JP2010170575A - Method of controlling data transfer and computer readable recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method of controlling data transfer via a network and computer readable recording medium. <P>SOLUTION: A server, which is applied to an information communication safety controlling system, includes steps: receiving a transmission request of the first data and the first data transmitted from the first user of the first client; transmitting the transmission request and the first data to the second client whose second user of the second client has a stronger transmission right than the first user; receiving from the second client an examination outcome which is created by the second user and a result of determination about the transmission request and the first data; and creating an integrity confirmation file corresponding to the first data by an integrity operating method to transmit it to the first client the first integrity confirmation file which is used for confirming the integrity between the second data and first data when the first user transmits the second data. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a data transmission control method and a computer-readable recording medium, and more particularly to a control method for controlling an action of transmitting data via a network.

  In today's society, the majority of corporate activities are closely related to communication information technology. In particular, efficiency and convenience of communication information technology is essential for communication, data collection, data transmission, technology research and development, and sales. It is. For example, in the case of data transmission between departments within a company or outside the company, at present, the transmission method using a network is mostly used instead of the transmission method using a pull-out storage device or a paper file.

  The benefits of transmitting data over a network are great, fast and convenient, as well as reduce costs such as waiting and transmission manpower and time, and reduce paper usage, while at the same time It becomes convenient in terms of preservation, and it is possible to save corporate resources accordingly.

  In order to efficiently use the merits of data transmission over the network, in addition to configuring the basic network environment, it is necessary to meet demand on the other side, the most important thing here is more confidential and secure This is a consideration of sex.

  Data transmission over the network is fast and convenient, but if there is no management system, there is a problem that employees inside the company voluntarily transmit data over the network and leak corporate secret data to the outside Become serious.

  The current solution to the above problem is as follows.

  One is a method for preventing leakage of confidential data in a clear form by automatically encrypting all data transmitted over a network. Such a method prevents a situation where confidential data is used without permission from a recipient of data that does not have a compatible decryption key, and can be used for crime prevention, but there are various aspects in updating or changing the encryption key. Inconvenient, and it is impossible to distinguish the confidentiality level for each data.

  The other is a method of determining whether or not to grant permission to transmit data over the network by checking the user's identity and authority by setting restrictions on user login and setting authority. .

  Although such a method can effectively control the behavior of unspecified users in the enterprise to transmit data, it is not flexible in use, and unspecified users transmit confidential data. Possibilities or needs are ignored.

  When an unspecified user transmits confidential data by the above method, ask the system administrator to change the authority, or have the supervisor of an unspecified user or a user with relatively high authority transmit it. Not only is it convenient to use, but it can also create security holes when authority changes, and at the same time, the boss of an unspecified user can perform data transmission activities. I can't figure it out.

  Therefore, how to solve the above-mentioned problems reduces the inconvenience of use on the data receiving side, confirms the confidentiality of data to be transmitted and the necessity for transmission, and has both safety and flexibility. Whether or not it is possible to fully demonstrate the convenience of data transmission through a network is an issue to be solved.

  For the above-mentioned problems, the main object of the present invention is to control the data transmission so that the data transmission can be controlled by the internal control and examination system while having both safety and flexibility in use. A method and computer-readable recording medium are provided.

  The data transmission control method according to the present invention is applied to an information communication safety control system. The information communication safety control system is composed of at least one server, a first client, and a second client, and the server is capable of identifying the identity of a plurality of users who use the first client and the second client.

  There is a slave relationship between users, and the corresponding transmission authority is set separately.

  In order to achieve the above object, a data transmission control method according to the present invention will be described.

  First, the first data transmission request and the first data transmitted from the first user are received from the first client. Subsequently, the transmission request and the first data are transmitted to the second client. The second client is used by the second user, but the first user has a slave relationship with the second user, and therefore the second user has higher transmission authority than the first user.

  Subsequently, the examination result generated from the second user is received from the second client. The examination result is based on the request for transmission and the judgment on the first data.

  Finally, a consistency check file corresponding to the first data is generated by an integrity calculation method, and the consistency check file is transmitted to the first client. The consistency check file is used to check the consistency between the second data and the first data when the first user transmits the second data.

  The computer-readable recording medium according to the present invention is a control method for recording data transmission. The above-described method is applied to an information communication safety control system.

  The information communication safety control system is composed of at least one server, a first client, and a second client, and the server can identify the status of a plurality of users who use the first client and the second client. In addition, a slave relationship exists between the above-described users, and the corresponding transmission authority is separately provided.

  The data transmission control method of the present invention is to control the data transmission action of the first user according to the above-described steps.

  As described above, the data transmission control method according to the present invention is basically a well-known method of operating an encryption key in order to control and manage the inside of the data transmission side without involvement of the data transmission side. Therefore, it is possible to avoid a situation in which use of the encryption key is inconvenient due to renewal or change of the encryption key.

  In addition, when the data transmission control method according to the present invention is used, even if a general unspecified user needs to transmit confidential data, the system administrator can change the authority or the general use can be performed. There is no need to have the user's boss or a relatively privileged user transmit.

  In addition, since the authority to temporarily transmit confidential data can be acquired by the examination system of this method, it is very convenient to use, and a situation in which a security hole is not generated when the authority is changed does not occur. At the same time, because of the screening system, the supervisor of an unspecified user can immediately grasp the data transmission action, and at the same time, accepts or rejects the request for data transmission of the unspecified user. Judgment is possible, and the confidentiality level of each data can be flexibly assigned or adjusted.

  Therefore, the data transmission control method according to the present invention reduces the inconvenience in use on the data receiving side, and is also safe and flexible for confirming the confidentiality of data to be transmitted and the necessity for transmission. It is possible to fully demonstrate the convenience of data transmission through the network.

It is a schematic diagram which shows the Example of the environmental structure to which the control method of the data transmission of this invention is applied. 3 is a process flowchart illustrating a method for controlling data transmission according to an embodiment of the present invention;

  Preferred embodiments of the present invention will be described below in detail with reference to the accompanying drawings. In addition, the following Example is only what showed the preferred embodiment of this invention, and the technical scope of this invention is not limited to the following Example itself at all.

  As shown in FIG. 1, the data transmission control method according to the present invention is applied to an information communication safety control system 100.

  The information communication safety control system 100 includes a server 110, a first client 120, and a second client 130.

  Here, the “client” of the first client and the second client refers to a computer that receives information and services from a server.

  Even when an arbitrary unspecified user uses the first client 120 or the second client 130, he / she must log in by inputting the user's identity and password. By transmitting and checking the input user's identity and password to the server 110, it is confirmed that the user of the first client 120 or the second client 130 is an authorized user, and at the same time The identity of the person can be acquired.

  Further, the server 100 stores data relating to the user's identity, including slave relationships between the users and their respective transmission rights.

  The above-mentioned slavery relationship can be, for example, a relationship between a department head and a department staff, or a relationship between a research and development plan leader and a staff member. The transmission authority differs depending on the relationship.

In the present embodiment, the first client 120 is used by the first user logging in, and the second client 130 is used by the second user logging in.
Further, when the second user is a supervisor of the first user, the authority for data transmission does not belong to the first user, but belongs to the second user.

  As shown in FIG. 2, a data transmission control method according to the present invention will be described.

  First, the transmission request and the first data of the first data transmitted from the first user are received from the first client 120 (S201).

  The first user using the first client 120 opens the edit transmission request interface by a pop-up menu, selects the data to be transmitted, inputs the reason for transmission, and then transmits the transmission request and the first request. One data is transmitted to the server 110.

  In addition to the above communication information, the transmission request includes the identity of the first user, and the identity of the first user refers to another user who has a slave relationship with the first user in a subsequent step. It is used to look for and is the basis for another user's review.

  Still further, after the transmission is received, the transmission request and the first data are stored in the server 110 for use in a subsequent sampling inspection.

  After receiving the transmission request and the first data from the first client 120, the server 110 receives another data having a slave relationship with the first user based on the data relating to the user's identity stored in the server 110. Search for a user, ie a second user.

  Subsequently, after it is determined that the party to receive the transmission request and the first data is the second user, the transmission request and the first data are transmitted to the second user using the second client 130 ( S202) to provide the basis for examination to the second user.

  After transmitting the transmission request and the first data to the second client 130, it is presented to the user through an interface such as a pump-up window. The second user can obtain information requesting transmission from the interface, such as the identity of the user who requested transmission and the reason for the transmission, and if necessary, detailed information can be obtained by opening the first data. Can be obtained.

  After the second user understands the content of the transmission request, the second user can respond with the same interface whether the result of examination, that is, whether or not to agree with the transmission action. The above-described examination result is received and stored by the server 110 so as to be used for subsequent processing and sampling inspection at a later date (S203).

  After receiving the examination result, the server 110 executes subsequent processing based on the examination result. If the examination result is “disagree”, the server 110 transmits a transmission rejection signal to the first client 120. The transmission rejection signal can be displayed by the edit transmission request interface or another interface, and the first user can abandon the transmission or modify the transmission request depending on the situation.

  On the other hand, if the examination result is “agreement”, the server 110 generates a consistency check file corresponding to the first data by the consistency calculation method. The consistency calculation method may be a hash calculation method such as various versions of a security hash function (SHA, Secure Hash Algorithm) or another calculation method.

  Subsequently, the generated consistency check file is transmitted and stored in the first client 120 (S204), so that when the first user transmits the data, the consistency between the transmitted data and the first data, that is, the transmission. It can be confirmed whether the data to be processed is the first data. Specifically, when the first user transmits data, the first client generates a result for the data to be transmitted by the same calculation method as the consistency calculation method used by the server 110, and then The result is compared with the contents of the consistency determination file.

  If both are the same, the data to be transmitted and the first data are found to be the same, so this transmission operation can be executed smoothly.

  If they do not match, it is found that the data to be transmitted is different from the first data, so this transmission operation is not executed.

  After the transmission operation is successfully executed, the first user deletes the consistency determination file stored in the first client 120 in order to avoid a situation where the first data is repeatedly transmitted. Therefore, when the first user intends to transmit the first data again, it is necessary to obtain the examination / consent of the second user again according to the above-described steps.

  The data transmission control method according to the present invention enables recording on a computer-readable recording medium and can be applied to an information communication safety control system.

  The above-mentioned information communication safety control system is composed of at least one server, a first client, and a second client, and the server identifies the identity of a plurality of users used in the first client and the second client. Is possible.

  In addition, there is a slave relationship between the above-mentioned users, and each has a corresponding transmission authority.

  The data transmission control method described above is to control the data transmission action of the first user according to steps S201 to S204.

  As described above, in the data transmission control method according to the present invention, in order to control and manage the inside of the data transmission side without the participation of the 0 data transmission reception side, it is well known that the encryption key is used. It is possible to avoid a situation where the use of the encryption key is renewed or changed as in the method, which is inconvenient to use.

  In addition, when the data transmission control method according to the present invention is used, even if a general user needs to transmit confidential data, the system administrator can change the authority or use it arbitrarily. There is no need to have the user's boss or a relatively privileged user transmit.

  In addition, the screening system of this method makes it possible to temporarily acquire the authority to transmit confidential data, which is very convenient for use and creates a security hole when the authority is changed. do not do. Because it is a simultaneous screening system, the supervisor of an unspecified user can immediately understand the data transmission action and can judge at the same time that he / she can accept or reject the request for data transmission of the unspecified user. Therefore, the confidential level of each data can be flexibly assigned or adjusted.

  Therefore, the data transmission control method according to the present invention reduces inconvenience in use on the data receiving side, confirms the confidentiality of data to be transmitted and the necessity for transmission, and has both safety and flexibility. It is also possible to fully demonstrate the convenience of data transmission through the network.

  The above description is only a preferred embodiment of the present invention and does not limit the present invention. It is within the scope of the present invention to make equivalent changes or modifications without departing from the spirit and scope of the present invention. Is.

100: Communication information safety control system 110: Server 120: First client 130: Second client S201: Receives transmission request for first data transmitted from the first user and first data from the first client.
S202: Transmit the transmission request and the first data to the second user used in the second client.
S203: The examination result is received and saved at the same time.
S204: A consistency determination file is generated, and is transmitted and stored in the first client.

Claims (14)

The information communication safety control system is composed of at least one server, a first client, and a second client, and the server includes a plurality of users using the first client and the second client. it is possible to identify the identity and a vassal relationship exists, the control method of data transmission comprising separately transmission permission each user of corresponding between each user,
The server receives a transmission request for the first data transmitted from the first user and the first data from the first client;
The server transmits the transmission request and the first data to a second client, the second client is used by a second user, and the first user is in a slave relationship with the second user. The second user has a higher transmission authority than the first user,
The server receives an examination result generated by the second user from a second client, wherein the examination result is based on a judgment on the transmission request and the first data;
When the examination result is a negative result, the server transmits data transmission rejection information to the first client . and transmitting to generate a first coherency check file corresponding to one data, and the first consistency verification file to the first client,
When the first user actually transmits data, the first client compares the first consistency check file with the second consistency check file, and the second consistency check file is consistent with the first client. A step that is generated for data to be transmitted by an integer arithmetic method;
When the consistency of the first consistency check file and the consistency of the second consistency check file are the same, data is transmitted, and the consistency of the first consistency check file and the second consistency check file are transmitted. A method of controlling data transmission, comprising: a step of not transmitting data when the penetrability is different .   The data transmission control method according to claim 1, wherein the transmission request includes the identity of the first user.   3. The data transmission control method according to claim 2, further comprising a step of searching for another user having a slave relationship with the first user.   2. The data transmission control method according to claim 1, wherein the consistency calculation method is a hash calculation method. 2. The data transmission control method according to claim 1, wherein the first consistency determination file is deleted after the transmission of the first data is completed.   The data transmission control method according to claim 1, further comprising: transmitting a transmission rejection signal to the first client.   The data transmission control method according to claim 1, further comprising a step of storing the transmission request, the first data, and the examination result. A data transmission control method is recorded, the data transmission control method is applied to an information communication safety control system, and the information communication safety control system is composed of at least one server, a first client, and a second client, and the server includes the server It is possible to identify the identity of multiple users who use the first client and the second client, and there is a slave relationship between each user, and each user has a corresponding transmission authority. A computer-readable recording medium separately comprising:
The method of the data transmission, a step wherein the server to receive the transmission according to the first data of the first data transmitted from the first user from the first client,
The server transmits the first data and the transmission according to the second client, the second client is used by a second user, the first user is in relation to enslaved to said second user The second user has a higher transmission authority than the first user,
A step of examination results the server is generated by the second user received from the second client, the examination result is due to determine for said first data and said transmission claims,
When the examination result is a negative result, the server transmits data transmission rejection information to the first client, and when the examination result is a positive result, the server performs the process according to an integrity calculation method. and transmitting to generate a first coherency check file corresponding to one data, and the first consistency verification file to the first client,
When the first user actually transmits data, the first client compares the first consistency check file with the second consistency check file, and the second consistency check file is consistent with the first client. A step that is generated for data to be transmitted by an integer arithmetic method;
When the consistency of the first consistency check file and the consistency of the second consistency check file are the same, data is transmitted, and the consistency of the first consistency check file and the second consistency check file are transmitted. A computer-readable recording medium , comprising: a step of not transmitting data if the consistency of data is different .   The computer-readable recording medium according to claim 8, wherein the transmission request includes the identity of the first user.   The computer-readable recording medium according to claim 9, further comprising a step of searching for another user having a slave relationship with the first user.   9. The computer-readable recording medium according to claim 8, wherein the consistency calculation method is a hash calculation method. 9. The computer-readable recording medium according to claim 8, wherein the first consistency determination file is deleted after the transmission of the first data is completed.   The computer-readable recording medium according to claim 8, further comprising a step of transmitting a transmission rejection signal to the first client.   The computer-readable recording medium according to claim 8, further comprising a step of storing the transmission request, the first data, and the examination result.

Images