JP2011113227A - Server device, access control method, and access control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform access control based on the private relation of a user between databases, and to efficiently perform access control by suppressing traffic between the databases to amounts of data proportional to the number of users having the private relation. <P>SOLUTION: The retrieval part of an application server 1 is configured to receive the query of the retrieval of content data from a user (client 4) through the Internet 5, and to acquire the list of the identifiers of users having a private relation with the user who has requested the retrieval from a user information DB2 when retrieving the content data from a content DB3 in which the content data and the identifier of the owner of the data are stored, and to retrieve content data corresponding to the identifier of the user who has requested the retrieval and content data corresponding to the identifier included in the list by adding the identifier of the user who has requested the retrieval of the content data and the acquired list to the query of the retrieval. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an access control technique based on user information for content stored on a website, and in particular, an access control technique for setting a content disclosure range based on a private relationship between users exemplified by friendships. About.

  Examples of techniques for controlling access to a database via a network include access control techniques disclosed in Non-Patent Document 1 and Patent Document 1 below.

  In the access control technique disclosed in Non-Patent Document 1, metadata is constructed by adding access right information, logical information, and the like to schema information of a database, and this is managed by a directory server together with user information. This technology allows access control between separate databases. This technique provides role-based access control, but does not provide friendship-based access control.

  In the information retrieval technique disclosed in Patent Document 1, a character string obtained by adding a control character to an identifier of a client having access rights to a document is stored in advance in the storage unit together with the document, and at the time of requesting access to the document, A full-text search is executed by adding a character string with the control character added to the identifier of the client that has requested access to the search word.

Hitoshi Soma, Noriko Ichikawa, Seiichi Kondo, Shohei Matsuda, Masamasa Matsuoka, “Development of Data Access Control Middleware Using Metadata”, Database Society of Japan Letters Vol. 2, No. 3, December 2003, pp. 29- 32

JP 2009-169736 A

  In the access control technique of Non-Patent Document 1, when performing access control based on friendship between separated databases, it is generally realized by executing a filter on a search result. That is, after the search is executed, the filter is executed again. However, there is a problem that traffic between databases increases when there are many search results.

  The information search technique of Patent Document 1 has a problem that even if the friend list registered in the user information database is changed, access control of data registered in the past is performed based on the friendship at that time.

  Therefore, the present invention saves the owner identifier together with the content data in the content database when the content data is registered. Then, a list of identifiers of users who have a private relationship with the user who requested the search at the time of content data search is acquired from the user information database, and the identifier of the owner of the content data to be searched is acquired from the list The content data is read from the content database.

  As an aspect of the server apparatus and access control method of the present invention, there is provided a server apparatus and access control method for controlling the disclosure of user content data to other users, and storing the owner identifier of this data together with the content data When retrieving the content data from the retrieved content database, the retrieval means obtains a list of identifiers of users having a private relationship with the user who requested the retrieval from the user information database, and requests retrieval of the content data. The content data corresponding to the identifier of the user who requested the search and the content data corresponding to the identifier included in the list are searched by adding the identifier of the user who has been searched and the acquired list to the search query. .

  When the content data is disclosed to all users, the content database stores an identifier representing all users as an identifier of the owner of the data together with the content data. When searching for content data from the content database, a list of identifiers of users who have a private relationship with the user who requested the search is acquired from the user information database, and the identifiers of the user who requested the search and the acquired list are acquired. And content data corresponding to the identifier of the user who requested the search and content corresponding to the identifier included in the list by adding identifiers representing all the users stored in the content database to the search query. Represents all users in addition to data Content data corresponding to the Besshi also better to be searched.

  As another aspect of the server device and the access control method of the present invention, there are a server device and an access control method for controlling the disclosure of user content data to other users, the owner of this data together with the content data. When searching for the content data from the content database storing the identifier of the content data and the identifier indicating that the disclosure range indicating the range of the disclosure destination of the content data is a user having a private relationship with the owner Acquires a list of identifiers of users who have a private relationship with the user who requested the search from a user information database, and uses the identifiers of the users who requested the search for the content data and the acquired list as a query for the search. Content data corresponding to the identifier of the user who requested the search by adding Search for content data corresponding to the identifier included in the list.

  In the other aspect, when the content data is disclosed to all users, the content database includes an identifier of the owner of the data and an identifier of the user who has a private relationship with the owner. Identifiers representing all users are stored, and when the search means searches for content data from the content database, a list of identifiers of users who have a private relationship with the user who has requested this search is displayed. The search is requested by adding to the search query an identifier representing all the users acquired from the user information database and requesting the search and the list of the users stored in the content database together with the acquired list. Content data corresponding to the identifier of the selected user and included in the list That the contents data corresponding to the identifier representing all users in addition to said content data corresponding to the identifier is also better to be searched.

  Note that the present invention can also be an aspect of an access control program that causes a computer to function as each means constituting the server device.

  According to the above invention, access control based on a user's private relationship can be performed between separated databases, and traffic between the databases can be controlled with a data amount proportional to the number of users having a private relationship. Control can be performed efficiently.

The block diagram which showed the structure of the access control system provided with the server apparatus based on invention. The block diagram which showed the structure of the server apparatus based on invention. The sequence diagram explaining the procedure of registration of the content data by the server apparatus which concerns on Embodiment 1 of invention. The figure which showed an example of the user information database which concerns on Embodiment 1 of invention. The figure which showed an example of the content database which concerns on Embodiment 1 of invention. The sequence diagram explaining the procedure of the search of the content data by the server apparatus which concerns on Embodiment 1 of invention. The sequence diagram explaining the procedure of the search of the content data by the server apparatus concerning Embodiment 2 of invention. The figure which showed an example of the user information database which concerns on Embodiment 2 of invention. The sequence diagram explaining the procedure of registration of the content data by the server apparatus concerning Embodiment 3 of invention. The figure which showed an example of the user information database which concerns on Embodiment 3 of invention. The figure which showed an example of the content database which concerns on Embodiment 3 of invention. The sequence diagram explaining the procedure of the search of the content data by the server apparatus concerning Embodiment 3 of invention. The figure which showed an example of the user information database which concerns on Embodiment 4 of invention. The sequence diagram explaining the procedure of registration of the content data by the server apparatus concerning Embodiment 4 of invention. The figure which showed an example of the content database which concerns on Embodiment 4 of invention. The sequence diagram explaining the procedure of the search of the content data by the server apparatus which concerns on Embodiment 4 of invention. The sequence diagram explaining the procedure of registration of the content data by the server apparatus concerning Embodiment 5 of invention. The figure which showed an example of the content database which concerns on Embodiment 5 of invention. The sequence diagram explaining the procedure of the search of the content data by the server apparatus concerning Embodiment 5 of invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  The application server 1 according to the present invention shown in FIG. 1 is between a user information DB (user information database) 2 and a content DB (content database) 3 stored on a website that can be used by users who have a private relationship. Thus, access control based on the private relationship of the client (user) 4 is performed. An example of the website having a private relationship is a networking service using a friendship. Examples of the service include a service (for example, Twitter) that can set a one-way user friendship and a service (for example, mixi) that can set only a two-way user friendship.

  The user information DB 2 stores a list of user identifiers of other users who have a private relationship with the user, in addition to information necessary for login such as a user ID (user identifier), a user name, and a password. Specific examples of the user information DB 2 include user information DBs 21 to 24 disclosed in FIGS. 4, 8, 10, and 13. In the user information DBs 21 to 24, a “friend list” is stored as a list of user identifiers of other users who have a private relationship with the user. As described above, the user information DB 2 manages friendships of one-way users (each user). A friendship relationship between two-way users can be expressed by a combination of one-way user friendships. That is, the application server 1 can be applied to any networking service for setting any friendship by using the user information DB 2.

  The content DB 3 stores content data and information necessary for controlling access to this data. Examples of the information necessary for the access control include a content data ID (data identifier) and an owner ID (owner identifier) of the content data. Specific examples of the content DB 3 include the content DBs 31 and 33 to 35 disclosed in FIGS.

  Since these DBs 2 and 3 have different requirements, they may be realized by different systems (for example, user information DB 2 requires strict transaction processing, but content DB 3 has a scale at the expense of transaction strictness. Emphasis on sex). These DBs 2 and 3 may be implemented by a plurality of components.

  The application server 1 operates the data stored in the DBs 2 and 3 and responds to a request from the client 4 via the Internet 5.

  The application server 1 includes a registration unit 11, an authentication unit 12, and a search unit 13 as shown in FIG. The registration unit 11, the authentication unit 12, and the search unit 13 can access the content DB 2 and the user information DB 3 via the communication unit 14.

  The registration unit 11 registers (saves) content data, a data ID of the data, an owner ID of the data, a friend ID (an identifier of a user who has a private relationship with the owner), and the like in the content DB 2 via the communication unit 14. ) Further, user information (user ID, user name, password, friend list, disclosure range, etc.) of the user is registered (saved) in the user information DB 2.

  The authentication unit 12 collates the user name and password of the client 4 with the user name and password stored in the user information DB 3 via the communication unit 14 when registering or retrieving content data via the Internet 5 shown in FIG. Then, the access is authenticated.

  The search unit 13 searches content data stored in the content data 2 based on a search request from the client 4.

  Further, although the application server 1 is in the form of a component independent of the user information DB 2 and the content DB 3, it may be implemented together with any of the DBs 2 and 3. Or you may comprise an application server by a some component. A plurality of clients 4 request registration or reading of data from the Web site having the application server 1.

  The access control according to the invention is divided into two depending on the access control target.

  That is, the first access control mode is a method of selecting a data disclosure range for each user as in the first to third embodiments described later. For example, the user joe's data is set to be accessible only to him (joe), but the user kate's data is disclosed to her friend.

  As a second access mode, a public range is selected for each data as in the fourth and fifth embodiments described later. For example, the user joe may disclose a part of his data to a friend and set the rest so that only the person himself can access.

  Hereinafter, specific embodiments of the present invention will be described with reference to the drawings.

(Embodiment 1)
Embodiment 1 is an aspect in the case where the disclosure range of all users is “friends”.

  In the application server 1 according to the present embodiment, as shown in FIGS. 3 and 5, when content data is registered, the content DB 31 stores the owner ID of this data together with the content data (S1 to S5). .

  As shown in FIG. 6, when searching for content data from the content DB 31, the search unit 13 lists a list of identifiers (friend IDs) of users who have a private relationship with the user who requested the search (friends). List) is acquired from the user information DB 21 (S13, 14). Next, by adding the identifier (owner ID) of the user who requested the search of the content data and the acquired list (friend list) to the search query, it corresponds to the identifier of the user who requested the search The content data and the content data corresponding to the identifier included in the list are searched (S15).

  First, a specific procedure for registering content data in the present embodiment will be described with reference to FIGS. A case where content data provided from the client 41 having the user name “joe” is registered by the application server 1 will be described.

  The registration unit 11 of the application server 1 registers the friend list of the user joe (client 41) in the user information DB 21 in advance. This registration method is arbitrary. As illustrated in FIG. 4, the user information DB 21 includes columns of “user ID”, “user name”, “password”, and “friend list”. For example, in the case of the client 41, “1” is assigned to the “user ID” cell, “joe” is assigned to the “user name” cell, and the IDs of the users “kate”, “meg”, and “tom” are assigned to the “friend list” cell. “2”, “3”, and “5” are registered.

  Next, specific procedures S1 to S5 in which the application server 1 registers content data provided from the client 41 having the user name “joe” will be described with reference to FIG.

  S1: The client (user joe) 41 transmits the data to the application server 1 via the Internet for registration of content data.

  S2: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, a user name and password) provided from the client 41 with user information stored in the user information DB 21.

  S3: When the authentication in step S2 is successful, the registration unit 11 of the application server 1 registers the content data and the owner ID “1” in the content DB 31 via the communication unit 14. As illustrated in FIG. 5, the content DB 31 includes columns of “user ID”, “content data”, and “owner ID”. In the illustrated example, “xxx” is registered as the content data in the “data” cell, and “1” is registered as the ID of the user joe who owns the content data in the “owner ID” cell. .

  S4: The application server 1 receives the registration response in step S3 from the content DB 31 via the communication unit 14.

  S5: The application server 1 transfers the response / result from the content DB 31 to the client (user joe) 41 via the Internet.

  Next, specific steps S11 to S17 for searching for content data by a person who has a private relationship with the user joe, that is, the user kaate who is a friend will be described with reference to FIG.

  S11: The client (user kate) 42 transmits a search query to the application server 1 via the Internet.

  S12: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, a user name and password) included in the search query with user information registered in the user information DB 21 in step S11.

  S13: If the authentication in step S12 is successful, the search unit 13 of the application server 1 searches the user information DB 21 for the friend list “1, 3” of the user kate.

  S14: The search unit 13 of the application server 1 acquires the friend list “1, 3” obtained from the user information DB 21 by the search in step S13.

  S15: The search unit 13 of the application server 1 adds the ID “2” of the user kate and the “friend list” acquired in step S14 to the search query, and stores only the data registered by any of the friends included in the list. Search from the content DB 31 as a search target. For example, in the case of SQL, by adding a query such as “AND (user ID IN 1, 2, 3)” to the original search query, only content data corresponding to one of the user IDs 1, 2, 3 Can be searched. In this way, access control is executed.

  S16: The application server 1 acquires the search result (access controlled) obtained from the content DB 31 by the search in step S15 via the communication unit 14.

  S17: The application server 1 transmits the acquired search result (access controlled) to the client (user kate) 42 via the Internet.

  As described above, the application server 1 according to the first embodiment enables access control based on a user's private relationship between separated databases. Further, traffic between databases can be suppressed to a data amount proportional to the number of users having a private relationship instead of a search result, and access control can be executed efficiently.

  In other words, in the conventional method, all search results before executing access control are sent to the application server and filtering is performed using friendships. However, since all search results before filtering can be enormous, There is a lot of traffic.

  On the other hand, in the access control according to the present embodiment, a search query to which the user's “friend list” is added is sent from the application server 1 to the content DB 31 and the search and access control are simultaneously executed in the content DB 31. Since the “friend list” is smaller than the search result, the problem of the conventional method is solved.

(Embodiment 2)
The access control according to the first embodiment is a mode when the content disclosure range is “friend”, but the access control according to the second embodiment shown in FIG. This is a mode in the case where there is a user who is set to “only the owner himself)”.

  In the application server 1 according to the present embodiment, as shown in FIG. 8, in the user information DB 22, at least a list of user identifiers (user ID) and identifiers of users who have a private relationship with the user (friend list) ) And a disclosure range (for example, oneself, friend) indicating the range of the disclosure destination of the content data owned by the user.

  As shown in FIG. 7, when searching for the content data, the search unit 13 obtains a list of identifiers of users who have a private relationship with the user who requested the search from the user information DB 22. Then, a list (friend list) of identifiers (friend IDs) of only the users who have specified the content data disclosure range to users who have a private relationship is acquired (S23, S24).

  In the user information DB 22 illustrated in FIG. 8 according to the present embodiment, in addition to the “user ID”, “user name”, “password”, and “friend list” columns, a “public range” column is registered in advance. ing. In the example of the user information DB 22 shown in the figure, for example, a user (user ID “1”) having a user name “joe” sets the disclosure range to “self”. The “public range” being “self” means that the content data disclosure destination range is only the owner of the data. On the other hand, other users (for example, users kate, meg, tom,...) Set the disclosure range to “friends”. The “public range” being “friend” means that the range of the content data disclosure destination can be extended not only to the owner of the data but also to users who have a private relationship.

  In the second embodiment, as in the first embodiment, registration of content data in the content DB 31 is executed in advance. The registration procedure is the same as the registration procedures S1 to S4 according to the first embodiment.

  Specific steps S21 to S27 of content data search according to the second embodiment will be described with reference to FIG.

  S21: For example, the client (user kate) 42 transmits a search query to the application server 1 via the Internet.

  S22: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, a user name and password) included in the search query with user information registered in the user information DB 22 in step S11.

  S23: If the authentication in step S22 is successful, the search unit 13 of the application server 1 searches the user information DB 22 for a friend whose public range is set to “friend” among the friends (joe, meg) of the user kate.

  S24: The search unit 13 of the application server 1 acquires the user ID “3” of the friend (meg) obtained from the user information DB 21 by the search in step S23.

  S25: The search unit 13 of the application server 1 adds the user ID “2” of the owner (kate) and the user ID “3” of the acquired friend (meg) to the search query. That is, only content data registered by the user corresponding to the user IDs “2” and “3” is searched from the content DB 31 as a search target. In this way, the access control of this embodiment is executed.

  S26: The application server 1 acquires the search result (access controlled) obtained from the content DB 31 by the search in step S25 via the communication unit 14.

  S27: The application server 1 transmits the search result (access controlled) acquired in step S26 to the client (user kate) 42 via the Internet.

  As described above, according to the access control according to the second embodiment, in addition to the effects of the first embodiment described above, it is possible to flexibly cope with a change in the disclosure range.

(Embodiment 3)
The access control according to the third embodiment is a mode in the case where there is a user who is set as “whole” in the “publication range” column of the user information DB like the user information DB 23 illustrated in FIG. The “publication range” being “whole” means that the content data owned is made public to all users. In the case of the user information DB 23 shown in FIG. 10, the user who has set “whole” for the “open range” cell is “tom”.

  In the application server 1 according to the present embodiment, when the content data is disclosed to all users, as shown in FIG. 11, in the content DB 33, all users as identifiers of owners of the data are included in the content DB 33. Is stored (for example, user ID “0”).

  Then, as shown in FIG. 12, when searching for content data from the content DB 33, the search unit 13 displays a list of identifiers (friend lists) of users who have a private relationship with the user who requested the search. Obtained from the information DB 23 (S31 to S34). Next, by adding the identifier of the user who requested the search and the identifier (user ID “0”) representing all the users stored in the content DB 33 together with the acquired list, the search is performed. In addition to the content data corresponding to the requested user identifier and the content data corresponding to the identifier included in the list, content data corresponding to the identifiers representing all the users are also searched (S35).

  A specific procedure S301 to S307 in which a user tom (client 44) who publishes content data to the whole registers the data will be described with reference to FIG.

  S301: The client (user tom) 44 transmits the data to the application server 1 for registration of content data.

  S302: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, a user name and password) provided from the client 41 with user information stored in the user information DB 23.

  S303: When the authentication in step S302 is successful, the application server 1 requests the user information DB for the public range of the user tom via the communication unit.

  S304: The application server 1 acquires the public range of the user tom from the user information DB 23 via the communication unit 14.

  S305: Since the disclosure range acquired in step S304 is “whole”, the registration unit 11 of the application server 1 sets the user ID “0” representing “whole” in addition to the data provided from the client 44 in the content DB 23. Register in the cell of the user ID. As shown in FIG. 11, the user ID “0” is registered in the cell of “user ID” in the content DB 23.

  S306: The application server 1 receives the registration response in step S303 from the content DB 33 via the communication unit 10.

  S307: The application server 1 transfers the response / result from the content DB 33 to the client (user tom) 44 via the Internet.

  Next, specific procedures S31 to S37 for content data search according to the third embodiment will be described with reference to FIG.

  S31: For example, the client (user kate) 42 transmits a search query to the application server 1 via the Internet.

  S32: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, user name and password) included in the search query with user information registered in the user information DB 23 in step S31.

  S33: When the authentication in step S32 is successful, the search unit 13 of the application server 1 searches the user information DB 32 for a friend whose public range is set to “friend” among the friends (joe, meg) of the user kate.

  S34: The search unit 13 of the application server 1 acquires the user ID “3” of the friend (meg) obtained from the user information DB 23 by the search in step S33.

  S35: The search unit 13 of the application server 1 searches the entire ID “0” in addition to the user ID “2” of the owner (kate) and the user ID “3” of the acquired friend (meg). Add to That is, only content data corresponding to the user IDs “2” and “3” and the overall ID “0” is searched from the content DB 33 as a search target. In this way, the access control of this embodiment is executed.

  S36: The application server 1 acquires the search result (access controlled) obtained from the content DB 31 by the search in step S35 via the communication unit 14.

  S37: The application server 1 transmits the search result (access controlled) acquired in step S36 to the client (user kate) 42 via the Internet.

  As described above, the access control according to the second embodiment is not limited to the owner ID and the friend ID, but by adding the entire ID to the search query, data that is permitted to be disclosed to all users (in the case of the user tom, (Content data owned) can also be searched. As described above, according to the access control according to the present embodiment, in addition to the effects of the first embodiment described above, it is possible to flexibly cope with a change in the disclosure range.

(Embodiment 4)
The access control according to the fourth embodiment is a mode in which a disclosure range is set for each data and the disclosure range is “self (data owner himself)” or “friend”.

  In the application server 1 according to the present embodiment, as shown in FIG. 15, in the content DB 34, the identifier of the owner (owner ID) of this data and the range of the disclosure destination of the content data are shown together with the content data. An identifier (for example, friend ID “1”) indicating that the disclosure range is a user who has a private relationship with the owner is stored.

  Then, as shown in FIG. 16, when searching for the content data, the search unit 13 is a list of identifiers of users who have a private relationship with the user who requested the search (for example, friend ID “1, 3”). ) Is acquired from the user information DB 24 (S41 to S44). Next, the content corresponding to the identifier of the user who requested the search by adding the identifier (for example, owner ID “2”) of the user who requested the search of the content data and the acquired list to the search query The contents data corresponding to the identifier included in the list as well as the data is searched (S45).

  In advance, the user registers a friend list in the user information DB 24 as illustrated in FIG. The user information DB 24 has columns of “user ID”, “user name”, “password”, and “friend list”. In the illustrated example, user information having the same contents as the user information DB 21 illustrated in FIG. 4 is registered in each column cell.

  When the disclosure range is “self” or “friend”, for example, refer to FIG. 14 for specific procedures S401 to S405 in which the application server 1 registers content data provided from the client 41 with the user name “joe”. While explaining.

  S401: The client (user joe) 41 transmits the data to the application server 1 via the Internet for registration of content data. At this time, “friend” is designated as the disclosure range of the registration data.

  S402: The authentication unit 12 of the application server 1 performs authentication by comparing user information provided from the client 41 (for example, a user name and password) with user information stored in the user information DB 24.

  S403: When the authentication in step S402 is successful, the registration unit 11 of the application server 1 registers the user ID “1” of the user joe who is the owner in the content DB 34 via the communication unit 14 in addition to the content data. As illustrated in FIG. 15, the content DB 34 includes columns of “user ID”, “content data”, “owner ID”, and “friend ID (friend identifier)”. In step 403, if the disclosure range is a friend, as shown in FIG. 15, the owner ID “1” is written in the cell of “friend ID” in the content DB 34. If the disclosure range is “self” only, the friend ID is left blank.

  S404: The application server 1 receives the registration response in step S403 from the content DB 34 via the communication unit 14.

  S405: The application server 1 transfers the response / result from the content DB 34 to the client (user joe) 41 via the Internet.

  Next, for example, specific procedures S41 to S47 in the case where the user kate who is a friend of the user joe searches for content data will be described with reference to FIG.

  S41: The client (user kate) 42 transmits a search query to the application server 1 via the Internet.

  S42: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, a user name and password) included in the search query with user information registered in the user information DB 24 in step S11.

  S43: If the authentication in step S42 is successful, the search unit 13 of the application server 1 searches the user information DB 24 for the friend list “1, 3” of the user kate.

  S44: The search unit 13 of the application server 1 acquires the friend list “1, 3” obtained from the user information DB 24 by the search in step S43.

  S45: The search unit 13 of the application server 1 adds the ID “2” of the user kate and the friend list “1, 3” acquired in step S44 to the search query, and from the content DB 34 himself (user kate) or a friend Is searched from the content DB 34 as a search target. For example, in the case of SQL, by adding a query such as “AND (owner ID = 2) AND (friend ID IN = 1, 3)” to the original search query, any of the user IDs 1, 2, 3 Only the content data corresponding to can be searched. In addition, since the friend ID is blank for the data whose disclosure range is only “myself”, it is hit only in the search performed by the owner. In this way, access control is executed.

  S46: The application server 1 acquires the search result (access controlled) obtained from the content DB 31 by the search in step S45 via the communication unit 14.

  S47: The application server 1 transmits the acquired search result (access controlled) to the client (user kate) 42 via the Internet.

  As described above, according to the access control according to the fourth embodiment, in addition to the effects of the first embodiment described above, it is possible to flexibly cope with a change in the disclosure range.

(Embodiment 5)
In the access control according to the fifth embodiment, there is a user who sets the disclosure range of the data to the user as “all (all users)”, that is, sets the content data owned to be disclosed to all users. This is the case. In the present embodiment, the disclosure range is set in the content DB 35 as illustrated in FIG. In the present embodiment, the user information DB 24 illustrated in FIG. 13 is prepared in advance.

  In the application server 1 according to the present embodiment, as shown in FIG. 18, the content DB 35 is preliminarily stored in the content DB 35 with the identifier of the owner of the data (for example, owner ID “1”) and the owner. An identifier representing all users (for example, an overall ID “0”) is stored as an identifier of a user having a private relationship.

  As shown in FIG. 19, when searching for content data from the content DB 35, the search unit 13 displays a list of identifiers (friend lists) of users who have a private relationship with the user who has requested this search. Obtained from the information DB 24 (S51 to S54). Next, the identifier of the user who requested the search (owner ID) and the identifier (all ID “0”) representing all the users stored in the content DB 35 together with the acquired list (friend list) are used as the search query. In addition to the content data corresponding to the identifier of the user who requested the search and the content data corresponding to the identifier included in the list, the content data corresponding to the identifier representing all the users is also searched. And

  A specific procedure S501 to S505 in which the content data provided from the client 41 having the user name “joe” is registered by the application server 1 will be described with reference to FIG.

  S501: The client (user joe) 41 transmits the data to the application server 1 via the Internet for registration of content data. At this time, “whole” is designated as the disclosure range of the registered data.

  S502: The authentication unit 12 of the application server 1 performs authentication by checking user information (for example, a user name and password) provided from the client 41 with user information stored in the user information DB 24.

  S503: If the authentication in step S402 is successful, the registration unit 11 of the application server 1 registers ID “0” representing “whole” as the friend ID in the content DB 35 via the communication unit 14 in addition to the content data. As illustrated in FIG. 18, the content DB 35 includes columns of “user ID”, “content data”, “owner ID”, and “friend ID”. In step 503, the owner ID “0” is written to the cell of “friend ID” in the content DB 35 shown in FIG.

  S504: The application server 1 receives the registration response in step S403 from the content DB 35 via the communication unit 14.

  S505: The application server 1 transfers the response / result from the content DB 35 to the client (user joe) 41 via the Internet.

  Next, specific procedures S51 to S57 in the case where the user kate who is a friend of the user joe searches for content data will be described with reference to FIG.

  S51: The client (user kate) 42 transmits a search query to the application server 1 via the Internet.

  S52: The authentication unit 12 of the application server 1 performs authentication by comparing user information (for example, a user name and password) included in the search query with user information registered in the user information DB 24 in step S51.

  S53: If the authentication in step S52 is successful, the search unit 13 of the application server 1 searches the user information DB 24 for the friend list “1, 3” of the user kate.

  S54: The search unit 13 of the application server 1 acquires the friend list “1, 3” obtained from the user information DB 24 by the search in step S53.

  S55: The search unit 13 of the application server 1 adds the overall ID “0” to the search query in addition to the user “kate” ID “2” and the friend list “1, 3” acquired in step S44. Data permitted to be disclosed to all users (content data owned by the user corresponding to the user ID “1” in the example) is also searched from the content DB 35 as a search target. For example, in the case of SQL, by adding a query such as “AND (owner ID = 2) AND (friend ID IN = 1, 3, 0)” to the original search query, user IDs 1, 2, 3 In addition to any of these data, data that is permitted to be disclosed to all users can be searched.

  S56: The application server 1 acquires the search result (access controlled) obtained from the content DB 31 by the search in step S45 via the communication unit 14.

  S57: The application server 1 transmits the acquired search result (access controlled) to the client (user kate) 42 via the Internet.

  As described above, according to the access control according to the fifth embodiment, in addition to the effects of the above-described first embodiment, the disclosure range can be flexibly dealt with. In particular, not only the owner ID and friend ID but also data permitted to be disclosed to all users can be searched.

  The access control apparatus according to the present invention can be realized by a computer and a program, and the program can be recorded on a recording medium or provided through a network. That is, the present invention constructs the processing according to each of the functional units 11 to 13 constituting the server 1 of the above-described first to fifth embodiments as a program, and installs the program on a computer through a communication line or a recording medium. It can be implemented by the computer. The above-described content DBs 2, 21 to 24 and user information DBs 3, 31 to 35 may be stored in advance in storage means exemplified by a hard disk device, a file server, or the like.

1 ... Application server (server device)
2, 21-24 ... User information DB (user information database)
3, 31-35 ... Content DB (content database)
4, 41, 42, 44 ... client 13 ... search part (search means)

Claims (10)

A server device that controls the disclosure of user content data to other users,
From the content database storing the identifier of the owner of this data together with the content data, when searching for the content data, obtain a list of identifiers of users who have a private relationship with the user who requested this search from the user information database, Corresponding to the content data corresponding to the identifier of the user who requested the search and the identifier included in the list by adding the identifier of the user who requested the search of the content data and the acquired list to the search query A server device comprising search means for searching for content data that has been processed. The user information database stores at least a user identifier, a list of identifiers of users who have a private relationship with the user, and a disclosure range indicating a range of disclosure destinations of content data owned by the user. ,
When the search means obtains a list of identifiers of users who have a private relationship with the user who has requested the search from the user information database in searching for content data from the content database, The server apparatus according to claim 1, wherein a list of identifiers of only users who specify a range up to a user having a private relationship is acquired. When publishing content data to all users, the content database stores an identifier representing all users as an identifier of the owner of the data together with the content data,
The search means obtains a list of identifiers of users who have a private relationship with the user who has requested the search from the user information database when searching for content data from the content database. Included in the list are content data corresponding to the identifier of the user who requested the search by adding to the search query an identifier representing all the users stored in the content database along with the identifier and the acquired list The server apparatus according to claim 1, wherein content data corresponding to an identifier representing all users is searched for in addition to content data corresponding to an identifier to be searched. A server device that controls the disclosure of user content data to other users,
From the content database storing the identifier of the owner of this data together with the content data and the identifier indicating that the disclosure range indicating the range of the disclosure destination of the content data is a user having a private relationship with the owner, When searching for content data, a list of identifiers of users who have a private relationship with the user who requested the search is acquired from the user information database, and the identifiers of users who requested the search for the content data and the acquired list are A server apparatus comprising: search means for searching for content data corresponding to an identifier of a user who has requested the search and content data corresponding to an identifier included in the list by adding to the search query. When the content data is disclosed to all users, the content database includes an identifier representing all users as an identifier of the owner of the data and an identifier of a user having a private relationship with the owner. And are saved,
The search means obtains a list of identifiers of users who have a private relationship with the user who has requested the search from the user information database when searching for content data from the content database. Content data corresponding to the identifier of the user who requested the search is included in the list by adding an identifier representing all the users stored in the content database together with the identifier and the acquired list to the search query. The server apparatus according to claim 4, wherein content data corresponding to identifiers representing all the users is searched for in addition to content data corresponding to an identifier to be searched. An access control method for controlling the disclosure of user content data to other users,
When retrieving the content data from the content database storing the identifier of the owner of the data along with the content data, the retrieval means displays a list of identifiers of users who have a private relationship with the user who requested the retrieval. Content data corresponding to the identifier of the user who requested the search and the list included in the list by adding the identifier of the user who requested the search of the content data and the acquired list to the search query And an access control method comprising: searching for content data corresponding to the identifier. When the content data is disclosed to all users, the content database stores an identifier representing all users as an identifier of the owner of the data together with the content data, and the search means stores the content data from the content database. When searching for content data, a list of identifiers of users who have a private relationship with the user who requested the search is acquired from the user information database, and the contents database together with the identifiers of the user who requested the search and the acquired list In addition to the content data corresponding to the identifier of the user who requested the search and the content data corresponding to the identifier included in the list, an identifier representing all the users stored in the list is added to the search query. Correspond to identifiers representing all users Access control method according to claim 6, also the content data, characterized by the step of the search. An access control method for controlling the disclosure of user content data to other users,
The content database stores an identifier of the owner of the data and an identifier indicating that the disclosure range indicating the range of the disclosure destination of the content data is a user having a private relationship with the owner. When searching for content data, the search means acquires a list of identifiers of users having a private relationship with the user who requested the search from a user information database, and the identifiers of the user who requested the search for the content data and the acquisition Adding to the search query the content data corresponding to the identifier of the user who has requested the search and the content data corresponding to the identifier included in the list. Control method. When the content data is disclosed to all users, the content database includes an identifier representing all users as an identifier of the owner of the data and an identifier of a user having a private relationship with the owner. And when the search means searches for content data from the content database, the search means acquires a list of identifiers of users who have a private relationship with the user who requested the search from the user information database, and Content data corresponding to the identifier of the user who requested the search by adding to the search query the identifier representing all the users stored in the content database together with the identifier of the user who requested the search And content data corresponding to the identifiers included in the list. Access control method according to claim 8, characterized in that also the content data corresponding to the identifier representing all users the addition to the motor has a step to be searched.   6. An access control program that causes a computer to function as each means that constitutes the server device according to claim 1.

Images