JP2009252034A - Access control system and access control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve a problem that processing efficiency during determination of access is bad in conventional access control methods. <P>SOLUTION: An access control system prevents a user from directly accessing a content body by individually managing the content body and meta data for representing the attributes of the content body by a content management system, identifies the content body by the content name instead of the location, and manages the location as the meta data, so that the user can access the content without knowing the location of the content. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an access control system and an access control method for managing and controlling content.

  Conventionally, content access control includes an arbitrary access control method and a forced access control method. Among these, the arbitrary access control method identifies the content by the location where the content exists, that is, the location such as the file name, and performs access control on the file name. As described above, when access control is performed based on the location of the file name or the like, for example, the same document document can exist with a plurality of file names, and information easily leaks.

  On the other hand, the mandatory access control method manages the user label (CL) and the content label (SL), and controls the reference and writing between the user label (CL) and the content label (SL) as an access control policy. Is going. In the compulsory access control method, control depending on operations such as writing and referring to information in the operating system is performed for content movement. For example, in the information flow control model, writing is possible when the user label (CL) is equal to or lower than the content label (SL), and reference is made when the user label (CL) is equal or higher. Defines the control that is possible. This control takes into consideration the access characteristics of the operating system of the computer machine that information leakage occurs in the order of (1) reference (2) writing.

  On the other hand, in order to control access to content in digital broadcasting, Japanese Patent Laid-Open No. 2005-285089 (Patent Document 1) discloses an access control method for accessing content using metadata. Patent Document 1 proposes to embed a metadata access control descriptor indicating a metadata creator who is permitted to access content as metadata indicating whether or not access to each content is permitted. According to this access control method, falsification of metadata or illegal production of metadata can be prevented.

JP 2005-285089 A

  In the above-described conventional information flow control, even if a high-level user label (CL) is held, the processing of the target content is only a reference, and there is a practical limitation that makes it difficult to use.

  On the other hand, the method of accessing content using the metadata disclosed in Patent Document 1 embeds metadata in the content and integrates the metadata and the content. Therefore, it is necessary to access the content at the time of an access request. There is a disadvantage that the processing efficiency of access determination is lowered.

  An object of the present invention is to provide an access control system and a control method capable of improving the processing efficiency of access determination.

  Another object of the present invention is to provide an access control device and a control method that relax processing restrictions on target content when applied to information flow control.

  Still another object of the present invention is to provide an access control device and a control method capable of managing operation qualifications for a user's content.

  Another object of the present invention is to provide an access control apparatus and a control method for performing access control in consideration of a content label and a user label.

  According to the present invention, it is possible to obtain an access control system and a control method in which content is divided into a content body portion and a metadata portion, and in content management, access related to management is reduced by not referring to the content body portion.

  Furthermore, according to the present invention, it is possible to obtain an access control system and a control method in which a location attribute of content is given to metadata, and whether or not location change can be restricted according to a user label (CL). That is, in the present invention, a unique content identifier can be used for content identification instead of location.

  In the present invention, it is possible to introduce a location attribute and change the attribute value at the time of access control, rather than defining an access control policy for controlling access to content using information included in metadata. The user flow (CL) is defined and the information flow by changing is controlled.

  In the present invention, since the content is divided into the content main body portion and the metadata, access determination can be performed without accessing the content main body portion when an access request is made, so that the processing efficiency for the determination can be improved. it can.

  Next, the configuration of the embodiment of the present invention will be described in detail with reference to the drawings.

  Referring to FIG. 1, an access control system according to an embodiment of the present invention includes a content management system 1, a content user 2, a metadata storage unit 3, and a content body part (hereinafter simply referred to as content) 4. 1 and content server 4 storing 1.

  As shown in FIG. 1, the access control system of the present invention is characterized in that the location is set as metadata 3-0 and managed separately from the content 4-1.

  Normally, the content 4-1 represented by electronic data can be easily copied, and therefore may be stored in different locations (locations) with different file names. In such a case, since the content 4-1 itself represented by electronic data is generally identified by the location represented by the file name, the content 4-1 is copied only by the file name of the content 4-1. It is not possible to manage whether or not Considering this, in the system according to the present invention, the location 3-1 and the content name 3-2 of the content 4-1 are managed separately from the content 4-1 itself.

  Further, the illustrated content management system 1 includes an access determination unit 1-1, an access policy management unit 1-2, a credential management unit 1-3, user security attribute information 1-4, and a location of the content 4-1. It is comprised by the domain management part 1-5 which manages a response | compatibility with a domain.

  On the other hand, the user 2 holds the credential 2-1 for requesting access to the content 4, while the metadata storage unit 3 stores the location 3-1, the content name 3-2, and The security label 3-3 is held as metadata. The metadata storage unit 3 stores metadata representing various content attributes, but only the metadata for a single content 4 is shown here for the sake of simplicity.

  Next, the operation of the access control system according to an embodiment of the present invention will be described with reference to FIG.

  First, the user A issues a credential request for requesting a security label to the credential management unit 1-3 of the content management system 1. In response to the credential request, the credential management unit 1-3 returns the user credential 2-1 to the user A based on the predetermined qualification information of the user A. In this case, user security attribute information 1-4 is also output.

  Next, the user A presents the content name 3-2 and the user credential 2-1, and outputs an access request referring to the content 4 to the access control unit 1-1 included in the content management system 1. .

  In response to the access request, the access control unit 1-1 retrieves the metadata 3-0 for the content 4 from the content name, and obtains the content metadata 3-0. As described above, even if the search is performed by the content name, the content 4 is not directly accessed at this stage.

  Furthermore, the access control unit 1-1 issues an inquiry to the access policy management unit 1-2. In the illustrated access policy management unit 1-2, user security attribute information 1-4, location management information held by the domain management unit 1-5, user credentials 2-1, security label 3 of metadata 3 3. The domain in the location management information corresponding to the location 3-1 is known from the user A credentials.

  In this state, the access policy management unit 1-2 determines whether to permit the access of the user A based on the above information in response to the inquiry from the access control unit 1-1. More specifically, for example, when the user security attribute information of the credential management unit 1-3 is High, the access policy management unit 1-2 has the security label 3-3 of the metadata storage unit 3 as High. If there is a policy that permits access only when the domain in the location management information to which the location 3-1 belongs is equivalent to the domain in which the user A exists, the attribute values are compared. As a result, permission of access is issued to the access control unit 1-1.

  Next, the access control unit 1-1 acquires the content 4 from the location 3-1, and outputs the content to the user when access is permitted as a result of the determination in the access policy management unit 1-2.

  In the embodiment of the present invention, content is identified not by location but by content name, and the location is managed as metadata. For this reason, since the access control policy is determined for the domain corresponding to the location, the user can access without being aware of the location of the content. Furthermore, since the user and the content each have a security label and perform this comparison, it is possible to make an access determination independently of where the content itself is.

  Furthermore, since the content is divided into metadata and content, access determination can be performed without accessing the content body portion at the time of access request, and there is an advantage that the processing efficiency of determination is improved.

  The present invention can be applied to a management system in the case where content is created, stored, and shared by many users. INDUSTRIAL APPLICABILITY According to the present invention, the present invention can be applied to uses such as an information search device that searches for synonyms from a database and a program for realizing the information search device on a computer. In addition, it can be applied to uses such as a Kana-Kanji conversion device or a Kana-Kanji conversion function installed in a personal computer or a word processor.

It is a block diagram explaining the access control system which concerns on one Example of this invention.

Explanation of symbols

1 content management system 1-1 access control unit 1-2 access policy management unit 1-3 credential management unit 1-4 user security attribute information 1-5 domain management unit 2 user 2-1 user credential 3 metadata storage Portion 3-0 Metadata 3-1 Location 3-2 Content name 3-3 User label 4 Content server 4-1 Content body

Claims (16)

  In an access control method for controlling access to content, the content is divided into a content body and metadata representing the content attribute, and the location where the content exists is a metadata attribute for the metadata. An access control method characterized by being included as:   2. The access control method according to claim 1, wherein the metadata includes a name of the content in addition to the location as the metadata attribute.   3. The access control method according to claim 2, wherein the metadata includes a user label (CL) as the metadata attribute.   4. The access control method according to claim 3, wherein, when an access request for the content is issued from the user, the metadata is first accessed without accessing the content body.   5. The content management system according to claim 4, further comprising: a content management system that processes an access request from the user, wherein the content management system first responds to the access request from the user without accessing the content body. An access control method comprising performing processing for accessing the metadata.   6. The content management system according to claim 5, wherein the content management system manages the level of operation qualification of the user for the content, searches metadata based on the credential and content name presented by the user, and An access control method comprising determining whether or not access to content is possible.   7. The access control method according to claim 6, wherein the content management system collates a domain of location management information included as the metadata attribute with a domain in which the user exists.   8. The access control method according to claim 7, wherein the content management system further collates the security attribute information of the user with a security label.   9. The access control method according to claim 6, wherein the content management system acquires the content body and sends the content body to the user when the access is permitted.   The content is divided into a content body and metadata representing the attribute of the content, and used for an access control system in which the location where the content exists is included as a metadata attribute with respect to the metadata. An access control system comprising a content management system that individually accesses the metadata and the content in response to an access request from a user.   11. The access control according to claim 10, wherein a metadata storage unit that stores the metadata that includes location management information representing the location as a metadata attribute is provided separately from a portion that stores the content body. system.   12. The access control system according to claim 11, wherein the metadata storage unit includes a content name and a user label as the metadata in addition to the location management information.   13. The content management system according to claim 12, wherein the content management system searches for and uses the metadata based on a credential management unit that manages a level of operation qualification for the content of the user and a credential and content name presented by the user. A policy management unit that determines whether or not the user can access the content.   14. The content management system according to claim 13, further comprising an access control unit that acquires the content body from the location and sends the content body to the user when the user is permitted access. Access control system.   15. The access control system according to claim 14, further comprising a policy management unit that associates operation control with the security label of the user.   16. The access control system according to claim 15, wherein the content management system includes a domain management unit that manages a user's domain.

Images