item corresponding to the document ID of the document, information indicating that the document has been copied to the external memory 30 (“copy to external memory”) ") Is further maintained and managed.

  The document operation history registration / document access right setting process of the system according to the present embodiment will be described in detail below.

  FIG. 30 is a flowchart showing the document operation history registration request processing operation at the client terminal 10b in the document operation history / document access right registration processing of the system according to the second embodiment. FIG. 20 is a flowchart showing a document operation history registration request response processing operation in 20b.

  The document operation history registration request process in the client terminal 10b is started each time a document is selected by the user and a document operation is performed on the document.

  In FIG. 30, the client terminal 10b is in a state waiting for occurrence of a document operation (step S171), and the document operation history registration request control unit 143 monitors whether or not a document operation has been performed (step S172). .

  When a document operation is performed (YES in step S172), the document operation history registration request control unit 143b determines whether the document operation is a copy to the external memory 30 or not, and according to the determination result. Then, the document operation history of the document is stored in the document operation history memory 132b (step S173).

  For example, when the document operation performed in step S172 is an operation such as browsing, editing, printing, etc., the operation is performed according to the document operation status as in the first embodiment (see S123 in FIG. 14). Information on the document ID, operation date and time, operation type, and document ID of the derivation source document is stored in the document operation history memory 132b as a document operation history.

  On the other hand, when the document operation is a copy to the external memory 30, the memory ID held in the external memory 30 is read from the external memory 30, and then the document ID of the copied document, the operation date and time are read. In addition to the operation type (“copy to external memory”) and the document ID of the derivation source document, each information of the memory ID read from the external memory 30 as described above is stored in the document operation history memory 132b as the document operation history. .

  After storing the document operation history in the document operation history memory 132b, the document operation history registration request control unit 143b determines whether the client terminal 10b is connected to the NW 50 (whether it is communicable) or not ( Whether communication is impossible is checked (step S174).

  Here, when the client terminal 10b is not connected to the NW 50 (when communication is disabled: NO in step S174), the processing after step S171 is continued.

  The document operation history information stored in the document operation history memory 132b when the client terminal 10b is not connected to the NW 50 will be described later when the client terminal 10b is connected to the NW 50 and becomes communicable. In step S175 and subsequent steps, the document operation history registration request message is used to send the document access right management apparatus 20b.

  On the other hand, when the client terminal 10b is connected to the NW 50 (when communication is possible: YES in step S174), the document operation history registration request control unit 143b registers the history of the document operation performed in step S172. A document operation history registration request message used for the request is generated (step S175).

  At that time, the document operation history registration request control unit 143b checks whether the document operation is a copy to the external memory 30 or another document operation, and if the document operation is a document operation other than the copy to the external memory 30. Generates a document operation history registration request message including information related to the document operation, as in the first embodiment (see step S125 in FIG. 14).

  If the document operation is a copy to the external memory 30, the user ID of the user who performed the operation (copy to the external memory 30) of the document, the document ID of the copied document, the document A document operation history registration request message including information on the operation (copy to external memory) date and time, type of operation (“copy to external memory”), document ID of the derivation source document, and memory ID of the external memory 30 To do.

  When the generation of the document operation history registration request message is completed, the document operation history registration request message is transmitted to the document access right management device 20b (step S1768), and then a response message from the document access right management device 20b is sent. The process shifts to a reception waiting state (step S177).

  When the document operation history registration completion message or the document access right setting completion message is received from the document access right management apparatus 20b in the response message waiting state (YES in step S178), the document operation history registration request control unit 143b receives the response message. A notification screen 121 corresponding to the type of the received message is displayed on the display unit 12 (step S179).

  For example, when the received message is a document operation history registration completion message, on the notification screen similar to that of the first embodiment (see step S129 in FIG. 14) (for example, on the document access setting notification screen 121 (see FIG. 11)) If the received message is a document access right setting completion message, the document is displayed as a document access right setting completion message instead of the access right setting completion notification message. An access right setting completion notification screen indicating that the access right of the document has been set for the owner of the copied external memory 30 is displayed.

  Thereafter, when the user presses the “confirm” button on the displayed notification screen (YES in step S180), the displayed notification screen is closed and the process is terminated.

  On the other hand, in FIG. 31, the document access right management apparatus 20b is in a waiting state for receiving a document operation history registration request message transmitted from the client terminal 10b (step S271), and the document operation history management unit 243b It is monitored whether or not a registration request message has been received (step S272).

  Here, when a document operation history registration request message is received from the client terminal 10b (YES in step S272), the document operation history management unit 243b newly generates an entry of “document operation history” regarding the document ID included in the received message. Then, the corresponding information included in the received message is written in each item constituting this entry and registered in the document operation history management table 223b as the operation history of the document (step S273).

  Here, in the process of step S175 (see FIG. 30) in the client terminal 10b, when a document operation history registration request message generated by a document operation other than copying to the external memory 30 is received, the first embodiment (FIG. The document operation history of the document is registered by the same processing as in step S223 of FIG.

  On the other hand, in the process of step S175 (see FIG. 30) at the client terminal 10b, if the document operation history registration request message generated when copying the document to the external memory 30 is received, the “user ID” is set as “user ID”. , The user ID of the registration request source included in the received message, “date and time” includes the operation date and time included in the received message, and “operation” includes “copy to external memory” and “ In the “derived document ID”, the document ID of the editing source document included in the received message when the content is changed by editing or the like is set and registered as the operation history of the document.

  When the registration of the document operation history in step S273 is completed, the document operation history management unit 243b analyzes the “operation” information in the received message, so that the document operation registered in the history is “stored in the external memory”. It is checked whether it is “copy” (step S274).

  If the document operation is not “copy to external memory” (NO in step S274), a document operation history registration completion message (same as in the first embodiment) with the message ID included in the received document operation history registration request message. ) Is transmitted to the client terminal 10b (step S277), and the process ends.

  On the other hand, when the document operation is “copy to external memory” (step S274 YES), the document access right setting control unit 242b gives the access right of the document to the owner of the external memory 30 that copied the document. Is set (step S275).

  In this process, the document access right setting control unit 242b first reads the memory ID included in the received message, and searches the user management table 221b for the user ID corresponding to the memory ID.

  Here, when a user ID corresponding to the read memory ID is searched, the searched user ID (the copy destination of the document is the user ID of the owner of the external memory) is used as the document access right management table. The document is added to the access right (consisting of the correspondence between the user ID and the access right) of the document in 222 (document corresponding to the document ID included in the received message) (step S275). In this case, the access right is set to a default value (viewing, editing, printing, etc.), for example.

  In step S275, when the document access right setting processing for copying the document to the external memory 30 on the client terminal 10b side is completed, the document access right setting control unit 242b accesses the document access indicating that the access right is set. The right setting completion message is transmitted to the client terminal 10b as the document operation history registration request source (step S276), and the process is terminated.

  As shown in FIGS. 30 and 31, in the system according to the second embodiment, when the client terminal 10b copies a document to the external memory 30 by the user, the document ID of the document and the external memory 30 A document operation history registration request message including the read memory ID is sent, and the document access right management apparatus 20b sets the memory ID of the external memory 30 in association with the user ID of the owner (user) of the external memory 30. When the document operation history registration request message is received from the client terminal 10b, the user ID managed by the management unit is specified from the memory ID included in the received message, and the user ID Set the access right of the document for users who have.

  According to the document access right setting process in which the client terminal 10b and the document access right management apparatus 20b cooperate, not only the online document exchange operation but also the offline document exchange using the external memory 30 such as a USB memory. The function of granting the access right of the document corresponding to the operation of is realized.

  In addition, the present invention is not limited to the embodiment described above and shown in the drawings, and can be implemented by being appropriately modified within a range not changing the gist thereof.

  The system of the present invention may be configured such that, for example, when a user distributes a document, it can be distributed after confirming the consent of the user who owns the access right for the document according to the confidential level of the document.

  As a specific example, for documents with a medium level of confidentiality, the document owner is notified by e-mail, etc. that the document has been distributed, and when the level of confidentiality is high, the document is distributed to a new user. That all the document owners are notified by e-mail, etc., and the confirmation of granting the document access rights to the new users regarding the document is input via the browser. A configuration for granting document access rights for new users is conceivable.

  As a further modification, an access right list of another document may be set as an “equivalent access right” based on an access right list formed by sending and receiving documents. In this case, the access right list of a certain document is managed in synchronization with the access right list of another document.

  As for the access prohibition control, even if the access right is set, it may be controlled to prohibit the access right for a document distributed after a certain time.

  In the above embodiment, a document access right management program having functions of a document access right management client and a document access right management server is installed in each of the client terminal 10 and the document access right management apparatus 20, and the computer Distribution means for distributing to a predetermined distribution destination, setting request means for requesting the management apparatus to set operation authority information at the distribution destination of the document when distributing the document by the distribution means, and for the management apparatus A setting request unit, which is a component of a management device (document access right management device 20) connected to a plurality of document operation devices (client terminal 10) having a change request unit for requesting change of operation authority information. Based on the distribution information related to the distribution of the document included in the setting request by the user, the operation authority information of the document is assigned to the distribution destination of the document. Setting means for setting, distribution history management means for managing the distribution history of the document based on distribution information related to the distribution of the document included in the setting request by the setting request means, and distribution history management means for the change request by the change request means The document access right management program is stored in a storage medium such as a CDROM, while the document access right management program is stored in a storage medium such as a CDROM. You may make it provide.

  The present invention can be applied to a document operation authority information management system, a document operation authority information management apparatus, and a document operation authority information management program for setting operation authority information of a document regarding a distribution destination user when distributing the document.

1 is a block diagram showing the overall configuration of a document access right management system according to the present invention. The block diagram which shows the function structure of a client terminal. The table figure which shows the example of holding | maintenance of the transmission / reception log information according to document in the transmission / reception log management table according to document. FIG. 5 is a table showing an example of document operation history information held in a document operation history memory. The block diagram which shows the function structure of a document access right management apparatus. The table figure which shows the example of registration of the user information in a user management table. FIG. 5 is a table showing an example of setting document access right information in a document access right management table. FIG. 10 is a table showing an example of document operation history information registration in a document operation history management table. 6 is a flowchart illustrating a document access right setting request processing operation of a client terminal according to the first embodiment. 6 is a flowchart illustrating a document access right setting request response processing operation of the document access right management apparatus according to the first embodiment. The figure which shows the example of a display of a document access right setting notification screen. 6 is a flowchart illustrating a document access right acquisition request processing operation of a client terminal according to the first embodiment. 6 is a flowchart illustrating a document access right acquisition request response processing operation of the document access right management apparatus according to the first embodiment. 6 is a flowchart illustrating a document operation history registration request processing operation of the client terminal according to the first embodiment. 6 is a flowchart illustrating a document operation history registration response processing operation of the document access right management apparatus according to the first embodiment. FIG. 2 is a conceptual diagram illustrating a specific example of document distribution between users in the system according to the first embodiment. 6 is a flowchart illustrating a document access right change request processing operation of a client terminal according to the first embodiment. 6 is a flowchart illustrating a document access right change request response processing operation of the document access right management apparatus according to the first embodiment. The figure which shows the example of a display of the context menu at the time of document selection. The figure which shows the example of a display of a document access right change setting screen. The figure which shows the example of a display of a document access right change notification screen. 6 is a flowchart showing document distribution history acquisition / display processing operation of the client terminal according to the first embodiment. 6 is a flowchart illustrating a document operation history notification processing operation in the document access right management apparatus according to the first embodiment. The figure which shows the example of a display of a document operation log | history display screen. FIG. 9 is a block diagram illustrating a functional configuration of a client terminal according to the second embodiment. 10 is a table showing an example of holding document operation history information in a document operation history memory according to Embodiment 2. FIG. FIG. 9 is a block diagram illustrating a functional configuration of a document access right management apparatus according to the second embodiment. FIG. 10 is a table showing a registration example of user information in a user management table according to the second embodiment. FIG. 10 is a table showing an example of document operation history information registration in the document operation history management table according to the second embodiment. 10 is a flowchart illustrating a document operation history registration request processing operation of a client terminal according to the second embodiment. 10 is a flowchart illustrating a document operation history registration request response processing operation of the document access right management apparatus according to the second embodiment.

Explanation of symbols

  10, 10b, 10-1, 10-2, 10-3,..., 10-n... Client terminal (PC), 11 input / operation unit, 12 display unit, 121 document access right setting notification screen, 123 Context menu (document processing menu) 125 Document access right change setting screen 127 Document access right change notification screen 129 Document operation history display screen 13 Storage unit 131 Document transmission / reception management table (TB) , 132, 132b ... Document operation history memory (M), 14 ... Control unit, 141 ... Document access right setting request control unit, 142 ... Document-based transmission / reception history management unit, 143, 143b ... Document operation history registration request control unit, 144 ... Document access control unit, 145 ... Document access right change request control unit, 146 ... Document distribution history display control unit, 15 ... Communication interface (I / F) 16, external connection terminals, 20, 20 b, document access right management device, 21, communication interface (I / F) unit, 22, storage unit, 221, 221 b, user management table (TB), 222, document access Rights management table (TB), 223, 223b ... Document operation history management table (TB), 23 ... Storage device, 24 ... Control unit, 241 ... Information management unit, 242, 242b ... Document access right setting control unit, 243, 243b Document operation history management unit 244 Document access right notification control unit 245 Document access right change control unit 246 Document distribution history notification control unit 30 External memory 50 Network (NW)

Claims (9)

A management device that manages the operation authority information of the document corresponding to the document;
A plurality of document operation devices that operate the document based on the operation authority information managed by the management device;
The document operation device includes:
A distribution means for distributing the document to a predetermined distribution destination;
A setting request means for requesting the management device to set operation authority information at the distribution destination of the document when the document is distributed by the distribution means;
The management device
Setting means for setting operation authority information of the document corresponding to a distribution destination of the document based on distribution information related to distribution of the document included in the setting request by the setting request means;
A document operation authority information management system comprising: distribution history management means for managing a distribution history of the document based on distribution information relating to distribution of the document included in the setting request by the setting request means. Distribution information related to the distribution is as follows:
The document operation authority information according to claim 1, further comprising: document identification information for identifying a document to be distributed; user identification information for identifying a user who is a distribution source of the document to be distributed; destination information indicating a distribution destination of the document; Management system. Distribution information related to the distribution is as follows:
Including document identification information for identifying a document to be distributed, user identification information for identifying a user of a distribution source of the document to be distributed, storage means identification information for identifying an external storage means to which the document has been distributed, and operation authority information.
The setting means includes
3. The document operation according to claim 1, wherein operation authority information of the document is set in correspondence with user identification information managed in advance corresponding to the storage means identification information included in the setting request by the setting request means. Authority information management system. The document operation device includes:
A change request means for requesting the management device to change the operation authority information;
The management means includes
4. A change unit that changes operation authority information at a corresponding distribution destination of a corresponding document based on the distribution history managed by the distribution history management unit when the change request is made by the change request unit. Document operation authority information management system described in any of the above. The changing means is
Based on the user identification information for identifying the user of the change request included in the change request by the change request means, the document identification information for identifying the document to be changed, and the information on the change setting contents of the document operation authority, the distribution history From the document distribution history corresponding to the document identification information managed by the management means, all distribution destinations and redistribution destination users of the document having the user identification information for identifying the requesting user as the distribution source 5. The user identification information for identifying the document is specified, and the document operation authority information regarding the document set by the setting unit corresponding to the user identification information is changed according to the change setting content. Document operation authority information management system described. The operation history management means includes
As the distribution history of the document, derivation source document identification information for identifying the derivation source document of the document is further managed in association with the document identification information for identifying the document,
The changing means is
When the derivation source document identification information exists in the document distribution history managed by the distribution history management unit corresponding to the document identification information included in the change request by the change request unit, the derivation source document identification information The user identification information of the user of the distribution source and redistribution destination of the derivation source document is identified from the document distribution history corresponding to the document distribution authority information regarding the derivation source document corresponding to the identified user identification information. The document operation authority information management system according to claim 5, further changing according to the change setting contents. The document operation device includes:
A registration requesting means for requesting the management apparatus to register an operation history of the document when operating the document;
Display request means for requesting the management apparatus to display a document operation status;
Display means for receiving display control information transmitted by the management apparatus in response to the display request by the display request means, and displaying distribution history and operation history of the document based on the display control information; and
The management means includes
Operation history management means for managing an operation history of the document based on operation information related to operation of the document included in the registration request by the registration request means;
At the time of the display request by the display request unit, the distribution history and operation of the document based on the distribution history of the document managed by the distribution history management unit and the operation history of the document managed by the operation history management unit The document operation authority information management system according to claim 1, further comprising: a transmission unit that generates display control information for displaying a history and transmits the display control information to the document operation device. A distribution means for distributing a document to a predetermined distribution destination; a setting request means for requesting a management apparatus to set operation authority information at the distribution destination of the document when the distribution means distributes the document; and the management A plurality of document operation devices having change request means for requesting change of the operation authority information to the device, and connected as the management device,
Setting means for setting the operation authority information of the document corresponding to the distribution destination of the document based on distribution information related to distribution of the document included in the setting request by the setting request means;
Distribution history management means for managing a distribution history of the document based on distribution information related to distribution of the document included in the setting request by the setting request means;
Document operation authority information management comprising: a change unit that changes operation authority information at a corresponding distribution destination of a corresponding document based on the distribution history managed by the distribution history management unit when the change request is made by the change request unit apparatus. Computer
A distribution means for distributing a document to a predetermined distribution destination; a setting request means for requesting a management apparatus to set operation authority information at the distribution destination of the document when the distribution means distributes the document; and the management Each means constituting the management device connected to a plurality of document operation devices having a change request means for requesting the device to change the operation authority information,
Setting means for setting operation authority information of the document corresponding to a distribution destination of the document based on distribution information related to distribution of the document included in the setting request by the setting request unit;
Distribution history management means for managing the distribution history of the document based on distribution information relating to the distribution of the document included in the setting request by the setting request means;
Document operation authority information management program for functioning as change means for changing operation authority information at a corresponding distribution destination of a corresponding document based on the distribution history managed by the distribution history management means when the change request is made by the change request means .

Images