JP2009134338A - Electronic document audit method and electronic document audit apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To audit an electronic document, based on a difference in security level between the electronic document and a folder containing the electronic document. <P>SOLUTION: An electronic document audit method is used in an electronic document audit apparatus for auditing the electronic document stored in a storage device. The electronic document audit apparatus performs a comparison procedure for comparing the security level of the electronic document with that of the folder containing the electronic document and an electronic document risk level determining procedure for determining a difference in the security level as a risk level of the electronic document with respect to the folder when the security level of the electronic document does not reach that of the folder. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention provides an electronic document audit method and an electronic document audit apparatus for auditing an electronic document based on a difference in security level between the electronic document and a folder to which the electronic document belongs.

  Normally, in a computer, a file such as a document file is stored in a file storage location such as a directory or folder having a hierarchical structure in a storage device such as a hard disk device (HDD), a flexible disk, or a CD-ROM. File storage locations such as directories and folders are used to classify and organize files.

  As the storage area becomes larger, the types and number of files to be stored increase, the hierarchical structure for classifying and organizing these files becomes complicated, and the degree of classification is subdivided. Lost. On the other hand, if you try to manage with a simple hierarchical structure, it becomes a rough classification, and the degree of classification (for example, the degree of importance) for the file varies depending on the subjectivity of each user who uses the file, and the handling of the file differs. End up. As described above, there is a problem that it is difficult to obtain recognition of classification and organization unified among a plurality of users, and that there is a difference in handling when using a file. Further, from the viewpoint of security for document files in recent years, it is necessary to classify the document files in consideration of importance, confidentiality, legitimacy, and the like.

  To deal with such a problem, for example, in Patent Document 1, in a system for estimating a security attribute of a document, a document similar to the document to be estimated is searched from existing stored documents, and a similar storage found. A system that presents security attributes of a document as an estimation result has been proposed.

Further, in Patent Document 2, when copying a manuscript with a copying machine, if security information cannot be read from the manuscript, a character string or the like is extracted from the scanned image and matches the document of existing document management data. There has been proposed a system that determines whether or not to perform copying and stops copying if they match.
JP 2006-185153 A Japanese Patent Laying-Open No. 2005-166023

  In a company, a shared file server for document management is provided for simple document sharing and backup between groups, and a shared folder is often used. In general, the folder structure is classified and used for groups and document categories. Since saving to the shared folder is a manual operation of each employee and is artificial, there is a problem that the classification result tends to be ambiguous even if the classification decided between the groups is followed.

  For example, the classification result may change depending on the mood of the employee who operates the document. May also exist.

  In order to manage shared folders correctly in response to such changes in the situation, the administrator must periodically open all documents and individually check whether the document contents match the categories. As a result, a considerable labor burden is imposed on the administrator, which is not unrealistic and based on the idea of the administrator, so that a complete operation cannot be performed.

  Managing folders vaguely based on human judgment in this way includes document files that cannot accurately determine the importance of business content security, leaving unsafe conditions such as information leaks. It leads to.

  Accordingly, an object of the present invention is to audit an electronic document based on a difference in security level between the electronic document and a folder to which the electronic document belongs according to an audit rule, and to audit the electronic document according to a change in the security level of the folder. It is to provide an electronic document audit method to be executed.

  In order to solve the above problems, the present invention provides an electronic document monitoring method in an electronic document monitoring apparatus that monitors an electronic document stored in a storage device, wherein the electronic document monitoring apparatus has a security level of the electronic document. The comparison procedure for comparing the security level of the folder to which the electronic document belongs, and if the security level of the electronic document does not reach the security level of the folder, the difference between the security levels is regarded as the risk level of the electronic document for the folder. An electronic document risk determination procedure for determining is configured to be executed.

  As means for solving the above-described problems, the present invention provides a computer-executable program for causing a computer to perform the processing in the electronic document monitoring method, a computer-readable storage medium, and an electronic document monitoring method for performing the processing. It can also be.

  According to the present invention, in order to audit the electronic document based on the security level difference between the electronic document and the folder to which the electronic document belongs according to the audit rule, the electronic document is audited according to the change of the security level of the folder can do.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  In the present embodiment, a folder will be described as an example of a file storage location. However, the present invention is not limited to a folder, and any file storage location used for classifying and organizing files may be used.

  In the electronic document auditing apparatus according to an embodiment of the present invention, when auditing a folder in which files are classified and stored (hereinafter referred to as a classified folder), each file in the classified folder is stored in a classified folder. It verifies whether or not it conforms to the security attribute, and notifies the degree of conformity as the risk of folder status. The security attribute indicates handling restrictions such as “top secret”, “secret”, “inside secret”, and “no security”.

  First, an electronic document audit apparatus that targets a local folder as an audit target will be described. Hereinafter, a folder to be audited is referred to as an audit target folder.

  FIG. 1 is a diagram showing a network configuration to which an electronic document audit apparatus for auditing a local folder is applied. In the network configuration shown in FIG. 1, the electronic document auditing apparatus 10a can be connected to the document attribute estimation server 30 via the network 3 and audits all or a part of the local folder serving as the audit target folder 5a.

  The processing in the electronic document audit apparatus 10a is performed by executing the electronic document security audit program 7. In the electronic document audit apparatus 10a, the electronic document security audit program 7 estimates the security attribute value for each document file (electronic document) stored in the audit target folder 5a for each audit target folder 5a. A security attribute estimation request is transmitted to the document attribute estimation server 30 via the network 3. The electronic document security audit program 7 transmits a security attribute estimation request together with the document file.

  The document attribute estimation server 30 manages each piece of text information extracted from a plurality of document files as security targets in association with the security attribute value for each document file. A similarity is calculated in the comparison between the document file received from the electronic document auditing apparatus 10a and each piece of text information managed in advance. Based on the calculated similarity, the most similar among the plurality of text information is calculated. The security attribute value associated with the high text information is notified to the electronic document auditing apparatus 10a as the estimated security attribute value. For example, a technique for estimating the security attribute of a document file disclosed in Japanese Patent Application Laid-Open No. 2006-185153 may be applied.

  In the learning information DB, folder classification patterns learned based on the degree of matching with patterns indicating the characteristics of a plurality of document files in the folder are managed. For example, a technique for learning and managing a folder classification pattern disclosed in Japanese Patent Application No. 2007-010856 may be applied.

  In the electronic document audit apparatus 10a, the electronic document security audit program 7 calculates the estimated security attribute value (hereinafter simply referred to as a security attribute value) of each document file acquired from the document attribute estimation server 30 and the security attribute value of the folder. In the comparison, the risk level of the folder status is determined. That is, when there is a document file with a security attribute value indicating a higher security level than the security attribute value of the folder, this indicates that the folder is in a high risk state.

  The electronic document security audit program 7 displays the audit result obtained by the processing as described above on the display device 12a of the administrator 2. The administrator 2 can recognize which folder is in a dangerous state for security, which document file is in a dangerous state, and the like based on the audit result displayed on the display device 12a. Therefore, based on the audit result, the administrator 2 examines reclassification by moving a document file in which the folder is in a dangerous state among the already classified document files to another folder, and appropriately Can be classified.

  The display device 12a of the administrator 2 is not limited to being a display device of the electronic document inspection device 10a. It may be a display device of a computer device used by the administrator 2 connected from the electronic document inspection device 10a via the network 3.

  FIG. 2 is a diagram showing a system configuration of the electronic document inspection apparatus in the network configuration shown in FIG. In FIG. 2, an electronic document inspection apparatus 10a is a computer apparatus, and is an input device 11, a display device 12, a drive device 13, an auxiliary storage device 14, and a memory device, which are mutually connected by a bus B. 15, an arithmetic processing device 16, and an interface device 17.

  The input device 11 includes a keyboard and a mouse, and is used for inputting various signals. The output device 12 includes a display device and is used to display various windows and data. The interface device 17 includes a modem, a LAN card, and the like, and is used for connecting to the network 3. The electronic document audit apparatus 10 a is connected to the document estimation server 30 via the network 3 by the interface device 17, and acquires the security attribute value of each document file in the audit target folder 5 a from the document estimation server 30.

  The electronic document security audit program 7 according to the present invention is at least a part of various programs for controlling the electronic document audit apparatus 10a. The electronic document security audit program 7 is provided by, for example, distribution of the recording medium 18 or downloading from the network 3. The recording medium 18 on which the electronic document security audit program 7 is recorded is a recording medium on which information is optically, electrically or magnetically recorded, such as a CD-ROM, flexible disk, magneto-optical disk, ROM, flash memory, etc. Various types of recording media such as a semiconductor memory that electrically records information can be used.

  When the recording medium 18 on which the electronic document security audit program 7 is recorded is set in the drive device 13, the electronic document security audit program 7 is installed from the recording medium 18 to the auxiliary storage device 14 via the drive device 13. The electronic document security audit program 7 downloaded from the network 3 is installed in the auxiliary storage device 14 via the interface device 17.

The electronic document audit apparatus 10a stores the installed electronic document security audit program 7 and stores necessary files, data, and the like. The memory device 15 reads and stores the electronic document security audit program 7 from the auxiliary storage device 14 at the time of activation. Then, the arithmetic processing unit 16 realizes various processes as described later in accordance with the electronic document security audit program 7 stored in the memory device 15. Next, the audit target folder 5a is used as a shared folder to estimate document attributes on the network. A network configuration when provided in a shared server different from the server 30 will be described.

  FIG. 3 is a diagram showing a network configuration to which an electronic document auditing apparatus that audits a shared folder via a network is applied. In the network configuration shown in FIG. 3, the electronic document audit apparatus 10b can be connected to the document attribute estimation server 30 and the shared server 50 that manages the audit target folder 5a as a shared folder via the network 3, and the audit target folder 5a Audit all or part of the shared folder. The functions provided in the document attribute estimation server 30 are the same as the functions described in FIG.

  The processing in the electronic document audit apparatus 10b is performed by executing the electronic document security audit program 7. In the electronic document audit apparatus 10b, the electronic document security audit program 7 uses the network 3 to estimate the security attribute value for each document file stored in the audit target folder 5a for each audit target folder 5a. Then, a security attribute estimation request is transmitted to the document attribute estimation server 30. The electronic document security audit program 7 acquires a document file via the network 3 and transmits a security attribute estimation request together with the acquired document file.

  Upon obtaining the estimated security attribute value of the document file from the document attribute estimation server 30, the electronic document auditing apparatus 10b determines the risk level of the folder state in comparison with the security attribute value of the folder. If there is a document file having a security attribute value indicating a higher security level than the security attribute value of the folder, it is determined that the folder is in a high risk state.

  The electronic document security audit program 7 displays the audit result on the display device 12a of the administrator 2 as in the network configuration shown in FIG. The display device 12a of the administrator 2 is not limited to being a display device of the electronic document inspection device 10a. It may be a display device of a computer device used by the administrator 2 connected from the electronic document inspection device 10a via the network 3.

  The administrator 2 can recognize which folder is in a dangerous state for security, which document file is in a dangerous state, and the like based on the audit result displayed on the display device 12a. Therefore, based on the audit result, the administrator 2 examines reclassification by moving a document file in which the folder is in a dangerous state among the already classified document files to another folder, and appropriately Can be classified.

  FIG. 4 is a diagram showing a system configuration of the electronic document inspection apparatus in the network configuration shown in FIG. In FIG. 4, an electronic document inspection apparatus 10b is a computer apparatus, and is an input device 11, a display device 12, a drive device 13, an auxiliary storage device 14, and a memory device, which are mutually connected by a bus B. 15, an arithmetic processing device 16, and an interface device 17.

  Since the system configuration of the electronic document inspection apparatus 10b is the same as the system configuration of the electronic document inspection apparatus 10a shown in FIG. 2, the description of each of the configuration apparatuses 11 to 17 is omitted. However, in the system configuration shown in FIG. 4, the electronic document inspection apparatus 10a is connected to the shared server 50 and the document estimation server 30 via the network 3 by the interface apparatus 17 and shares each document file in the audit target folder 5a. Obtained from the server 50, the security attribute value of the document file is obtained from the document estimation server 30.

  Next, a network configuration when the electronic document security audit program 7 that realizes the processing in the electronic document audit apparatuses 10a and 10b is installed in the document attribute estimation server 30 will be described.

  FIG. 5 is a diagram showing a network configuration to which a document attribute estimation server that audits a shared folder via a network is applied. In the network configuration shown in FIG. 5, the document attribute estimation server 30 includes the document attribute estimation program 31 that realizes the process for estimating the document attribute, and also includes the electronic document security audit program 7. It functions as a device 10a or 10b (hereinafter collectively referred to as an electronic document audit device 10), and audits the audit target folder 5a of the shared server 50 via the network 3.

  Since the document attribute estimation server 30 functions as the electronic document audit apparatus 10 by the electronic document security audit program 7, the electronic document security audit program 7 internally transmits a security attribute estimation request to the document attribute estimation program 31 in the apparatus. Thus, the security attribute value of the document file is acquired. In the document attribute estimation server 30, the electronic document security audit program 7 determines the risk level of the folder state by comparing the security attribute value of the document file acquired from the document attribute estimation program 31 with the security attribute value of the folder. As described above, if there is a document file having a security attribute value indicating a higher security level than the security attribute value of the folder, it is determined that the folder is in a high risk state.

  The electronic document security audit program 7 displays the audit result on the display device 12a of the administrator 2 as in the network configuration shown in FIGS. The display device 12a of the administrator 2 is not limited to being a display device of the electronic document inspection device 10a. It may be a display device of a computer device used by the administrator 2 connected from the electronic document inspection device 10a via the network 3.

  The administrator 2 can recognize which folder is in a dangerous state for security, which document file is in a dangerous state, and the like based on the audit result displayed on the display device 12a. Therefore, based on the audit result, the administrator 2 examines reclassification by moving a document file in which the folder is in a dangerous state among the already classified document files to another folder, and appropriately Can be classified.

  FIG. 6 is a diagram showing a module configuration of the electronic document security audit program. In FIG. 6, by executing the electronic document security audit program 7, the electronic document audit apparatus 10 functions as an audit rule setting screen control unit 71, an audit thread control unit 72, and an audit result screen control unit 73.

  The audit rule setting screen control unit 71 provides a user interface for setting audit rules such as an audit target folder and an audit time. For example, an audit rule setting screen as shown in FIG. 7 is displayed on the display device 12a of the administrator 2.

  The audit thread control unit 72 performs an audit on the audit target folder 5a according to the audit rule set by the administrator 2 using the audit rule setting screen provided by the audit rule setting screen control unit 71, and outputs the audit result And save. The audit thread control unit 72 is a timer control module that is activated by time designation. The audit thread control unit 72 further includes a folder / file list extraction unit 72a, an attribute estimation unit 72b, a risk determination unit 72c, and an audit result storage unit 72d as submodules.

  The folder / file list extraction unit 72a extracts a file list of document files for each folder from the audit target folder 5a. The attribute estimation unit 72b communicates with the document attribute estimation server 30 to acquire the security attribute value of each document file. The risk determination unit 72c determines the risk of each audit target folder 5a. The audit result storage unit 72d stores the determination result by the risk determination unit 72c in the audit result 74.

  The audit result screen control unit 73 displays various screens related to the audit result 74 by the audit thread control unit 72 on the display device 12 a of the administrator 2.

  Various user interfaces provided by the audit rule setting screen control unit 71 and the audit result screen control unit 73 will be described. FIG. 7 is a diagram illustrating an example of a periodic audit rule setting screen provided by the audit rule setting screen control unit. A regular audit rule setting screen G60 shown in FIG. 7 is a screen for the administrator 2 to set an audit rule in order to periodically audit the audit target folder 5a.

  The periodic audit rule setting screen G60 is a folder name setting area 61 for setting the folder name of the audit target folder 5a, and a reference for setting a folder name in the folder name setting area 61 by selecting a folder from the directory structure 62p. A button 62, an audit time setting area 63 for setting the time for executing the audit, an execution timing selection area 64 for selectively setting the execution timing of the audit, and an execution button for executing the audit according to the setting 65 and a cancel button 66 for canceling the setting.

  For example, in the audit time setting area 63, month, day, hour, and minute can be designated. In the execution timing selection area 64, one can be selected from items such as “monthly”, “weekly”, “once a month”, and “immediately”.

  The audit rule setting screen control unit 71 provides such a periodic audit rule setting screen G60 to the display device 12a of the administrator 2, and when information set by the administrator 2 is acquired, the audit rule setting screen control unit 71 stores the information as periodic audit rule information in a predetermined storage area. save. The audit thread control unit 72 controls the timer according to the stored periodic audit rule information, and the designated audit target folder 5a and the audit target folder 5a under the month, day, hour specified by the regular audit rule information. Perform audits on subfolders.

  The periodic audit rule setting screen G60 shown in FIG. 7 is an example of a user interface for periodically setting an audit rule for executing an audit on the audit target folder 5a. A user interface for performing an audit in real time for each change or addition detected in 5a will be described.

  The change includes not only the case where the subfolder or document file under the audit target folder 5a is updated, but also the case where the security attribute value of the audit target folder 5a is changed. The addition means a case where a new subfolder or document file is added under the audit target folder 5a.

  FIG. 8 is a diagram illustrating an example of a real-time audit rule setting screen provided by the audit rule setting screen control unit. The real-time audit rule setting screen G80 shown in FIG. 8 is a screen for setting an audit rule for the administrator 2 to audit the audit target folder 5a in real time.

  The real-time audit rule setting screen G80 selects a folder from the folder name setting area 81 for setting the folder name of the audit target folder 5a and the directory structure 62p as shown in FIG. There is a reference button 82 for setting, an execution button 85 for executing an audit according to the setting, and a cancel button 86 for canceling the setting.

  The audit rule setting screen control unit 71 provides such a real-time audit rule setting screen G80 to the display device 12a of the administrator 2 and acquires information set by the administrator 2 as real-time audit rule information in a predetermined storage area. save. The audit thread control unit 72 performs an audit every time a change or addition is detected in the audit target folder 5a specified by the stored real-time audit rule information. Similarly, an audit is performed on each subfolder under the audit target folder 5a every time a change or addition is detected.

  Next, a screen related to the periodic audit result provided by the audit result screen control unit 73 will be described. FIG. 9 is a diagram illustrating an example of a folder audit completion screen provided by the audit result screen control unit. A folder audit completion screen G90 shown in FIG. 9 is a screen showing the results of periodic audits executed by the audit thread control unit 72 according to the periodic audit rule information, and displays the number of folders whose risk level is determined to be medium. A display area 91, a display area 92 that displays the number of files that are determined to be in the risk level under a folder with a medium risk level, and the number of folders that are determined to have a high risk level are displayed. A display area 93 for displaying, a display area 94 for displaying the number of files determined to have a high risk level under a folder having a high risk level, and a detail display button for displaying details of the periodic audit result 95 and an end button 96 for ending the screen.

  In the folder audit completion screen G90, for example, it is displayed in the display area 91 that there are nine folders whose risk level is determined to be medium, and it is determined that the risk level is under the nine folders. It is displayed in the display area 92 that 11 files have been recorded. In addition, it is displayed in the display area 93 that there are two folders that are determined to have a high risk level, and there are six files that are determined to have a high risk level under these two folders. Is displayed in the display area 94.

  If only a folder with a medium risk level is detected, the display areas 93 and 94 are omitted. Similarly, if only folders with a high risk level are detected, the display areas 91 and 92 are omitted.

  When the administrator 2 selects the detail display button 95 on the folder audit completion screen G90 shown in FIG. 9, for example, an audit result detail screen as shown in FIG. 10 is displayed on the display device 12a of the administrator 2. FIG. 10 is a diagram illustrating an example of an audit result display screen. An audit result display screen G100 shown in FIG. 10A displays a result of auditing the “shared folder” as the audit target folder 5a.

  For example, under the “shared folder”, there are folders such as “common temporary”, “project X technical document”, “project X public document”, “project Y technical memo”, “USER”, etc., and an audit result display screen In G100, the relationship between these folders is displayed in a directory structure.

  Under the “shared folder”, it is displayed that the “common temporary” folder and the “project X public document” folder are determined to have a high risk level, and the “project X technical document” folder is in a high risk level. The judgment is displayed in the color indicating the risk together with the information indicating the risk.

  In the audit result display screen G100 shown in FIG. 10 (A), the administrator 2 determines that the risk level is high and the risk level is medium, and “common temporary”, “project X public document”, and “project X technical document” 3 When the details in the folder are displayed by selecting one folder, for example, as shown in FIG. 10B, the document file under each folder is displayed in a color indicating the degree of risk in the audit result display screen G100.

  As shown in FIG. 10B, in the audit result display screen G100, the details in the folders of “common temporary”, “project X public document”, and “project X technical document” are displayed, and the medium risk level and the high risk level are displayed. The names of folders and document files are displayed with an underline, for example. The names of the underlined folders and document files are linked to the corresponding folders and document files, and the administrator 2 can link to a desired folder or document file by selecting and confirm the contents. be able to.

  In the “common temporary” in-folder detail display 102, it can be seen that the “common temporary” folder is in a high risk state by the document file of “in-house top secret personnel list.doc” detected with a high risk level.

  In the detailed display 104 in the folder of “Project X Public Document”, the “Project X Technical Document” folder is in a state of risk by the document file of “Product X Top Secret Document.doc” detected in the risk level. I understand that.

  In the detailed display 106 in the folder of “Project X technical document”, “development expense.xls”, “X technical memo.doc”, “product X detailed design document.doc”, “product X patent” detected in the risk level. It can be seen that the “Project X Public Document” folder is in a high risk state by the document files of “Survey.doc” and “Product X Functional Specification Proposal.doc”. In this case, an example is shown in which when the number of document folders at risk level exceeds a predetermined number, the folder storing the document folders is determined to have a high risk level.

  In this way, it is possible to visually determine which document file puts the folder in a dangerous state, and the content of the dangerous document file can be confirmed by a link. It becomes easy to consider.

  When the real-time audit is executed based on the real-time audit rule information set on the real-time audit rule setting screen G80 as shown in FIG. 8 and it is estimated that a dangerous file exists, the audit result screen control unit 73, for example, 11 is displayed on the display screen 12a of the administrator 2.

  FIG. 11 is a diagram illustrating an example of a real-time audit warning screen provided by the audit result screen control unit. The real-time audit warning screen G120 shown in FIG. 11 has storage location information 122 indicating the storage location of the document file that makes the auditable folder 5a that can be linked by selection dangerous, and a close button 126 for closing the screen G120. .

  On the real-time audit warning screen G120, for example, a document file estimated to be in danger is displayed as linkable storage location information “\\ SERVER1 \ xxxx \ yyy \ xxx.doc”.

  By displaying this real-time audit warning screen G120, the administrator 2 can know that a dangerous document file has appeared in real time, and by selecting storage destination information that can be linked, the contents of the document file Can be confirmed.

  Next, audit processing by the audit thread control unit 72 of the electronic document security audit program 7 will be described. First, an initial audit process for the audit target folder will be described. When the process by the risk determination unit 72c has not yet been executed for the audit target folder, and the determination result regarding the audit target folder is not stored in the audit result 74, the first audit process is executed.

  FIG. 12 is a flowchart for explaining an initial audit process for the audit target folder by the audit thread control unit. In FIG. 12, when the time set in the audit rule is reached (step S1), the audit thread control unit 72 activates the audit thread 724 (step S2). The folder / file list extraction unit 72a, the attribute estimation unit 72b, the risk determination unit 72c, and the audit result storage unit 72d shown in FIG. 6 are configured by the audit thread processing by the activated audit thread 724.

  When the audit thread 724 is activated, the folder / file list extraction unit 72a acquires the document list of the document folder stored in the audit target folder specified by the audit rule (step S3).

  The attribute estimation unit 72b sequentially acquires document files from the audit target folder 5a with reference to the document list (step S4). Then, the attribute estimation unit 72b determines whether audit processing has been executed for all the document files in the document list (step S5). For example, if a document file is acquired in step S4, it is determined that there is an unprocessed document file, and the process proceeds to step S6. On the other hand, if all document files in the document list have already been acquired, it is determined that audit processing has been executed for all document files in the document list, and the initial audit processing is terminated.

  If it is determined that there is an unprocessed document file, the attribute estimation unit 72b transmits a document attribute estimation request to the document attribute estimation server 30 or the document attribute estimation program 31 to estimate the security attribute based on the document content of the document file. To obtain the security attribute value of the document file (step S6).

  Using the security attribute value of the document file acquired by the attribute estimating unit 72b, the risk determining unit 72c executes a risk determining process for determining the risk by comparing with the security attribute value of the audit target folder 5a (step S7). Then, the audit result storage unit 72d stores the determination result by the risk determination unit 72c in the audit result 74 for each document file (step S8). Thereafter, the audit thread process returns to step S4 to acquire the next document file, and repeats the same process as described above.

  The second and subsequent audit processes for the audit target folder will be described. When the process by the risk determination unit 72c is executed for the audit target folder and the determination result related to the audit target folder is stored in the audit result 74, the second and subsequent audit processes are executed.

  FIG. 13 is a flowchart for explaining the second and subsequent audit processing for the audit target folder by the audit thread control unit. In FIG. 13, when the time set in the audit rule comes (step S11), the audit thread control unit 72 activates the audit thread 724 (step S12). The folder / file list extraction unit 72a, the attribute estimation unit 72b, the risk determination unit 72c, and the audit result storage unit 72d shown in FIG. 6 are configured by the audit thread processing by the activated audit thread 724.

  When the audit thread 724 is activated, the folder / file list extraction unit 72a acquires the document list of the document folder stored in the audit target folder specified by the audit rule (step S13).

  The attribute estimation unit 72b sequentially acquires document files from the audit target folder 5a with reference to the document list (step S14). Then, the attribute estimation unit 72b determines whether or not the audit process has been executed for all the document files in the document list (step S15). For example, if a document file is acquired in step S14, it is determined that there is an unprocessed document file, and the process proceeds to step S16. On the other hand, if all the document files in the document list have already been acquired, it is determined that the audit process has been executed for all the document files in the document list, and the second and subsequent audit processes are terminated.

  If it is determined that there is an unprocessed document file, the attribute estimation unit 72b acquires the update date and time from the property information of the document file acquired in step S14 (step S16). Then, the attribute estimation unit 72b performs a new / update check of the document file (step S17). If the determination result of the document file does not exist in the audit result 74, the attribute estimation unit 72b determines that the classification has been changed from the previous execution of the risk determination process or is a newly created document file. If the document file determination result exists in the audit result 74, but the update date and time acquired from the document file property information indicates the update date and time after the document file determination result, the update is performed from the previous execution of the risk determination process. It is determined that the document file has been processed.

  The attribute estimation unit 72b determines whether or not the check result in step S17 indicates a new document file or an updated document file (step S18). If the check result does not indicate that the document file is a new or updated document file, for example, if the update date and time acquired from the property information of the document file matches the update date and time of the document file determination result, In order to acquire the document file, the process returns to step S14, and the same processing as described above is repeated.

  On the other hand, if the check result indicates a new document file or an updated document file, a document attribute estimation request is transmitted to the document attribute estimation server 30 or the document attribute estimation program 31, and the document contents of the document file are transmitted. The security attribute value of the document file is acquired by executing the security attribute estimation based on (Step S19).

  Using the security attribute value of the document file acquired by the attribute estimating unit 72b, the risk determining unit 72c executes a risk determining process for determining the risk by comparing with the security attribute value of the audit target folder 5a (step S20). Then, the audit result storage unit 72d updates and stores the audit result 74 using the determination result of the risk determination unit 72c for each document file (step S21).

  When the administrator 2 sets “immediate” in the execution timing selection area 64 on the periodic audit rule setting screen G60 shown in FIG. 7, the audit target folder 5a is set on the real-time audit rule setting screen G80 shown in FIG. In such a case, the activation time detection in step S1 in FIG. 12 and step S11 in FIG. 13 is omitted, and the process starts from the start of the audit thread in step S2 in FIG. 12 and step S12 in FIG.

  FIG. 14 is a diagram illustrating a data configuration example of an audit result. In FIG. 14A, an example of items in the basic format of the record of the audit result 74 is shown. In the basic format, the audit result 74 has items such as a belonging folder path, a file name, a risk level, and a file update date and time.

  The affiliation folder path indicates the storage location of the document file, and for example, a value described in the directory structure is set. The file name indicates the name of the document file, and for example, a value including a file identifier is set. The risk level indicates the security risk level of the audit target folder 5a determined by the risk level determination unit 72c. For example, the risk level is “2” if the document file has a high risk level, and “1” if the document file is in the high risk level. If there is no problem with the degree of risk, “0” is set. The file update date / time indicates the file update date / time set in the property of the document file when the audit thread process was executed last, and the updated date / time is set in a predetermined format.

  In the data example of the audit result 74 shown in FIG. 14B, the file is updated to “2007/09/28 13:15” in the folder “\\ SERVER \ shared folder \ common temporary” indicated by the belonging folder path. The document file with the file name “Company Top Secret Personnel List.doc” has a risk level of “2” (high risk level), and the file name that is updated to “2007/08/20 15:42” is “Normal” The document 1.doc ”has a risk“ 0 ”(no problem), and other document files are judged to have a risk“ 0 ”(no problem).

  In the folder “\\ SERVER \ Shared Folder \ Project X Technical Document” indicated by the belonging folder path, the file name “Product X Patent Research.doc” is updated to “2007/09/25 11:32”. The document file with the risk level “0” (no problem) and the file name “Product X Top Secret Document.doc” updated to “2007/09/25 11:32” is the risk level “1”. ”(Medium risk level) and the file name“ Product X Functional Specification V1.doc ”updated to“ 2007/05/07 16:18 ”is the risk level“ 0 ”(no problem) It is shown that the other document file has been judged to have a risk “0” (no problem).

  In addition, in the folder of “\\ SERVER \ shared folder \ project X public document” indicated by the belonging folder path, the file name “development expense.doc” that has been updated to “2007/09/24 12:11” The document file with the risk level “1” (medium risk level) and the file name “X Technical Memo.doc” updated to “2006/11/03 15:21” is the risk level “1”. ”(Medium risk level) and the document file with the file name“ Product X detailed design document.doc ”updated to“ 2007/10/18 21:52 ”is risk level“ 1 ”(medium risk level) In other words, it is shown that a determination is made that there are more than a predetermined number of document files that are determined to have a risk “1” (medium risk) including these document files.

  In step S17 of FIG. 13, when the attribute estimation unit 72b searches the audit result 74 for a record indicating the previous determination result regarding the document file being processed, the record is specified by the combination of the belonging folder path and the file name. . If the record does not exist, it is determined in step S18 that the document file being processed is a new document file. If a record exists, and if the file update date / time of the record does not match the update date / time of the document file being processed, it is determined that the document file being processed is a document file that has been updated since the previous determination result.

  When the audit result 74 is updated in step S21 in the case of a new document file, a new record is added and values are set in items such as the belonging folder path, file name, risk level, and file update date and time. The When the audit result 74 is updated in step S21 in the case of an updated document file, the items of the risk level and file update date and time specified in step S18 are updated.

  Next, the risk determination process performed by the risk determination unit 72c will be described. FIG. 15 is a diagram for explaining the security level. The document level correspondence table 15a shown in FIG. 15A includes a document classification based on the security attribute value of the document file acquired by the attribute estimation unit 72b from the document attribute estimation server 30 or the document attribute estimation program 31, and a risk determination unit 72c. It is a table | surface which shows a response | compatibility with the document security level which shows the security level of the document file used in a risk determination process. The document classification includes, for example, “top secret”, “secret”, “internal secret”, “no security”, and the document security levels “3”, “2”, “1”, “0”, and the like. Corresponding to each.

  The security level of the audit target folder 5a is determined in advance according to the operation. For example, the folder level correspondence table 15b shown in FIG. 15B includes the folder classification of the security level set for the folder, the restriction content indicating the access restriction corresponding to the folder classification, and the risk level determination unit 72c by the risk level determination unit 72c. It is a table in which a folder and a security level indicating a security level of a folder used in determination processing are associated with each other.

  For example, the folder classification “A” indicates a folder with restriction contents “accessible only by Admin / System (rwx)”, and corresponds to the folder security level “3”. The folder classification “B” indicates a folder having a restriction content “only Admin / System can access (rwx)”, and “only a specific user can refer (rx)”, and corresponds to the folder security level “2”. The folder classification “C” indicates a folder with a restriction content of “accessible only by Admin / System (rwx)” and “accessible only by a specific user (rwx)”, and corresponds to the folder security level “2”. The folder classification “D” indicates a folder with a restriction content of “accessible only by Admin / System (rwx) is possible” and “can be referred to (rx) by all users”, and corresponds to a folder security level “0”. Folder classification “E” indicates “Limited access to only Admin / System and specific users (rwx)”, and “Limited access to all users (rx)”. Restricted folder, corresponding to folder security level “0” To do. The folder classification “F” indicates a folder with restriction contents “accessible by all users (rwx)” and corresponds to a folder security level “0”.

  When the determined risk level is “high risk level”, “medium risk level”, and “no problem”, for example, the risk level is determined based on the determination conditions as shown in FIG. Referring to FIG. 15C, when there are document files to be protected such as “top secret”, “secret”, “internal secret” in folders belonging to folder classifications D, E, and F that can be referred to by all users, Determined as “high risk”. In addition, when there is a possibility that a document file of the document classification “Top Secret” may be referred to by a user other than the administrator 2, that is, it is not determined as “high risk”, but a document file with a high security level is a low security level. If it exists in the folder, it is judged as “medium risk”. Furthermore, when neither “high risk level” nor “medium risk level” is determined, it is determined as “no problem”.

  FIG. 16 is a flowchart for explaining risk determination processing by the risk determination unit. In FIG. 16, the risk determination unit 72c refers to the document level correspondence table 15a, sets the security attribute value of the document file acquired by the attribute estimation unit 72b as the document classification, acquires the corresponding document security level, and acquires document security. The level is set to Sb (step S31). Further, the risk determination unit 72c refers to the folder level correspondence table 15b, sets the security attribute value preset for the folder to which the document file belongs as the folder classification, acquires the corresponding folder / security level, and acquires the folder / security level. Security level Sf is set (step S32).

  Next, the risk determination unit 72c determines whether or not the document security level Sb is “1” or more (step S33). When the document security level Sb is less than “1” (that is, “0”), the risk determination unit 72c determines that there is no problem with the security level that the document file gives to the folder (step S38), and this risk determination The process ends.

  On the other hand, when it is determined in step S33 that the document security level Sb is “1” or higher, the risk determination unit 72c further determines whether or not the folder security level Sf is “0” (step S34). ). When the folder / security level Sf is “0”, the risk determination unit 72c determines that the security level given to the folder by the document file is high (step S35), and ends the risk determination processing. .

  On the other hand, if the folder security level Sf is not “0” in step S34, the risk determination unit 72c further determines whether the folder security level Sf is lower than the document security level Sb (step S36). When it is determined that the folder security level Sf is lower than the document security level Sb, the risk determination unit 72c determines that the security level given to the folder by the document file is in danger (step S37). The process ends.

  The security level given to the folder by the document file obtained by the risk determination process described above is set to the risk of the audit result 74 by the audit result storage unit 72d.

  Next, the audit result screen control unit 73 uses the audit result 74 as shown in FIG. 14B to display details of the audit result on the audit result display screen G100 as shown in FIG. 10B. The audit result detail display processing will be described.

  FIG. 17 is a flowchart for explaining the audit result detail display processing by the audit result screen control unit. In FIG. 17, the audit result screen control unit 73 sorts the audit target folder 5a and the lower folders in the hierarchical order using the folder path of the audit result 74 (step S51).

  Next, the audit result screen control unit 73 sets the folders to be processed in order from the lower folder (step S52), and determines whether all folders have been processed (step S53). When all the folders have been processed, this audit result detail display process is terminated. On the other hand, if the folder to be processed is acquired in step S52, the audit result 74 is referred to, and the counts of document files and folders determined to be “high risk” in the folder are tabulated (step S52). S54).

  The audit result screen control unit 73 determines whether or not the high risk count is larger than “0” (“1” or more) (step S55). If the high risk count is greater than “0” (“1” or greater), it is determined that the folder is high risk, and the folder icon is displayed in red (step S56). Then, the audit result screen control unit 73 returns to step S52 in order to specify the next processing target folder, and executes the same processing as described above.

  On the other hand, if it is determined in step S55 that the high risk count is “0” (less than “1”), the audit result screen control unit 73 refers to the audit result 74 and displays “ The counts of document files and folders determined as “in danger” are totaled (step S57).

  The audit result screen control unit 73 determines whether or not the risk count is equal to or greater than a predetermined value N (step S58). If the count in the risk level is equal to or greater than the predetermined value N, it is determined that the folder has a high risk level, and the folder icon is displayed in red indicating danger (step S56).

  On the other hand, when the risk count is less than the predetermined value N in step S58, the audit result screen control unit 73 further determines whether or not the risk count is greater than “0” (step S59). . If the count in danger is greater than “0”, it is determined that the folder is in danger and the folder icon is displayed in yellow indicating a warning (step S60). Then, the audit result screen control unit 73 returns to step S52 in order to specify the next processing target folder, and executes the same processing as described above.

  On the other hand, if the count in the risk level is “0” in step S59, it is determined that the folder has no problem, and the folder icon is displayed in white indicating that there is no problem (step S61). Then, the audit result screen control unit 73 returns to step S52 in order to specify the next processing target folder, and executes the same processing as described above.

  As described above, according to the present invention, the administrator 2 classifies a document file having a security level that does not satisfy the folder access restriction only by designating a shared folder shared by a plurality of users as the audit target folder 5a. Can be audited for The information indicating the security level of the document file is, for example, “Top Secret”, “Secret”, “External Secret”, “No Security”, or “Technical Document”, “Personnel Document”, “Proposal”, etc. Also good.

  In addition, since document files that require a security level higher than the access limit of the folder are classified, it can be displayed so that it can be easily visually determined that the folder is in a security dangerous state. Further, it is possible to display so that it can be easily visually determined which document file puts the folder in a dangerous state.

  The present invention is not limited to the specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.

It is a figure which shows the network structure with which the electronic document auditing apparatus which audits a local folder was applied. It is a figure which shows the system configuration | structure of the electronic document auditing apparatus in the network structure shown in FIG. It is a figure which shows the network structure with which the electronic document auditing apparatus which audits a shared folder via a network was applied. It is a figure which shows the system configuration | structure of the electronic document auditing apparatus in the network configuration shown in FIG. It is a figure which shows the network structure with which the document attribute estimation server which audits a shared folder via a network was applied. It is a figure which shows the module structure of an electronic document security audit program. It is a figure which shows the example of the regular audit rule setting screen provided by the audit rule setting screen control part. It is a figure which shows the example of the real-time audit rule setting screen provided by the audit rule setting screen control part. It is a figure which shows the example of the folder audit completion screen provided by the audit result screen control part. It is a figure which shows the example of an audit result display screen. It is a figure which shows the example of the real-time audit warning screen provided by the audit result screen control part. It is a flowchart for demonstrating the first audit process with respect to the audit object folder by an audit thread control part. It is a flowchart for demonstrating the audit process after the 2nd time with respect to the audit object folder by an audit thread control part. It is a figure which shows the example of a data structure of an audit result. It is a figure for demonstrating a security level. It is a flowchart for demonstrating the risk determination process by the risk determination part. It is a flowchart for demonstrating the audit result detailed display process by an audit result screen control part.

Explanation of symbols

2 administrator 3 network 5a audit target folder 7 electronic document security audit program 10, 10a, 10b electronic document audit device 11 input device 12, 12a display device 13 drive device 14 auxiliary storage device 15 memory device 16 arithmetic processing device 17 interface device 18 Storage medium 30 Document attribute estimation server 31 Document attribute estimation program 35 Learning information DB
50 Shared Server 71 Audit Rule Setting Screen Control Unit 72 Audit Thread Control Unit 72a Folder / File List Extraction Unit 72b Attribute Estimation Unit 72c Risk Determination Unit 72d Audit Result Storage Unit 73 Audit Result Screen Control Unit 74 Audit Result

Claims (10)

An electronic document monitoring method in an electronic document monitoring apparatus for monitoring an electronic document stored in a storage device,
The electronic document monitoring device is
A comparison procedure for comparing the security level of the electronic document with the security level of the folder to which the electronic document belongs;
When the security level of the electronic document does not reach the security level of the folder, an electronic document risk determination procedure is executed to determine a difference in security level as the risk of the electronic document with respect to the folder. Electronic document monitoring method. The electronic document monitoring device includes:
First security for acquiring a security level of the electronic document by referring to a document level correspondence table in which document classification information indicating the handling restriction of the electronic document based on the document content of the electronic document is associated with a security level Level acquisition procedure,
A second security level acquisition procedure for acquiring a security level of the folder with reference to a folder level correspondence table in which folder classification information indicating access restrictions of the folder and security levels are associated with each other; The electronic document monitoring method according to claim 1, wherein: The electronic document monitoring device includes:
Further execute an audit rule acquisition procedure for acquiring an audit rule including setting of a folder to be audited from an administrator,
3. The electronic document monitoring method according to claim 1, wherein the folder and a lower layer folder of the folder are subject to auditing periodically or in real time based on the audit rule. The electronic document monitoring device includes:
An audit result display procedure for determining a risk level of the folder based on a risk level of the electronic document with respect to the folder and displaying the risk by a display method capable of visually determining the risk level is further executed. Item 4. The electronic document monitoring method according to any one of Items 1 to 3. The audit result display procedure includes:
5. The electronic document monitoring method according to claim 4, wherein the folder and the electronic document are displayed in a directory structure, and are displayed so as to be linkable to a folder and an electronic document having a predetermined risk level or higher. The audit result display procedure includes:
Count from the lower layer folder in order of the risk level of the electronic document and folder immediately below, and determine the risk level of the folder being processed based on the comparison result between the count value of each risk level and each predetermined value 5. The electronic document monitoring method according to claim 5, wherein the electronic document is monitored. The electronic document monitoring device includes:
The acquisition procedure for acquiring the security level of the electronic document by further transmitting the electronic document to an estimation device that estimates the security level of the electronic document is further performed. The electronic document monitoring method according to one item.   A computer-executable program for causing a computer to execute the procedure in the electronic document monitoring method according to claim 1 to function as an electronic document monitoring apparatus.   A computer-readable storage medium storing a program for causing a computer to execute the procedure in the electronic document monitoring method according to claim 1 to function as an electronic document monitoring apparatus. An electronic document monitoring device for monitoring an electronic document stored in a storage device,
Comparison means for comparing the security level of the electronic document with the security level of the folder to which the electronic document belongs;
When the security level of the electronic document does not reach the security level of the folder, an electronic document risk level determination unit that determines a difference in security level as a risk level of the electronic document with respect to the folder is executed. Electronic document monitoring device.

Images