JP2011048649A - Information management method, information management system, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve efficiency or maintainability of information management while suppressing or preventing leakage of confidential information by using a license policy. <P>SOLUTION: An information management method includes: creating a document (target data) containing protected data and non-protected data (step S11), creating a protection policy that defines a location of the protected data and a location of the non-protected data in a predetermined storage device (step S12), storing the document in the storage device according to the protection policy (step S14), and editing the protected data based on license information that defines a user to be allowed to access the document when a request is made to access the document (step S24). <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information management method, an information management system, and a program.

  There is known an information management system that controls the number of users and usage period of software products based on a license policy (license conditions and restrictions). In such an information management system, the number of users is controlled by, for example, granting licenses only to product purchasers. Further, in a trial version program or the like, the usage period is controlled by providing a predetermined restriction on the license.

  However, data such as documents is often not protected by a license. For this reason, there is a possibility that the document can be referred to even after the expiration date. Since documents often contain know-how and trade secrets related to products etc., there is concern that confidential information (know-how, trade secrets, etc.) may be leaked if a third party can refer to the document. .

  In this regard, the information management system described in Patent Document 1 controls the number of users of video-type content based on the license policy.

JP 2002-101086 A

  In recent years, with the diversifying needs of users (for example, tenants), it has been required to customize documents for each tenant. Because of this situation, documents are often managed separately on a file basis. For this reason, in the information management system described in Patent Document 1, there is a concern that maintenance efficiency may be lowered, such as double maintenance of information common to all tenants (hereinafter referred to as tenant common information). In addition, maintenance man-hours increase and document management work becomes complicated, so management information such as information specific to tenants (hereinafter referred to as tenant-specific information) is mixed into the file where only common tenant information is stored. There is concern that the possibility of the above mistakes will increase.

  An object of the present invention is to improve the efficiency or maintainability of information management while suppressing or preventing leakage of confidential information by using a license policy.

  An information management method according to a first aspect of the present invention includes: creating target data including protected data and non-protected data; and storing the protected data storage location and the non-protected data storage location in a predetermined storage device. Create a specified protection policy, store the target data in the storage device according to the protection policy, and permit access to the target data when there is an access request for the target data Editing the protection data or prohibiting access based on license information defining a user.

  An information management system according to a second aspect of the present invention provides a protection policy that defines target data including protected data and non-protected data, and a storage location of the protected data and a storage location of the non-protected data in a predetermined storage device. And, according to the protection policy, data classification means for storing the target data in the storage device, and a user who is permitted to access the target data when there is an access request for the target data License checking means for editing the protection data or prohibiting access based on the license information to be provided.

  A program according to a third aspect of the present invention provides a computer that protects a target data including protected data and unprotected data, and a storage location of the protected data and a storage location of the unprotected data in a predetermined storage device. A data classification means for storing the target data in the storage device in accordance with the protection policy, and specifying a user who should be allowed to access the target data when there is an access request for the target data Based on the license information to be edited, it functions as a license verification means for editing the protection data or prohibiting access.

  In addition, regarding the overlapping function of each component, a means for realizing the function may be provided for each component separately. However, if one means is shared by a plurality of components, The configuration can be simplified.

  According to the present invention, it is possible to improve the efficiency or maintainability of information management while suppressing or preventing leakage of confidential information using a license policy.

It is a block diagram which shows the outline | summary of the information management system which concerns on embodiment of this invention. It is a block diagram which shows the outline | summary of the information management program which concerns on embodiment of this invention. It is a flowchart which shows the outline | summary of the information management method which concerns on embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described. The information management system of this embodiment is used for a content recipient to refer to a document (target data) provided by the content provider. Note that the content recipient in this embodiment is a tenant (user). The target data is a document consisting only of text data (characters, symbols, etc.).

  As shown in FIG. 1, the information management system 100 of this embodiment includes a ROM (Read-Only Memory) 10, a computer 20, a document management unit 30, a license information management unit 40, and a monitor 50 (display device). And a ROM 60.

  The ROMs 10 and 60 are, for example, CD-ROMs (Compact Disk Read-Only Memory). The ROM 10 stores an information management program 10a. The information management program 10 a is installed in the computer 20 and executed by the computer 20. The computer 20 includes, for example, a CPU (Central Processing Unit), a RAM (Random Access Memory), and the like. As the computer 20, for example, a commercially available computer can be used. The ROM 60 stores a program 60a.

  In the present embodiment, the program 60a is a software product. The target data is data related to the program 60a. A license is issued to a right holder (for example, a product purchaser) regarding the program 60a.

  The information management program 10a is stored in a storage device (computer-readable storage device) other than a CD-ROM such as a flexible disk, a DVD (Digital Versatile Disk), or an MO (Magneto-Optical disk), and can be distributed. It may be what was done. The information management program 10a is stored in a storage device (hard disk or the like) of a server provided on a communication network (for example, the Internet or an intranet), and is downloaded onto a local computer by being superimposed on a carrier wave, for example. Alternatively, it may be read from the server at any time and started and executed on the local computer. When the function of the information management program 10a is realized by sharing an OS (Operating System) and an application program, or by cooperation between the OS and the application program, only the application program portion may be stored in the storage device. .

  The document management unit 30 is composed of, for example, a hard disk. However, the present invention is not limited to this, and any storage device can be used as the document management unit 30. The document management unit 30 has a protected area 31 and a non-protected area 32. The protected area 31 and the non-protected area 32 are each allocated to a part of the storage area of the document management unit 30.

  The license information management unit 40 is composed of, for example, a hard disk. However, the present invention is not limited to this, and any storage device can be used as the license information management unit 40. The license information management unit 40 includes a license file 41 and a license server 42. The license file 41 stores license information in a file format. The license server 42 manages license information in an integrated manner. The license information is one of license policies and is information indicating a person who has a license. The license policy is a rule for permitting or restricting access to only a predetermined user with respect to the program 60a (for example, access conditions, restriction contents, etc.). The license information includes document authority information indicating a person who has a license for the target data (document). This document authority information defines a user who should be allowed to access the target data. In this embodiment, the user who should be allowed to access the tenant specific information is that tenant.

  As shown in FIG. 2, the information management program 10a includes an decryption unit 11, a data classification unit 12 (data classification unit), a license check unit 13 (license check unit), and an API (Application Programming Interface) 13a. , A license verification unit 14 (license verification unit), a content generation unit 15, and a content display unit 16.

  In the present embodiment, the common document 101 and the unique document 102 correspond to target data. The common document 101, the unique document 102, and the protection policy 103 are defined by a content provider, for example. The common document 101 and the unique document 102 are encrypted by the content provider using an existing encryption technique.

  The common document 101 is a document including tenant common information, that is, information that does not depend on the tenant. The unique document 102 is a document including tenant-specific information, that is, tenant-specific information that depends on the tenant. The common document 101 and the unique document 102 are stored in a file format, for example, and the unique document 102 is managed separately for each tenant on a file basis.

  In this embodiment, the unique document 102 (tenant unique information) corresponds to data to be protected (hereinafter referred to as protected data), and the common document 101 (tenant common information) does not need to be protected (hereinafter referred to as unprotected data). Equivalent to

  The protection policy 103 defines the storage location of protected data (protected area 31) and the storage location of unprotected data (non-protected area 32) in the document management unit 30. The protection policy 103 is stored in a file format, for example.

  The protection policy 103 includes protection definition information, disclosure restriction information, and the like. The protection definition information is information for classifying target data into protected data and non-protected data. With this protection definition information, the unique document 102 (tenant unique information) is stored in the protected area 31 and the common document 101 (tenant common information) is stored in the non-protected area 32. Further, the disclosure restriction information is information that defines a portion of the protection data that can be disclosed (edit protection data to be described later) for each of a licensed person and a licenseless person.

  The decryption unit 11 decrypts the encrypted common document 101 and unique document 102 using the existing decryption technology. By applying encryption or logical deletion technology, the target data can be protected more reliably. When the encryption method is not clear in advance, it is preferable that the decryption unit 11 has a plurality of types of decryption functions.

  The common document 101 and the unique document 102 are encrypted by the decryption unit 11 and then input to the data classification unit 12. The protection policy 103 is also input to the data classification unit 12.

  The data classification unit 12 writes data to each of the protected area 31 and the non-protected area 32 based on the input data, that is, the common document 101, the unique document 102, and the protection policy 103. At this time, the data classifying unit 12 stores the protected data in the protected area 31 and stores the unprotected data in the unprotected area 32 based on the protection definition information of the protection policy 103. In the present embodiment, the unique document 102 (tenant unique information) is stored in the protected area 31 as protected data.

  If there is an access request for the target data, the license check unit 13 is based on the license information (especially document authority information) stored in the license information management unit 40, and whether the requester should permit access. Check whether or not. This makes it possible to protect the target data simply and appropriately using the license policy (license information). The license check unit 13 passes the check result to the license verification unit 14.

  The API 13 a is an interface of the license check unit 13. The API 13a is used so that the license check unit 13 can communicate with the program 60a. The license check unit 13 is also communicably connected to the license verification unit 14 through the API 13a. Therefore, the target data can be protected by using the same API 13a as the program 60a.

  The license verification unit 14 edits the protection data based on the check result of the license check unit 13. Hereinafter, the edited protection data is referred to as edit protection data.

  The content generation unit 15 receives data (protected data) stored in the protected area 31 and data (unprotected data) stored in the unprotected area 32. The content generation unit 15 merges (combines) the edit protected data and the unprotected data. Hereinafter, the merged data is referred to as combination data. Combining edit-protected data and non-protected data improves the efficiency and maintainability of data management. The content generation unit 15 passes the combination data to the content display unit 16.

  The content display unit 16 displays the combination data on the monitor 50. By displaying the edit protection data, only data for which the user (content recipient) has a license is disclosed. As a result, disclosure of confidential information can be restricted.

  Next, the operation of the information management system 100 will be described. The information management system 100 executes a process as shown in FIG. 3, for example. The processing by the information management system 100 is started or proceeds by, for example, the CPU (computer 20) executing the information management program 10a.

  In step S11, the content provider creates a document (target data) and stores it in an arbitrary storage device. The target data includes a common document 101 and a unique document 102. The unique document 102 is created for each tenant. That is, as many unique documents 102 as the number of tenants are created. Further, the common document 101 and the unique document 102 are encrypted by the content provider using an existing encryption technique. The encrypted common document 101 (tenant common information) and the unique document 102 (tenant unique information) are stored separately. The common document 101 and the unique document 102 are stored in a file format, for example.

  When the creation and encryption of the target data are completed, the content provider creates the protection policy 103 in a subsequent step S12 and stores it in an arbitrary storage device. The protection policy 103 is stored in a file format, for example.

  Next, the content provider issues an instruction to the information management system 100 to classify the target data in step S13. A common document 101, a specific document 102, and a protection policy 103 are sent to the information management system 100 together with instructions.

  The information management system 100 receives the instruction at step S13, and creates a protected area 31 and an unprotected area 32 for each tenant according to the protection policy 103 at step S14. Specifically, the data classification unit 12 creates a protected area 31 and an unprotected area 32 in the document management unit 30, stores the unique document 102 in the protected area 31, and stores the common document 101 in the unprotected area 32. .

  On the other hand, in step S21, the content recipient acquires a license necessary for referring to the document (target data).

  In the subsequent step S22, the content recipient issues an instruction to the information management system 100 to refer to the target data. A user ID is sent to the information management system 100 together with an instruction.

  The information management system 100 receives the instruction at step S22, and collates the user ID with the license information at step S23. Specifically, the license check unit 13 acquires license information from the license information management unit 40. The license information may be obtained from either the license file 41 or the license server 42, but is usually provided in the form of a file. Based on the user ID and the document authority information included in the license information, the license check unit 13 checks whether the content recipient has access to the target data.

  Subsequently, the license verification unit 14 edits the protection data based on the check result of the license check unit 13 in step S24. Specifically, for example, editing is performed such that data for which the content recipient does not have a license is removed from the protected data. Thereby, edit protection data is generated. The content generation unit 15 further merges (combines) the edit protected data and the unprotected data. Thereby, combination data is generated.

  In subsequent step S25, the content display unit 16 displays the content (combination data) generated in step S24 on the monitor 50.

  In the subsequent step S26, the content recipient sees the content (combination data) displayed in step S25 by looking at the monitor 50.

  As described above, the information management system 100 according to the present embodiment limits the disclosure of confidential information by editing the protection data based on the license policy (license information) by the license verification unit 14. Thereby, the leakage of confidential information is suppressed or prevented. As a result, the load of document conversion on the product provider is also reduced.

  The information management system 100 according to this embodiment classifies target data into a protected area 31 and a non-protected area 32 according to the protection policy 103 and stores them. Thereby, since protection data and non-protection data are stored separately, protection data and non-protection data can be distinguished and managed. As a result, protection is enhanced. In addition, since the tenant common information and the tenant specific information are managed separately, the efficiency of document management for each tenant is improved. As a result, maintainability of document management is also improved.

  The information management system 100 according to the present embodiment displays information stored in each of the protected area 31 and the non-protected area 32. Thereby, protected data and non-protected data can be distinguished and displayed. As a result, the disclosure of confidential information can be suitably limited.

  According to the information management system 100 of the present embodiment, the target data can be appropriately protected without special description by using the license policy in combination with the existing encryption technology or the like.

  Although the information management method, the information management system, and the program according to the embodiment of the present invention have been described above, the present invention is not limited to the above embodiment. For example, the present invention can be modified as follows.

  In the above embodiment, the document is the target data, but the present invention is not limited to this. The present invention can be applied to management of arbitrary data such as multimedia contents including images (still images or moving images). For the multimedia content, for example, in the protection data editing process in step S24, appropriate modification such as changing the image display form for each tenant (for example, applying a mosaic) may be performed.

  Means for realizing the function of the information management program 10a is not limited to software, and part or all of the means may be realized by dedicated hardware (circuit or the like).

  In other respects, the configuration of the ROM 10, the computer 20, the document management unit 30, the license information management unit 40, the monitor 50, and the like can be arbitrarily changed without departing from the scope of the present invention.

  The processing order of the above embodiment is not limited to the order shown in the flowchart, and the order can be arbitrarily changed without departing from the gist of the present invention. Also, unnecessary processing may be omitted depending on the application. For example, processing such as encryption may be omitted if it is not necessary.

  Instead of editing the protection data in step S24, the license verification unit 14 may prohibit the protection data from being accessed based on the license information. For example, for the tenant specific information, only the tenant is allowed access. Then, the content display unit 16 displays only non-protected data (tenant common information) other than a user who should be allowed to access (tenant related to tenant specific information). In this case as well, the number of users of the protected data, the expiration date, etc. are controlled. That is, with respect to the protection data (tenant specific information), access from users other than those who should be permitted to access is restricted. As a result, leakage of confidential information (know-how, trade secrets, etc.) can be suppressed or prevented.

  The merge process (combination process) in step S24 may be omitted, and only one of the edit protected data and the unprotected data may be displayed by the content display unit 16. Even in such a case, disclosure of confidential information can be restricted.

  The embodiment of the present invention has been described above. However, various modifications and combinations required for design reasons and other factors are not limited to the invention described in the “claims” or the “mode for carrying out the invention”. It should be understood that it is included in the scope of the invention corresponding to the specific examples described in the above.

  The information management method, information management system, and program of the present invention are suitable for management of information related to software products.

10 ROM
10a Information management program 11 Decryption unit 12 Data classification unit (data classification means)
13 License check section (license check means)
13a API
14 License verification part (license verification means)
DESCRIPTION OF SYMBOLS 15 Content production | generation part 16 Content display part 20 Computer 30 Document management part 31 Protected area 32 Unprotected area 40 License information management part 41 License file 42 License server 50 Monitor (display device)
60 ROM
60a program 100 information management system 101 common document 102 specific document 103 protection policy

Claims (13)

Creating target data including protected and unprotected data;
Creating a protection policy defining the storage location of the protected data and the storage location of the unprotected data in a predetermined storage device;
Storing the target data in the storage device in accordance with the protection policy;
When there is an access request for the target data, editing the protection data or prohibiting access based on license information that defines a user who should be permitted to access the target data;
including,
An information management method characterized by that. Combining the edited protected data and the unprotected data,
The information management method according to claim 1, wherein: Displaying at least one of the edited protected data and unprotected data,
The information management method according to claim 1 or 2, characterized by the above. Encrypting the target data after creating the target data;
Before storing the target data in the storage device, decrypting the target data;
including,
The information management method according to any one of claims 1 to 3, wherein The protected data includes information unique to the user, and the unprotected data includes information common to all tenants,
The user who should be allowed access is the user for information specific to the user,
The information management method according to any one of claims 1 to 4, wherein: The target data is a document including only text data, or content including an image.
The information management method according to claim 1, wherein: Target data including protected data and non-protected data, and a protection policy that defines a storage location of the protected data and a storage location of the non-protected data in a predetermined storage device are input, and the target data is determined according to the protection policy. Data classification means for storing in the storage device,
A license verification unit that edits the protection data or prohibits access based on license information that defines a user who should be permitted to access the target data when there is an access request to the target data;
Comprising
An information management system characterized by that. When there is an access request for the target data, a license check unit is provided for checking whether the requester is a user who should be permitted to access based on the license information.
The information management system according to claim 7. The target data is data related to a software product,
The license check means is communicatively connected to the license verification means using an API for communicatively connecting to the software product.
The information management system according to claim 8. Means for combining the edited protected data and the unprotected data;
The information management system according to any one of claims 7 to 9, characterized by the above. Means for displaying at least one of the edited protected data and the unprotected data on a display device;
The information management system according to claim 7, wherein the information management system is an information management system. Means for releasing encryption of the target data;
The information management system according to claim 7, wherein the information management system is an information management system. Computer
Target data including protected data and non-protected data, and a protection policy that defines a storage location of the protected data and a storage location of the non-protected data in a predetermined storage device are input, and the target data is determined according to the protection policy. Data classification means for storing in the storage device,
A license verification unit that edits the protection data or prohibits access based on license information that defines a user who should be permitted to access the target data when there is an access request to the target data;
Program to function as.

Images