JP2010152537A - Confidential information management system and confidential information management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a confidential information management system and a confidential information management method, allowing objective recognition of business secret to a mail body or a mail group exchanged with an identical topic. <P>SOLUTION: A mail creation device 11 has a function wherein a user can create a mail, displays information about a handling classification or a distribution range of a received mail and a thread to which the mail belongs, and transmits information about the added or changed handling classification or distribution range when the handling classification or the distribution range of the mail or the thread is added or changed. A mail information management device 13 receives the added or changed information from the mail creation device 11. When an applied target of the addition or the change is the thread, the mail information management device 13 applies a new handling classification or distribution range to all the mails of the thread, and stores information into a database. When the applied target of the addition or the change is the mail, the mail information management device 13 applies a new handling classification or distribution range to the mail, and stores information into the database. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a confidential information management system and a confidential information management method for managing electronic mail text as confidential information.

Electronic mail is widely used as a means of communication within and between companies because messages can be exchanged with anyone by designating the mail address of the other party to be sent to the destination.
In recent years, many leaks of confidential information that should be managed in a company have occurred, and the company is questioned from the viewpoint of intellectual property protection and personal information protection, causing damage to the company. Many information leaks are caused by e-mail, and management of information exchanged via e-mail is required.

Therefore, as a means of managing information exchanged via e-mail, a technique for adding meta information to e-mail is known for the purpose of topic classification and importance evaluation for e-mail recipients. (See Non-Patent Document 1). In addition, for the purpose of filtering based on the determination of the importance level of an e-mail, a technique for adding an attribute to the e-mail is known (see Non-Patent Documents 2 and 3).
Shinya Kamibori, Hitoshi Aida, “Study on Information Sharing System Based on E-mail”, Research Report of Information Processing Society, Vol. 2008, no. 34, pp. 61-67, 2008 Masami Isogobori, Makoto Fujii, Kazuaki Ando, Junichi Aoe “Mail Document Filtering Method Using Individual Profiles”, IEICE Technical Report, Vol. 98, no. 486, pp. 9-16, 1998 Mashiko Isogobori, Junichi Aoe, Makoto Fujii, Kazuaki Ando “Mail Document Filtering Method Based on Multi-attribute Item History Information”, IPSJ Journal, Vol. 41, no. 8, pp. 2299-2308, 2000

  By the way, under the Unfair Competition Prevention Law, trade secrets are required to be "managed as secrets (secret management)", and "secret management" is recognized in the secret management guidelines of the Ministry of Economy, Trade and Industry. In order to do so, it must be in a state where it can be recognized that the information is managed confidentially objectively. " Of the information exchanged via e-mail, it is relatively easy to individually manage electronic files attached to e-mails as trade secrets, but the body of the e-mail (part excluding attached files) Is difficult to manage as a trade secret because the user can freely describe and send and receive.

In addition, the following issues are associated with managing communication using e-mail in a company as a trade secret.
1. There are many cases where messages are exchanged in the form of repeated e-mail replies on the same topic, but tracing the case where the topic changes during the exchange of e-mails, and as a result confidential information is sent and received Is difficult.
2. It is difficult to deal with a case in which an email sent and received in the past has to be treated as confidential information for reasons such as changes in the environment after the exchange by email. Conversely, there is a case where confidential information becomes public information at a certain timing.

  The present invention has been made in view of such problems, and the object of the present invention is to objectively recognize that it is a trade secret for the mail text and mail groups exchanged on the same topic. It is an object of the present invention to provide a confidential information management system and a confidential information management method.

  In order to achieve the above object, the confidential information management system of the present invention receives a mail and adds a handling classification and / or distribution range of the received mail or a thread to which the mail belongs and a set of correlated mails, When it is determined that there is a change, a means for creating information on the handling category and distribution range that has been added or changed, and the information on the handling category and distribution range that has been added or changed are received, and the addition or change is applied. If the target is a set of threads and correlated mail, apply new handling categories and distribution ranges to all the mail in the thread and correlated mail sets, save the information in the database, and add If the change is applied to email, the new handling classification and distribution range are applied to the email and the information is stored in the database. Characterized in that it comprises a means for storing.

  In addition, the confidential information management system of the present invention has a function of transferring mail, checks whether there is an attached file for the received mail, and if there is an attached file, the handling classification and distribution range of the mail from the attached file From the mail transfer means for extracting information, and the handling classification and distribution scope information of the mail extracted by the mail forwarding means, whether the handling classification and distribution scope are applied to mail or the thread to which the mail belongs and the correlation It is determined whether the mail is a set of mail, and when the application destination is a set of threads and correlated mail, the confidentiality range of the handling classification of the thread and correlated mail sets and the attached file Compare the handling scope of the extracted handling category with the thread and If the confidential range of the handling category of the related mail set is wider than the confidential range of the attachment handling category, the handling category and distribution range of the thread and correlated mail set are updated. If the scope of confidentiality of the handling classification of the attached file handling classification is narrower than the scope of confidentiality of the handling classification of the attached file, If the handling category and distribution range of the thread and correlated mail set are not changed and the application destination is email, the handling category and distribution range of the email are the same as the handling category and distribution range of the attached file. E-mail information management means.

  Further, the confidential information management system of the present invention can monitor the mail transmission / reception status, and adds or changes the handling classification and distribution range of the mail, the thread to which the mail belongs and the correlated mail set. In addition, if it is determined that there is an addition or change in the handling category and / or distribution range of the mail or thread and a set of correlated mail, information on the handling category and distribution range that has been added or changed is transmitted. When receiving information on the mail information monitoring means to be added and the handling classification and distribution range that has been added or changed from the mail information monitoring means, and the application target of the addition or change is a set of threads and correlated mails, A new handling category for all emails in the thread and a set of correlated emails, E-mail information management that stores information in the database by applying the distribution range, and when the target of addition or change is e-mail, applies new handling categories and distribution ranges to the e-mail and saves information in the database Means.

  In addition, the confidential information management system of the present invention checks whether or not there is an attached file for the received mail, and when the attached file exists, extracts information on the handling classification and distribution range of the mail from the attached file, and If it is determined that there is an addition or change in the handling category and / or distribution range of the thread to which the email belongs and the correlated mail set, the mail transfer that sends information on the added or changed handling category and distribution range Determining whether the application destination of the handling classification and the distribution range is a mail or a set of mails having a thread and a correlation from the means and the handling classification and distribution range information of the mail extracted from the attached file; If the destination is a collection of threads and correlated emails, Compare the confidentiality of the handling classification of the collection of red and correlated mails with the confidentiality of the handling classification extracted from the attachment, and the confidentiality of the handling classification of the thread and correlated mail collection Is larger than the confidential range of the attachment handling classification, the handling classification and distribution scope of the thread and correlated mail set are updated, and the attachment handling classification and distribution scope are updated. If the confidential range of the handling classification of the thread and the correlated mail set is narrower than the confidential scope of the attachment handling classification, the thread and the correlated mail set If the handling category and distribution range are not changed and the application destination is email, The handling category and distribution range are the same as the handling category and distribution range of the attached file, and information on the handling category and distribution range that has been added or changed is received. If it is a collection of related mails, the new handling classification and distribution range are applied to all mails of the thread and the related mail sets, information is stored in the database, and additions and changes are applied Is a mail information management means for storing information in a database by applying a new handling category and distribution range to the mail.

  Also, the confidential information management method of the present invention includes a step of receiving an email and determining whether the received email or a thread to which the email belongs and a handling category and / or a distribution range of a collection of correlated emails are added or changed. If the handling classification and / or distribution range of the thread and correlated mail set is added or changed, new handling is performed for all mails of the thread and correlated mail set. Information is stored in the database by applying classifications and distribution ranges, and new handling classifications and distribution ranges are applied to the mail when the mail handling classifications and / or distribution ranges are added or changed. And storing information in the database.

  Further, the confidential information management method of the present invention checks the presence or absence of an attached file for a received mail, and extracts the mail handling classification and distribution range information from the attached file when the attached file exists; Determining from the handling category and distribution range information of the mail extracted from the file whether the handling category and the distribution range are applied to the email or the thread to which the email belongs and a set of correlated emails; When the application destination is a set of threads and correlated mails, the confidentiality range of the handling classification of the thread and the correlated mail set and the confidentiality range of the handling classification extracted from the attached file And classifying the handling classification of the thread and the set of correlated mail Is larger than the confidential range of the attachment handling classification, the handling classification and distribution scope of the thread and correlated mail set are updated, and the attachment handling classification and distribution scope are updated. If the confidential range of the handling classification of the thread and correlated mail set is narrower than the confidential scope of the attachment handling classification, the thread and correlated mail set When the handling category and distribution range are not changed and the application destination is an email, the handling category and distribution range of the email are made the same as the handling category and distribution range of the attached file. .

  Furthermore, the present invention includes a step of receiving a mail on a computer and determining addition or change of handling classification and / or distribution range of the received mail and a thread to which the mail belongs and a set of correlated mail. When a handling classification and / or distribution range of a thread and correlated mail set is added or changed, a new handling classification for all mail of the thread and correlated mail set, Apply the distribution range to save information in the database, and when a mail handling category and / or distribution range is added or changed, apply a new handling category or distribution range to the email. It is also characterized as a program for executing the step of storing information in a database.

The present invention is a trade secret for a mail body, a thread (and all mails belonging to the thread), and a mail group exchanged on the same topic at any time after sending / receiving mail. It is possible to assign and change handling classifications and distribution ranges to enable objective recognition.
In addition, the present invention refers to the handling classification and distribution range assigned to the attached file, and automatically assigns this as the handling classification and distribution scope of the mail group such as a thread. It is possible to dynamically change the handling classification and distribution range of mail groups such as threads according to the distribution range.
Further, according to the present invention, it is possible to confirm the status of a mail group transmitted and received within a range that can be monitored by a third party (monitor) at an arbitrary timing. It is also possible to assign and change the distribution range.

Embodiments of the present invention will be described with reference to the drawings.
Examples of techniques for objectively recognizing electronic confidential information as trade secrets include the following.
1. Meta information on the classification of handling such as “confidential”, “confidential”, “only for related parties” (hereinafter referred to as “handling classification”)
2. Policy to clarify to whom the trade secret can be distributed (hereinafter referred to as “distribution scope”)
In the present invention, the above-mentioned “handling classification” and “distribution range” are assigned to the body of the email, so that the body of the email can be objectively recognized as a trade secret. is there.

In addition, in the conventional e-mail system, it is possible to trace the reference relationship of e-mail by referring to the In-Reply-To header of the e-mail, and such an existing MUA (Mail User Agent) Some have the function of visually displaying the relationship between emails. In general, a collection of a series of mail groups having such a reference relationship is called a “thread”, and messages about the same topic are often exchanged among electronic mails belonging to the same thread.
Also, there are means for exchanging messages on the same topic between mails, such as forwarding a certain mail or creating a new mail by quoting the body of the mail.
The present invention focuses on a set of threads and correlated mails, and handling divisions and distribution ranges can be assigned not only to individual mails but also to threads and correlated mail groups. It is what. When confidential information is transmitted and received in a certain electronic mail, all electronic mail groups exchanged on the same topic can be handled as confidential information.

The handling classification and the distribution range for the mail group can be automatically or manually performed in the following manner.
(Automatic grant)
The handling classification and distribution range described in advance in the attached file are extracted, and this is automatically given as the handling classification and distribution range of mail groups such as threads.
(Manual grant)
A mail sender / receiver manually assigns a handling category and a distribution range to a mail group such as a thread.
A third party (for example, an employee's superior or mail manager) monitors the mail list and thread list sent and received in the monitoring target (for example, the department he / she manages), and handles it as necessary. A distribution range is manually assigned to a mail group such as a thread.

  FIG. 1 is a diagram showing the configuration of the confidential information management system according to the first embodiment of the present invention, and assumes a client-server configuration. The client terminal configures the information to be displayed to the user on the client side by inquiring the server about mail thread information and handling classification after the mail is sent from outside and inside the user and the user receives the mail. To do. The mail correlation is exemplified by threads.

The confidential information management system of this embodiment includes a mail creation device 11, a mail transfer device 12, an information management device 13, and a mail information monitoring device 14.
The mail creation device 11, which is a client terminal, has a user interface for a user to create an electronic mail, and has a function of sending and receiving mail to and from the mail transfer device 12. For example, a configuration based on mail creation software called MUA (Mail User Agent) can be considered. Further, in the form of plug-in software of this software, a display information generation unit having a function of inquiring the mail information management device 13 about mail thread information, handling classification, distribution range, etc. and constituting information to be displayed to the user 111 and a mail information display unit 112 for displaying the configured information may be added.

  The mail transfer device 12 has a function of transferring a mail transmitted from the mail creation device 11 to another mail creation device 11 or mail transfer device 12 in the company or outside the company. Forward emails from outside the company in the same way. For example, a configuration based on mail transfer software called MTA (Mail Transfer Agent) can be considered. Since there are many cases where a plurality of servers having an MTA function are installed in a corporate network, this embodiment assumes a configuration in which a plurality of mail transfer apparatuses 12 exist. Further, in the form of Plug-in software to mail transfer software, the mail ID (for example, Mail Message-ID header) necessary for creating thread information used in the present invention, and the parent-child relationship of the mail are shown. An implementation form is possible in which a mail information transmission unit 121 having a function of transmitting information (for example, an In-Reply-To header of mail) to the mail information management device 13 is added.

  The mail information management device 13 has a function of managing mail thread information used in the present invention, and managing mail handling divisions and distribution ranges. Specifically, a thread information management unit having a function of receiving information sent from the mail information transmission unit 121 and storing the information in the structure information management unit 132, the policy information management unit 133, and the mail ID information management unit 134 131. The thread information management unit 131 also has a function of transmitting thread information of the requested mail in response to a request from the display information generation unit 111. The structure information management unit 132 is a database that uses information indicating the parent-child relationship of mail (for example, an In-Reply-To header of mail) and holds information related to mail threads. The policy information management unit 133 is a database that holds mail handling categories and distribution ranges. Further, the mail ID information management unit 134 holds an ID for uniquely identifying a mail transmitted / received via the mail transfer device 12 based on a mail ID (for example, a Message-ID header of the mail). It is a database. Using this ID as a key, it is possible to extract a group of information managed by the structure information management unit 132 and the policy information management unit 133.

  The mail information monitoring device 14 has a function of allowing an administrator to monitor the mail transmission / reception status and adding or changing the mail handling classification and distribution range. The thread information monitoring unit 141 receives information about threads from the thread information management unit 131, and allows the administrator to monitor the mail transmission / reception status. The policy information update unit 142 receives information on the mail handling classification and distribution range from the thread information management unit 131, and enables the administrator to edit these information. Further, the edited information can be transmitted to the thread information management unit 131 to reflect the new handling category and distribution range.

  FIG. 2 is a diagram showing the configuration of the confidential information management system according to the second embodiment of the present invention, and assumes a server type configuration. The client terminal accesses the server and creates, sends and receives mail on the server. In many companies, a server type mail system is configured by using a Web mail system. Therefore, this configuration is assumed as one of the embodiments.

The confidential information management system of this embodiment includes a mail display device 15, a mail transfer device 16, a mail information management device 18, and a mail information monitoring device 19.
The mail display device 15 as a client terminal has a function of accessing the mail transfer device 16 and receiving and displaying display information such as mail. For example, it can be realized by software such as a Web browser.
The mail transfer device 16 has a function of transferring mail, like the mail transfer device 12 of FIG. For example, a configuration based on software having the function of a Web mail server can be considered. Further, in the form of Plug-in software of this software, the mail ID (for example, the Mail Message-ID header) necessary for creating the thread information used in the present invention and the parent-child relationship of the mail are shown. A mail information transmission unit 161 having a function of transmitting information (for example, a mail In-Reply-To header) to the mail information management apparatus 13, and further, mail information management of mail thread information, handling classification, distribution range, etc. An implementation form in which the display information generation unit 162 having a function of inquiring the device 18 and configuring information to be displayed to the user is added is conceivable. The mail information transmission unit 161 is equivalent to the mail information transmission unit 121 of FIG. 1, and the display information generation unit 162 is equivalent to the display information generation unit 111 of FIG.

  The mail information management device 18 has a function of managing mail thread information used in the present invention, and managing mail handling categories and distribution ranges. Specifically, a thread information management unit having a function of receiving information sent from the mail information transmission unit 161 and storing the information in the structure information management unit 182, the policy information management unit 183, and the mail ID information management unit 184 181. The thread information management unit 181 also has a function of transmitting the requested mail thread information in response to a request from the display information generation unit 162. The structure information management unit 182 is a database that uses information indicating the parent-child relationship of mail (for example, an In-Reply-To header of mail) and holds information about mail threads. The policy information management unit 183 is a database that holds mail handling classifications and distribution ranges. Further, the mail ID information management unit 184 holds an ID for uniquely identifying a mail transmitted / received via the mail transfer device 16 based on the mail ID (for example, a Message-ID header of the mail). It is a database. Using this ID as a key, it is possible to extract a group of information managed by the structure information management unit 182 and the policy information management unit 183.

  The mail information monitoring device 19 can monitor the mail transmission / reception status by the administrator, and has a function of creating and changing the mail handling classification and distribution range. The thread information monitoring unit 191 receives information about the thread from the thread information management unit 181 and enables the administrator to monitor the mail transmission / reception status. The policy information update unit 192 receives information on the mail handling classification and distribution range from the thread information management unit 181 and allows the administrator to edit the information. Furthermore, the edited information can be transmitted to the thread information management unit 181 to reflect the new handling category and distribution range.

FIG. 3 is a diagram showing the configuration of the confidential information management system according to the third embodiment of the present invention. The confidential information management system according to the third embodiment assumes a mode in which thread and policy information is temporarily stored in each client terminal.
The confidential information management system according to this embodiment includes a mail creation device 20, a mail transfer device 21, a mail information management device 22, and a mail information monitoring device 23.
The mail creation device 20, which is a client terminal, has a user interface for a user to create an electronic mail, and has a function of sending and receiving mail to and from the mail transfer device 21. For example, a configuration based on mail creation software called MUA (Mail User Agent) can be considered. Further, in the form of plug-in software of this software, display information having a function of inquiring the thread information management unit 203 (to be described later) about mail thread information, handling classification, distribution range, etc., and constituting information to be displayed to the user An implementation form is possible in which a generation unit 201 and a mail information display unit 202 that displays configured information are added.
Further, the mail creation device 20 has a function of managing mail thread information used in the present invention, and managing mail handling divisions and distribution ranges. Specifically, information sent from the mail information transmission unit 211 via the thread information distribution unit 221 is received, and the information is stored in the structure information management unit 204, the policy information management unit 205, and the mail ID information management unit 206. A thread information management unit 203 having a function of The thread information management unit 203 also has a function of transmitting thread information of the requested mail in response to a request from the display information generation unit 201. The structure information management unit 204 is a database that uses information indicating the parent-child relationship of mail (for example, an In-Reply-To header of mail) and holds information related to mail threads. The policy information management unit 205 is a database that holds mail handling classifications and distribution ranges. Further, the mail ID information management unit 206 holds an ID for uniquely identifying a mail transmitted / received via the mail transfer device 21 based on a mail ID (for example, a Message-ID header of the mail). It is a database. Using this ID as a key, it is possible to extract an information group managed by the structure information management unit 204 and the policy information management unit 205. The thread information management unit 203, the structure information management unit 204, the policy information management unit 205, and the mail ID information management unit 206 are the thread information management unit 131, the structure information management unit 132, the policy information management unit 133, and the mail ID information shown in FIG. This is equivalent to the management unit 134.

  The mail transfer device 21 has a function of transferring the mail transmitted from the mail creation device 20 to another mail creation device 20 or mail transfer device 21 in the company or outside the company. Forward emails from outside the company in the same way. For example, a configuration based on mail transfer software called MTA (Mail Transfer Agent) can be considered. Since there are many cases where a plurality of servers having an MTA function are installed in a corporate network, the present embodiment assumes a configuration in which a plurality of mail transfer devices 21 exist. Further, in the form of Plug-in software to mail transfer software, the mail ID (for example, Mail Message-ID header) necessary for creating thread information used in the present invention, and the parent-child relationship of the mail are shown. A realization form is conceivable in which a mail information transmission unit 211 having a function of transmitting information (for example, an In-Reply-To header of mail) to the mail information management device 22 is added.

  The mail information management device 22 includes a thread information distribution unit 221, a thread information management unit 222, a structure information management unit 223, a policy information management unit 224, and a mail ID information management unit 225. The thread information distribution unit 221 includes an ID of the mail transmitted from the mail information transmission unit 211 (for example, a Message Message-ID header) and information indicating a parent-child relationship of the mail (for example, an In-Reply-To header of the mail). Are distributed and transferred to the thread information management unit 203 of each mail creation device 20 and synchronously transferred to the thread information management unit 222. The thread information management unit 222 has a function of receiving information sent from the thread information distribution unit 221 and storing the information in the structure information management unit 223, the policy information management unit 224, and the mail ID information management unit 225. The structure information management unit 223 is a database that uses information indicating the parent-child relationship of mail (for example, an In-Reply-To header of mail) and holds information related to mail threads. The policy information management unit 224 is a database that holds mail handling classifications and distribution ranges. Further, the mail ID information management unit 225 holds an ID for uniquely identifying a mail transmitted / received via the mail transfer device 21 based on a mail ID (for example, a Message-ID header of the mail). It is a database. Using this ID as a key, it is possible to extract a group of information managed by the structure information management unit 223 and the policy information management unit 224.

  The mail information monitoring device 23 can monitor the mail transmission / reception status by an administrator, and has a function of creating and changing a mail handling classification and a distribution range. The thread information monitoring unit 231 receives information about the thread from the thread information distribution unit 221 and enables the administrator to monitor the mail transmission / reception status. The policy information update unit 232 receives information on the mail handling classification and distribution range from the thread information management unit 203, and enables the administrator to edit the information. Furthermore, the edited information can be transmitted to the thread information management unit 203 to reflect a new handling category and distribution range.

The “mail transfer process”, “policy update process from attached file”, “mail reception process”, “policy update process”, and “policy monitoring process” in the confidential information management system of the present invention will be described below. A description will be given based on the confidential information management system.
(Mail forwarding process)
FIG. 4 is a flowchart for explaining the “mail transfer process” of the confidential information management system of the present invention.
The mail transfer device 12 receives a mail from the mail creation device 11 or another mail transfer device 12 (step S11). In the mail transfer device 12, the process from step S12 onward is triggered by the arrival of mail in the mail transfer device 12 in the following situation.
1. After the user creates a mail in the mail creation device 11, the created mail reaches the mail transfer device 12.
2. An email arrives at the mail transfer device 12 from the outside.
3. An email arrives from another internal mail transfer device 12.

The mail information transmission unit 121 of the mail transfer device 12 extracts the information of the Message-ID header and the In-Reply-To header from the processing target mail received in step S11, and transmits the information to the thread information management unit 131 (step). S12). The thread information management unit 131 reconstructs mail thread information, stores it in the structure information management unit 132, and stores the Message-ID in the mail ID information management unit 134.
Next, the mail information transmission unit 121 checks whether or not there is an attached file for the processing target mail (step S13), and if there is no attached file (in the case of Yes), the mail is sent within the mail transfer device according to the mail destination Is stored or mail is transmitted to the next mail transfer destination (step S18). If there is an attached file in step S13 (No), the contents of all attached files are scanned, and information on the mail handling classification and distribution range is extracted by text matching (step S14). For example, the information described in the frame in FIG. 10 corresponds to this.

Next, the e-mail information transmission unit 121 determines whether or not the handling category and distribution range have been successfully extracted (step S15), and when the handling category and distribution range of all attached files have been successfully extracted (Yes) ), The process proceeds to “policy update processing from attached file”.
If there is a file for which extraction of the handling category and the distribution range has failed in step S15 (in the case of No), the mail information transmission unit 121 uses the function such as OCR (Optical Character Reader) as an attached file as an image. By reading and extracting character information, information on mail handling classification and distribution range is extracted (step S16).
Again, the e-mail information transmission unit 121 determines whether or not the handling category and distribution range have been successfully extracted (step S17), and when the attachment file handling category and distribution range have been successfully extracted (in the case of Yes). Shifts to “policy update processing from attached file”. If extraction of the attachment file handling category and distribution range fails (in the case of No), the mail is stored in the mail transfer device or sent to the next mail transfer destination according to the mail destination (step S18). ).

(Policy update processing from attached files)
FIG. 5 is a flowchart for explaining “policy update processing from an attached file” in the confidential information management system of the present invention.
The thread information management unit 131 determines from the information extracted from the attached file whether the application destination of the handling category and the distribution range is a mail or a thread (step S21).
In step S21, when the application destination is a thread, the thread information management unit 131 compares the handling classification of the thread to which the mail belongs and the handling classification extracted from the attached file (step S22). The handling categories are ranked according to the range of confidentiality. For example, in the order of “confidential” <“confidential” <limited to related parties ”,“ limited to related parties ”has the highest rank. If the thread handling category is lower in rank than the attachment handling category (Yes), that is, if the confidential range of the thread handling category is wider than the confidential range of the attachment handling category, the email The handling classification and distribution range of the thread to which the file belongs is updated to be the same as the handling classification and distribution range of the attached file (step S23).
In step S22, when the thread handling category is higher in rank than the attachment handling category (in the case of No), that is, when the confidential range of the thread handling category is narrower than the confidential range of the attached file handling category. Since it is not necessary to change the handling classification of the thread to which the mail belongs, the process proceeds to step S25. At that time, the handling classification of the thread to which the mail belongs is applied as the handling classification of the mail.

If the application destination is mail in step S21, the thread information management unit 131 sets the handling classification and distribution range of the mail to be the same as the handling classification and distribution range of the attached file (step S24).
In step S25, as in step S18, the mail is stored in the mail transfer device according to the mail destination, or the mail is transmitted to the next mail transfer destination.

(Mail reception processing)
FIG. 6 is a flowchart for explaining the “mail reception process” of the confidential information management system of the present invention.
In the mail creation apparatus 11, this process occurs with the reception of mail from the mail transfer apparatus 12 as a trigger. First, the display information generation unit 111 of the mail creation device 11 inquires the thread information management unit 131 using the Message-ID of the received mail, and information on the thread information, handling classification, and distribution range of the mail having the Message-ID. Is checked (step S31).

When information exists in step S31 (in the case of Yes), the display information generation unit 111 receives this information from the thread information management unit 131 (step S32). When information does not exist in step S31 (in the case of No), the process proceeds to step S34.
Next, the display information generating unit 111 configures graphical information to be displayed to the user using the received thread information, handling category, and distribution range information (step S33). For example, a display form as shown in FIG. 9 can be considered.
Next, the display information generation unit 111 displays the mail information as shown in FIG. 9 on the mail information display unit 112 (step S34), and then the user adds the handling classification and / or distribution range of the mail or thread. Then, it is determined whether or not a change operation has been performed (step S35). When the operation has not been performed (No), the display information generation unit 111 ends the process.
When addition or change processing is performed in step S35 (in the case of Yes), the display information generation unit 111 creates Message-ID, handling classification, and distribution range information of the mail that has been added or changed, and creates a thread. It transmits to the information management part 131 (step S36). At this time, information on whether an operation to add or change the mail handling category or distribution range, or an operation to add or change the thread handling category or distribution range, that is, the target of addition or change Information on whether the message is only the mail or the thread is also transmitted. Then, after transmission to the thread information management unit 131, the process proceeds to “policy update processing”.

(Policy update processing)
FIG. 7 is a flowchart for explaining “policy update processing” of the confidential information management system of the present invention.
The thread information management unit 131 determines whether the application target of the handling category, distribution range addition, and change is mail or thread (step S41).
In step S41, when the application target is a thread, the new handling classification and distribution range are applied to all mails of the thread to which the mail to which the addition or change is applied belongs, and the information is stored in the policy information management unit 133 (Step S42).
If the application target is an email in step S41, a new handling category and distribution range are applied to the email to be added or changed, and the information is stored in the policy information management unit 133 (step S43).

(Policy monitoring process)
FIG. 8 is a flowchart for explaining “policy monitoring processing” of the confidential information management system of the present invention.
The thread information monitoring unit 141 has a function for enabling the monitor to monitor mail exchanged within the monitoring range, and displays information on the mail, thread, and distribution range to the monitor. (Step S51). For example, a display form as shown in FIG. 9 can be considered.
The thread information monitoring unit 141 determines whether the monitor has performed an operation of adding or changing the mail or thread handling classification and / or distribution range (step S52). If no operation has been performed (No), the process ends.
When the addition / change process is performed in step S52 (in the case of Yes), the policy information update unit 142 creates Message-ID, handling classification, and distribution range information of the mail that has been added or changed, and creates a thread. It transmits to the information management part 131 (step S53). At this time, information on whether an operation to add or change the mail handling category or distribution range has been performed, or whether an operation to add or change the thread handling category or distribution range has been performed. Information on whether the message is only the mail or the thread is also transmitted.

It is a figure which shows the structure of the confidential information management system of Example 1 by this invention. It is a figure which shows the structure of the confidential information management system of Example 2 by this invention. It is a figure which shows the structure of the confidential information management system of Example 3 by this invention. It is a flowchart explaining the "mail transfer process" of the confidential information management system of this invention. It is a flowchart explaining the "policy update process from an attached file" of the confidential information management system of this invention. It is a flowchart explaining the "mail reception process" of the confidential information management system of this invention. It is a flowchart explaining the "policy update process" of the confidential information management system of this invention. It is a flowchart explaining the "policy monitoring process" of the confidential information management system of this invention. It is a figure which shows the display image of information, such as the handling classification provided to the mail / thread. It is a figure which shows the example of the attachment file of the electronic mail used as the process target in this invention.

Explanation of symbols

11, 20 Mail creation device 12, 16, 21 Mail transfer device 13, 18, 22 Mail information management device 14, 19, 23 Mail information monitoring device 15 Mail display device 111, 162, 201 Display information generation unit 112, 202 Mail information Display unit 121, 161, 211 Mail information transmission unit 131, 181, 203, 222 Thread information management unit 132, 182, 204, 223 Structure information management unit 133, 183, 205, 224 Policy information management unit 134, 184, 206, 225 Mail ID information management unit 141, 191, 231 Thread information monitoring unit 142, 192, 232 Policy information update unit 221 Thread information distribution unit

Claims (7)

When a mail is received and it is determined that there is an addition or change in the handling classification and / or distribution range of the received mail or the thread to which the mail belongs and a correlation mail collection, the handling classification that has been added or changed A means of creating distribution scope information;
When the information of the handling category and distribution range that has been added or changed is received, and the application target of addition or change is a set of threads and correlated mails, the entire set of threads and correlated mails Apply new handling categories and distribution ranges to emails, store information in the database, and if the target of addition or change is emails, apply new handling categories and distribution ranges to the emails. Means for storing information in a database;
A confidential information management system comprising: A mail forwarding means that has a function of forwarding mail, checks whether there is an attached file for the received mail, and extracts an email handling classification and distribution range information from the attached file when the attached file exists,
Based on the mail handling classification and distribution range information extracted by the mail transfer means, it is determined whether the handling classification and distribution range are applied to mail or the thread to which the mail belongs and a set of correlated mails. However, when the application destination is a set of threads and correlated mails, the confidentiality range of the handling classification of the thread and the correlated mail set and the confidentiality range of the handling classification extracted from the attached file And when the confidential range of the handling classification of the thread and correlated mail set is wider than the confidential scope of the attachment handling classification, the thread and correlated mail set Update the handling classification and distribution scope of the attachment, and handle and distribute the attached file If the scope of confidentiality of the handling classification of the thread and correlated mail set is narrower than the scope of confidentiality of the attachment handling classification, the thread and correlated mail collection If the application destination is e-mail without changing the handling classification and distribution scope of the e-mail, the e-mail information management means that makes the handling classification and distribution scope of the e-mail the same as the handling classification and distribution scope of the attached file,
A confidential information management system comprising: It is possible to monitor the mail transmission / reception status, and has the function of adding and changing the handling classification and distribution range of the mail and the thread to which the mail belongs and the correlated mail set, and the mail or thread and the correlation. Email information monitoring means for sending information on the handling category and distribution range that has been added or changed when it is determined that there is an addition or change in the handling category and / or distribution range of a set of emails,
When information on the handling category and distribution range that has been added or changed is received from the mail information monitoring means, and the application target of the addition or change is a set of threads and correlated mails, the thread and correlated information Apply new handling categories and distribution ranges to all emails in a set of emails, save the information in the database, and if the target of addition or change is email, new handling categories and distribution for the emails Email information management means to apply the scope and save the information in the database;
A confidential information management system comprising: The received mail is checked for the presence of an attached file, and if the attached file exists, the mail handling classification and distribution range information is extracted from the attached file, and the mail or the thread to which the mail belongs and the correlated mail A mail forwarding means for sending information on the handling category and distribution range that has been added or changed when it is determined that there is an addition or change in the handling category and / or distribution range of the set of
From the handling category and distribution range information of the email extracted from the attached file, it is determined whether the handling category and the distribution range are applied to a mail or a set of threads and correlated emails. If it is a collection of threads and correlated mail, compare the confidentiality of the handling classification of the thread and correlated mail collection with the confidentiality of the handling classification extracted from the attachment; When the confidential range of the handling classification of the thread and correlated mail set is wider than the confidential scope of the attachment handling classification, the handling classification and distribution of the thread and correlated mail set Update the scope so that it is the same as the handling category and distribution scope of the attached file. If the confidentiality range of the handling category of the mail and correlated mail set is narrower than the confidentiality range of the attachment handling category, the handling classification and distribution range of the thread and correlated mail set If the application destination is email, the handling classification and distribution scope of the email are the same as the handling classification and distribution scope of the attached file, and the handling classification and distribution scope that have been added or changed are as follows: If the target of addition or change is a set of threads and correlated mails, new handling classifications and distribution ranges are set for all the mails of the threads and correlated mail sets. Apply to save information in the database, and when the subject of addition or change is email, a new And mail information management means for storing the information in the database by applying handling division, the distribution range,
A confidential information management system comprising: Receiving an email and determining whether the received email or a thread to which the email belongs and a handling category and / or distribution range of a set of correlated emails are added or changed;
When a handling classification and / or distribution range of a thread and correlated mail set is added or changed, a new handling classification for all mail of the thread and correlated mail set, Apply the distribution range to save information in the database, and when a mail handling category and / or distribution range is added or changed, apply a new handling category or distribution range to the email. Storing information in a database;
A method for managing confidential information, comprising: Check whether there is an attached file for the received email, and if there is an attached file, extract the email handling classification and distribution range information from the attached file;
Based on the handling category and distribution range information extracted from the attached file, it is determined whether the handling category and the distribution range are applied to the email or the thread to which the email belongs and a set of correlated emails. Steps,
When the application destination is a set of threads and correlated mail, the confidential range of the handling classification of the thread and correlated mail set and the confidential range of the handling classification extracted from the attached file In comparison, when the confidential range of the handling classification of the thread and the correlated mail set is wider than the confidential scope of the attachment handling classification, the handling of the thread and the correlated mail set is handled. Update the classification and distribution range to be the same as the handling classification and distribution scope of the attached file, and the confidentiality range of the handling classification of the thread and the set of correlated mails is the confidentiality of the attachment handling classification. If it is narrower than the range, the handling classification of the thread and correlated mail set Without changing the pre-distribution range, when applied destination is the mail includes the steps of handling division and distribution range of the mail is the same as the handling classification and distribution range of attachments,
A method for managing confidential information, comprising: On the computer,
Receiving an email and determining whether the received email, the thread to which the email belongs, and the handling category and / or distribution range of a collection of correlated emails are added or changed;
When a handling classification and / or distribution range of a thread and correlated mail set is added or changed, a new handling classification for all mail of the thread and correlated mail set, Apply the distribution range to save information in the database, and when a mail handling category and / or distribution range is added or changed, apply a new handling category or distribution range to the email. Storing information in a database;
A program for running

Images