JP2009026228A - Data security control system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data security control system for controlling the pasting of data through the use of operation log information in a computer terminal. <P>SOLUTION: The data security control system includes: an operation log information preserving part; a file identification information acquiring part for specifying file identification information of a file to be a pasting source of pasting object data, and specifying the file identification information of a file to be the pasting destination of the pasting object data, based on the operation log information in the client terminal; a security level acquiring part for acquiring the respective security levels of the file of the pasting source of the pasting object data and the file to be the pasting destination from a storage area, based on the acquired file identification information; a security level comparison part for comparing the security level of the file of the pasting source with the security level of the file to be the pasting destination; and a security control part for performing security control in response to the comparison result. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

The present invention relates to a data security control system that controls the pasting of data used in a computer terminal. More particularly, the present invention relates to a data security control system that controls data pasting using operation log information in the computer terminal.

  Organizations such as companies are required to manage the security of information stored there. This is because if information security management is not thorough, data and files containing personal information may leak onto the network, resulting in the occurrence of significant damage and credit damage.

  Therefore, in order to manage computer terminals used by users, companies and the like set access authority and restrict files that can be accessed by each user (for example, Patent Document 1). As a result, the files that can be opened by the user are limited, and leakage of files and data can be prevented.

  As another method of information management, it is possible to record what operations have been performed on the computer terminal used by the user as a log and manage them to check whether inappropriate operations have been performed or data Whether or not file exchange software that may cause leakage is installed is monitored (Patent Document 2). Thus, the operation of the user can be monitored, and if a file or data is leaked, the source of the leak can be traced.

  In the case of the system of Patent Document 3, which is an application example of Patent Document 2, the operation log of the user is monitored, and when the operation is a dangerous operation, a confirmation message is notified. In this case, when some dangerous operation is performed, for example, when a recording area that cannot be accessed by the user is accessed in an unauthorized manner, or software that is not permitted to be used is used, it can be notified.

  As another method, if it cannot be prevented by access restriction or operation log monitoring, for example, a user with access authority copies the data in the file and intentionally leaks the data to the outside, or due to negligence, In some cases, personal information data is pasted into an e-mail from a file containing personal information. In such a case, for example, they are prevented and monitored by the method described in Patent Document 4 below.

JP 2003-85045 A JP 2007-48236 A Japanese Patent Laid-Open No. 2005-63276 JP 2000-194591 A

  The invention of Patent Document 4 is useful as one of the systems for preventing information leakage by copying by a user with access authority, which cannot be prevented by the system of the invention described in Patent Documents 1 to 3. .

  In the case of the system of Patent Document 4, the user's access authority level is compared with the sensitivity level of the processing performed, and the user's access authority level is compared with the confidential level of the input file and the output file. It has become. Since the double security check can be performed, the security is higher than the conventional system.

  However, in the system of Patent Document 4, the processing target is “file” itself. Therefore, it can be applied when a file is copied to the clipboard and then pasted, but cannot be applied when “data in a file” is a processing target. In other words, in the current general computer terminal, copy the data you want to copy to a temporary storage area called the clipboard (the storage area that is temporarily used when copying or pasting data), and then the file you want to paste The data is specified and the data to be pasted on the clipboard is selected, and the pasting process is executed. However, in the invention of Patent Document 4, the file itself is a processing unit. It is not possible to specify which file data. This is due to the fact that the invention of Patent Document 4 uses the file itself as a processing target.

  Also, in general, rather than copying the file itself, it is often pasted into a file to be pasted by copying only necessary data among the data included in the file. Therefore, even if the invention of Patent Document 4 is used, it cannot cope with a case where a part of data included in a file is copied.

  For this reason, even if Patent Document 4 is used, there is a possibility that a part of data in a file with high confidentiality may be accidentally pasted to an external file. This is because if the user has a file copy authority, the user has access authority to the file, so the user is aware of how sensitive the file data is. This is because it is difficult to understand. For example, in the case of data such as customer information, it is clear that the sensitivity is high, so even if you are not conscious of it, you will not copy it to an external file, but you can do joint projects with other companies in your company. When doing so, it may be difficult to determine how much know-how related to in-house technology is know-how and where it is disclosed from where it is not conscious. In such a case, it is undeniable that data that should not be disclosed to the outside as know-how within the company may be copied and placed in a file of materials for other companies that are conducting the joint project.

  In the case of the system of Patent Document 4, the security levels of the input file and the output file are compared. However, since the processing target is originally the file itself, the security level is set in advance for both the input file and the output file. Without it, processing cannot be executed. In other words, when the user wants to paste the input file data into a newly created file (a file that has not been registered yet, such as a file just after launching an editor, etc.) Since the newly created file (output file) does not exist in the first place, it cannot be processed.

  Furthermore, in the case of the system of Patent Document 4, if the input file is deleted before the determination of the security level, the input file to be compared does not exist, the security level cannot be specified, and copying is performed. Cannot determine whether it can be done.

  As described above, the use of the system of Patent Document 4 only handles the file itself, and cannot handle the above case.

  Therefore, in view of the above problems, the present inventor specifies the file identification information of the file from which the data to be pasted is pasted by using the operation log information, and uses the identified file identification information to determine the security level. Identify and identify the file identification information of the file to be pasted by using operation log information, identify the security level using the file identification information of the identified file, and compare the security levels Thus, a data confidentiality control system has been invented to prevent the pasting source data from being pasted to a pasting destination having a security level lower than the pasting source confidential level.

  The invention of claim 1 is a data confidentiality control system used when pasting a part or all of data in a pasting source file to a pasting file or application, wherein the data confidentiality control system includes: An operation log information storage unit that stores operation log information including file identification information or application identification information and operation content, and file identification information of a file from which the data to be pasted is pasted. Specified by searching and extracting operation log information including pre-operation as operation contents, and file identification information of the file to which the data to be pasted is pasted. Identification information that identifies application identification information of applications from operation log information Based on the acquired file identification information or application identification information, the security level of the file to which the data to be pasted is pasted and the security level of the file or application to be pasted are stored in a predetermined manner. According to the result of the comparison, the security level acquisition unit that acquires from the area, the security level of the paste source file, the security level comparison unit that compares the security level of the file or application that is the paste destination, A data security control system comprising: a security control unit that performs security control on a file or application to which the data to be pasted is pasted.

  In the present invention, the object to be pasted is data, and operation log information is used. As a result, the file identification information of the file from which the data to be pasted can be specified using the operation log information, so even if the data to be pasted is data, The confidential level of the file to be pasted is compared with the confidential level of the file to be pasted, and the data to be pasted is, for example, higher than the confidential level of the pasting source. It can be prevented from being pasted to a destination with a low confidential level.

  The invention according to claim 2 is a data security control system used when pasting a part or all of data in a paste source file to a paste destination file, wherein the data secret control system includes a file identification An operation log information storage unit that stores operation log information including information and operation content; an operation log information reception unit that receives operation log information on each client terminal from each client terminal and stores the operation log information in the operation log information storage unit; , Using the received operation log information, an operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation, and that the operation determination unit is an assumed operation. When it is determined, the file identification information of the file from which the data to be pasted is pasted, information indicating a pre-operation as the operation content, Any one or more of the order information, date / time information or file identification information of the pasting source file in the temporary storage area of the data to be pasted stored in the temporary storage area received from the client terminal; The operation log information stored in the operation log information storage unit is identified by searching and extracted, and the file identification information of the file to which the data to be pasted is pasted is received. Based on the file identification information acquisition unit identified from the operation log information, and the acquired file identification information, the confidential level of the file from which the data to be pasted is pasted, and the confidential level of the file to be pasted And a security level acquisition unit for acquiring the security level from a predetermined storage area, the security level of the paste source file, and the paste destination A confidentiality level comparison unit that compares the confidentiality level of the file, and a confidentiality control unit that performs confidentiality control of the data to be pasted on the file to be pasted according to the comparison result, , A data confidentiality control system.

  By configuring as in the present invention, the same problems as those of the above-described invention can be solved, and the same technical effects can be obtained. The data to be pasted is stored in the clipboard, but a plurality of data may be stored in the clipboard. Even in such a case, by using the order information associated with the data to be pasted on the clipboard and the operation log information, the file identification information of the pasting file can be specified. You can get the secret level.

  According to a third aspect of the present invention, there is provided a data security control system used when pasting a part or all of data in a pasting source file to an application as a pasting destination, wherein the data confidentiality control system includes file identification. An operation log information storage unit that stores operation log information including information or application identification information and operation content, and an operation log that receives operation log information at each client terminal from each client terminal and stores the operation log information in the operation log information storage unit An information reception unit, an operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation using the received operation log information, and an assumed operation in the operation determination unit The file identification information of the file from which the data to be pasted is pasted Information indicating the pre-operation as the operation content and the order information, date / time information or pasting source file of the data to be pasted received from the client terminal and stored in the temporary storage area Using one or more of the file identification information, and specifying by searching and extracting the operation log information stored in the operation log information storage unit, and the paste destination of the data to be pasted An application identification information acquisition unit that identifies application identification information of the application to be received from the received operation log information, and based on the identified file identification information, the security level of the file from which the data to be pasted is pasted Obtained from a predetermined storage area and based on the identified application identification information A security level comparison that compares the security level acquisition unit that acquires the security level of the application to be pasted from a predetermined storage area, the security level of the acquired application, and the security level of the paste source file And a security control unit that executes security control for the application to which the data to be pasted is pasted according to a result of the comparison.

  By configuring as in the present invention, it is possible to consider the confidential level of the application to be pasted.

  According to a fourth aspect of the present invention, the data security control system further stores a keyword and a security level for the keyword, and when the client terminal receives the security control instruction, the data is stored in the temporary storage area. The keyword included in the data to be pasted is searched, and the result of comparison between the confidential level for the keyword and the confidential level of the file or application to be pasted among the keywords included in the data A data confidentiality control system that pastes data to be pasted into a file or application to be pasted after performing replacement processing or deletion processing on keywords satisfying a predetermined condition.

  By configuring as in the present invention, a keyword that is higher than the security level of the paste-destination file or application among the data to be pasted in the paste-destination file is subjected to a predetermined replacement process. It is pasted up or pasted after being deleted. Therefore, even if the data itself can be pasted, keywords higher than the confidential level are not included (or cannot be seen) from the pasted file or application. Therefore, data leakage from the pasted data can be prevented.

  6. The data security control system according to claim 5, wherein the security control unit transmits, as the security control, a control instruction for invalidating the paste operation to a client terminal that has received the operation log information. is there.

  As the confidential control, it is preferable that the actual pasting operation itself cannot be executed.

  6. The security control unit according to claim 6, wherein the security control unit sends, as the security control, a control instruction to update the security level of the pasting destination to the security level of the pasting source for the computer system including the predetermined storage area. It is a data confidential control system.

  By using the present invention, it is possible to raise the security level of the paste-destination file or application to which data is pasted to the secret level of the paste-source file. As a result, only a user having access authority to the paste source file can access the paste destination file or application, and data leakage can be prevented. Also, if the file to be pasted is a newly created file or the like and the security level is not set, the security level can be automatically set.

  The invention of claim 7 is directed to a computer for storing operation log information including file identification information or application identification information and operation contents in a storage device, file identification information of a file from which data to be pasted is pasted, Of the operation log information stored in the storage device, specified by searching and extracting operation log information including a pre-operation as the operation content, and the file of the file to which the data to be pasted is pasted An identification information acquisition unit that identifies identification information or application identification information of an application from operation log information, and a security level of a file from which the data to be pasted is pasted based on the acquired file identification information or application identification information And the file or application A security level acquisition unit that acquires a level from a predetermined storage area, a security level comparison unit that compares a security level of the paste source file with a security level of the paste destination file or application, and the result of the comparison And a data security control program that functions as a security control unit that executes security control on the file or application to which the data to be pasted is pasted.

  By executing the program of the present invention by reading it into a computer, the data confidentiality control system of the invention of claim 1 can be realized.

  According to an eighth aspect of the present invention, a computer that stores operation log information including file identification information and operation contents in a storage device receives operation log information at each client terminal from each client terminal and stores the operation log information in the storage device. A log information reception unit, an operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation, using the received operation log information. If it is determined, the file identification information of the file from which the data to be pasted is pasted, the information indicating the pre-operation as the operation content, and the paste stored in the temporary storage area received from the client terminal. The order information, date / time information, or file identification information of the paste source file of the data to be attached The file identification information of the file to which the data to be pasted is specified by searching and extracting the operation log information stored in the storage device using one or more of A file identification information acquisition unit that identifies the received operation log information, based on the acquired file identification information, the confidential level of the file from which the data to be pasted is pasted, and the file to be pasted A security level acquisition unit that acquires the security level of the file from the predetermined storage area, a security level comparison unit that compares the security level of the file to be pasted with the security level of the file to be pasted, and the result of the comparison Depending on the function, it functions as a security control unit that performs security control of the data to be pasted on the file to which the data is pasted. That is a data security control program.

  By executing the program of the present invention by reading it into a computer, the data confidentiality control system of the invention of claim 2 can be realized.

  According to a ninth aspect of the present invention, there is provided a computer that stores operation log information including file identification information or application identification information and operation contents in a storage device, receives operation log information in each client terminal from each client terminal, and the storage device The operation log information receiving unit to be stored in the operation log, the operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation using the received operation log information, and the operation determination unit If it is determined that the operation is an assumed operation, the file identification information of the file to which the data to be pasted is pasted is stored in the temporary storage area received from the client terminal as information indicating the pre-operation as the operation content The order information, date / time information or pasting of the data to be pasted in the temporary storage area The operation log information stored in the storage device is searched and extracted using any one or more of the file identification information of the original file, and the paste destination of the data to be pasted The application identification information acquisition unit that identifies the application identification information of the application to be received from the received operation log information, and based on the identified file identification information, the security level of the file from which the data to be pasted is pasted A security level acquisition unit that acquires from a predetermined storage area and acquires a security level of an application to be pasted from a predetermined storage area based on the specified application identification information, and a security level of the acquired application Compare the confidentiality level of the original file with the confidentiality Bell comparison unit, according to the result of the comparison, the data confidential control program to function as a secret control unit, for executing confidential control to the pasted to become an application of the data becomes the adhesion target.

  By executing the program of the present invention by reading it into a computer, the data confidentiality control system of the invention of claim 3 can be realized.

  Conventionally, only a file is a processing target, but by using the present invention, it is possible to specify a security level for data to be pasted. As a result, it is possible to perform paste restriction processing even when pasting more actual data rather than a file, and the paste source data is lower than the paste source security level. Can be prevented from being pasted to the paste destination. This eliminates the need for the user to be aware of the confidential level of data, and reduces the possibility of data leakage due to user pasting. Such a configuration can be realized by specifying the file from which the data to be pasted is pasted and the file to be pasted by using the operation log information.

In addition, since the data itself is the processing target and the operation log information is used, the confidential level is not set because the file to be pasted is a newly created file as in the past. Even in this case, it is possible to update the newly created file by assigning the same security level as that of the file to which the pasted data is pasted to the newly created file.

  FIG. 1 shows a conceptual diagram of the entire system configuration of the data confidentiality control system 1 of the present invention. In this specification, “pasting” includes “data transfer” in addition to “copying and pasting data”. In the present invention, a case where a part or all of data in a pasting source file is pasted into a pasting file is shown. Therefore, the file itself is not a processing target, but data included in the file (for example, part or all of the text data in a text file) is a processing target.

  In general, when performing data pasting operations, select the target data from the pasting file, and then perform operations such as "Copy" or "Move" to the clipboard (temporary storage area ) Stores the selected data. Then, after selecting a file to be pasted, by selecting data to be pasted from the clipboard, the data is “copied” or “moved” to the file to be pasted. At this time, when the data is “copied” or “moved” from the pasted file, the order is associated with the data (that is, from the data first copied or moved to the clipboard). Are ranked). In addition to this order, file identification information such as the file name of the file that is the paste source, and date / time information of the operation may be associated with the data.

  In FIG. 1 and FIG. 2, the data confidentiality control system 1 is described as having a management server 2, a file server 4, and a client terminal 3 used by an administrator who monitors each client terminal 3. The function may be realized by the management server 2 without providing the file server 4. The function of the management server 2 may be distributed to a plurality of servers. Further, the function of the management server 2 may be realized by the client terminal 3.

  The management server 2, the file server 4, and the client terminal 3 are appropriately provided with normal hardware configurations that should be included in normal computer terminals (including servers). The management server 2, the file server 4, and the client terminal 3 are realized by reading and processing predetermined programs. The management server 2 stores and monitors what programs and operations are executed in the plurality of client terminals 3. Therefore, each client terminal 3 includes file identification information such as a program name and a file name executed in the client terminal 3, information input from the input device 23 of the client terminal 3, processing in the client terminal 3, A function of transmitting operation log information from the client terminal 3 to the management server 2 at a predetermined timing such as when an operation is performed in real time, periodically, or when a new program or file is executed or terminated. I have. The function of transmitting the operation log is to extract a program name and a file name executed in the arithmetic unit 20 of the client terminal 3, extract a program name and a file name in the memory, and an input device of the client terminal 3 The information input or operated at 23 may be transmitted.

  The management server 2, the file server 4, and the client terminal 3 include a calculation device 20 such as a CPU that executes calculation processing of a program, a storage device 21 such as a RAM or a hard disk that stores information, and processing results and storage of the calculation device 20. And a communication device 24 that transmits and receives information to be transmitted and received via a network such as the Internet or a LAN. Each function (each unit) realized on the computer is executed when a unit (program, module, etc.) for executing the process is read into the arithmetic unit 20. When using the information stored in the storage device 21 in the processing, each function reads the corresponding information from the storage device 21 and uses the read information for processing in the arithmetic device 20 as appropriate. The management server 2, the file server 4, and the client terminal 3 may include an input device 23 such as a keyboard, a mouse, and a numeric keypad, and a display device 22 such as a display. FIG. 3 schematically shows an example of these hardware configurations.

  Each means in the present invention is only logically distinguished in function, and may be physically or practically the same area.

  In the file server 4, a file used by the client terminal 3 for business is stored together with information for identifying the file (file identification information) and its security level. This security level is set at the time of file creation according to information included in the file. FIG. 5 schematically shows the correspondence between the file identification information managed by the file server 4 and the security level. In addition to the file name, the file identification information may be any information that identifies a file, and may be a unique ID.

  The management server 2 includes an operation log information reception unit 5, an operation log information storage unit 6, an operation determination unit 7, a file identification information acquisition unit 8, a security level acquisition unit 9, a security level comparison unit 10, and a security control unit 11. .

  The operation log information receiving unit 5 receives the operation log information in the client terminal 3 from each client terminal 3, preferably in real time, regularly or irregularly. The received operation log information is stored in an operation log information storage unit 6 (to be described later) together with the date and time and information for identifying which client terminal 3 is the operation log information. This association may be performed at the client terminal 3, may be performed at the timing received by the operation log information receiving unit 5, may be performed at the timing stored in the operation log information storage unit 6, or after that. . Further, the operation log information may be information indicating the operation content in each client terminal 3, for example, information indicating a user operation of the client terminal 3 such as “data copy”, “file selection”, “drive addition”, and the like. Is applicable.

  The operation log information storage unit 6 stores the operation log information received from each client terminal 3 by the operation log information reception unit 5. An example of the operation log information is schematically shown in FIG. In the case of the operation log information of FIG. 6, the name of the used client terminal (computer name), operation date / time, login name, operation content, file name (file identification information) / application name (application identification information), and saving of the file or application Contains information indicating the location. Based on the storage location information, the corresponding file server 4 and its directory can be specified. The operation log information is preferably saved for each client terminal 3 or each user (login name or the like).

  The operation determination unit 7 determines whether the operation on the client terminal 3 is an assumed operation based on the operation log information received by the operation log information reception unit 5. Specifically, information indicating the operation content in the operation log information is referred to, and it is determined whether the operation is a predetermined assumed operation such as “file selection”. Here, as the assumed operation, it is preferable to define an operation such as “file selection” indicating whether a file or application to which data is to be pasted has been selected. This is because by selecting a file to be pasted, the pasting destination of the data can be specified before the data is actually pasted. However, the present invention is not limited to the above, and actual pasting operation content such as “pasting” data may be assumed as the assumed operation. In addition, as an assumed operation, there may be only one operation content such as “file selection”, or by receiving operation content in a plurality of operation log information such as “file activation” and “file selection”, It is good also as assumption operation.

  When the operation determination unit 7 determines that the operation log information includes an assumed operation, the file identification information acquisition unit 8 acquires the file identification information of the file to be pasted from the operation log information. Further, the file identification information acquisition unit 8 performs an operation indicating that the pasting source data has been copied to the clipboard (temporary storage area), such as a pre-operation corresponding to the assumed operation in the operation determination unit 7, for example, “data copy” Is retrieved from the operation log information storage unit 6 and extracted. At this time, in order to search operation log information indicating that the pasting source data has been copied to the clipboard, it is possible to search based on the order of data selected by the user on the clipboard as a pasting target. For example, when there are three data A, data B, and data C in the newest order on the clipboard, and the user pastes the oldest data C (third data from the newest) into the paste destination file Among the operation log information, the latest operation log information of the operation log information whose information indicating the operation content is a pre-operation is searched and extracted. When the user has selected to paste the clipboard data B, the operation log information is searched for the second operation log information from the latest operation log information in which the information indicating the operation content is a pre-operation. To extract.

  As described above, the operation log information including the pre-operation as the operation content is searched from the operation log information storage unit 6 by using the order in the clipboard of the data to be pasted on the clipboard by the user, and a plurality of data is stored in the clipboard. Even when there is an operation log information, it is possible to specify operation log information including file identification information of a file from which data to be pasted is pasted.

  In addition, when the date and time information of the data copied to the clipboard and the file identification information of the file that is the copy source are stored in association with the data on the clipboard, the date and time information or The operation log information including the file identification information of the pasting source file may be specified using the file identification information. That is, based on the file identification information and date / time information associated with the data to be pasted, selected by the user on the clipboard, the operation log information including the same file identification information and date / time information, and the prior operation The operation log information including the operation details of the operation log can be extracted by searching the operation log information storage unit 6.

  In this way, the operation log information including the file identification information of the pasting source file is extracted from the operation log information storage unit 6, and the file identification information is acquired from the operation log information. For example, when “file copy” is set as a pre-operation, the operation copies data to the clipboard of the client terminal 3. Therefore, such an operation is one of the prior operations. FIG. 7 schematically shows that operation log information corresponding to a prior operation set in association with an assumed operation is retrieved.

  The security level acquisition unit 9 uses the file identification information acquired from the operation log information by the file identification information acquisition unit 8 to inquire the file server 4 about the security level of the file, thereby acquiring the security level of the file. If the file security level corresponding to the file identification information does not exist in the file server 4 (in the case of a newly created file), the information “not applicable” is received from the file server 4 and the security level of the file is received. As an initial value (preferably the lowest secret level) and no secret level are set.

  Specifically, information on the storage location of the file is acquired from the operation log information obtained from the file identification information of the file to which the data is to be pasted. Then, by passing the file identification information of the file to which the file identification information is pasted to the file server 4 that stores the file, the security level corresponding to the file identification information is received from the file server 4. Further, the storage location information of the file is acquired from the operation log information acquired from the file identification information of the data source file (paste source file). Then, by passing the file identification information of the data source file (the pasting source file) obtained by the file identification information to the file server 4 that stores the file, the confidential information corresponding to the file identification information is transmitted from the file server 4. Receive a level. By such processing, it is possible to acquire the security level of the file to be pasted and the security level of the file to be pasted.

  The security level comparison unit 10 compares the security level of the file to be pasted acquired by the security level acquisition unit 9 with the security level of the file to be pasted, and determines which of the security levels is higher. .

  If the security level comparing unit 10 determines that the security level of the file to be pasted is lower than the security level of the pasting source file, the security control unit 11 executes predetermined security control. In this case, predetermined confidentiality control is performed because an operation of pasting data of a file with a high security level to a file with a lower security level is attempted.

  As one of the confidential control executed at this time, a control instruction for invalidating the pasting operation is transmitted to the client terminal 3 (the client terminal 3 that has received the operation log information) that executes the pasting operation. Then, it is executed by the client terminal 3. The control instruction for invalidating the paste operation includes, for example, data on the clipboard of the client terminal 3 (part or all of the copied data) for prohibiting selection or execution of the paste operation in the client terminal 3. There is such as deleting. When the assumed operation in the operation determination unit 7 is set as an actual “paste”, a control instruction to delete the data pasted in the paste destination file is transmitted to the client terminal 3, It may be executed by the client terminal 3.

  As another secrecy control, a message is sent from the management server 2 to the client terminal 3 that tells the client terminal 3 that data with a high security level is to be pasted into a file with a low security level. And so on.

  Furthermore, as a third security control, a high security level data is to be pasted to a low security level file for a predetermined administrator or a predetermined person such as a user manager of the client terminal 3. The teaching message is transmitted from the management server 2 to the client terminal 3 used by those persons, or displayed on the management server 2.

  As a fourth security control method, a control instruction to update the security level of the file to which data is pasted to the security level of the file to be pasted is sent to the file identification information and the file security level of the file server 4 or the like. Is controlled to update the security level of the paste-destination file to the same security level as that of the paste-source file in the system such as the file server 4 that has received the control instruction. is there.

  The confidential control is not limited to the above, and various methods can be used.

  Next, an example of the processing process of the data security control system 1 of the present invention will be described with reference to the flowchart of FIG. 4 and the conceptual diagram of the system configuration of FIG.

  The client terminal 3 preferably transmits the operation log information to the management server 2 in real time, and the operation log information reception unit 5 of the management server 2 receives the operation log information from each client terminal 3 as the operation log information reception unit 5. (S100). The operation log information received by the operation log information reception unit 5 is stored in the operation log information storage unit 6 (S110).

  The operation determination unit 7 determines whether the operation log information received in S100 is a predetermined assumed operation (S120). If it is not an assumed operation, the operation log information receiving unit 5 waits for the next operation log information to be received.

  When the operation determination unit 7 determines that the information indicating the operation content of the operation log information received in S100 is the operation content set as the assumed operation (for example, “file selection”), it is preliminarily set as a pre-operation. The operation log information including the set operation content is searched and extracted from the operation log information storage unit 6, and the file identification information for identifying the file is acquired from the operation log information (S130).

  If the operation content set as the assumed operation is received from the client terminal 3 as operation log information, which data is selected as the data to be pasted on the clipboard together with the operation log information, (For example, order information in which data is stored on the clipboard, date / time information on which data was copied to the clipboard, file identification information of a file to which data is pasted, etc.) are also received.

  In the case of FIG. 7, operation log information including “data copy” is retrieved from the operation log information storage unit 6 and extracted. Then, the file identification information acquisition unit 8 can search operation log information including the pre-operation “data copy”, and extracts it to acquire file identification information “customer information list” included in the operation log information.

  In the case of FIG. 7, since there is one piece of data copied to the clipboard, the operation log information storage unit 6 also has one piece of operation log information including the operation contents of the previous operation. The operation log information is retrieved from the operation log information storage unit 6 using the ranking information on the clipboard of the data to be pasted by the user. That is, since there is only one data on the clipboard, the rank is “1”. A rank of “1” means that the data is the latest copied to the clipboard. Therefore, based on this ranking information, the file identification information acquisition unit 8 searches for the latest operation log information, which is information indicating the operation content is “information set as a prior operation”. .

  When the file identification information acquisition unit 8 acquires the file identification information of the pasting source file as described above, the confidential level acquisition unit 9 acquires the file's information from the operation log information (the operation log information extracted in S130). Information indicating the storage location is acquired, and the file identification information acquired by the file identification information acquisition unit 8 is passed to the file server 4 that is the storage location of the file, thereby inquiring the confidential level of the file. In the case of FIG. 7, “¥¥ Tokyo-fs ¥ important document ¥ customer” is acquired as the file storage location. Here, since the file server 4 and its directory are the file server 4 at the beginning, the confidential level acquisition unit 9 inquires of the confidential level of the “customer information list” to the file server 4 of “Tokyo-fs”.

  Upon receiving this inquiry, the file server 4 passes the confidential level corresponding to the received file identification information to the management server 2 based on the correspondence relationship between the file identification information and the confidential level shown in FIG. . In the case of FIG. 7, since it can be determined that the confidential level of the “customer information list” is “6”, it is extracted and the file server 4 passes the confidential level “6” to the management server 2.

  In this way, the security level acquisition unit 9 of the management server 2 acquires the security level of the pasting file (data source) (S140).

  The file identification information acquisition unit 8 acquires file identification information for identifying the file from the operation log information (operation log information received in S100) (S150). For example, in the case of FIG. 7, “public presentation material” is acquired as file identification information.

  Also, the confidential level acquisition unit 9 acquires information indicating the storage location of the file from the operation log information (operation log information received in S100), and uses the file identification information acquired by the file identification information acquisition unit 8 as the file. Is sent to the file server 4 which is the storage location of the file, and the confidential level of the file is inquired. In the case of FIG. 7, “¥¥ Tokyo-fs ¥ disclosure \ material” is acquired as the file storage location. Here, since the file server 4 and its directory are the file server 4 at the beginning, the file server 4 of “Tokyo-fs” is inquired about the confidential level of the “public presentation material”.

  Upon receiving this inquiry, the file server 4 passes the confidential level corresponding to the received file identification information to the management server 2 based on the correspondence relationship between the file identification information and the confidential level shown in FIG. . In the case of FIG. 7, it can be determined that the confidential level of the “publicly available presentation material” is “2”, so that it is extracted and the file server 4 passes the confidential level “2” to the management server 2.

  In this way, the security level acquisition unit 9 of the management server 2 acquires the security level of the file to be pasted (S160).

  Note that S130 to S160 are out of order, and the file identification information and the security level of the file to be pasted may be acquired first, or they may be processed in parallel.

  When the confidential level of the pasting file and the confidential level of the pasting source file (data source file) are acquired by the confidential level acquiring unit 9, the confidential level comparing unit 10 compares them and pastes them. It is determined whether the confidential level of the file to be attached is lower than the confidential level of the pasting source file (data source file) (S170, S180).

  If the security level of the destination file is the same or higher than the security level of the source file (data source file), there is no problem even if the data is pasted. Execute the process. At this time, the security control unit 11 transmits control information indicating permission of pasting to the client terminal 3 and the client terminal 3 receives the control information so that the pasting process is executed. Alternatively, no control information may be transmitted to the client terminal 3.

  If the confidential level of the pasting file is lower than the confidential level of the pasting source file (data source file), there is a risk of information leakage by pasting the data. Therefore, the confidential control unit 11 executes the above-described confidential control process (S190).

  In the case of FIG. 7 described above, the confidential level of the file to be pasted is “2”, and the confidential level of the pasting source file (data source file) is “6”. Therefore, there is a risk of information leakage when data is pasted. Therefore, the confidential control unit 11 executes the above-described confidential control process. This is schematically shown in FIG.

  In another example, for example, the confidential level of the file to be pasted is “2”, the pasting source file (data source file) is “other company product public document”, and the confidential level is “ If it has been acquired as “1”, there is no problem in pasting data. Therefore, the secret control unit 11 does not particularly perform control, or performs pasting permission control. This is schematically shown in FIG.

  By executing the processing as described above, the possibility of data leakage can be reduced.

  In addition to the configuration of the above-described embodiment, a security level is set for a specific application installed in the client terminal 3 and the security control is executed according to the set security level. May be.

  In this case, when a specific application to which data is pasted is started, the security level comparison unit 10 compares the security level of the application with the security level of the pasting source file (data source file). Thus, it can be configured to determine whether or not there is security control in the security control unit 11 described above. At this time, the security level of the application is stored in association with the operation log information by storing the application identification information such as the application name and the security level in the client terminal 3, the management server 2, or a predetermined server. By transmitting the security level of the application to the management server 2, the security level acquisition unit 9 may acquire the security level of the application. Alternatively, the application identification information and the security level may be associated with a specific server, and the security level of the application may be acquired by the security level acquisition unit 9 inquiring there.

  In the case of the present embodiment, the file identification information acquisition unit 8 in the first embodiment is replaced with an application identification information acquisition unit (not shown), the file identification information is replaced with application identification information, and the same processing as in the first embodiment is executed. Can do.

  With this configuration, for example, when the security level is set to “2” for the e-mail software, it becomes impossible to paste data of a file with a security level higher than the security level “2”.

  Further, in addition to the above-described first and second embodiments, a confidential level may be set in advance for each predetermined keyword. For example, the client terminal 3 is provided with a database of correspondence relationships between keywords and secret levels shown in FIG. The database is preferably provided in the client terminal 3, but the management server 2 may be provided in a predetermined server. When an actual pasting operation is performed at the client terminal 3, the management server 2 or the predetermined server The client terminal 3 may perform processing by sending data to be pasted to the server and inquiring the confidential level of each keyword. In the following description, the case of the first embodiment will be described, but even in the case of the second embodiment, the same processing can be performed if the processing for the pasting destination file in the first embodiment is the processing for the pasting destination application. is there.

  When the user pastes data on the client terminal 3, the security level of the file to be pasted from the security control unit 11 is set to the management server by performing the operations of S150 and S160 described above. Get in 2. The security level comparison unit 10 does not compare the security levels, and the security control unit 11 transmits the security level of the file to be pasted to the client terminal 3 and transmits a control instruction for security control. The control instruction at this time is a control for a confidential keyword of a higher level than the confidential level of the file to be pasted (the character corresponding to the confidential keyword is deleted, the character of the confidential keyword is different depending on the predetermined or random This is an instruction to execute (replace with character / symbol).

  For example, when the security level acquisition unit 9 of the management server 2 acquires that the security level of the file to be pasted is “2”, the security control unit 11 sets the security level of the file to be pasted together with the control instruction. “2” is transmitted to the client terminal 3. The client terminal 3 that has received it performs a pasting process after performing control such as deleting or replacing a keyword having a security level higher than the security level “2” from the data to be pasted.

  This is schematically shown in FIG. When the confidential level to be pasted is “2” and the confidential level of each keyword is FIG. 10, a keyword with a confidential level higher than “2”, that is, “XXX (employee name)”, “Xxxx” (new product name) and “CCCC (business tie-up company name)” are deleted from the data to be pasted, or pasted into the file to be pasted after replacement control is performed. It is done.

  In the first to third embodiments described above, the file identification information (or application identification information) is not assigned to the pasted file (or application) (the file has just been newly created and the file is registered). If the security level is not assigned to the file (or application), the security level is received even if the file identification information (or application identification information) is passed to the file server 4 or a predetermined server. I can not.

  In such a case, the file server 4 passes information “not applicable” to the management server 2 in response to the inquiry request from the security level acquisition unit 9 in S160. When the management server 2 receives this “not applicable” information from the file server 4, it determines that there is no initial value or security level setting as the security level of the pasted file (or application). That is, the confidential level of the pasting file (or application) may be determined as a confidential level that is always lower than the confidential level of the pasting file.

  The security level comparison unit 10 compares the security level of the paste source file (data source file) with the security level of the paste destination file (or application), and the paste destination file (or application). The level of confidentiality will always be low. For this reason, the security control unit 11 always performs the paste restriction control. In this case, in order to avoid the confidential control, the user beforehand sets the file identification information (or application identification information) of the file (or application) to be pasted and the confidential level thereof to the file server 4 or a predetermined server. To register.

  Alternatively, it is not always possible to set an accurate security level for a newly created file. Therefore, the confidentiality control unit 11 may set an appropriate confidentiality level for a newly created file automatically by using the above-described fourth method as pasting restriction control.

  That is, when registering the file as the paste destination in the file server 4 or at an arbitrary timing, the confidential control unit 11 sends the file identification information of the file as the paste destination and the paste as a paste restriction control instruction. The confidential level of the attachment source file is passed to the file server 4. The file server 4 that has received them receives the file identification information of the pasted file received from the security control unit 11 as the file identification information of the pasted file, and the confidential information of the pasted file. As the level, the security level of the paste source file received from the security control unit 11 is updated in the file server 4 in association with each other. As a result, the file server 4 associates the security level of the pasted file with the file identification information of the pasted file, so that the same security level is automatically set for pasted data. It will be.

  As a further modification of the present embodiment, it may not be a case where a new file is registered, the file identification information of the file to be pasted and its security level, the file identification information of the paste source file and its When each of the security levels can be acquired, the security level of the pasting file may be updated with the security level of the pasting file.

  When pasting data of a pasting source file into a pasting destination file or application, it can be performed by a so-called drag and drop operation. For example, start the word processor software, select the range to be pasted in the file, and drag and drop the text data in the selected range to the file or application to be pasted. Is pasted into the file or application to be pasted. Even in such a case, the present invention is applicable.

  In the first to fifth embodiments, further different embodiments are possible. That is, in the above-described embodiment, the case where “file selection” is assumed as the assumed operation has been described, but “data pasting” may be the assumed operation.

  In the case of the present embodiment, the operation log information “Paste Data” is transmitted from the client terminal 3 to the management server 2 by performing an operation of pasting the data stored in the clipboard by data copy into a file or application. . For this reason, when the user performs a pasting operation on the client terminal 3, the pasting operation is performed by detecting a pasting permission control instruction from the management server 2 and a detection unit (not shown) that detects the operation. The client terminal 3 includes a pasting execution unit (not shown) that executes the above.

  The detection unit of the client terminal 3 monitors each operation input by the user at the client terminal 3 based on operation log information and the like. When the detection unit detects that the “data pasting” operation has been performed, the data is put on standby before the data stored in the clipboard is pasted to the file or application after the operation input.

  On the other hand, since the “data pasting operation” is performed in the client terminal 3, the client terminal 3 transmits operation log information of “data pasting” to the management server 2. The operation log information receiving unit 5 of the management server 2 that has received the operation log information determines whether to perform confidential control by the same processing as in the first to fifth embodiments. As a result of the determination, the pasting execution unit of the client terminal 3 receives a paste permission instruction or a secrecy control instruction from the security control unit 11 of the management server 2.

  When the paste execution unit receives a paste permission instruction from the security control unit 11 of the management server 2, the paste execution unit pastes data stored on the clipboard into a file or application. On the other hand, when a security control instruction is received from the security control unit 11 of the management server 2, the pasting execution unit executes control corresponding to the security control instruction (for example, a message indicating that the pasting is not permitted is displayed). Etc.)

According to the present invention, by comparing not only the confidential level of the paste source file of the data to be pasted but also the confidential level of the paste destination file, the paste source data is more than the paste source confidential level. Can be prevented from being pasted to a destination having a low confidential level. This eliminates the need for the user to be aware of the confidential level of data, and reduces the possibility of data leakage due to user pasting.

1 is an overall conceptual diagram of the present invention. It is a conceptual diagram of the system configuration | structure of this invention. It is a figure which shows an example of the hardware constitutions of a computer terminal. It is a flowchart which shows an example of the processing process of this invention. It is a conceptual diagram which shows the correspondence of file identification information and a confidential level. It is an example of operation log information. It is a figure which shows typically searching operation log information with which the prior operation set in association with the paste operation corresponds. It is a figure which shows typically the comparison of the security level of the file used as a paste destination, the security level of the paste source file (data source file), and the security control. It is a figure of the other example which shows the comparison of the confidential level of the file used as a paste destination, the confidential level of the paste origin file (file of data origin), and confidential control. It is a conceptual diagram which shows the correspondence between a keyword and a confidential level. It is a figure which shows the process of Example 3 typically.

Explanation of symbols

1: Data security control system 2: Management server 3: Client terminal 4: File server 5: Operation log information reception unit 6: Operation log information storage unit 7: Operation determination unit 8: File identification information acquisition unit 9: Security level acquisition unit 10: Security level comparison unit 11: Security control unit 20: Arithmetic device 21: Storage device 22: Display device 23: Input device 24: Communication device

Claims (9)

A data security control system used when pasting a part or all of data in a paste source file to a paste destination file or application,
The data security control system includes:
An operation log information storage unit for storing operation log information including file identification information or application identification information and operation content;
Search and extract operation log information including prior operations as operation contents from the operation log information stored in the operation log information storage unit, as file identification information of the pasting data file to be pasted An identification information acquisition unit that identifies the file identification information of the file to which the data to be pasted or the application identification information of the application is identified from the operation log information.
Based on the acquired file identification information or application identification information, the confidential level of the file from which the data to be pasted is pasted and the confidential level of the file or application to be pasted from a predetermined storage area A security level acquisition unit to acquire;
A confidentiality level comparison unit that compares the confidentiality level of the pasting file with the confidentiality level of the pasting file or application;
In accordance with the result of the comparison, a security control unit that executes security control to the file or application to which the data to be pasted is pasted, and
A data confidentiality control system characterized by comprising: A data security control system used when pasting a part or all of data in a pasting file into a pasting file,
The data security control system includes:
An operation log information storage unit for storing operation log information including file identification information and operation content;
An operation log information receiving unit that receives operation log information from each client terminal from each client terminal and stores the operation log information in the operation log information storage unit;
An operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation using the received operation log information;
When the operation determining unit determines that the operation is an assumed operation, the file identification information of the file from which the data to be pasted is pasted, the information indicating the pre-operation as the operation content, and the temporary received from the client terminal The operation log information using at least one of the rank information, date / time information and file identification information of the pasting source file in the temporary storage area of the data to be pasted stored in the storage area File identification that identifies by searching and extracting operation log information to be stored in the storage unit, and identifies file identification information of the file to which the data to be pasted is pasted from the received operation log information An information acquisition unit;
A security level acquisition unit that acquires, from a predetermined storage area, a security level of a file from which data to be pasted and a security level of a file to be pasted are based on the acquired file identification information When,
A confidentiality level comparison unit that compares the confidentiality level of the pasting file with the confidentiality level of the pasting file;
According to the result of the comparison, a security control unit that performs security control on the file to which the data to be pasted is pasted, and
A data confidentiality control system characterized by comprising: A data confidentiality control system used when pasting a part or all of data in a pasting file to an pasting application,
The data security control system includes:
An operation log information storage unit for storing operation log information including file identification information or application identification information and operation content;
An operation log information receiving unit that receives operation log information from each client terminal from each client terminal and stores the operation log information in the operation log information storage unit;
An operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation using the received operation log information;
When the operation determining unit determines that the operation is an assumed operation, the file identification information of the file from which the data to be pasted is pasted, the information indicating the pre-operation as the operation content, and the temporary received from the client terminal The operation log information using at least one of the rank information, date / time information and file identification information of the pasting source file in the temporary storage area of the data to be pasted stored in the storage area Application identification for identifying operation log information to be stored in the storage unit by searching and extracting, and identifying application identification information of the application to which the data to be pasted is pasted from the received operation log information An information acquisition unit;
Based on the specified file identification information, the confidential level of the file to which the data to be pasted is pasted is obtained from a predetermined storage area, and based on the identified application identification information, A security level acquisition unit that acquires the security level of the application to be obtained from a predetermined storage area;
A security level comparison unit that compares the security level of the acquired application with the security level of the paste source file;
According to the result of the comparison, a security control unit that executes security control to the application to which the data to be pasted is pasted, and
A data confidentiality control system characterized by comprising: The data security control system further stores a keyword and a security level for the keyword,
When the client terminal receives the confidential control instruction,
The keyword contained in the data to be pasted stored in the temporary storage area is searched, and among the keywords contained in the data, the secret level for the keyword and the secret of the file or application to be pasted As a result of the comparison with the level, after performing the replacement process or the deletion process for the keyword satisfying the predetermined condition, the data to be pasted is pasted to the file or application to be pasted,
The data confidentiality control system according to any one of claims 1 to 3, wherein The security control unit
As the confidential control, a control instruction for invalidating the pasting operation is transmitted to the client terminal that has received the operation log information.
The data confidentiality control system according to any one of claims 1 to 4, wherein the data confidentiality control system is provided. The security control unit
As the confidential control, a control instruction for updating the confidential level of the pasting destination to the confidential level of the pasting source is passed to the computer system including the predetermined storage area.
The data security control system according to any one of claims 1 to 5, wherein A computer for storing operation log information including file identification information or application identification information and operation contents in a storage device;
The file identification information of the file from which data to be pasted is specified by searching for and extracting operation log information including pre-operations as operation contents from the operation log information stored in the storage device. In addition, an identification information acquisition unit that identifies file identification information of a file to be pasted data to be pasted or application identification information of an application from operation log information,
Based on the acquired file identification information or application identification information, the confidential level of the file from which the data to be pasted is pasted and the confidential level of the file or application to be pasted from a predetermined storage area Confidentiality level acquisition unit to acquire,
A confidentiality level comparison unit that compares the confidentiality level of the pasting file with the confidentiality level of the pasting file or application;
According to the result of the comparison, a security control unit that executes security control to the file or application to which the data to be pasted is pasted,
A data confidentiality control program characterized by functioning as A computer that stores operation log information including file identification information and operation contents in a storage device.
An operation log information reception unit that receives operation log information from each client terminal from each client terminal and stores the operation log information in the storage device,
An operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation using the received operation log information,
When the operation determining unit determines that the operation is an assumed operation, the file identification information of the file from which the data to be pasted is pasted, the information indicating the pre-operation as the operation content, and the temporary received from the client terminal Using the rank information in the temporary storage area, the date / time information, or the file identification information of the pasting source file of the data to be pasted stored in the storage area, in the storage device A file identification information acquisition unit that identifies by searching and extracting operation log information to be stored, and that identifies file identification information of a file to which the data to be pasted is pasted from the received operation log information ,
A security level acquisition unit that acquires, from a predetermined storage area, a security level of a file from which data to be pasted and a security level of a file to be pasted are based on the acquired file identification information ,
A confidentiality level comparison unit that compares the confidentiality level of the pasting source file with the confidentiality level of the pasting file;
According to the result of the comparison, a security control unit that executes security control on the file to be pasted of the data to be pasted,
A data confidentiality control program characterized by functioning as A computer for storing operation log information including file identification information or application identification information and operation contents in a storage device;
An operation log information reception unit that receives operation log information from each client terminal from each client terminal and stores the operation log information in the storage device,
An operation determination unit that determines whether the operation content included in the operation log information is a predetermined assumed operation using the received operation log information,
When the operation determining unit determines that the operation is an assumed operation, the file identification information of the file from which the data to be pasted is pasted, the information indicating the pre-operation as the operation content, and the temporary received from the client terminal Using the rank information in the temporary storage area, the date / time information, or the file identification information of the pasting source file of the data to be pasted stored in the storage area, in the storage device An application identification information acquisition unit that identifies by searching and extracting operation log information to be stored, and identifies application identification information of an application to which data to be pasted is pasted from the received operation log information ,
Based on the specified file identification information, the confidential level of the file to which the data to be pasted is pasted is obtained from a predetermined storage area, and based on the identified application identification information, A security level acquisition unit that acquires the security level of the application to be obtained from a predetermined storage area,
A security level comparison unit that compares the security level of the acquired application with the security level of the pasted file;
According to the result of the comparison, a confidentiality control unit that performs confidentiality control to the application that is the pasting destination of the data to be pasted,
A data confidentiality control program characterized by functioning as

Images