JP2010050808A - Log auditing system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To check the content of a file in a short time regardless of the size of content log information to be displayed. <P>SOLUTION: When content log information stored in a database is displayed at a Web client, the server checks the size of the content log information. When the size exceeds a threshold value, the HTTP response from the server to the HTTP request from the Web client is changed from Web client direct display to file downloading. Then, the Web client displays a confirmation screen for downloading. When the auditor gives approval for file downloading, the Web client starts downloading a file from the server, and when it finishes downloading, it automatically opens the downloaded file using an application such as an TEXT editor. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a communication control method between Web clients in a log audit system composed of a network-connected Web client, Web server, and database server, and to a Web client Web browser display acceleration method. .

Acquires image data and text data (content log information) for jobs such as copying, sending, and printing with devices (MFP, LBP) and managing them centrally in the database, and there is no information leakage due to unauthorized job operations afterwards. In a log audit system that searches and audits
There is a procedure to check the content log information in the database with the Web client in the audit work of the log audit system.

  To check the content log, connect to the Web server from the client Web browser using the Http protocol, and select the reference to the content log in the database from the menu displayed on the Web browser. Then, the web server sends the content log file to the web client, and the web browser displays this log.

  Content log files stored in the database increase in size in proportion to the amount of text extracted from the document to be logged, and may contain as much text as the maximum number of pages in the document. is there.

When sending the content log file requested from the Web browser to the Web browser, the Web server was set in the Http header to display it uniformly on the Web browser regardless of the size of the content log file. (Patent Document 1)
Also, when the map data is sent from the web server by a request from the web browser, the size of both raster format map data and vector format map data is calculated for the area requested for display, and these are compared. Some of them send map data with a smaller data capacity to the terminal.

In a system that requests data for display from the Web client to the server, the user's access frequency is stored, and the layout of the data such as still images, movies, and texts is automatically arranged according to the access frequency. Send the display data to the client (Web browser). (Patent Document 2)
JP 2001-256141 A JP 2003-141022 A

  When auditing with the log audit system, there are the following issues in the procedure for checking the content log information with the Web client.

  Content log information can be large in size and can take a very long time to display text data on a Web client. For example, in the case of 200 to 300 pages of text, several minutes or more are required for display on the Web client. Furthermore, for large documents with more than 1000 pages, it may take several hours to a day for the Web client to display the text, which significantly reduces the convenience of the auditor.

  This is because the text rendering process of the Web browser used in the Web client takes time.

  For improvement, we also considered a method of using a dedicated viewer, but it requires a mechanism for distributing the viewer when a dedicated viewer is newly installed or upgraded, and the scale of development is large. In addition, it is difficult to adopt distribution work because it deteriorates user convenience. For this reason, there is a need for a means for efficiently displaying using an existing Web browser.

  When displaying the content log information stored in the database on the Web client, the server determines the size. If the size exceeds the threshold, the HTTP response from the server is sent to the HTTP request from the Web client. Change from direct display to file download.

  Specifically, “ContentType” of the HTTP response is changed to “application / octes-stream”, a “Content-Disposition” header is added, and “Attachment” and the file name are described therein. As a result, the Web client displays a download confirmation screen.

  In the Web client, when the auditor approves the file download, the file download from the server is started, and when the download is completed, the download file is automatically opened by the TEXT editor or another application.

  When displaying content log information that exceeds the threshold, it can be displayed using other applications that can display at high speed without using a Web client that takes a long time to display by changing the process to automatically download on the server side. become. When the auditor wants to refer to the content log information that takes a long time to display, the inspector can select another application having a high display speed. Therefore, the convenience of the examiner can be improved.

  Furthermore, since the existing client environment is not changed, the development of a dedicated viewer is unnecessary, and the management cost does not increase.

  Next, details of the present invention will be described in accordance with the description of the embodiments.

  FIG. 1 is a diagram illustrating a configuration of a computer device for realizing the present proposal. (101) is a ROM, and a nonvolatile memory is usually used. (102) is RAM, and volatile memory is usually used. (103) is a CPU, (104) is an input / output device FDD, a USB device, and the like. (105) is a LAN interface, which can connect a computer to a printer, another computer device, or a server via a network. (106) is a display for display, (107) is a keyboard / mouse device, (108) is a storage device, and a hard disk drive is normally used.

  Software constituting the electronic document character hiding system described in this proposal is stored in the storage device (108), read into the RAM (102) during operation, and executed by the CPU (103). (104), the LAN interface (105), the display device (106), and other devices are controlled.

  FIG. 2 is a diagram for explaining one form of a system configuration for realizing the present proposal.

  The network includes a digital multifunction peripheral (201), an image processing server (202), a database server (database) (203), a web server (204), a user PC (client PC) (205), a print server ( 206), a printer (207), and an administrator PC (208).

  The digital multifunction peripheral (201) has scanner, printer, copy, mail, and fax functions. In addition, the digital multifunction peripheral (201) generates electronic image data of the executed job, performs resolution conversion processing on the image data, and stores the image data in the storage device of the digital multifunction peripheral (201). Save temporarily. The digital multifunction peripheral (201) periodically transmits the stored image data to the image processing server (202).

  A printer driver is installed in the user PC (205). When print processing is performed (execution of a print job), the printer driver generates electronic image data of the job, or generates text data by extracting character information from a document drawing command. The user PC (205) transmits the image data and text data immediately to the image processing server (202) or temporarily stores them in the storage device of the user PC and periodically stores them in the image processing server (202). Send to.

  The printer driver may be a printer driver installed by sharing the printer driver installed on the print server (206). In this case, tracking data (image data, text data) of electronic data instructed to be printed by the user PC (205) is stored in the print server (206). Thereafter, the print server (206) transmits tracking data (image data, text data) to the image processing server (202) at regular intervals.

  The image processing server (202) performs image conversion processing and resolution conversion processing on the image data transferred from the digital multifunction peripheral (201), the print server (206), etc. into a format that can be stored in the database server (203). . Also, in the image processing server (202), when the administrator is set to perform OCR, the image processing server (202) performs OCR processing and extracts text data from the image data. The image processing server (202) registers with the database server (203) sequentially from the processed image data, and registers text data corresponding to the image data with the database server (203) as the full-text search text of the image. To do.

  The administrator PC (208) is a client PC for a system administrator (auditor) to access the database server (203) and audit whether information leakage has occurred. The Web server (204) is a Web server that is accessed by the administrator PC (208). The Web server (204) is connected to the database server, collects audit data, and transmits it to the administrator PC (208) using the Http protocol.

  (209) is a network (LAN).

  FIG. 3 is a diagram for explaining a functional configuration of print processing in the user PC (205). The application (301), graphic engine (302), printer driver (303), and system spooler (304) exist as programs stored in the HDD (hard disk storage device) of the user PC. These are program modules that are loaded into the RAM (102) by processing such as the OS and executed by the CPU (103).

  The application (301) and the printer driver (303) can be added to the HDD storage device (108) via an FDD, CD-ROM, or network not shown in the figure. The application (301) stored in the storage device (108) is loaded into the RAM (102) and executed. When printing (drawing) is performed from the application (301) to the printer (207), printing is similarly performed using the graphic engine (302) loaded into the RAM (102) and in an executable state.

  The graphic engine (302) loads the printer driver (303) prepared for each printing device (printer) from the storage device (108) to the RAM (102), and uses the data output from the application (301) as the printer driver 305. To pass. The graphic engine (302) converts a GDI (Graphic Device Interface) function received from the application (301) into a DDI (Device Driver Interface) function and outputs it to the printer driver (303).

  Based on the DDI function received from the graphic engine (302), the printer driver (303) converts it into a control command that can be recognized by the printer, for example, PDL (Page Description Language). The converted printer control command is sent as print data to the printer (207) via the system spooler (304).

  The printing system of this embodiment has an electronic data generation unit (305) in the printer driver (303). In the electronic data generation unit (305), the printer driver (303) may be a built-in module or a library module added by an individual installation. In the printer driver (303), the electronic data generation unit (305) extracts and generates tracking data and sends it to the electronic data transfer unit (306). Here, the data stored as the tracking data is image data, text data, and log information.

  The electronic data generation unit (306) can determine whether to extract text data from the DDI function according to the application (301).

  The electronic data transfer unit (306) receives the tracking data and transfers it to the image processing server (202). The electronic data transfer unit (306) may process or select the received tracking data as necessary. The electronic data transfer unit may receive the tracking data and transmit it to the image processing server (202) at the same time. Alternatively, the electronic data transfer unit may temporarily store the data in the HDD storage device and follow the separately specified transmission schedule. ).

  FIG. 4 is a schematic diagram showing the configuration of the image processing server (202) and the data configuration stored in the database server (203).

  The data receiving unit (401) receives image data, text data, and log information transferred from the digital multi-function peripheral (201) or the user PC (205), and passes them to the image processing unit (402).

  The image processing unit (402) converts the received image data into a format that can be stored in the database server (203). If no image conversion is required, nothing is done. A plurality of image data may exist for one job. They may be combined into one file (data) as a PDF format, or may be divided into a plurality of files as in the JPEG format. It is only necessary that the database server (203) can finally recognize each job. In this embodiment, for the sake of easy understanding, the case of one image data for one job will be described.

  Further, the image processing unit (402) checks whether there is text data corresponding to the image data, and passes image data having no text data to the OCR processing unit (403). For image data with text data, the image data and text data are passed to the data registration unit (404). The OCR processing unit (403) extracts text data by applying OCR to the image data, and passes the image data and text data to the data registration unit (404).

  The data registration unit (404) includes an image registration unit (405), a text registration unit (406), and a log information registration unit (407). The image registration unit (405) registers the image data as a file in the database server (203). The text registration unit (406) registers text data in the database server (203) as text for full text search. The log information registration unit (407) registers log information indicating the contents of the job in the database server (203).

  (411) is image data registered by the data registration unit (404). The way to hold the image data is appropriately determined according to the database system to be used. As an example, an image ID is assigned to each image data, and is associated with a table.

  (412) is a job management table, which includes an ID for identifying a job, an image data ID corresponding to the job, and text data corresponding to the job. This text data is used for full-text search by attaching a search index. The text registration unit (406) described above registers the text data in the text portion of the job management table (412). Note that the attributes of the job management table (412) are not limited to this, and there is no problem even if other attributes relating to the job are provided.

  Further, the database server (203) manages a log indicating what processing has been performed using a log information table (413) for the job.

  FIG. 5 is a diagram for explaining a conventional example related to the present proposal.

  When the Web client (501), which is the auditing terminal of the log audit system, selects the reference of job log information, image data and content log information of its OCR text from the menu displayed on the Web browser for auditing, An HTTP request is sent to the Web server (502). When the above information is specified, the Web server (502) searches the corresponding content log information (504) from the database (503), and uses the corresponding SearchText.txt as a response to the HTTP display for the Web client (501). ). At this time, in the header of the HTTP response, “ContentType = Text / HTML”, which is set to display Text as it is in the Web browser, is specified. Receiving this HTTP response, the Web client (501) displays the contents of SearchText.txt (505) in the Web browser screen.

  FIG. 6 is a diagram illustrating an outline of an embodiment related to the present proposal.

  FIG. 6 outlines an embodiment of the present proposal with respect to the conventional example of FIG.

  When the Web client (501), which is the auditing terminal of the log audit system, selects the reference of job log information, image data and content log information of its OCR text from the menu displayed on the Web browser for auditing, An HTTP request is sent to the Web server (502).

  When the above information is designated, the Web server (502) searches the corresponding content log information (504) from the database (503), and collects the size of the text file, SearchText.txt (601) ). Next, it is determined whether or not the size is larger than a certain value (606), and if not larger than the certain size, the corresponding SearchText.txt is transmitted to the Web client (501) as an HTTP display response. At this time, “ContentType = Text / HTML”, which is a setting for displaying Text as it is in the Web browser, is specified in the header of the HTTP response (602). Upon receiving this HTTP response, the Web client (501) analyzes (607) and displays the contents of SearchText.txt (505) in the Web browser screen.

  When the size is larger than a certain value in (606), the corresponding SearchText.txt is transmitted to the Web client (501) as a response of HTTP display. At this time, in the header of the HTTP response, “ContentType = application / octet-stream” and “ContentDisposition = Attachment”, which are settings for downloading a file by the Web browser, are specified (605). Upon receiving this HTTP response, the Web client (501) analyzes (607), displays a Web browser file download confirmation dialog (603), and if the download is permitted (OK button) by the operator, the file is displayed. After downloading, start the general-purpose or dedicated Viewer application of the Text editor and display the contents of SearchText.txt (604).

  FIG. 7 is a diagram for explaining the operation of the client related to the proposal.

  (701 to 703) describes a conventional example and an example in which the text size is not more than a certain value, and (704 to 708) describes an embodiment in the proposed case where the text size is more than a certain value.

  In the conventional example and the example in which the text size is not more than a certain size, when the Web client (501) connects to the Web server (502) (701), the display of the full text search text that is the content log information selected by the operator is started. (702).

  The operator confirms this information using a web browser (703). At that time, it takes a few hours to display a text of a certain size (full text search text), or it may take a long time to display depending on the size. was there.

  In the embodiment in which the text size of (704 to 708) is a certain size or more, when the Web client (501) connects to the Web server (502) (704), the content log information (504) selected by the operator is used. A full-text search text (705) is searched from the database (503), and the size of the text file SearchText.txt is collected (601). Next, when the size is equal to or larger than a certain size in (602), the corresponding SearchText.txt is transmitted to the Web client (501) as a response of HTTP display. Upon receiving this HTTP response, the Web client (501) displays a confirmation dialog for downloading the Web browser file. When download is selected (706) by the operator, the file is downloaded and the text editor general-purpose or Launch the dedicated Viewer application (707) and display the contents of SearchText.txt (708).

  FIG. 8 is a diagram for explaining the operation of the server related to the present proposal.

  (801 to 805) describes a conventional example, and (806 to 813) describes an embodiment of the present proposal.

  In the conventional example, the Web client (501), which is the audit terminal of the log audit system, connects to the Web server for auditing (801), and from the menu displayed on the Web browser, the job log information, image data and When the reference to the content log information of the OCR text is selected, an HTTP request is transmitted to the Web server (502). In the Web server (502), when the above information (full text search text) is specified in the received HTTP request (802), the corresponding content log information (504) is searched from the database (503) (803), The corresponding SearchText.txt is sent to the Web client (501) as an HTTP display response (805). At this time, “ContentType = Text / HTML”, which is a setting for displaying Text as it is in the Web browser, is specified in the header of the HTTP response (804). Receiving this HTTP response, the Web client (501) displays the contents of SearchText.txt (505) in the Web browser screen. In this case, if the size of the text displayed on the web browser is larger than a certain size, it may take a few days to display nearly a day depending on the size, which greatly impairs the user's convenience. .

  In the embodiment of this proposal, the Web client (501), which is the audit terminal of the log audit system, connects to the Web server for auditing (806), and from the menu displayed on the Web browser, the job log information, When reference is made to the content log information of image data and its OCR text, an HTTP request is sent to the Web server (502). In the Web server (502), when the above information (full text search text) is specified in the received HTTP request (807), the corresponding content log information (504) is searched from the database (503) (808), The size of the text file, SearchText.txt, is collected (601). File size thresholds are collected from a prestored storage area (809). Next, it is determined whether the size is greater than a certain value (810), and if not larger than the certain size, the corresponding SearchText.txt is transmitted to the Web client (501) as an HTTP display response (813). In this case, specify “ContentType = Text / HTML”, which is a setting to display Text as it is in the Web browser, in the header of the HTTP response (811). Receiving this HTTP response, the Web client (501) displays the contents of SearchText.txt (505) in the Web browser screen.

  If the size is larger than a certain value in (810), the corresponding SearchText.txt is sent to the Web client (501) as an HTTP display response. At this time, “ContentType = application / octet-stream” and “ContentDisposition = Attachment”, which are settings for downloading a file with a Web browser, are specified in the header of the HTTP response (812). The Web client (501) that received this HTTP response displays a confirmation dialog for downloading the Web browser file. If the download is permitted by the operator (OK button), the text editor will be used after downloading the file and exiting. Alternatively, start the dedicated Viewer application and display the contents of SearchText.txt (604).

It is a figure explaining the structure of the hardware regarding this proposal. It is a figure explaining the structure of the system regarding this proposal. It is a software functional block diagram of a user PC. It is the figure explaining the data retention of the block diagram and database server of an image processing server. It is a figure explaining the prior art example regarding this proposal. It is a figure explaining the structure of the Example regarding this proposal. It is a figure explaining operation | movement of the client regarding this proposal. It is a figure explaining operation | movement of the server regarding this proposal.

Claims (2)

In a log audit system including a Web client device (Web client: 501), a Web server device (Web server: 502), and a database (503),
The Web client includes a communication unit that performs HTTP communication from a Web client (501) connected via a network to a Web server (502);
An analysis means for analyzing the content instructed by HTTP communication sent from the Web server (502), and a display for receiving (505) the content log information (504) by a web browser in response to the analysis result of the analysis means; Or, in order to download the content log information (504) in a file format, it has a display means for displaying a download confirmation screen (603),
The web server (502), in accordance with a request from the web client (501), communication means for transmitting content log information (504) stored in the database (503) to the web client (501) by HTTP communication;
Setting means for collecting (601) a threshold value set in advance for the size of the content log information (504) to be transmitted to the Web client (501);
The threshold is collected by a setting means, and has a comparison means for comparing (606) the threshold and the size of the content log information (504) to be transmitted to the Web client (501)
When the size of the content log information (504) to be transmitted does not exceed the threshold, the Web server (502) transmits HTTP set to display (505) the content log information on the screen of the Web client (501). If the threshold is exceeded, the Web client (501) is characterized by having a communication means that transmits HTTP set to display (603) a screen for downloading the content log information (504) in a file format. Log audit system.   The log auditing system, wherein the display means causes the Web client (501) to automatically display (604) with another application of the Text editor after the file download is completed.

Images