JP2009054100A - Information processor, and control method of information processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To disable copied data only when a specific file is opened. <P>SOLUTION: This information processor comprises a storage device having a clipboard 208 where information selected by a user is stored, an update detecting section 301 for monitoring that new information is stored in the clipboard 208, a filter driver 202 for determining whether one or more restriction files including files whose file names are previously registered in a restriction file name list and files including an attribute previously registered in a restriction attribute list are opened, when the monitoring means detects that new information is stored in the temporary storage area, and a copy data disabling section 304 for disabling the data stored in the clipboard 208 when it is determined that one or more restriction files are opened. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information processing apparatus for preventing the contents of a specific file such as a confidential document and a control method for the information processing apparatus.

  In order to prevent the contents of specific files such as confidential documents from leaking, there is a demand to suppress copy and paste and screen capture while using specific files.

In Patent Document 1, when the system administrator sets the clipboard canceller to ON to suppress data copy via the clipboard, the clipboard is saved in the definition file and the data is transferred to the clipboard. The function of clearing the data transferred to is disclosed.
JP 2002-149297 A

  By the way, in the above-described technique, since it is set by the system administrator, there is a problem that copy and paste cannot be performed even if a specific file such as a confidential document is not used, which is inconvenient for the user. It was.

  An object of the present invention is to provide an information processing apparatus capable of invalidating copied data only when a specific file is opened, and a control method for the information processing apparatus.

  An information processing apparatus according to an example of the present invention includes a storage device having a temporary storage area in which information selected by a user is stored, a monitoring unit that monitors whether new information is stored in the temporary storage area, When the monitoring means detects that new information is stored in the temporary storage area, the file name includes a file registered in advance in the restricted file name list or an attribute registered in advance in the restricted attribute list. A determination unit that determines whether or not one or more restriction files that are files are opened, and invalidates data stored in the storage unit when it is determined that one or more restriction files are opened. And means for converting.

  The copied data can be invalidated only when a specific file is opened.

  Embodiments of the present invention will be described below with reference to the drawings.

  First, the configuration of an information processing apparatus according to an embodiment of the present invention will be described with reference to FIG. 1 and FIG. This information processing apparatus is realized as, for example, a notebook personal computer 10.

  FIG. 1 is a front view of the notebook personal computer 10 with the display unit opened. The computer 10 includes a computer main body 11 and a display unit 12. The display unit 12 incorporates a display device composed of an LCD (Liquid Crystal Display) 17, and the display screen of the LCD 17 is positioned substantially at the center of the display unit 12.

  The display unit 12 is attached to the computer main body 11 so as to be rotatable between an open position and a closed position. The computer main body 11 has a thin box-shaped casing, and a keyboard 13, a power button 14 for turning on / off the computer 1, an input operation panel 15, and a touch pad 16 are arranged on the upper surface. Has been.

  Next, the system configuration of the computer 10 will be described with reference to FIG.

  As shown in FIG. 2, the computer 10 includes a CPU (Central Processing Unit) 111 as a processor, a north bridge 112, a main memory 113, a graphics controller 114, a south bridge 119, a BIOS-ROM 120, a hard disk drive (HDD). ) 121, an optical disk drive (ODD) 122, an embedded controller / keyboard controller IC (EC / KBC) 124, and the like.

  The CPU 111 is a processor provided to control the operation of the computer 10 and executes an operating system (OS) and various application programs loaded from the hard disk drive (HDD) 121 to the main memory 113. The OS has a window system for displaying a plurality of windows on a display screen.

  The CPU 111 also executes a system BIOS (Basic Input Output System) stored in the BIOS-ROM 120. The system BIOS is a program for hardware control.

  The north bridge 112 is a bridge device that connects the local bus of the CPU 111 and the south bridge 119. The north bridge 112 also includes a memory controller that controls access to the main memory 113. The north bridge 112 also has a function of executing communication with the graphics controller 114 via an AGP (Accelerated Graphics Port) bus or the like.

  The graphics controller 114 is a display controller that controls the LCD 17 used as a display monitor of the computer 10. The graphics controller 114 has a video memory (VRAM), and generates a video signal that forms a display image to be displayed on the LCD 17 from display data drawn in the video memory by the OS / application program. The display image to be displayed on the LCD 17 is usually composed of an image of a desktop screen and images of windows arranged on the desktop screen. However, when a moving image is displayed in the full screen mode, the display image to be displayed on the LCD 17 is composed only of the moving image. Therefore, when a moving image is displayed in the full screen mode, a video signal that forms only a display image of the moving image is output from the graphics controller 114.

  The south bridge 119 controls each device on an LPC (Low Pin Count) bus. The south bridge 119 incorporates an IDE (Integrated Drive Electronics) controller for controlling the HDD 121 and the ODD 122. Further, the south bridge 119 has a function for controlling access to the BIOS-ROM 120.

  An optical disk drive (ODD) 122 is a drive unit for driving a storage medium such as a DVD or a CD in which video content is stored.

  The embedded controller / keyboard controller IC (EC / KBC) 124 is a one-chip microcomputer in which an embedded controller for power management and a keyboard controller for controlling the keyboard (KB) 13 and the touch pad 16 are integrated. . The embedded controller / keyboard controller IC (EC / KBC) 124 has a function of powering on / off the computer 10 in accordance with the operation of the power button 14 by the user.

  This computer has a copy and paste restriction function that prevents copy and paste when file data registered in advance is opened by an application. The configuration for realizing the copy and paste restriction function will be described below.

FIG. 3 is a block diagram showing a configuration for realizing the copy and paste restriction function.
The data files 220A, 220B, 220C,... Stored in the HDD 126 operating on the operating system 200 are opened, and applications 230A, 230B, 230C,. The operating system 200 provides a file system driver 201, a port driver 203, a miniport driver 204, and a clipboard 205. The applications 230A, 230B, 230C,... Read and write the data files 220A, 220B, 220C,... By issuing an I / O request such as an Open request or a Close request to the OS.

  The file system driver 201 is a device driver provided with an API (Application Programming Interface) for operating data in a storage device such as an HDD. The file system driver 201 processes a part depending on a specific file system, such as FAT (File Allocation Table) and NTFS (NT File System). The port driver 203 is a device driver that controls standard parts such as ATA (AT Attachment) and S-ATA (Serial ATA) standards and specifications. The miniport driver 204 is a device driver for controlling a device-dependent part.

  The clipboard 205 is stored in the main memory for temporarily storing data selected by the user by operations such as “copy”, “cut”, and “paste” of the applications 230A, 230B, 230C. It is an area. For example, when “copy” or “cut” is performed on a character string “Good morning” in a document file created by a word processor, the information is temporarily registered in the clipboard 205. Next, when the cursor is moved to an appropriate position on the word processor and "Paste" is executed, the character string "Good morning" is pasted from the clipboard 205 to that position.

  Next, a configuration for actually executing the copy and paste restriction function will be described. The copy and paste restriction function is executed by the filter driver 202, the restriction list management application 240, the clipboard monitoring application 250, and the like.

  The filter driver 202 is an intermediate device driver located between the file system driver 201 and the port driver 203. The filter driver 202 holds a restricted file name list 211 in which the name of the restricted file is registered, and a restricted attribute list 212 in which file attributes corresponding to the restricted file are registered. The file attribute is, for example, the file name or creator ID of a secret document that does not want to leak information to the outside.

  When the filter driver 202 detects the start of use of a certain file from the application, the filter driver 202 checks the restriction file name list 211 and the restriction attribute list 212, and if they match, holds information indicating that the restriction file is in use. It has a function.

  The restriction list management application 240 has a function of editing a restriction target file name and file attributes. The restriction list management application 240 has a function of transmitting the designated file name and file attribute to the filter driver 202.

  The clipboard monitoring application 250 has a function of monitoring the clipboard 205. The clipboard monitoring application 250 waits until new information enters the clipboard 205. The new information may be any data that can be handled by the clipboard 205, but generally assumes a character string, an image, and binary data.

  When new information is stored in the clipboard 205, the clipboard monitoring application 250 inquires through the dedicated interface of the filter driver 202 whether any one of the restriction target files is currently in use.

  If the restriction target file is not in use, nothing is done, but if the restriction target file is in use, the clipboard monitoring application 250 immediately invalidates the contents of the clipboard 205.

Next, a configuration and a changing method for changing the restricted file name list 211 and the restricted attribute list 212 in the filter driver 202 will be described with reference to FIGS.
FIG. 4 is a block diagram showing a configuration for editing / updating the restricted file name list 211 and the restricted attribute list 212.

  The restriction list management application 240 includes a restriction list calling unit 241, a restriction list editing unit 242, a restriction list delivery unit 243, and the like. The filter driver 202 includes a restriction list acquisition unit 261, a restriction list update unit 262, and the like.

  The restriction list calling unit 241 performs processing for issuing a delivery request so as to deliver the restriction file name list 211 and the restriction attribute list 212 to the filter driver 202. The restriction list acquisition unit 261 acquires the restricted file name list 211 and the restricted attribute list 212 in response to the delivery request, and performs a process of delivering to the restricted list management application 240. The restriction list editing unit 242 performs a process of editing (adding, deleting, etc.) the restricted file name list 211 and the restricted attribute list 212 in accordance with a user operation. The restriction list delivery unit 243 delivers the restriction file name list 211 and restriction attribute list 212 edited by the restriction list editing part 242 to the filter driver 202. The restriction list update unit 262 updates the restriction file name list 211 and restriction attribute list 212 held by the filter driver 202 to the restriction file name list 211 and restriction attribute list 212 transferred from the restriction list transfer unit 243. I do.

  Next, a procedure for editing the restriction list (restriction file name list 211 and restriction attribute list 212) and updating the restriction list by the restriction list management application 240 will be described with reference to the flowchart of FIG.

  First, when the user activates the restriction list management application 240, the restriction list calling unit 241 issues a delivery request for restriction lists (restriction file name list 211 and restriction attribute list 212) to the filter driver 202 (step S11).

  In response to a request from the restriction list management application 240, the list acquisition unit of the filter driver 202 acquires the restriction file name list 211 and the restriction attribute list 212, and the restriction file name list 211 and the restriction attribute list 212 are stored in the restriction list management application. It passes to 240 (step S12).

  The restriction list management application 240 displays information on the current restriction file name list 211 and restriction attribute list 212 on the LCD 17. The user can edit the contents of the restricted file name list 211 and the restricted attribute list 212 using the restricted list editing unit 242 (step S13). The user registers a file to be restricted by using the restriction list editing unit 242 to input a restriction file name by referring to the file name using, for example, a file dialog box or directly from a keyboard. In addition, the user registers the attribute to be restricted by using the restriction list editing unit 242 to input the restricted attribute by, for example, a reference input using a dialog box or directly from the keyboard. In addition, the user uses the restriction list editing unit 242 to delete the file name registered in the restriction file name list 211. In addition, the user deletes the attribute registered in the restricted attribute list 212 using the restricted list editing unit 242.

  When the user makes a change using the restriction list editing unit 242, the restriction list transfer unit issues an update request for the restriction file name list 211 and the restriction attribute list 212 to the filter driver 202 (step S14).

  The restriction list update unit 262 updates the restriction file name list 211 and restriction attribute list 212 in the filter driver 202 in response to a request from the restriction list transfer unit (step S15).

  With the above processing, the restricted file name list 211 and the restricted attribute list 212 in the filter driver 202 can be updated.

  Next, the configuration of the filter driver 202 that performs predetermined processing when a file I / O request is received from an application will be described with reference to FIGS. A file I / O request from the application passes through the filter driver 202 via the file system driver 201.

FIG. 6 is a block diagram illustrating a configuration of a filter driver that performs processing when an I / O request is received from an application.
The filter driver 202 includes an I / O request determination unit 271, an extended Open_I / F unit 272, an extended Close_I / F unit 273, a counter 274, and the like.

  The I / O request determination unit 271 determines whether the I / O request issued from the application is an Open request or a Close request.

  The counter 274 counts the number of limit files opened by the application. The restriction file is a file registered in the restriction file name list 211 and a file having an attribute registered in the restriction attribute list 212.

  When the Open request is issued from the application, the extended Open_I / F unit 272 determines whether the target file for which the Open request has been made is in the restricted file name list 211 or the restricted attribute list 212. If the information of the file for which the Open request has been made is in the restricted file name list 211 and the restricted attribute list 212, the count value of the counter 274 is incremented by 1.

  The configuration of the extended Open_I / F unit 272 will be described with reference to the block diagram of FIG.

  As illustrated in FIG. 7, the extended Open_I / F unit 272 includes a restricted file name list acquisition unit 281, a file name comparison unit 282, a restricted attribute list acquisition unit 283, an attribute acquisition unit 284, an attribute comparison unit 285, and an increment unit 286. Etc.

  The restricted file name list acquisition unit 281 performs processing for acquiring the restricted file name list 211. The file name comparison unit 282 determines whether or not the file name of the target file for the Open request is in the restricted file name list 211 obtained by the restricted file name list obtaining unit 281. If it is in the restricted file name list 211, the file name comparison unit 282 calls the restricted attribute list acquisition unit 283 and the attribute acquisition unit 284.

  The restricted attribute list acquisition unit 283 performs processing for acquiring the restricted attribute list 212. Further, the attribute acquisition unit 284 acquires the attribute of the target file 287 of the Open request.

  The attribute comparison unit 285 performs processing for determining whether or not the attribute acquired by the attribute comparison unit 285 is in the restricted attribute list 212. If there is an attribute, the increment unit 286 performs a process of incrementing the value of the counter 274 by one.

The configuration of the extended Close_I / F unit 273 will be described with reference to the block diagram of FIG.
As shown in FIG. 8, the extended Close_I / F unit 273 includes a restricted file name list acquisition unit 291, a file name comparison unit 292, a restricted attribute list acquisition unit 293, an attribute acquisition unit 294, an attribute comparison unit 295, and a decrement unit. 296 etc.

  The restricted file name list acquisition unit 291 performs processing for acquiring the restricted file name list 211. The file name comparison unit 292 determines whether the file name of the target file for the Close request is in the restricted file name list 211 acquired by the restricted file name list acquisition unit 291. If it is in the restricted file name list 211, the file name comparison unit 292 calls the restricted attribute list acquisition unit 293 and the attribute acquisition unit 294.

  The restricted attribute list acquisition unit 293 performs processing for acquiring the restricted attribute list 212. Further, the attribute acquisition unit 294 acquires the attribute of the target file 297 of the Close request.

  The attribute comparison unit 295 performs processing to determine whether or not the attribute acquired by the attribute comparison unit 295 is in the restricted attribute list 212. When there is an attribute, the decrement unit 296 performs a process of decrementing the value of the counter 274 by one.

  Next, the processing procedure of the filter driver 202 when an I / O request is issued from an application will be described with reference to the flowchart of FIG.

  When an I / O request is issued from the application, the I / O request determination unit 271 determines whether or not the I / O request is an Open request (step S21). When it is determined that the request is an Open request (YES in Step S21), the I / O request determination unit 271 calls the extended Open_I / F unit 272 and passes the Open request (Step S22).

  The extended Open_I / F unit 272 acquires the restricted file name list 211 and passes the restricted file name list 211 to the file name comparing unit 282 together with the Open request (step S23). The file name comparison unit 282 determines whether or not the file name of the target file for the Open request is registered in the restricted file name list 211 (step S24). If it is determined that the file is registered in the list 211 (YES in step S24), the file name comparison unit 282 instructs the increment unit 286 to increment the value of the counter 274 by one. The increment unit 286 increments the value of the counter 274 by 1 (step S28).

  When it is determined that the file is not in the list 211, the file name comparison unit 282 calls the restricted attribute list acquisition unit 283 and the attribute acquisition unit 284. The file name comparison unit 282 instructs the restriction attribute list acquisition unit 283 to acquire the restriction attribute list 212. In addition, the file name comparison unit 282 passes an Open request to the attribute acquisition unit 284.

  The restricted attribute list acquisition unit 283 acquires the restricted attribute list 212 and passes it to the attribute comparison unit 285 (step S25). The attribute acquisition unit 284 acquires an attribute of the target file 287 of the passed Open request, and passes it to the attribute comparison unit 285 (step S26). The attribute comparison unit 285 determines whether or not the passed attribute is registered in the restricted attribute list 212 (step S27). If it is determined that the attribute is registered in the list 211 (YES in step S27), the file name The comparison unit 282 instructs the increment unit 286 to increment the value of the counter 274 by one. The increment unit 286 increments the value of the counter 274 by 1 (step S28).

  When it is determined that the request is not an Open request (NO in Step S21), the I / O request determination unit 271 determines whether or not the I / O request is a Close request (Step S31). When it is determined that the request is a Close request (YES in Step S31), the I / O request determination unit 271 calls the extended Close_I / F unit 273 and passes the Close request (Step S32).

  The extended Close_I / F unit 273 acquires the restricted file name list 211, and passes the restricted file name list 211 to the file name comparing unit 282 together with the Close request (Step S33). The file name comparison unit 282 determines whether the file name of the target file for the Close request is registered in the restricted file name list 211 (step S34). If it is determined that the file is registered in the list 211 (YES in step S34), the file name comparison unit 282 instructs the decrement unit to decrement the value of the counter 274 by one. The decrement unit decrements the value of the counter 274 by 1 (step S38).

  When it is determined that the file is not in the list 211, the file name comparison unit 282 calls the restricted attribute list acquisition unit 283 and the attribute acquisition unit 284. The file name comparison unit 282 instructs the restriction attribute list acquisition unit 283 to acquire the restriction attribute list 212. In addition, the file name comparison unit 282 passes a Close request to the attribute acquisition unit 284.

  The restricted attribute list acquisition unit 283 acquires the restricted attribute list 212 and passes it to the attribute comparison unit 285 (step S35). The attribute acquisition unit 284 acquires the attribute of the target file 287 of the passed Close request and passes it to the attribute comparison unit 285 (step S36). If the attribute comparison unit 285 determines whether or not the passed attribute is registered in the restricted attribute list 212 (step S37) and determines that it is registered in the list 211 (YES in step S37), the file name The comparison unit 282 instructs the decrement unit to decrement the value of the counter 274 by one. The decrement unit decrements the value of the counter 274 by 1 (step S38).

  With the above processing, the filter driver 202 can detect the number of limit files opened by the application.

  Next, a method for preventing data from being pasted even when the user performs a copy operation when the restriction file is opened will be described with reference to FIGS.

  FIG. 10 shows that when a restricted file is opened when the file registered in the restricted file name list 211 and the file having the attribute registered in the restricted attribute list 212 are opened, the user copies It is a block diagram which shows the structure for invalidating copy data, if operation is performed.

  As shown in FIG. 10, the clipboard monitoring application 250 includes an update detection unit 301, a restricted file information call unit 302, a restricted file information confirmation unit 303, a copy data invalidation unit 304, and the like. The filter driver 202 includes a restricted file information answering unit 311 and a counter 274.

  The update detection unit 301 performs processing for detecting that new data is registered in the clipboard 205. When the update detection unit 301 detects that new data has been registered in the clipboard 205, the restricted file information call unit 302 performs a process of inquiring whether the restricted file is open to the filter driver 202. The restricted file information answering unit 311 performs processing for determining whether or not the restricted file is opened with reference to the value of the counter 274. Then, the discriminator result is returned to the clipboard monitoring application 250. The restricted file information confirmation unit 303 performs processing to determine whether or not the restricted file is opened from the result returned from the filter driver 202. If it is determined that the restriction file is open, the restriction file information confirmation unit 303 calls the copy data invalidation unit 304 and performs processing to instruct to invalidate the data registered in the clipboard 205.

  Next, a processing procedure for invalidating copy data when a user performs a copy operation when a restriction file is opened will be described with reference to a flowchart of FIG.

  The update detection unit 301 of the clipboard monitoring application 250 monitors the clipboard 205 and detects whether new data has been registered in the clipboard 205 (step S41).

  When it is detected that new data is registered in the clipboard 205 (YES in step S41), the update detection unit 301 calls the restriction list information acquisition unit. The restriction list information acquisition unit inquires of the filter driver 202 whether the restriction file is being used (step S42).

  Upon receiving the inquiry, the restricted file information reply unit 311 of the filter driver 202 acquires the value (count value) of the counter 274 (step S43). The restricted file information answering unit 311 determines whether or not the count value is 0 (step S44). If it is determined that the number is 0 (YES in step S44), the status confirmation function returns to the clipboard monitoring application 250 that the restriction file is not used (step S45). If it is determined that it is not 0 (NO in step S44), the status confirmation function returns to the clipboard monitoring application 250 that the restriction file is used (step S46).

  When there is a response from the filter driver 202, the restricted file information confirmation unit 303 determines whether or not the restricted file is in use from the response content (step S47). When it is determined that it is in use (YES in step S47), the restricted file information confirmation unit 303 calls the copy data invalidation unit 304 and instructs invalidation of data in the clipboard 205. The copy data invalidation unit 304 operates the clipboard 205 to invalidate the data by discarding or replacing the stored data.

  When the restriction file is opened by the above processing, the data registered in the clipboard 205 can be invalidated, and the data in the restriction file can be prevented from being pasted into another file.

  This information processing apparatus has a function of recording image data displayed on the LCD 17 called screen capture. The image data captured on the screen is temporarily stored in the clipboard 205. Therefore, even if the screen capture is performed when the restriction file is opened, the contents of the clipboard 205 are invalidated.

(Second Embodiment)
In the present embodiment, an additional function of the copy and paste restriction function described in the first embodiment will be described. This additional feature allows attachments that allow you to restrict copy and paste and screen capture while the file is open if the file name attached to the mail received by the mailer contains a specific keyword. Automatic file registration function.

  FIG. 12 is a block diagram showing a configuration for executing the processing of the attached file automatic registration function according to the second embodiment of the present invention.

  The attached file automatic registration function is executed by the mail monitoring application 330. The mail monitoring application 330 includes a new mail monitoring section 321, an attached file detection section 322, a keyword comparison section 333, a restriction list calling section 334, a duplicate name determination section 335, a file name addition section 336, a restriction list delivery section 337, and the like.

  The configuration of the filter driver 202 is the same as that described with reference to FIG.

  The new mail monitoring unit 321 monitors the mailer 340 acquiring new mail from the server. When the new mail monitoring unit 321 detects that the mailer 340 has acquired the mail, the new mail monitoring unit 321 determines whether an attached file is attached to the mail newly acquired by the attached file detection unit 322. If the attached file detection unit 322 determines that there is an attached file, the attached file detection unit 322 detects the name of the attached file.

  The keyword comparison unit 333 determines whether or not the name of the attached file detected by the attached file detection unit 322 includes a keyword included in the restricted keyword list 338. Restriction keywords included in the restriction keywords include, for example, “confidential”, “confidential”, “confidential”, “customer list”, and the like.

  If it is determined that the keyword is included, the restriction list calling unit 334 sends an instruction to pass the restriction file lists 211 and 212 to the filter driver 202. The restriction list acquisition unit 261 sends the restriction file lists 211 and 212 to the mail monitoring application 330 according to the command.

  The duplicate name determination unit 335 of the mail monitoring application 330 that acquired the restricted file lists 211 and 212 detects whether the name of the attached file is already registered in the restricted file name list 211. When the duplicate name determination unit 335 determines that the name is not registered, the file name addition unit 336 adds the name of the attached file to the restricted file name list 211. After the addition, the restriction list delivery unit 337 passes the restriction file name list 211 to the filter driver 202. The restriction list update unit 262 updates the restriction file name list 211 held therein to the given restriction file name list 211.

  Next, the processing procedure of the attached file automatic registration function will be described with reference to the flowchart of FIG.

  The new mail monitoring unit 321 determines whether the mailer 340 has acquired a new mail from the server (step S51). When it is determined that a new mail has been detected (YES in step S51), the new mail monitoring unit 321 instructs the attached file detection unit 322 to determine whether there is a new mail. The new mail monitoring unit 321 determines whether or not an attachment file is included in the new mail received by the mailer 340 (step S52). If it is determined that there is an attached file, the attached file detection unit 322 detects the name of the attached file (step S53).

  The attached file detecting unit 322 passes the detected attached file name to the keyword comparing unit 333 and instructs to check whether the detected attached file name corresponds to the restricted file. The keyword comparison unit 333 determines whether or not the restricted keyword included in the restricted keyword list 338 is included in the attached file name (step S54).

  If it is determined that a restricted keyword is included, the keyword comparison unit 333 instructs the restriction list calling unit 334 to acquire a restricted file. The restriction list calling unit 334 issues a delivery request for the restriction lists (restricted file name list 211 and restricted attribute list 212) to the filter driver 202 (step S55).

  In response to a request from the mail monitoring application 330, the list acquisition unit of the filter driver 202 acquires the restricted file name list 211 and the restricted attribute list 212, and sends the restricted file name list 211 and the restricted attribute list 212 to the mail monitoring application 330. Deliver (step S56).

  The duplicate name determination unit 335 determines whether or not the attached file name is included in the restricted file name list 211 (step S57). If it is determined that the file name is not included (NO in step S57), the file name adding unit 336 is instructed to add an attached file name to the restricted file name list 211. In response to the instruction, the file name adding unit 336 registers the name of the attached file in the restricted file name list 211 (step S58). The file name addition unit 336 instructs the restriction list delivery unit 337 to pass the restriction file name list 211 to the filter driver 202.

The restriction list delivery unit 337 passes the restriction file name list 211 to which the name of the attached file is added to the filter driver 202 and instructs to update the restriction file name list 211 (step S59).
The restriction list update unit 262 updates the restriction file name list 211 in the filter driver 202 in response to a request from the restriction list transfer unit (step S60).

  When the attached file name of the received mail includes a specific keyword by the above processing, the attached file name can be added to the restricted file name list 211 in the filter driver 202. Since the attached file name is added to the restricted file name list 211, copy and paste and screen capture can be restricted when the attached file is opened by the function described in the first embodiment.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

1 is a diagram showing a notebook personal computer as an information processing apparatus according to an embodiment of the present invention. 1 is a block diagram showing a notebook personal computer as an information processing apparatus according to an embodiment of the present invention. The block diagram which shows the structure for implement | achieving a copy & paste restriction | limiting function. The block diagram which shows the structure for editing / updating a restriction | limiting file name list and a restriction | limiting attribute list. The flowchart which shows the procedure which edits a restriction file list and updates a restriction file list. The block diagram which shows the structure of the filter driver which processes when there exists an I / O request | requirement from an application. The block diagram which shows the structure of the extended Open_I / F part shown in FIG. The block diagram which shows the structure of the extended Close_I / F part shown in FIG. The flowchart which shows the procedure of the process of a filter driver when an I / O request | requirement is issued from an application. FIG. 10 is a block diagram showing a configuration for invalidating copy data when a user performs a copy operation when a restriction file is opened. 10 is a flowchart illustrating a procedure of processing for invalidating copy data when a user performs a copy operation when a restriction file is opened. The block diagram which shows the structure for performing the process of the attachment file automatic registration function concerning 2nd Embodiment. 9 is a flowchart showing a processing procedure of an attached file automatic registration function according to the second embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 200 ... Operating system, 201 ... File system driver, 202 ... Filter driver, 203 ... Port driver, 204 ... Miniport driver, 205 ... Clipboard, 211 ... Restricted file name list, 212 ... Restricted attribute list, 240 ... Restricted list management application , 241 ... Restriction list calling part, 242 ... Restriction list editing part, 243 ... Restriction list delivery part, 250 ... Clipboard monitoring application, 261 ... Restriction list acquisition part, 262 ... Restriction list update part, 271 ... O request determination part, 272 ... F part, 273 ... F part, 274 ... counter, 281 ... restricted file name list acquisition part, 282 ... file name comparison part, 283 ... restricted attribute list acquisition part, 284 ... attribute acquisition part, 285 ... attribute comparison part, 286 ... Increment part, 2 7 ... Target file, 291 ... Restricted file name list acquisition unit, 292 ... File name comparison unit, 293 ... Restricted attribute list acquisition unit, 294 ... Attribute acquisition unit, 295 ... Attribute comparison unit, 296 ... Decrement unit, 297 ... Target File 301 ... Update detection unit 302 ... Restricted file information call unit 303 ... Restricted file information confirmation unit 304 ... Copy data invalidation unit 311 ... Restricted file information response unit 321 ... New mail monitoring unit 322 ... Attached File detection unit 330 ... Mail monitoring application, 333 ... Keyword comparison unit, 334 ... Restriction list calling unit, 335 ... Duplicate name determination unit, 336 ... File name addition unit, 337 ... Restriction list delivery unit, 338 ... Restriction keyword list, 340 ... Mailer.

Claims (10)

A storage device having a temporary storage area for storing information selected by the user;
Monitoring means for monitoring that new information is stored in the temporary storage area;
When the monitoring unit detects that new information is stored in the temporary storage area, a file whose file name is registered in the restricted file name list in advance, or an attribute registered in the restricted attribute list in advance. A discriminating means for discriminating whether or not one or more restricted files that are included files are opened;
An information processing apparatus comprising: means for invalidating information stored in the temporary storage area when it is determined that one or more of the restriction files are opened. A counter,
Means for determining whether a file to be opened corresponds to the restriction file;
Means for incrementing the value of the counter when it is determined to fall under the restriction file;
Means for determining whether a file to be closed corresponds to the restriction file;
The information processing apparatus according to claim 1, further comprising means for decrementing the value of the counter when it is determined that the restriction file is satisfied.   The information processing apparatus according to claim 2, wherein the determination unit determines whether one or more restriction files are opened according to a value of the counter. A mail acquisition means for acquiring e-mail data from the server;
Means for determining whether or not the name of the attached file includes a keyword registered in advance in a keyword list when an attached file is attached to the e-mail data acquired from the server;
2. The information processing apparatus according to claim 1, further comprising means for registering the name of the attached file in the restricted file name list when it is determined that the keyword is included.   The information processing apparatus according to claim 1, wherein the temporary storage area is a clipboard. A storage device having a temporary storage area;
Monitoring that new information is stored in the temporary storage area;
When it is detected that new information is stored in the temporary storage area, a file whose file name is registered in the restricted file name list in advance, or a file including an attribute registered in the restricted attribute list in advance. Execute the discrimination process to determine whether one or more restricted files are open,
A method for controlling an information processing apparatus, comprising: invalidating information stored in the temporary storage area when it is determined that one or more restriction files are opened. Determine whether the file to be opened corresponds to the restriction file,
When it is determined that the restriction file is satisfied, the counter value is incremented,
Determine whether the file to be closed corresponds to the restriction file,
The information processing apparatus control method according to claim 6, further comprising: decrementing the value of the counter when it is determined that the restriction file is satisfied.   8. The method of controlling an information processing apparatus according to claim 7, wherein the determination processing determines whether one or more restriction files are opened according to the value of the counter. Get email data from the server,
When an attached file is attached to the e-mail data acquired from the server, it is determined whether or not the name of the attached file includes a keyword registered in the keyword list in advance.
7. The information processing apparatus control method according to claim 6, wherein, when it is determined that the keyword is included, the name of the attached file is registered in the restricted file name list.   The information processing apparatus control method according to claim 6, wherein the temporary storage area is a clipboard.

Images