JP2010282304A - Data management retrieval system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data management retrieval system for reliably limiting disclosure of a column to be hidden according to a user, and reducing a development cost without developing a special function for each user. <P>SOLUTION: A retrieval application 12 adds a role ID to the user 11. A database operating section 13 acquires column information on a table selected by the user, and refers to a column display control table 4 to determine only the columns approved by the role ID, as columns to be displayed. The retrieval application 12 searches according to retrieval conditions set by the user, for the column selected by the user out of the columns to be displayed. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a data management and retrieval system capable of managing and further searching for data related to equipment in the business of maintaining and managing equipment regardless of field, for example, managing power equipment of an electric power company engineering department. In addition, the present invention relates to a data management and retrieval system for business such as maintenance and management of road facilities in local governments.

  Conventionally, when retrieving data stored in a database and extracting the retrieved data outside the system, all tables and columns (items) stored in the system have been targeted. In recent years, however, the use of the system has diversified and the scope of the system has been expanded. Even data stored in a database can be accessed only by specific users. ing.

  For example, the name of the construction work and the construction period can be disclosed to all users, but the contract amount etc. are to be viewed only by some restricted users. Conventionally, there is no such system, and a function for operating the corresponding data is prepared for each user and the function itself is restricted.

  However, recent data management and retrieval systems store various data in order to determine the optimal replacement time for equipment, so if restrictions are imposed on each function, it may not be possible to extract the desired data. There is also. For this reason, there is a demand for a mechanism that allows only some users to view the items to be browsed by setting what can be browsed for each user and what cannot be browsed for the items to be browsed by control in the data management search system. .

  In order to meet such a demand, there has been a data management search system as shown below. That is, in addition to information and databases, a user authentication machine for identifying system users, a user management database in which available users are registered, and information collected from various databases to generate information to be displayed on the client When a user accesses the system from the terminal through the Internet or an intranet, the user input is compared with the contents of the user management database, and the system can be used by a legitimate user. The system limits the range that can be referred to by the user and the contents that can be operated by the access range information and access authority information of the database (see Patent Document 1).

JP 2003-178149 A

  In the conventional data management / retrieval system, the scope of management is wide, and there are many users including affiliated companies. For this reason, the inspection result of the device input by the user of the affiliated company to which the work is entrusted, the order amount and the work artificiality managed by the parent company exist in the same system. As a result, there is a problem that the user of the affiliated company becomes aware of the ordering information on the consignment side, resulting in a contract problem. In the system disclosed in Patent Document 1, the range that can be referred to by the user is limited, but the range that can be referred to for each column is limited, and the search cannot be performed according to the search condition set by the user. Therefore, there is a possibility that the same problem as described above may occur, and there is a problem that it is necessary to develop a special function for each user.

  This invention has been made to solve the above-mentioned problems, reliably restricting the disclosure of columns to be concealed according to the user, without the need to develop a special function for each user, An object of the present invention is to provide a data management search system that can reduce development costs.

  A data management search system according to claim 1 of the present invention is capable of searching a table stored in a database and columns constituting the table by inputting a search input signal. Refer to the column display control table that defines the means for assigning the role ID, the means for obtaining the column information constituting the table selected by the search input signal, and the column whose display is restricted for the role ID. As a result, only the columns whose display is permitted for the role ID are determined as display target columns, and the column selected by the search input signal from the display target columns is searched according to the search condition set by the search input signal. Means.

  A data management search system according to claim 2 of the present invention is capable of searching a table stored in a database and columns constituting the table by inputting a search input signal. By referring to the table display control table that defines the means for assigning the role ID and the table whose display is restricted for the role ID, only the tables that are permitted to be displayed for the role ID are determined as display target tables. Refer to the column display control table that defines the column for which display is restricted for the role ID, the means for acquiring column information constituting the table selected by the search input signal from the display target table To determine only the columns that are allowed to be displayed in the role ID as display target columns and display target columns. Means for searching for a column selected by the search input signal in accordance with the search conditions set by the search input signal.

  According to the data management search system of the first aspect of the present invention, it is possible to search the table stored in the database and the columns constituting the table by inputting the search input signal. A means for assigning a role ID to a signal, a means for obtaining column information constituting a table selected by a search input signal, and a column display control table defining columns whose display is restricted for the role ID. By referencing, according to the means for determining only the columns permitted to be displayed in the role ID as display target columns, and the search conditions set by the search input signal for the column selected from the display target columns by the search input signal Search means, so you can create columns that cannot be viewed by specific users. Affiliates there is no need to develop special features for employees, it is possible to reduce the costs incurred at the time of system development compared with the prior art. In addition, maintenance costs can be reduced because there is no need to create special functions.

  According to the data management search system according to claim 2 of the present invention, it is possible to search the table stored in the database and the columns constituting the table by inputting the search input signal. Display only tables that are permitted to be displayed for the role ID by referring to the table display control table that defines the means for assigning the role ID to the signal and the table for which display is restricted for the role ID. Refer to the column display control table that defines the column for which display is restricted with respect to the role ID, the means for obtaining the column information constituting the table selected by the search input signal from the display target table By doing so, the means for determining only the columns that are permitted to be displayed in the role ID as display target columns and the display pair Means for searching for the column selected by the search input signal among the elephant columns according to the search condition set by the search input signal, so that the table which is not to be displayed is stored in the database itself It is possible to improve the confidentiality of information.

It is a block diagram which shows the database structure in the equipment management system by Embodiment 1 of this invention. It is a table | surface which shows the example of data of a database. It is a table | surface which shows the example of data of a database. It is a block block diagram which shows a software structure. It is a block diagram which shows a hardware structure. It is a flowchart which shows operation | movement of the equipment management system by Embodiment 1 of this invention. It is a flowchart which shows operation | movement of the equipment management system by Embodiment 2 of this invention. It is a flowchart which shows operation | movement of the equipment management system by Embodiment 3 of this invention. It is a flowchart which shows operation | movement of the equipment management system by Embodiment 4 of this invention.

Embodiment 1 FIG.
Hereinafter, an embodiment of the present invention will be described with reference to the drawings. 1 is a configuration diagram showing a database configuration in a data management search system according to Embodiment 1 of the present invention, FIGS. 2 and 3 are tables showing examples of database data, FIG. 4 is a block configuration diagram showing a software structure, and FIG. Is a block diagram showing the hardware structure, and FIG. 6 is a flowchart showing the operation.

  1, 2, and 3, the table definition 1 manages the table IDs and table names of all tables managed by the data management search system. The specific contents of the table are as described in the inspection information table 8 and the contract information table 9 described later. In the table display control table 2, roles for the table managed by the table definition 1 are stored. Here, the role means an authority capable of searching the table. In the column definition table 3, the column ID, column name, and data type of the column existing in the table managed in the table definition 1 are managed.

  In the column display control table 4, roles for the columns managed by the column definition table 3 are stored. In this case, the role refers to the authority to search the column. The role table 5 manages roles in the data management search system and defines a role ID corresponding to the affiliation ID. Here, the role ID refers to an identifier for identifying a group of a plurality of users or a plurality of affiliations to which authority to search for tables and columns is assigned.

  The affiliation table 6 manages affiliation IDs and affiliation names managed in the data management search system. The user table 7 manages user IDs, affiliation IDs, and user names of users. The inspection information table 8 is a table that is a sample to be searched, and has columns such as an inspection subject name and an inspection date as attributes. The contract information table 9 is a table that is a sample to be searched, and has columns such as contract destination and contract amount as attributes. Thus, in each table (table), columns (items) constituting the table are subdivided, and the table is constituted by these columns and the data described in each column.

  In FIG. 4, a user (user) 11 executes a search application 12, and the user 11 actually uses the search application 12. The database operation unit 13 determines the tables and columns that can be used by the user 11 and returns the results to the search application 12. The database 14 constitutes a relational database (RDBMS), and is a database having the structure shown in FIGS.

  The database operation unit 13 searches the database 14 for data, the search application 12 operates the database operation unit 13, and the user 11 operates the search application 12.

  In FIG. 5, the database 14 is arranged in the database server device 21. In the application server device 22, a database operation unit 13 and a search application 12 are arranged. The display device 23 displays the result processed by the application server device 22 and displays search conditions on the application server device 22 on a screen.

  Next, column display restrictions by the user 11 will be described. In the data management / retrieval system, these are managed in order to assign an ID called a role (an authority to search a table) to an ID of the user 11. That is, the role ID which is the identifier described above is managed. The column definition table 3 defines what columns are defined in the table to be searched. In the column display control table 4, the role ID and the column ID defined in the column definition table 3 are defined as a set. That is, in this case, it means that the user belonging to the role ID corresponding to each column ID is not authorized to search the column.

  The combination of column ID and role ID stored in the column display control table 4 prevents the user 11 of the corresponding role ID from searching for the corresponding column. A column whose display is restricted is defined. With this configuration, the column display for the user 11 can be restricted for any column.

  Next, a case where the user 11 searches for inspection information 8 (table ID = 1) will be described with reference to FIG. The user “A0001” logs in to the data management search system via the display device 23, so that a search input signal including user information is input (STEP 601). The search application 12 acquires the role ID “ROLE0001” for the user “A0001” who has input the search input signal (STEP 602). The user “A0001” inputs a search input signal for searching for data in the inspection information 8, and the search application 12 is executed in the data management search system (STEP 603).

  The search application 12 displays all table names in the data management search system on the display device 23 (STEP 604). The user “A0001” selects an “inspection information” table from the search input signal (STEP 605). The database operation unit 13 acquires column information (column ID, column name, data type) related to inspection information from the column definition table 3 (STEP 606). The database operation unit 13 refers to the column display control table 4 and acquires only the columns permitted for “ROLE0001” (STEP 607).

  That is, in the column display control table 4, since “ROLE0001” is excluded from the display of the contracted contractor and the contract amount, only the other columns are targeted. The search application 12 determines only columns whose display is not restricted as display target columns (STEP 608). The search application 12 displays the result in STEP 608 on the display device 23 (STEP 609).

  The user “A0001” selects a column to be searched from the displayed columns by a search input signal (STEP 610). The user “A0001” selects a column to be used as a search condition from the displayed columns by a search input signal (STEP 611). For example, “inspection date” in the inspection information 8 is selected. The user “A0001” searches by setting a search condition in the column by inputting a search input signal (STEP 612). Here, the search condition is, for example, set as “2006/10/1 to 2007/12/1”. The search application 12 executes a search based on the above information (STEP 613). The search application 12 displays the search result (STEP 614). For example, the inspection names 1, 2, and 6 are displayed under the above search conditions. The user “A0001” confirms the search result on the display device 23 (STEP 615).

  With the above configuration, when the user “A0001” is an affiliated company employee, the user “A0001” can set the display restriction on the contractor contractor and the contract amount in the inspection information 8 so that the user “A0001” Although the amount cannot be searched, if the user is a consignment employee, the contract amount can be searched by not setting display restrictions on the contract amount. And limit the disclosure of information that should be kept secret. Therefore, it is not necessary to develop special functions for affiliated company employees, and the development cost can be reduced.

Embodiment 2. FIG.
FIG. 7 is a flowchart showing the operation of the data management / retrieval system according to Embodiment 2 of the present invention. In the first embodiment, the case where the column display is restricted has been described. However, in this embodiment, the present invention is applied to the table, and the restriction that the table itself is not set as a search target is provided. .

  List names of tables managed in the system are stored in table definition 1. The table display control table 2 defines the role ID and the table ID defined in the table definition 1 as a set. By the combination of the table ID and the role ID stored in the table display control table 2, the user of the corresponding role ID cannot search for a table having a specific table ID. That is, the table display control table 2 is set to the role ID. In contrast, a table whose display is restricted is defined. This restricts the display to the user for any table name.

  Next, the operation will be described with reference to FIG. The user “A0001” logs in to the display device 23 of the data management search system, and a search input signal including user information is input (STEP 701). The search application 12 acquires the role ID “ROLE0001” for the user “A0001” who has input the search input signal (STEP 702). The user “A0001” inputs a search input signal for searching the contract information table 9, and the search application 12 is executed in the data management search system (STEP 703). The search application 12 acquires all tables in the system from the table definition 1 (STEP 704).

  The database operation unit 13 acquires a table ID permitted to be displayed in “ROLE0001” from the table display control table 2 (STEP 705). Since the display of contract information is limited in the table display control table 2 shown in FIG. 2, the table ID related to the contract information is not acquired. The search application 12 determines only tables that are permitted to be displayed as display target tables.

  At this time, the contract information table 9 is not permitted to “ROLE0001”, and thus is not a display target table. The search application 12 displays this result (STEP 706). The user “A0001” tries to select a table to be searched from the tables displayed on the display device 23, but cannot search because the contract information table is not displayed, so the search application 12 is terminated (STEP 707). Then, the user “A0001” stops the search process (STEP 708). If the contract information is in the display target table, the procedure after STEP 605 in FIG. 6 is performed.

  By configuring as described above, it becomes possible to make the entire table composed of only information to be kept secret such as the contract information 7 private to affiliated company employees. Although all the columns of the contract information may be hidden by the operation shown in the first embodiment, it cannot be kept secret that the contract information is stored in the database. On the other hand, according to the present embodiment, it is possible to conceal that the contract information is stored in the database, so that there is an effect of further improving the confidentiality of the information.

Embodiment 3 FIG.
FIG. 8 is a flowchart showing the operation of the data management / retrieval system according to Embodiment 3 of the present invention. In the present embodiment, column display is restricted in affiliation units. In the first embodiment and the second embodiment, the role ID is set for each user. However, in this embodiment, this role ID is assigned to the organization (affiliation) to which the user belongs, The column display can be restricted for all users in a certain affiliation.

  When the user “A0001” logs in to the data management search system, a search input signal including user information is input (STEP 801). The search application 12 acquires from the user table 7 the affiliation ID “101” to which the user “A0001” that has input the search input signal belongs (STEP 802). The search application 12 acquires the role ID “ROLE0001” for “101” from the role table 5 (STEP 803). The user “A0001” inputs a search input signal for searching for data related to inspection information, and the search application 12 is executed in the data management search system (STEP 804). The search application 12 displays all table names in the system on the display device 23 (STEP 805).

  The user “A0001” selects an inspection information table from the search input signal (STEP 806). The database operation unit 13 acquires column information in the inspection information table from the column definition table 3 (STEP 807). The database operation unit 13 refers to the column display control table 4 and acquires only the columns permitted for “ROLE0001” (STEP 808). The search application 12 determines only columns whose display is not restricted as display target columns (STEP 809).

  The search application 12 displays the result in STEP 809 on the display device 23 (STEP 810). The user “A0001” selects a column to be searched from the displayed columns by a search input signal (STEP 811). The user “A0001” selects a column to be used as a search condition from the displayed columns by a search input signal (STEP 812). The user “A0001” searches by setting a search condition in the column by inputting a search input signal (STEP 813). The search application 12 executes a search based on the above information (STEP 814). The search application 12 displays the search result (STEP 815). The user “A0001” confirms the search result on the display device 23 (STEP 816).

  By configuring as described above, it is possible to set the same column-by-column display restriction for all users belonging to an arbitrary organization. As the number of users of the system increases, the number of role tables increases when role IDs are assigned to each user. However, by assigning role IDs to affiliations, the number of role IDs managed in the system can be reduced, and maintenance costs can be reduced.

Embodiment 4 FIG.
FIG. 9 is a flowchart showing the operation of the data management / retrieval system according to Embodiment 4 of the present invention. In the present embodiment, the table display in the affiliation unit is limited. When the column display restriction shown in the third embodiment is applied to a table, a restriction that all users belonging to an arbitrary affiliation cannot search the table itself can be provided.

  Next, the operation will be described with reference to FIG. When the user “A0001” logs in to the data management search system, a search input signal including user information is input (STEP 901). The search application 12 acquires from the user table 7 the affiliation ID “101” to which the user “A0001” that has input the search input signal belongs (STEP 902). The search application 12 acquires the role ID “ROLE0001” for the affiliation “101” from the role table 5 (STEP 903). The user “A0001” inputs a search input signal for searching the contract information table, and the search application 12 is executed in the data management search system (STEP 904).

  The search application 12 acquires all table names in the system from the table definition 1 (STEP 905). The database operation unit 13 acquires the table ID permitted for “ROLE0001” from the table display control table 2 (STEP 906). Since the display of contract information is limited in the table display control table 2 shown in FIG. 2, the table ID related to the contract information is not acquired. The search application 12 determines only tables that are permitted to be displayed as display target tables.

  At this time, the contract information table is not permitted to “ROLE0001” and therefore is not a display target table. The search application 12 displays this result on the display device 23 (STEP907). The user “A0001” tries to select a table to be searched from the tables displayed on the display device 23, but cannot search because the contract information table is not displayed, so the search application 12 is terminated (STEP 908). Then, the user “A0001” stops the search process (STEP 909). If the contract information is in the display target table, the procedure after STEP 605 in FIG. 6 is performed.

  By configuring as described above, it is possible to set display restrictions in the same table unit for all users belonging to an arbitrary organization. As the number of users of the system increases, the number of role tables increases when role IDs are assigned to each user. However, by assigning role IDs to affiliations, the number of role IDs managed in the system can be reduced, and maintenance costs can be reduced.

  In the first to fourth embodiments described above, one table is configured by a plurality of columns, that is, the two-stage classification in which the table is the upper classification and the column is the lower classification, but another classification is provided below the column. It may be divided into a plurality of three or more classifications so as to provide display restrictions as described above for at least one of the plurality of classifications. In the first to fourth embodiments, the classification name is a table and a column. However, the classification name may be any name as long as it is divided into a plurality of classifications.

  2 table display control table, 4 column display control table.

Claims (3)

  In a data management search system capable of searching a table stored in a database and a column constituting the table by inputting a search input signal, means for assigning a role ID to the search input signal, and Displayed in the role ID by referring to the column display control table that defines the column that is limited in display for the role ID and the means for acquiring column information constituting the table selected by the search input signal Means for determining only the columns permitted to be displayed as display target columns, and means for searching for the columns selected by the search input signal from the display target columns according to the search conditions set by the search input signal. A data management and retrieval system characterized by that.   In a data management search system capable of searching a table stored in a database and a column constituting the table by inputting a search input signal, means for assigning a role ID to the search input signal, and By referring to a table display control table that defines a table whose display is restricted with respect to the role ID, a means for determining only a table permitted to be displayed for the role ID as a display target table, and the display target table By referring to the column display control table that defines the column for which the display is restricted with respect to the role ID and the means for acquiring the column information constituting the table selected by the search input signal from among the role ID Means for determining only display permitted columns as display target columns, and the display target A data management search system comprising means for searching for a column selected by the search input signal from the columns according to a search condition set by the search input signal.   The role ID assigned to the organization to which the user who inputs the search input signal belongs is assigned when the role ID is assigned to the search input signal. 2. The data management search system according to 2.

Images