JP2010092155A - Device and method for setting access right, information processing program, and recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To facilitate processing for making the other users inherit an access right. <P>SOLUTION: An access right management server 2 for setting an access right for performing access to information deposited by an owner user includes: a resetting decision part 103 for storing family line information in which the ID of an owner user, the ID of the other users included in the family line of the owner user, and family relationship information showing a family relationship between the owner user and the other users are associated with each other, and for deciding whether or not the identification information of the second user who requests the setting of an access right is included in the stored family line information; and an access right decision part 102 for setting the access right to the second user when the identification information of the second user is included. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an access right setting device, an access right setting method, an information processing program, and a recording medium, and more particularly to automatic setting of an access right based on a human relationship such as a blood relationship.

Conventionally, a method using an ID card has been proposed as a method of information management beyond generations (see, for example, Patent Document 1). In the technique disclosed in Patent Document 1, an ID card is used to determine whether personal data such as personal history, academic history, work history, images, and works that are stored in a storage medium connected to the Internet can be accessed. Judgment. Succession of the access right to the personal data to the next generation is realized by issuing a new ID card to the next generation descendants or by inheriting the ID card itself.
JP 2006-139320 A

  However, in the technique disclosed in Patent Document 1, when a new ID card is issued, it is necessary to individually determine whether or not to grant access rights to the next-generation user who newly grants access rights. If the owner of the personal data is alive, it can be determined that the access right can be easily granted by consent of the owner or application by the owner. However, when the owner is dead, it is necessary for the next-generation user to apply for the access right, and it is difficult to determine whether or not the access right can be set.

  Such a problem is not limited to the access right setting for the personal data as described above, but is similarly a problem in access authentication via a network such as an access right to a POP3 (Post Office Protocol Version 3) server.

  The present invention has been made in consideration of the above circumstances, and an object of the present invention is to facilitate the process of inheriting access rights to other users.

  In order to solve the above-mentioned problem, the invention according to claim 1 is an access right setting device for setting an access right for accessing deposit information deposited by a first user, the first user's A family information storage unit that stores identification information, identification information of other users included in the family of the first user, and family information that associates relationship information indicating a relationship between the first user and the other user; A determination unit that determines whether the family information includes identification information of a second user who wants to set the access right, and the identification of the second user in the family information according to the determination of the determination unit And an access right setting unit that sets the access right to the second user when the information is included.

  The invention according to claim 2 further includes a family information acquisition unit that acquires family information to be stored in the family information storage unit in the access condition setting device according to claim 1, and the family information acquisition unit Is characterized by acquiring family information including identification information of the first user and other users included in a single family.

  The invention according to claim 3 is the access right setting device according to claim 2, wherein the family information acquisition unit includes family information including identification information of the first user and identification information of the other user. When the family information including the identification information for identifying a common individual is included, the family information including the identification information is acquired for the other user.

  According to a fourth aspect of the present invention, in the access right setting device according to any one of the first to third aspects, target designation information for designating a target for setting the access right in the single family is acquired. The access right setting unit determines whether the second user is specified in the acquired target specifying information, and the access right setting unit includes the second access right setting unit. When it is determined that the user is designated in the target designation information, the access right is set to the second user.

  According to a fifth aspect of the present invention, in the access right setting device according to the fourth aspect, the target designation information acquisition unit stores the target for which the access right is set by the first user. The target designation information is acquired.

  Further, the invention according to claim 6 is the access right setting device according to claim 5, wherein the target designation information acquisition unit is configured to communicate with the first user as information for designating a target for setting the access right. The object designation information stored by designating the relationship is obtained.

  The invention according to claim 7 is the access right setting device according to any one of claims 4 to 6, wherein the target designation information acquisition unit is a single family line including the first user. Obtains information for designating other users belonging to different families as the target designation information, and the determination unit determines that the identification information of the first user and the identification information of the second user are the first user. Is determined based on the family information stored in the family information, and the access right setting unit is determined by the determination unit to be a first user. And the second user are set to the second user when the access right is determined to be included in either the single family including the first user or the different family. And

  The invention according to claim 8 is the access right setting device according to any one of claims 4 to 7, wherein the target designation information acquisition unit is a target for setting the access right in the single family. The information specifying the range is acquired as the target specifying information.

  The invention according to claim 9 is the access right setting device according to any one of claims 1 to 8, wherein the family information storage unit is family information already stored in a storage medium, and Family information including the identification information of the first user and family information input by the user and including the identification information of the second user are acquired and stored.

  Further, the invention according to claim 10 is the access right setting device according to any one of claims 1 to 9, wherein the family information storage unit storing a plurality of family information and the family information storage unit are provided. The family information extraction unit that extracts family information to be stored from the family information storage unit, the family information extraction unit, the identification information of the first user or the identification information of the second user The first pedigree information is extracted, and the extracted first pedigree information includes user identification information different from the first user identification information or the second user identification information. The pedigree information to be stored in the pedigree information storage unit is extracted by extracting the pedigree information.

  The invention according to claim 11 is the access right setting apparatus according to any one of claims 1 to 10, wherein the determination unit has an access right to the deposit information deposited by the first user. Determining whether the identification information of the third user and the identification information of the fourth user who wants to set the access right are included in a single family based on the family information stored in the family information storage unit The access right setting unit sets the access right to the fourth user when the determination unit determines that the third user and the fourth user are included in a single family line. Features.

  The invention according to claim 12 is an access right setting method for setting an access right for accessing the deposit information deposited by the first user, wherein the first user identification information, the first user The identification information of other users included in the ancestry of the user of the user, and the pedigree information that associates the relationship information indicating the relationship between the first user and the other user is stored in a storage medium, It is determined whether or not the identification information of the second user who desires to set the access right is included, and when the identification information of the second user is included in the pedigree information, the access right is assigned to the second user. It is characterized in that it is set to the user.

  The invention described in claim 13 is an information processing program, and causes the information processing apparatus to execute the information search method described in claim 12.

  The invention according to claim 14 is a recording medium, wherein the information processing program according to claim 13 is recorded in a format readable by the information processing apparatus.

  According to the present invention, it is possible to facilitate the process of inheriting access rights to other users.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
Embodiment 1 FIG.
In the present embodiment, an access management server and an access management system that manage access cases to a content server that stores content information such as documents and images will be described as an example.

  FIG. 1 is a diagram illustrating an example of an operation mode of an access management system according to the present embodiment. As shown in FIG. 1, the access management system according to the present embodiment includes an access right management server 1, a family information management server 2, a content server 3, and a client device 4. Each apparatus and server shown in FIG. 1 is configured by a general information processing apparatus such as a PC (Personal Computer) or a server. In the general operation of the system according to the present embodiment, when the client device 4 accesses the content server 3 via the network, the access right management server 1 determines the access matter.

  The access right management server 1 receives an authentication request from the content server 3, determines whether or not the client device 4 can access the content server 3, and performs an authentication process. Further, the access right management server 1 acquires the family information stored in the family information management server 2 during the authentication process, and determines whether or not the access right can be reset. The resetting of the access right by the access right management server 1 is one of the gist according to the present embodiment. That is, the access right management server 1 functions as an access right setting device.

  The family information management server 2 transmits family information to the access right management server 1 in accordance with the family transmission request from the access right management server 1. The content server 3 stores content information such as documents and images. The content server 3 transmits an authentication request to the access right management server 1 based on the request from the client device 4. Then, the content server 3 transmits content information to the client device 4 or rejects access based on the authentication result received from the access right management server 1. The client device 4 is an information processing terminal that is directly operated by a user in the present embodiment. The user requests content information stored in the content server 3 via the client device 4.

  In the present embodiment, as shown in FIG. 1, the access right management server 1, the family information management server 2, and the content server 3 are configured as different devices, and are linked to each other by being connected via a network. A working example will be described. In addition, the function realized by the access right management server 1 and the function realized by the family information management server 2 may be realized by one apparatus. Further, the function realized by the access right management server 1 and the function realized by the content server 3 may be realized by one device. Furthermore, the functions of the three servers may be realized by a single device.

  Next, a hardware configuration of the access right management server 1 according to the present embodiment will be described. FIG. 2 is a block diagram showing a hardware configuration of the access right management server 1 according to the present embodiment. As shown in FIG. 2, the access right management server 1 according to the present embodiment has the same configuration as an information processing terminal such as a general server or a PC (Personal Computer). That is, the access right management server 1 according to this embodiment includes a CPU (Central Processing Unit) 10, a RAM (Random Access Memory) 20, a ROM (Read Only Memory) 30, an HDD (Hard Disk Drive) 40, and an I / F 50. They are connected via a bus 80. Further, an LCD (Liquid Crystal Display) 60 and an operation unit 70 are connected to the I / F 50.

  The CPU 10 is a computing means and controls the operation of the access right management server 1 as a whole. The RAM 20 is a volatile storage medium capable of reading and writing information at high speed, and is used as a work area when the CPU 10 processes information. The ROM 30 is a read-only nonvolatile storage medium and stores a program such as firmware. The HDD 40 is a non-volatile storage medium that can read and write information, and stores an OS (Operating System), various control programs, application programs, and the like.

  The I / F 50 connects and controls the bus 80 and various hardware and networks. The LCD 60 is a visual user interface for the user to check the status of the access right management server 1. The operation unit 70 is a user interface such as a keyboard and a mouse for the user to input information to the access right management server 1. As described in FIG. 1, the access right management server 1 according to this embodiment is operated as a server. Therefore, user interfaces such as the LCD 60 and the operation unit 70 can be omitted.

  In such a hardware configuration, a program stored in a storage medium such as the ROM 30, the HDD 40, or an optical disk (not shown) is read into the RAM 20, and operates according to the control of the CPU 10, thereby configuring a software control unit. A functional block that realizes the function of the access right management server 1 according to the present embodiment is configured by a combination of the software control unit configured as described above and hardware.

  Next, functional blocks of the access right management server 1 according to the present embodiment will be described with reference to FIG. FIG. 3 is a block diagram showing functional blocks of the access right management server 1 according to the present embodiment. As illustrated in FIG. 3, the access right management server 1 according to the present embodiment includes an access right control unit 100, a network I / F 110, an access right DB 120, and a will information DB 130.

  The network I / F 110 is an interface for the access right management server 1 to acquire information via the network or transmit information via the network, and is realized by the I / F 50 illustrated in FIG. Specifically, it is realized by, for example, an Ethernet (registered trademark) connection interface or a USB (Universal Serial Bus) connection interface.

The access right DB 120 stores access right information for content information stored in the content server 3. The access right DB 120 is configured by the HDD 40 shown in FIG. FIG. 4 shows an example of information stored in the access right DB 120 according to the present embodiment. As illustrated in FIG. 4, the access right DB 120 according to the present embodiment stores a user ID, a password, and a content ID that specifies usable content in association with each other. For example, in the example of FIG. 4, the password required for the authentication of the user “A ₀ ” is “A0 ***”. The user “A ₀ ” can use the content information identified by the ID “001”.

  The will information DB 130 stores information related to a user's will whose ID is stored in the access right DB 120. The will information DB 130 includes the HDD 40 shown in FIG. The user who stores the content information in the content server 3 records the information in the will information DB 130 in order to set the access right for the content information managed by himself / herself as a future descendant of the user. FIG. 5 shows an example of information stored in the will information DB 130.

As shown in FIG. 5, the will information DB 130 according to the present embodiment includes the ID of the user who manages the content information (hereinafter referred to as the former user) and the relationship of the user to whom the access right is granted to the former user. Information is stored in association with each other. For example, in the example of FIG. 5, the user with ID “A ₀ ” sets the will information so that “children, grandchildren, nieces, nieces” are given access rights to the content information managed by the user. ing.

  The access right control unit 100 is a configuration that is a main part of the access right management server 1 according to the present embodiment. As illustrated in FIG. 3, the access right control unit 100 includes an authentication request acquisition unit 101, an access right determination unit 102, and a reset determination unit 103. The authentication request acquisition unit 101 acquires an authentication request from the content server 3 via the network I / F 110. The authentication request acquisition unit 101 inputs information included in the acquired authentication request to the access right determination unit 102.

  The access right determination unit 102 determines whether or not the acquired authentication request is acceptable based on the information input from the authentication request acquisition unit 101 and the information stored in the access right DB 120. In addition, if the access right information stored in the access right DB 120 cannot permit access as a result of the above determination, the access right determination unit 102 inputs an access right reset command to the reset determination unit 103. .

  The reset determination unit 103 receives the request from the access right determination unit 102 and determines resetting of the access item based on the family information acquired from the family information management server 2 and the information stored in the will information DB 130. The reset determination unit 103 inputs the determination result of the above setting to the access right determination unit 102.

  Next, information stored in the content server 3 will be described. As described above, the content server 3 stores content information such as documents and images. The content server 3 stores content management information for managing content information. FIG. 6 shows an example of information included in the content management information. As shown in FIG. 6, the content management information according to the present embodiment includes a content ID for identifying the content and content storage path information indicating a storage area in which the content is stored.

Next, information stored in the family information management server 2 will be described with reference to the drawings. FIG. 7 is a diagram illustrating an example of information included in the family information stored in the family information management server 2 according to the present embodiment. As shown in FIG. 7, the family tree information includes two user IDs, relationship information indicating a relationship between the users, and an ID for identifying each relationship. In the example of FIG. 7 is stored as the pedigree information ID "01" indicating that the user of the user ID "A _1" is the user's wife User ID "A _0". That is, the family information management server 2 functions as a family information storage unit and a family information storage unit.

  If the family tree information shown in FIG. 7 is shown as a tree diagram, a tree diagram as shown in FIG. 8 can be drawn. In FIG. 8, IDs indicating the respective relationships are shown in the tree diagram. As described above, the family information according to the present embodiment is configured by accumulating information that defines the relationship between two individuals. 7 and 8 show only family information belonging to one family. However, the family information management server 2 stores family information belonging to a plurality of families.

The family information stored in the family information management server 2 shown in FIG. 7 is accumulated when each user registers the family information in advance. When registering family information, each user proves that he / she belongs to the family and the person himself / herself by presenting a certified copy of the family register or identification card. Thereby, legitimate family information is accumulated in the family information management server 2. In addition to the family information shown in FIG. 7, the family information management server 2 stores personal information for identifying each individual indicated by an ID such as “A ₀ ” or “A ₁ ” in FIG. ing. Examples of personal information include, for example, name, permanent address, date of birth, and the like. These pieces of information are also preferably registered based on the family register copy as described above.

Next, the operation of the access management system according to this embodiment will be described. FIG. 9 is a sequence diagram illustrating an operation example of the access management system according to the present embodiment. In the example of FIG. 9, a case where the user with ID “A ₂ ” accesses the content information of which the user with ID “A ₀ ” is the owner will be described as an example.

As shown in FIG. 9, in the access management system according to this embodiment, first, the user operates the client device 4 to transmit content request information for requesting content information to the content server 3 (S901). . An example of information included in the content request information transmitted from the client device 4 to the content server 3 in S901 is shown in FIG. As shown in FIG. 10, the content request information transmitted in S901 includes a user ID, a password, and a requested content ID. In the example of FIG. 10, “A ₂ ” is designated as the user ID, “A2 ***” as the password, and “001” as the content ID.

Upon receiving the content request information from the client device 4, the content server 3 transfers the information to the access right management server 1 and transmits an authentication request (S902). When receiving the authentication request from the content server 3, the access right management server 1 refers to the access right DB 120 to determine the access right (S903). As shown in FIG. 4, the user with ID “A ₂ ” is not permitted to access the content with ID “001”. Therefore, access is not permitted in the access right determination in S903 of FIG.

  When the access right determination based on the information stored in the access right DB 120 is rejected, the access right management server 1 acquires the family information from the family information management server 2 (S904). Then, based on the acquired family tree information and information stored in the will information DB 130, it is determined whether to reset the access right (S905). If access is permitted as a result of the determination of resetting, the access right management server 1 transmits an authentication result of access permission to the content server 3 (S906).

When the content server 3 receives the access permission authentication result from the access right management server 1, the content server 3 transmits content information to the client device 4 (S907). The client device 4 displays the content information received from the content server 3 on its own display unit (S908), and ends the process. By such a process, the user with ID “A ₂ ” who does not have access right to the content with ID “001” originally has the ID “001” based on the blood relationship with the user with ID “A ₀ ”. The content can be accessed.

  Next, the detailed operation of the access right management server 1 in the operation of FIG. 9 will be described with reference to FIG. FIG. 11 is a flowchart showing the operation of the access right management server 1 according to this embodiment. As shown in FIG. 11, when receiving an authentication request from the content server 3 via the network I / F 110, the authentication request acquisition unit 101 acquires content request information included in the authentication request (S1101). The authentication request acquisition unit 101 inputs the acquired content request information to the access right determination unit 102. The access right determination unit 102 searches the access right DB 120 based on the user ID included in the content request information (S1102).

  As a result of the search in S1102, if the user ID included in the content request information has an access right for the requested content ID (S1103 / YES), the access right determination unit 102 authenticates the access request (S1104). On the other hand, if the user ID included in the content request information does not have access right to the requested content ID (S1103 / NO), the access right determination unit 102 re-accesses the reset determination unit 103 to re-access right. A setting request is input (S1105). FIG. 12 shows an example of information (hereinafter referred to as reset request information) included in the access right reset request input to the reset determining unit 103 in S1105.

  As shown in FIG. 12, the reset request information requests the ID of the access right reset target content, the owner user ID for identifying the owner user of the reset target content (hereinafter referred to as the owner user), and resetting. Information of a requested user ID for identifying a user (hereinafter referred to as a requesting user). The reset request information shown in FIG. 12 is generated based on the content request information acquired from the authentication request acquisition unit 101 and the information acquired from the access right DB 120 by the access right determination unit 102.

  The resetting determination unit 103 that has received the resetting request from the access right determination unit 102 acquires the family information from the family information management server 2 via the network I / F 110 (S1106) and stores it. That is, the reset determination unit 103 functions as a family information acquisition unit. Further, the resetting determination unit 103 functions as a family information storage unit in the same manner as the family information management server 2. The family information acquired in S1106 is family information including the requested user ID or owner user ID shown in FIG. Further, the reset determination unit 103 acquires will information from the will information DB 130 based on the owner user ID included in the reset request information (S1107). As described above, the will information is information for limiting or excluding the target for resetting the access right. That is, the will information is used as target designation information for designating a target for resetting the access right. Therefore, the reset determination unit 103 functions as a target designation information acquisition unit.

  Here, the family information acquisition processing in S1106 will be described in more detail. When receiving the reset request from the access right determination unit 102, the reset determination unit 103 transmits a family information acquisition request including the owner user ID and the requested user ID to the family information management server 2. The family information management server 2 extracts family information to be transmitted from the already stored family information based on the family information acquisition request received from the access right management server 1. That is, a part of the family information management server 2 functions as a family information extraction unit.

  The family information extraction process by the family information management server 2 will be described with reference to FIG. First, the family information management server 2 refers to the owner user ID included in the acquired family information acquisition request, and extracts family information for which a relationship with the owner user ID is set. In the case of the example in FIG. 7, the family information management server 2 extracts the family information with IDs “01”, “02”, and “03” from the family information shown in FIG.

Next, the family information management server 2 further extracts family information for which a relationship is set for each of the user IDs that are counterparts of the owner user ID in the extracted family information. In the family information of the extracted IDs “01”, “02”, and “03”, the user IDs that are counterparts of the owner user ID are the user IDs “A ₁ ”, “A ₂ ”, and “A ₃ ”. It is. Therefore, the family information management server 2 uses the IDs “04”, “05”, “06”, and the family information in which the relationships with the user IDs “A ₁ ”, “A ₂ ”, and “A ₃ ” are set. The family information of “07” is extracted. Here, the family information already extracted (family information with IDs “01”, “02”, and “03”) is omitted, and only the newly extracted family information is shown. Duplicate extraction may be performed.

Next, the family information management server 2 becomes a counterpart of the user ID (the user IDs of the IDs “A ₁ ”, “A ₂ ”, and “A ₃ ”) as the extraction source in the further extracted family information. For each user ID, the family information for which the relationship is set is extracted. In the family information of the IDs “04”, “05”, “06”, and “07” that are further extracted, the user IDs that are the counterparts of the user IDs that are the extraction sources are “C ₀ ”, “A ₄ ”. ”,“ A ₅ ”and“ B ₀ ”. Therefore, the family information management server 2 uses the IDs “08” and “09” as the family information in which the relationships with the user IDs “C ₀ ”, “A ₄ ”, “A ₅ ”, and “B ₀ ” are set. The family information of “is extracted.

  The family information management server 2 repeats the above process until newly extracted family information, that is, family information that does not overlap with the previously extracted family information is not extracted. When the newly extracted family information is no longer extracted, the family information management server 2 ends the family information extraction process. Thereby, the family information management server 2 extracts the family information with respect to the family information acquisition request from the family information already stored. When the family information is extracted in this way, the family information management server 2 transmits the extracted family information to the access right management server 1. In the access right management server 1, the reset determination unit 103 acquires the family information transmitted from the family information management server 2 via the network I / F 110.

  In the above description, the example in which the family information extraction process in the family information management server 2 is performed based on the owner user ID has been described. In addition, the same processing as described above may be executed based on the requested user ID. In the above description, the example in which the family information management server 2 executes the extraction process in response to the family information acquisition request from the access right management server 1 has been described. In addition, in response to an acquisition request from the access right management server 1, all family information stored in the family information management server 2 is transmitted to the access right management server 1, and the access right management server 1 executes the above processing. You may make it do.

The reset determination unit 103 extracts information on the relationship between the user indicated by the requested user ID and the user indicated by the owner user ID based on the family information acquired in S1106. In the present embodiment, as shown in FIG. 7, the user with ID “A ₂ ” is the eldest son of the user with ID “A ₀ ”. Here, the reset determination unit 103 confirms that at least the user indicated by the requested user ID and the user indicated by the owner user ID are included in a single family. That is, the reset determination unit 103 functions as a determination unit that determines whether the user indicated by the requested user ID and the user indicated by the owner user ID are included in a single family.

  The “single family” in the determination by the reset determination unit 103 is a group of user IDs that are directly or indirectly related to each other as shown in FIG. In other words, in the pedigree information acquired by the resetting determination unit 103, it is a group of user IDs that have a bloodline or barbaric relationship. The family information acquired by the resetting determination unit 103 in S1106 of FIG. 11 according to the present embodiment is the family information that constitutes the “single family” by the family information extraction process by the family information management server 2 described above. Become. Therefore, in the present embodiment, the reset determination unit 103 includes the owner user ID and the requested user ID in the family information acquired from the family information management server 2, so that the requesting user and the owner user are a single family line. Can be confirmed.

Then, the reset determination unit 103 determines whether the access right can be reset for the user ID indicated by the requesting user ID based on the will information acquired in S1107 (S1108). As shown in FIG. 5, the resetting target user relationship associated with the user ID “A ₀ ” of the owner user includes “child”. Therefore, the reset determination unit 103 determines that access can be reset for the user with the ID “A ₂ ” as the requesting user (S1108 / NO). That is, the reset determination unit 103 functions as a determination unit. When the reset determination unit 103 determines that resetting is possible, the reset determination unit 103 inputs a determination result indicating that resetting is possible to the access right determination unit 102. The access right determination unit 102 that has acquired the determination result of resetting updates the access right DB 120 so that the user with the user ID “A ₂ ” can access the content information with the content ID “001” (S1110). . That is, the access right determination unit 102 functions as an access right setting unit.

  When the update of the access right DB 120 is completed, the access right determination unit 102 repeats the processing from S1102 again. In this case, since the access matter DB 120 has been updated, it is determined that there is an access right in S1103, and the access is authenticated (S1104). On the other hand, if it is impossible to reset the access right in the process of S1108 (S1108 / YES), the reset determination unit 103 inputs a determination result indicating that resetting is impossible to the access right determination unit 102. . The access matter determination unit 102 that has acquired the determination result indicating that resetting is impossible rejects the access request (S1109).

  When the access authentication (S1104) or the access rejection (S1109) is confirmed, the access right determination unit 102 transmits the authentication result via the network I / F 110 (S1111), and the process ends. By such processing, it is possible to suitably and easily process setting of the access right for the next generation user (the requesting user in the embodiment) of the owner user.

In the above description, as described in FIG. 11, when the reset determination unit 103 determines that resetting is possible (S1108 / YES), the access right determination unit 102 updates the access DB 120 (S1110). Explained. As a result, when there is an access request from the user with ID “A ₂ ” next time, access can be permitted without depending on the processing of the reset determination unit 103. Another example of FIG. 11 is shown in FIG. In the case of the example shown in FIG. 13, when the reset determination unit 103 determines that resetting is possible (S1308 / YES), the access right determination unit 102 authenticates the access request as it is without updating the access right DB 120 (S1310). ).

  Further, in the above-described embodiment, an example in which will information is included in the criterion is described. By using the will information, the owner user can set access right granting or access right restriction for descendants who have not yet been born. For example, it is unlikely that you can face offspring, such as great-grandchildren and grandchildren, and set the access right directly. However, as described with reference to FIG. 5, the owner user may be born in the future by setting a resetting user relationship such as “great-grandchild” and “gen-grandchild” as will information while alive. The access right can be set for a certain descendant.

  On the other hand, a mode in which resetting of the access right is permitted only by being a bloodline or a barbarian can be considered. In addition, it is also possible to consider a mode in which the range for permitting the resetting of the access right is uniformly determined as a system, such as permitting the resetting of the access right if it is a kin within the 4th degree or a barbarian within the 3rd degree. In such a case, the above-mentioned will information becomes unnecessary. That is, when receiving the reset request from the access right determination unit 102, the reset determination unit 103 is based on the family user information acquired from the family information management server 2 and the owner user ID and the requested user ID included in the reset request information. It may be determined whether or not resetting is possible.

  Further, in the above-described embodiment, an example has been described in which access rights are reset when the owner user and the requesting user belong to a single family line only for barbarians and blood families. In addition, it may be determined by connecting a family that is not a relative or a bloodline by uniquely setting a friendship or the like in the will information. Such an example (hereinafter referred to as an example including other than relatives) will be described below.

  FIG. 14 is an example of information (hereinafter referred to as relationship setting information) corresponding to family information when setting access rights to persons other than barbarians and blood families. . As illustrated in FIG. 14, the relationship setting information includes a user ID that identifies two users and relationship information indicating the relationship, as in the family information. The family setting information shown in FIG. 14 is stored in the will information DB 130 and is referred to in the determination process of S1108 by the reset determination unit acquiring in S1106 of FIG. The relationship setting information may be stored by the family information management server 2 in the same manner as the family information.

FIG. 15 is a diagram in which a tree diagram is generated based on the family tree information shown in FIG. 7 and the relationship setting information shown in FIG. 15 includes information not shown in FIGS. 7 and 14 (information of user IDs “D ₁ ” and “D ₂ ”). As shown in FIG. 15, the family setting to which “A ₀ ” belongs and the family to which “D ₀ ” belong are linked by the relationship setting information indicating the friendship between the user ID “A ₀ ” and the user ID “D ₀ ”. The

As shown in FIG. 15, by connecting the family to which “A ₀ ” belongs to the family to which “D ₀ ” belongs, resetting of the access right to the content information in which “A ₀ ” is the owner user is “ Can be granted to those belonging to the family of D ₀ ″. As described in the above embodiment, FIG. 16 is a diagram showing an example of the will information in such a case. FIG. 16 is determined according to the will information of “A ₀ ”. In the example illustrated in FIG. 16, “friend”, “friend's spouse”, and “friend's child” are included as the reset target user relationship associated with the user ID “A ₀ ”. Accordingly, among the users shown in FIG. 15, the users with IDs “D ₀ ”, “D ₁ ”, and “D ₂ ” can reset the access right for the content information in which “A ₀ ” is the owner user. Allowed.

Moreover, in the said embodiment, extraction is complete | finished when the newly extracted family information is not extracted as a process in case the family information management server 2 which received the family information acquisition request extracts family information. An example was explained. However, for example, in the tree diagram shown in FIG. 8, when the owner user is the user with ID “A ₀ ” and the requesting user is the user with ID “A ₂ ”, the relationship with the user with ID “B ₂ ” Extracting even the pedigree information indicating is a wasteful process. On the other hand, the extraction process may be completed by confirming that the extracted user line information includes the requested user ID. As a result, it is possible to extract the minimum necessary pedigree information for determining the relationship between the owner user and the requesting user, and to omit useless processing.

  Moreover, in the said embodiment, the case where the requesting user was already registered into the system as shown in FIG. 4 was demonstrated as an example. In addition, when the requested user ID is registered in the system, that is, when signing up, the access right resetting process may be executed.

Embodiment 2. FIG.
In the first embodiment, the reset determination unit 103 has described an example in which the relationship between the owner user ID and the requested user ID is determined based on the family information already stored in the family information management server 2. However, when the requesting user requests access to content for which the ancestor is the owner, the family information including the requesting user may not be stored in the family information management server 2. In the present embodiment, a case will be described in which a user whose user ID is not stored in the family information management server 2 is a requesting user. In addition, about the structure which attaches | subjects the code | symbol similar to Embodiment 1, the same or equivalent part as Embodiment 1 is shown, and description is abbreviate | omitted. In this embodiment, a case where a user who is a child of the user ID “B ₁ ” shown in FIG. Further, in the present embodiment, a case where a user who is a child of the user ID “A ₀ ” illustrated in FIG. 8 is an owner user is taken as an example.

  The operation mode of the access management system according to the present embodiment, and the hardware configuration and functional configuration of the access right management server 1 have the same configuration as the mode of the first embodiment shown in FIGS. The operation of the access management system according to the present embodiment is substantially the same as that of the first embodiment described with reference to FIG. Here, in this embodiment, the information included in the content request information transmitted in S901 shown in FIG. 9 is different from the example of the first embodiment (example of FIG. 10). The content request information according to the present embodiment includes family information including information indicating the requesting user in addition to the information illustrated in FIG. This family information is input when the requesting user scans the client device 4 and transmits the content request information. An example of family information included in the content request information according to the present embodiment is shown in FIG.

FIG. 17 is a diagram showing an example of family information (hereinafter referred to as input family information) included in the content request information according to the present embodiment. As shown in FIG. 17, the input family information includes information similar to the family information shown in FIG. 7. When the family information shown in FIG. 17 is shown as a tree diagram, a tree diagram as shown in FIG. 18 can be drawn. As shown in FIG. 18, in the input family information according to the present embodiment, the user with ID “B ₃ ” is the wife of the user with ID “B ₁ ”, and the user with ID “B ₄ ” is ID “B ₁ ”. Information indicating that it is the eldest son of the user. The requested user ID according to the present embodiment is ID “B ₄ ” shown in FIG.

Here, the input family tree information shown in FIG. 17 is information that is newly input. Therefore, it is general that the user ID corresponding to the access management system according to the present embodiment is not attached. That is, the input family information obtained by the authentication request obtaining unit 101 is indicated by individual IDs such as “B ₁ ”, “B ₃ ”, and “B ₄ ” as shown in FIGS. 17 and 18. Not in a state. When obtaining the input family information, the authentication request obtaining unit accesses the family information management server 2 and specifies or obtains the individual user ID included in the input family information. This will be described in detail later.

Next, in the access management system according to the present embodiment, the processing by the reset determination unit 103, that is, the processing of S905 in FIG. 9 or S1108 in FIG. 11 is different from that in the first embodiment. In the present embodiment, the user with ID “B ₄ ” is the requesting user. Therefore, as shown in FIG. 8, the family information acquired by the reset determination unit 103 from the family information management server 2 does not include the ID “B ₄ ” that is the requested user ID. In other words, the reset determination unit 103 cannot determine the relationship between the owner user and the requesting user based only on the family information acquired from the family information management server 2.

  In contrast, the reset determination unit 103 according to the present embodiment determines the relationship between the owner user and the requesting user based on the family information acquired from the family information management server 2 and the input family information illustrated in FIG. To do. That is, the reset determination unit 103 according to the present embodiment confirms that the owner user and the requesting user are included in a single family based on the acquired family information and input family information. That is, the reset determination unit 103 functions as a family information storage unit that stores the family information acquired from the family information management server 2 and the input family information included in the access request. The reset determination unit 103 functions as a determination unit that determines whether the owner user and the requesting user are included in a single family.

  Here, in the first embodiment, the family information constituting the single family is extracted in the family information extraction process by the family information management server 2, so that the owner user and the requesting user are a single family. It was possible to easily determine that it was included in However, in the present embodiment, the family information acquired by the reset determination unit 103 in S1106 of FIG. 11 (family information constituting the tree diagram shown in FIG. 8) and the input family information constitute a single family. That has not been confirmed. Therefore, the reset determination unit 103 confirms in S1108 in FIG. 11 that the family information acquired from the family information management server 2 and the input family information constitute a single family.

  When it is confirmed that the family information acquired from the family information management server 2 (hereinafter referred to as acquired family information) and the input family information constitute a single family, the reset determination unit 103 inputs the acquired family information and input It is confirmed whether or not the same user is included in the family tree information. When the same user is included, it can be said that the acquired family line information and the input family line information are connected via the same user and constitute a single family line.

When a tree diagram is generated based on the family tree information illustrated in FIG. 7 and the input family tree information illustrated in FIG. 17, a tree diagram as illustrated in FIG. 19 is generated. As shown in FIG. 19, the acquired family tree information and the input family tree information according to the present embodiment are linked through a user with a user ID “B ₁ ”. The requested user (user with ID “B ₄ ”) according to the present embodiment corresponds to the grandchild of the owner user (user with ID “A ₀ ”). Accordingly, the reset determining unit 103 accesses the “resonance” in the information stored in the will information DB 130 illustrated in FIG. 5 when the “great-grandchild” is included in the reset target user relationship associated with the user ID “A ₀ ”. It is determined that the right can be reset. On the other hand, when “great-grandchild” is not included in the reset target user relationship associated with the user ID “A ₀ ”, it is determined that the access right cannot be reset.

  Through such processing, the resetting determination unit 103 according to the present embodiment allows the owner user, the requesting user, and the family user acquired from the family information management server 2 to include the owner user, the requesting user, and the It becomes possible to determine the relationship of

  Next, a process for specifying or acquiring a user ID when the authentication request acquisition unit 101 acquires input family tree information will be described. The authentication request acquisition unit 101 of the access right management server 1 according to the present embodiment transmits an ID assignment request to the family information management server 2 when the input family information is included in the authentication request acquired from the content server 3. FIG. 20 illustrates an example of information included in the input family information according to the present embodiment.

  As shown in FIG. 20, in the input family information according to the present embodiment, each user is specified by a name. That is, the name of each user is used as individual specifying information for specifying each individual user. As shown in FIG. 7 or FIG. 14, the input family line information includes relationship information indicating the relationship between individuals specified by the two individual specifying information. In the example of FIG. 20, the user whose name is “BBB 333” is the wife of the user whose name is “BBB 111”. Further, it is indicated that the user whose name is “BBB 444” is the eldest son of the user whose name is “BBB 111”. The ID assignment request transmitted from the access right management server 1 to the family information management server 2 includes information shown in FIG.

  The family information management server 2 executes the ID assignment process in response to the ID assignment request acquired from the access right management server 1. With reference to FIG. 21, the ID assignment operation by the family information management server 2 according to the present embodiment will be described. FIG. 21 is a flowchart showing an ID assigning operation by the family information management server 2 according to the present embodiment. As illustrated in FIG. 21, when the family information management server 2 acquires the ID assignment request (S2101), the family information management server 2 acquires one piece of personal identification information included in the ID assignment request (S2102).

  Then, the family information management server 2 checks whether or not the personal identification information acquired in S2102 is already stored in the family information management server 2 (S2103). Here, in addition to the family information shown in FIG. 7, the family information management server 2 stores information (user ID correspondence information) in which the personal identification information and the user ID are associated with each other. FIG. 22 shows an example of information included in the user ID correspondence information stored in the family information management server 2.

  As illustrated in FIG. 22, the user correspondence information stored in the family information management server 2 according to the present embodiment stores a user ID and a user name that is personal identification information in association with each other. In addition, in order to distinguish between the same names and the same names, other information for identifying individuals may be included in the user ID correspondence information. As said other information, information, such as a user's date of birth, permanent address, sex, can be used, for example. As such information, it is preferable to use information described in a family register copy. In addition, when distinguishing individuals with the same surname based on the other information above, it is realized by including the same information (information such as date of birth, permanent address, gender, etc. in the above example) in the input family line information It becomes possible.

The family information management server 2 searches the user correspondence information shown in FIG. 22 based on the personal identification information acquired in S2102, and if the corresponding personal identification information is included in the user correspondence information (S2103 / YES), the corresponding The user ID corresponding to the personal identification information to be acquired is acquired (S2104). For example, consider a case where personal identification information “BBB 000” is acquired in S2102. In this case, as shown in FIG. 22, information “BBB 000” is included in the user correspondence information. Therefore, it is determined that there is relevant information in the search of S2103. As a result, the user ID “B ₀ ” corresponding to “BBB 000” is acquired in S2104.

On the other hand, if the corresponding personal identification information is not included in the user correspondence information (S2103 / NO), the family information management server 2 recognizes the personal identification information as new information and assigns a new user ID (S2105). ). For example, consider a case where personal identification information “BBB 333” is acquired in S2102. In this case, as illustrated in FIG. 22, the information “BBB 333” is not included in the user correspondence information. Accordingly, it is determined that there is no corresponding information in the search of S2103. As a result, in step S2105, “B ₃ ” is assigned as a new user ID corresponding to “BBB 333”.

  If all personal identification information included in the ID assignment request has been selected after the processing of S2104 or S2105 has been completed (S2106 / YES), the family information management server 2 generates ID assignment information and manages access rights. It transmits to the server 1 (S2107). An example of information included in the ID assignment information according to the present embodiment is shown in FIG. As illustrated in FIG. 23, the ID assignment information includes information acquired in S2104 or information provided in S2105. On the other hand, when all the personal identification information included in the ID assignment request has not been selected (S1806 / NO), the processing from S1802 is repeated.

  By such processing of the household management server 2, input family information composed of personal information to which a user ID has not yet been assigned is converted into information specified by the user ID as shown in FIG. 17. As a result, as described above, the relationship between the owner user and the requesting user can be determined based on the family information already stored in the family information management server 2 and the input family information.

  In the above description, as shown in FIG. 19, an example in which determination is made based on the user ID has been described. In addition, the relationship may be determined based on the personal identification information included in the input family information, such as the personal name, instead of the ID state. In this case, the reset determination unit 103 replaces the family information constituted by the relationship between the user IDs as shown in FIG. 7 with the family information constituted by the personal identification information such as the personal name in S1106 of FIG. get.

In the above description, the case where the user with ID “B ₄ ” transmits the content request information including the input family information shown in FIG. 20 as the requesting user has been described as an example. In this way, examples other than the case where the content request is the trigger for the operation can be considered. For example, the user of ID “B ₁ ” triggers the operation to transmit the input family information shown in FIG. 20 to the family information management server 2 in order to register the self-confident “wife” and “eldest son”. It is also possible.

That is, the family information management server 2 acquires the input family information shown in FIG. 20 from the user with ID “B ₁ ”. Then, the family information management server 2 assigns IDs “B ₃ ” and “B ₄ ” by executing the operation described in FIG. By such processing, input family information composed of information as shown in FIG. 20 is registered in the family information management server 2 as information indicated by ID as shown in FIG. As a result, the user with ID “B ₃ ” is registered as the wife of the user with ID “B ₁ ”. Further, the user with ID “B ₄ ” is registered as the eldest son of the user with ID “B ₂ ”. That is, users with IDs “B ₃ ” and “B ₄ ” are registered as users belonging to a single family with the user with ID “B ₁ ”. As a result, by the same processing as in the first embodiment, access to contents whose IDs are “A ₀ ”, “A ₁ ”, “A ₂ ”, “A ₃ ” and “B ₀ ” are owner users. The rights can be reset.

Embodiment 3 FIG.
In the first embodiment, as described with reference to FIG. 8 and the like, when the reset determination unit 103 functioning as a family information storage unit stores the requested user ID and the owner user ID, Explained the example of determining that is included in a single family. However, as described above, the purpose is to determine that the owner user and the requesting user are included in a single family, and the determination method can be other than the above-described modes. In the present embodiment, such another determination method will be described. In the present embodiment, a case where the owner user ID is “A ₀ ” and the requested user ID is “B ₂ ” will be described as an example.

  In Embodiment 1, it is determined that the owner user and the requesting user are included in a single family line when the requested user ID and the owner user ID are included in the family line information acquired from the family line information management server 2. Was possible. This is made possible by the family information management server 2 extracting and transmitting single family information in response to the family information acquisition request. In this embodiment, the case where the family information management server 2 transmits all family information stored in response to the family information acquisition request is taken as an example.

  FIG. 24 is a flowchart illustrating a determination operation in which the reset determination unit 103 according to the present embodiment determines that the owner user and the requesting user are included in a single family in S1108 of FIG. The reset determination unit 103 receives the reset request (S1105), and acquires family information and will information (S1106, S1107). As described above, in this embodiment, all family information stored in the family information management server 2 is acquired.

When the ancestry information and the will information are acquired, the reset determination unit 103 extracts the pedigree information including the owner user ID specified in the reset request information (S2401). In this embodiment, the owner user ID is “A ₀ ”. In this case, the family information of the IDs “01”, “02”, and “03” shown in FIG. 7 is extracted. FIG. 25 is a diagram showing the family information extracted in this way as a tree diagram.

Similarly, the reset determination unit 103 extracts family information including the requested user ID specified in the reset request information (S2401). In the present embodiment, the requested user ID “B ₂ ”. In this case, the family information of ID “09” shown in FIG. 7 is extracted. FIG. 26 is a diagram showing the family tree information extracted in this way as a tree diagram.

Referring to FIGS. 25 and 26, a common user ID is not included (S2402 / NO). In this case, the reset determination unit 103 determines whether or not the family tree information extracted in S2401 is only an ID that overlaps with the family tree information still extracted (S2404). In this case, since the extraction of family information is performed only once, the extracted ID is not a duplicate ID (S2404 / NO). Next, the reset determination unit 103 extracts family information from the family information extracted in the immediately preceding S2402 based on the other party's user ID (S2406). In this case, the other user IDs of the owner user ID “A ₀ ” are “A ₁ ”, “A ₂ ”, and “A ₃ ”. In this case, the family information of the IDs “01”, “02”, “03”, “04”, “05”, “06”, and “07” shown in FIG. 7 is extracted. FIG. 27 is a diagram showing the family information extracted in this way as a tree diagram.

The user ID of the other party of the requested user ID “B ₂ ” is “B ₀ ”. In this case, the family information of IDs “07”, “08” and “09” shown in FIG. 7 is extracted. FIG. 28 is a diagram showing the family information extracted in this way as a tree diagram. 27 and 28, a common user ID is included (S2402 / YES). That is, the users with IDs “A ₃ ” and “B ₀ ” are common. That is, the tree diagram of FIG. 27 and the tree diagram of FIG. 28 can be connected through the users with IDs “A ₃ ” and “B ₀ ”. When the tree diagrams of FIGS. 27 and 28 are connected, the tree diagram of FIG. 8 is generated. As described above, the reset determination unit 103 according to the present embodiment includes the owner common to the single family information including the owner user and the single family information including the requesting user. It is determined that the user and the requesting user are included in a single family line.

  In the above description, the case where the reset determination unit 103 executes the process illustrated in FIG. 24 has been described as an example. In this case, as described above, the reset determination unit 103 needs to acquire all family information stored in the family information management server 2. On the other hand, the family information management server 2 may execute the process shown in FIG. In this case, the family information management server 2 can execute the same processing as in FIG. 24 by notifying the family information management server 2 from the access right management server 1 of the owner user ID and the requested user ID. Become.

It is a figure which shows the operation | use form of the access right management system which concerns on embodiment of this invention. It is a block diagram which shows the hardware constitutions of the access right management server which concerns on embodiment of this invention. It is a block diagram which shows the functional block of the access right management server which concerns on embodiment of this invention. It is a figure which shows the example of the information memorize | stored in access right DB which concerns on embodiment of this invention. It is a figure which shows the example of the information memorize | stored in will information DB which concerns on embodiment of this invention. It is a figure which shows the example of the information memorize | stored in the content server which concerns on embodiment of this invention. It is a figure which shows the example of the information memorize | stored in the family tree information management server which concerns on embodiment of this invention. It is a figure which shows the family tree information memorize | stored in the family tree information management server which concerns on embodiment of this invention as a tree diagram. It is a sequence diagram which shows operation | movement of the access right management system which concerns on embodiment of this invention. It is a figure which shows the example of the information contained in the content request information which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the reset determination part which concerns on embodiment of this invention. It is a figure which shows the example of the information contained in the reset request information which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the reset determination part which concerns on embodiment of this invention. It is a figure which shows the example of the information contained in the relationship setting information which concerns on other embodiment of this invention. It is a figure which shows the relationship setting information which concerns on other embodiment of this invention as a tree diagram. It is a figure which shows the example of the information memorize | stored in the will information DB which concerns on other embodiment of this invention. It is a figure which shows the example of the input family line information which concerns on other embodiment of this invention. It is a figure which shows the input family line information which concerns on other embodiment of this invention as a tree diagram. It is a figure which shows the acquisition family line information and input family line information which concern on other embodiment of this invention as a tree diagram. It is a figure which shows the example of the information contained in the input family tree information which concerns on other embodiment of this invention. It is a flowchart which shows operation | movement of the family tree information management server which concerns on other embodiment of this invention. It is a figure which shows the example of the information memorize | stored in the family tree information management server which concerns on other embodiment of this invention. It is a figure which shows the example of the information contained in ID provision information which concerns on other embodiment of this invention. It is a flowchart which shows operation | movement of the reset determination part which concerns on other embodiment of this invention. It is a figure which shows the family tree information extracted in the operation | movement process of the reset judgment part which concerns on other embodiment of this invention as a tree diagram. It is a figure which shows the family tree information extracted in the operation | movement process of the reset judgment part which concerns on other embodiment of this invention as a tree diagram. It is a figure which shows the family tree information extracted in the operation | movement process of the reset judgment part which concerns on other embodiment of this invention as a tree diagram. It is a figure which shows the family tree information extracted in the operation | movement process of the reset judgment part which concerns on other embodiment of this invention as a tree diagram.

Explanation of symbols

1 Access Right Management Server 2 Family Information Management Server 3 Content Server 10 CPU
20 RAM
30 ROM
40 HDD
50 I / F
60 LCD
70 Operation Unit 80 Bus 100 Access Right Control Unit 101 Authentication Request Acquisition Unit 102 Access Right Judgment Unit 103 Reset Determination Unit 110 Network I / F
120 Access right DB section 130 Will information DB 130

Claims (14)

An access right setting device for setting an access right for accessing the deposit information deposited by the first user,
The first user's identification information, the identification information of other users included in the first user's family, and the family information in which the relationship information indicating the relationship between the first user and the other user is associated. A family information storage unit,
A determination unit that determines whether the family information includes identification information of a second user who desires to set the access right;
An access right setting unit configured to set the access right to the second user when the identification information of the second user is included in the family information according to the determination of the determination unit. Access right setting device. A family information acquisition unit for acquiring family information to be stored in the family information storage unit;
The access condition setting apparatus according to claim 1, wherein the family information acquisition unit acquires family information including identification information of the first user and another user included in a single family.   The family information acquisition unit includes the family information including the identification information of the first user and the family information including the identification information of the other user when identification information identifying a common individual is included. 3. The access right setting device according to claim 2, wherein family information including identification information is acquired. A target designation information obtaining unit for obtaining target designation information for designating a target for setting the access right in the single family;
The access right setting unit determines whether the second user is designated in the acquired target designation information,
The access right setting unit sets the access right to the second user when it is determined that the second user is designated in the target designation information. 3. The access right setting device according to any one of 3.   5. The access right setting device according to claim 4, wherein the target designation information acquisition unit acquires the target designation information stored by designating a target for setting the access right by the first user. 6. .   6. The target designation information acquisition unit acquires target designation information stored by designating a relationship with the first user as information for designating a target for setting the access right. The access right setting device described. The target designation information acquisition unit acquires, as the target designation information, information that designates another user belonging to a family different from the single family including the first user,
The determination unit determines whether the identification information of the first user and the identification information of the second user are included in one of the single family including the first user and the different family. Judgment based on family information stored in the information,
The access right setting unit, when the determination unit determines that the first user and the second user are included in either the single family including the first user and the different family, The access right setting device according to claim 4, wherein the access right is set for the second user.   The said object designation | designated information acquisition part acquires the information which designates the range of the object which sets the said access right in the said single family as said object designation | designated information, The any one of Claim 4 thru | or 7 characterized by the above-mentioned. The access right setting device described in 1.   The family information storage unit is family information already stored in a storage medium and includes family information including identification information of the first user and family information input by the user, and the second user's information The access right setting device according to any one of claims 1 to 8, wherein the family information including the identification information is acquired and stored. A family information storage unit that stores a plurality of family information,
The family information extraction unit for extracting from the family information storage unit the family information to be stored in the family information storage unit;
The family information extraction unit extracts first family information including identification information of the first user or identification information of the second user, and the first user in the extracted first family information The family information to be stored in the family information storage unit is extracted by extracting second family information including user identification information different from the identification information of the second user or the identification information of the second user. The access right setting device according to any one of claims 1 to 9. In the determination unit, the identification information of the third user who has an access right to the deposit information deposited by the first user and the identification information of the fourth user who wants to set the access right are combined into a single family. Whether it is included based on the family information stored in the family information storage unit,
The access right setting unit sets the access right to the fourth user when the determination unit determines that the third user and the fourth user are included in a single family line. The access right setting device according to any one of claims 1 to 10. An access right setting method for setting an access right for accessing the deposit information deposited by the first user,
Family information that associates identification information of the first user, identification information of other users included in the family of the first user, and relationship information indicating a relationship between the first user and the other user. Store it in a storage medium,
Determining whether the family information includes identification information of a second user who wishes to set the access right;
The access right setting method, wherein the access right is set for the second user when the family information includes identification information of the second user.   An information processing program for causing an information processing apparatus to execute the information search method according to claim 12.   14. A recording medium in which the information processing program according to claim 13 is recorded in a format readable by an information processing apparatus.

Images