JP2011191832A - System, server, method and program for management of file withdrawal - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To limit browsing of a file, withdrawn from a management server to a portable external storage device, to only a user who has withdrawn the file without using any password. <P>SOLUTION: An applicant terminal 103 acquires the biological information of an applicant user, and transmits the acquired biological information together with an applicant user name to a management server 100. A biometrics processing unit 110 of the management server 100 acquires biological information corresponding to the received applicant user name from the user information table of a file withdrawal information management database 102, and verifies the acquired biological information with the received biological information. When the two biological information match, a confidential file generation processing unit 111 generates a confidential file including encrypted data obtained by encrypting the file, taking-out of which the user has applied, and the biological information included in a user information table used for verification. The confidential file is transmitted to the applicant terminal 103, and a file movement processing unit 118 moves the confidential file to an external storage device 114. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a file take-out management system, a file take-out management server, a file take-out management method, and a file take-out management program for restricting browsing of files taken from a server to a terminal, and more particularly to a file take-out management system using restriction by biometric authentication. The present invention relates to a file export management server, a file export management method, and a file export management program.

  In recent years, with the seriousness of the information leakage problem, a more reliable confidential information management method is required. As a prior art, when acquiring a file from a server to a user terminal, a technique for restricting the browsing of confidential information by requesting an approval procedure for being a valid user (see, for example, Patent Document 1), For example, there is a technique (for example, refer to Patent Document 2) that prohibits or restricts copying of an image to an external storage device such as a USB memory.

JP 2004-227356 A JP-A-11-149414

  By combining the technologies disclosed in Patent Document 1 and Patent Document 2, a system that prohibits the outside export of files that are not approved can be configured, and high reliability can be realized for preventing leakage of confidential information. Can do.

  However, even in such a system, there remains a problem regarding browsing of files after being taken out. In the existing system, a file taken out to an external storage device is requested to be password-authenticated to be browsed, and browsing by an unauthorized user is prohibited by preventing a person who does not know the password from browsing. However, this method has a problem that if a password is leaked, it is viewed by an unauthorized user, and a problem that a legitimate user forgets the password cannot view it.

  An object of the present invention is to provide a file take-out management system and a file take-out management capable of restricting browsing of a file held in an external storage device that can be carried from a management server only to a user who took out the file without using a password. To provide a server, a file take-out management method, and a file take-out management program.

In order to achieve the above object, the file take-out management system of the present invention provides:
A file take-out management system having a management server, an approver terminal, and an applicant terminal,
The management server
A user information including a set of user identification information and biometric information; a management information database in which file information including a set of file identification information, approver user identification information and access information is stored;
File storage means for storing a file corresponding to file identification information included in the file information stored in the management information database;
When a file list acquisition request is received from the applicant terminal, the file identification information of the file stored by the file storage unit and the approver user identification information are included based on the file information stored in the management information database. File list information transmitting means for generating file list information and transmitting the file list information to the applicant terminal that has transmitted the file list acquisition request;
When receiving application information including application file identification information applied for take-out and applicant user identification information from the applicant terminal that has received the file list information transmitted by the file list information transmission means, the management information database The approver user identification information corresponding to the application file identification information is identified based on the file information stored in the file, and the take-out application has been made to the approver terminal based on the identified approver user identification information Application information management means for updating access information included in the file information stored in the management information database based on the application information;
When an application file list acquisition request is received from the approver terminal that is notified that the take-out application has been made, the approval requesting acquisition of the application file list from the application file identification information included in the application information Selecting application file identification information corresponding to the approver user identification information of the approver user, and creating application file list information including the selected application file identification information and the applicant user identification information included in the application information , Application file list information transmitting means for transmitting the application file list information to the approver terminal that has transmitted the application file list acquisition request;
Approval result information including file identification information of a file approved for taking out and / or a file not approved for taking out from the approver terminal that has received the application file list information transmitted by the application file information list transmitting means , The approval information management means for notifying the applicant terminal that has transmitted the application information that the approval is completed and updating the access information included in the file information of the management information database based on the approval result information When,
Upon receiving an application file list acquisition request including approval result information from the applicant terminal that has been notified that the approval has been completed, the approval result is based on the access information included in the file information stored in the management information database. Generating an application file list information including information, and transmitting an application file list information with approval result information for transmitting the application file list information including the approval result information to the terminal for the applicant who has transmitted the application file list acquisition request;
Received a file acquisition request including file identification information of a file requesting acquisition from the applicant terminal that has received the application file list information including the approval result information transmitted by the application file list information transmitting means with the approval result information Acquisition information management means to
When receiving the file acquisition request from the applicant terminal and receiving the applicant user's biometric information and the applicant user identification information for identifying the applicant user, the user identification stored in the management information database Identifying biometric information corresponding to the applicant user identification information from the biometric information included in the user information stored in the management information database based on the information and the received applicant user identification information, Biometric authentication means for determining whether or not a user who has requested acquisition of a file is valid based on the identified biometric information and the biometric information received from the applicant terminal;
In response to determining that the user who requested the file acquisition by the biometric authentication unit is valid, the file identification information included in the file acquisition request is selected from the files stored by the file storage unit. A file conversion means for acquiring a corresponding file and converting the acquired file into a confidential file that can be referred only to a user who has requested acquisition of the file;
File distribution means for distributing the confidential file converted by the file conversion means to the applicant terminal that has transmitted the file acquisition request;
With
The approver terminal is
When notified from the management server that a take-out application has been made, an application file list acquisition request transmission means for transmitting the application file list acquisition request to the management server;
When the application file list information is received from the management server that has received the application file list acquisition request transmitted by the application file list acquisition request transmission means, the application file identification information included in the application file list information and the applicant user Application file list display means for displaying identification information on the display unit;
An approval result information transmission unit that accepts designation of a file to be approved for take-out by an approver user, creates the approval result information, and transmits the created approval result information to the management server;
With
The applicant terminal is
A biometric authentication device for obtaining biometric information of the applicant user;
An external storage device that is portable and can store files;
File list acquisition request transmission means for transmitting the file list acquisition request to the management server;
When the file list information is received from the management server that has received the file list acquisition request transmitted by the file list acquisition request transmitting means, the file identification information and the approver user identification information included in the file list information are displayed. File list display means to be displayed in
An application information transmission means for accepting designation of a file to be applied for take-out by an applicant user, creating the application information, and transmitting the created application information to the management server;
When notified from the management server that the approval has been completed, an application file list acquisition request with approval result information transmission means for transmitting an application file list acquisition request including the approval result information to the management server;
When receiving the application file list information including the approval result information from the management server that has received the application file list acquisition request including the approval result information transmitted by the application file list acquisition request transmitting means with the approval result information, An approval result display means for displaying the approval result information included in the application file list information including the result information on the display unit;
A file acquisition request transmission unit that accepts designation of one or more files that request acquisition by an applicant user, creates the file acquisition request, and transmits the created file acquisition request to the management server;
Biometric information transmitting means for acquiring the biometric information of the applicant user using the biometric authentication device following the transmission of the file acquisition request, and transmitting the acquired biometric information and the applicant user identification information to the management server. When,
A confidential file receiving means for receiving a confidential file distributed from the management server that has received the biological information and applicant user identification information transmitted by the biological information transmitting means;
File moving means for moving the confidential file received by the confidential file receiving means to the external storage device;
Comprising
It is characterized by that.

Preferably, the file converting means is
Encryption means for encrypting the obtained file to generate encrypted data;
Encrypted data generated by the encryption unit and biometric information included in user information stored in the management information database used when the biometric authentication unit determines whether or not the user is legitimate. A confidential file generation means for generating the confidential file by combining a decryption program for decrypting the encrypted data and a biometric authentication program for collating biometric information;
It is characterized by including.

The file take-out management server of the present invention is
A user information including a set of user identification information and biometric information; a management information database storing file information including file identification information;
File storage means for storing a file corresponding to file identification information included in the file information stored in the management information database;
When receiving the file identification information, biometric information, and applicant user identification information of the file requesting acquisition from the applicant terminal, the user identification information stored in the management information database and the received applicant user identification The biometric information corresponding to the applicant user identification information is identified from the biometric information included in the user information stored in the management information database based on the information, and the identified biometric information and for the applicant Based on biometric information received from the terminal, biometric authentication means for determining whether the user who requested the file acquisition is valid;
In response to determining that the user who requested the file acquisition by the biometric authentication unit is valid, the file identification information included in the file acquisition request is selected from the files stored by the file storage unit. A file acquisition means for acquiring a corresponding file;
Encryption means for encrypting the obtained file to generate encrypted data;
Encrypted data generated by the encryption unit and biometric information included in user information stored in the management information database used when the biometric authentication unit determines whether or not the user is legitimate. A confidential file generation means for generating the confidential file by combining a decryption program for decrypting the encrypted data and a biometric authentication program for collating biometric information;
File distribution means for distributing the confidential file generated by the confidential file generation means to the applicant terminal that has transmitted the file acquisition request;
It is characterized by providing.

In addition, the file export management method of the present invention includes:
Management information database storing user information including a set of user identification information and biometric information and file information including a set of file identification information, approver user identification information and access information, and a file stored in the management information database File take-out comprising a management server comprising a file storage means for storing a file corresponding to file identification information contained in the information, an approver terminal, and an applicant terminal comprising a biometric authentication device and an external storage device A file takeout management method in a management system,
The applicant terminal sends a file list acquisition request to the management server to send the file list acquisition request;
When the management server receives a file list acquisition request from the applicant terminal, the file identification information of the file stored by the file storage unit and the approver user based on the file information stored in the management information database A file list information transmission step for generating file list information including identification information and transmitting the file list information to the applicant terminal that has transmitted the file list acquisition request;
When the applicant terminal receives the file list information from the management server that has received the file list acquisition request, the file identification information and the approver user identification information included in the file list information are displayed on the display unit. A file list display step;
The applicant terminal accepts specification of a file to be applied for take-out by the applicant user, creates application information including application file identification information and applicant user identification information that have been filed for take-out, and the created application information Sending the application information to the management server;
When the management server receives the application information from the applicant terminal that has received the file list information, the approver corresponding to the application file identification information based on the file information stored in the management information database The user identification information is specified, the approver terminal is notified based on the specified approver user identification information that a take-out application has been made, and stored in the management information database based on the application information. An application information management step for updating the access information included in the file information;
When the approver terminal is notified that a take-out application has been made from the management server, an application file list acquisition request transmission step for transmitting an application file list acquisition request to the management server;
When the management server receives the application file list acquisition request from the approver terminal notified that the take-out application has been made, a list of application files is selected from the application file identification information included in the application information. An application file that selects application file identification information corresponding to the approver user identification information of the approver user who requested acquisition of the application file, and includes the selected application file identification information and the applicant user identification information included in the application information An application file list information transmission step of creating list information and transmitting the application file list information to the approver terminal that has transmitted the application file list acquisition request;
When the approver terminal receives the application file list information from the management server that has received the application file list acquisition request, the application file identification information and the applicant user identification information included in the application file list information are displayed. Application file list display step to be displayed in the department,
The approver terminal accepts designation of a file approved for take-out by an approver user, and creates approval result information including file identification information of a file approved for take-out and / or a file not approved for take-out, An approval result information transmission step of transmitting the created approval result information to the management server;
When the management server receives the approval result information from the approver terminal that has received the application file list information, the management server notifies the applicant terminal that has transmitted the application information that the approval has been completed, and the approval An authorization information management step for updating the access information included in the file information of the management information database based on the result information;
When the applicant terminal is notified that the approval has been completed from the management server, an application file list acquisition request with approval result information is transmitted to the management server, wherein an application file list acquisition request including approval result information is transmitted to the management server. When,
When the management server receives an application file list acquisition request including the approval result information from the applicant terminal notified of the completion of the approval, the access included in the file information stored in the management information database An application file with approval result information that generates application file list information including approval result information based on the information and transmits the application file list information including the approval result information to the terminal for the applicant that has transmitted the application file list acquisition request. A list information transmission step;
When the application terminal receives application file list information including the approval result information from the management server that has received the application file list acquisition request including the approval result information, the application file list information including the approval result information is received. An approval result display step for displaying the approval result information included in the display part,
The applicant terminal accepts specification of one or more files requesting acquisition by the applicant user, creates a file acquisition request including the file identification information of the file requesting acquisition, and the file acquisition request created Sending a file acquisition request to the management server;
The applicant terminal acquires the biometric information of the applicant user using the biometric authentication device following the transmission of the file acquisition request, and the acquired biometric information and the applicant user identification information are stored in the management server. A biometric information transmission step for transmitting to
An acquisition information management step in which the management server receives the file acquisition request from the applicant terminal that has received the application file list information including the approval result information;
When the management server receives the applicant user's biometric information and the applicant user identification information for identifying the applicant user following the file acquisition request from the applicant terminal, the management server stores it in the management information database. Biometric information corresponding to the applicant user identification information from the biometric information included in the user information stored in the management information database based on the user identification information that has been received and the received applicant user identification information A biometric authentication step for determining whether or not the user who requested the acquisition of the file is valid based on the specified biometric information and the biometric information received from the applicant terminal,
File identification information included in the file acquisition request from among the files stored by the file storage means in response to the management server determining that the user who requested the file acquisition is valid A file conversion step of acquiring a file corresponding to the file and converting the acquired file into a confidential file that can be referred to only by a user who has requested acquisition of the file;
The management server distributes the confidential file converted by the file conversion means to the applicant terminal that has transmitted the file acquisition request; and
A confidential file receiving step in which the applicant terminal receives the confidential file distributed from the management server that has received the biological information and the applicant user identification information transmitted by the biological information transmitting means;
The file transfer step for the applicant terminal to move the received confidential file to the external storage device;
It is characterized by providing.

The file take-out management program of the present invention is
Computer
A user information including a set of user identification information and biometric information; a management information database in which file information including a set of file identification information, approver user identification information and access information is stored;
File storage means for storing a file corresponding to file identification information included in the file information stored in the management information database;
A file containing file identification information and approver user identification information of a file stored by the file storage means based on the file information stored in the management information database upon receipt of a file list acquisition request from the applicant terminal File list information transmitting means for generating list information and transmitting the file list information to the applicant terminal that has transmitted the file list acquisition request;
When receiving application information including application file identification information applied for take-out and applicant user identification information from the applicant terminal that has received the file list information transmitted by the file list information transmission means, the management information database Approver user identification information corresponding to the application file identification information is identified based on the file information stored in the file, and a take-out application has been made to the approver terminal based on the identified approver user identification information. Application information management means for updating the access information included in the file information stored in the management information database based on the application information,
When an application file list acquisition request is received from the approver terminal that is notified that the take-out application has been made, the approval requesting acquisition of the application file list from the application file identification information included in the application information Selecting application file identification information corresponding to the approver user identification information of the approver user, and creating application file list information including the selected application file identification information and the applicant user identification information included in the application information , Application file list information transmitting means for transmitting the application file list information to the approver terminal that has transmitted the application file list acquisition request;
Approval result information including file identification information of a file approved for taking out and / or a file not approved for taking out from the approver terminal that has received the application file list information transmitted by the application file information list transmitting means , The approval information management means for notifying the applicant terminal that has transmitted the application information that the approval is completed and updating the access information included in the file information of the management information database based on the approval result information When,
Upon receiving an application file list acquisition request including approval result information from the applicant terminal that has been notified that the approval has been completed, the approval result is based on the access information included in the file information stored in the management information database. Generating an application file list information including information, and transmitting an application file list information with approval result information for transmitting the application file list information including the approval result information to the terminal for the applicant who has transmitted the application file list acquisition request;
Received a file acquisition request including file identification information of a file requesting acquisition from the applicant terminal that has received the application file list information including the approval result information transmitted by the application file list information transmitting means with the approval result information Acquisition information management means to
When receiving the file acquisition request from the applicant terminal and receiving the applicant user's biometric information and the applicant user identification information for identifying the applicant user, the user identification stored in the management information database Identifying biometric information corresponding to the applicant user identification information from the biometric information included in the user information stored in the management information database based on the information and the received applicant user identification information, Biometric authentication means for determining whether or not a user who has requested acquisition of a file is valid based on the identified biometric information and the biometric information received from the applicant terminal;
In response to determining that the user who requested the file acquisition by the biometric authentication unit is valid, the file identification information included in the file acquisition request is selected from the files stored by the file storage unit. A file conversion means for acquiring a corresponding file and converting the acquired file into a confidential file that can be referred only to a user who has requested acquisition of the file;
File distribution means for distributing the confidential file converted by the file conversion means to the applicant terminal that has transmitted the file acquisition request;
And make it work.

  According to the present invention, it is possible to limit browsing of a file held in an external storage device that can be carried from the management server to only a user who took out the file without using a password.

It is a figure which shows an example of a structure of the file taking-out management system which concerns on embodiment of this invention. It is a figure which shows the data structural example of the database for managing file taking-out information. It is a figure which shows the data structural example of the file made confidential in order to take a file outside. It is a figure which shows the example of the screen for performing file taking-out application. It is a figure which shows the example of the screen for performing approval of a file taking-out application. It is a figure which shows the example of the screen for acquiring the file approved to carry out. It is a figure which shows an example of the flowchart of file taking-out application processing. It is a figure which shows an example of the flowchart of a file taking-out approval process. It is a figure which shows an example of the flowchart of a process which acquires the file approved to carry out. It is a figure which shows an example of the flowchart of the biometrics authentication process which is a part of process which acquires the file of FIG. It is a figure which shows an example of the flowchart of a confidential file production | generation process which is a part of process which acquires the file of FIG. It is a figure which shows an example of the flowchart of a process which decodes a confidential file and refers to the original file.

  Hereinafter, a file take-out management system according to an embodiment of the present invention will be described with reference to the drawings.

FIG. 1 is a diagram showing an example of the configuration of a file take-out management system according to an embodiment of the present invention.
As shown in FIG. 1, the file take-out management system according to the embodiment of the present invention includes a management server 100, an applicant terminal 103, and an approver terminal 104.
The applicant terminal 103 and the approver terminal 104 can access the management server 100 via the network 105.
Although only one applicant terminal 103 and one approver terminal 104 are shown in FIG. 1, a plurality of applicant terminals 103 and approver terminals 104 may be included in the file take-out management system. .

The management server 100 is a server that manages file takeout. The management server 100 includes a CPU (Central Processing Unit), a memory, and a storage device 101.
The memory of the management server 100 stores a file take-out management program. The file take-out management program manages a file storage unit 106 for storing a file to be taken out and managed in the storage device 101, an application information management unit 107 for managing information on a take-out application from the user, and information on approval for the application. An authorization information management unit 108 for managing, an acquisition information management unit 109 for managing information of a file acquisition request from a user, a biometric authentication processing unit 110 for authenticating a user who wants to take out a file, and a taken-out file Is configured with a confidential file generation processing unit 111 for converting the file into a form that cannot be accessed by an unauthorized user, and a file distribution processing unit 112 for distributing the file to the user.
The CPU of the management server 100 executes a file export management program and manages file export.

The storage device 101 is configured by a hard disk, an optical disk, or the like. The storage device 101 stores a plurality of files to be managed for take-out and a file take-out information management database 102.
The file take-out information management database 102 is a database in which information for managing file take-out is stored.

The applicant terminal 103 is a terminal used by a user who wants to take out a file. The applicant terminal 103 has a CPU, a memory, an input unit, and a display unit.
The memory of the applicant terminal 103 stores a file take-out application program. The file take-out application program includes an application processing unit 115 for processing a take-out application, a biometric information acquisition processing unit 116 for acquiring biometric information of a user and transmitting it to the server, and a file approved for take-out A file acquisition processing unit 117 for acquiring the file from the file, and a file movement processing unit 118 for moving the acquired file to the external storage device 114.
The CPU of the applicant terminal 103 executes a file take-out application program, accepts a file take-out application input by the user, and performs file take-out application processing.
The input unit includes a keyboard and a mouse. The display unit includes a display, a printer, and the like.

The applicant terminal 103 is connected to the biometric authentication device 113 and the external storage device 114.
The biometric authentication device 113 is a device for acquiring biometric information of a user when performing biometric authentication such as fingerprint authentication or finger vein authentication, and is controlled by the biometric information acquisition processing unit 116.
The external storage device 114 is a device used for taking out the file acquired by the file acquisition processing unit 117 to the outside by the file movement processing unit 118, and corresponds to, for example, an SD card or a USB memory.

The approver terminal 104 is a terminal used by a user who has a role of approving file takeout. The approver terminal 104 includes a CPU, a memory, an input unit, and a display unit.
The memory of the approver terminal 104 stores a file take-out approval program. The file take-out approval program includes an approval processing unit 119 for approving the application.
The CPU of the approver terminal 104 executes the file take-out approval program, accepts the file take-out approval input by the user, and approves the file take-out.
The input unit includes a keyboard and a mouse. The display unit includes a display, a printer, and the like.

FIG. 2 shows an example of the configuration of the file take-out information management database 102.
As shown in FIG. 2, the file take-out information management database 102 includes a user information table 201 and a file information table 202.
The user information table 201 is a table for storing information on users who use this file take-out management system, and is composed of two elements: a user name 203 and biometric information 204. The user name 203 is an element for storing the name of the user, and only the user stored here can apply and approve the take-out. The biometric information 204 is an element for storing the biometric information of the user, and biometric authentication can be performed by comparing the biometric information transmitted from the terminal with the biometric information to identify the user.

  The file information table 202 includes a file name 205, an approver user name 206, and an access log 207. The file name 205 is an element for storing the name of the file, and only the file in which the file name is stored is taken out and managed. The storage device 101 stores a plurality of files in which file names are stored in the file names 205, and information indicating the correspondence between the file names 205 and the storage locations (for example, file paths) of these files. . The approver user name 206 is an element that stores the name of a user who has a role of approving a take-out application for the file. The access log 207 is an element for storing a plurality of application, approval, and take-out histories made for the file. The applicant user name 208, the application date / time 209, the approval result 210, the approval date / time 211, It consists of a take-out date and time 212.

  The applicant user name 208 is an element for storing the user name of the user who has made a take-out application for the file. The application date and time 209 is an element that stores the date and time when the application process was performed. The approval result 210 is an element for storing the result of whether or not the application has been approved. For example, OK is stored when the application is approved, and NG is stored when the application is not approved. The approval date / time 211 is an element for storing the date / time when the approval is performed. When the approval is not performed, no value is stored. The take-out date and time 212 is an element for storing the date and time when the user acquired the approved file. If the file is not acquired, no value is stored.

FIG. 3 shows an example of the data structure of the confidential file generated by the confidential file generation processing unit 111.
The confidential file 301 includes encrypted data 302, a decryption program 303, a biometric authentication program 304, and biometric information 305.
The encrypted data 302 is obtained by encrypting the entire data of the taken-out file by a method that can be decrypted, and the original data cannot be referred to as it is. The decryption program 303 is for performing a process of decrypting the encrypted data 302, and the user can refer to the original data by executing this program. The biometric authentication program 304 is for performing biometric authentication processing, and in order to execute the decryption program 303, the biometric authentication must succeed. The biometric information 305 is biometric information of the user who took out the file, and the biometric authentication program 304 performs biometric authentication processing by comparing the biometric information of the user who refers to the file with the biometric information 305.

FIG. 4 is a diagram illustrating an example of a screen for applying for file take-out.
The application screen 401 is displayed on the display unit of the applicant terminal 103. In the application screen 401, a file list 402 is displayed first. The file list 402 displays the file name and the name of the approver user who approves the file take-out for each file information stored in the file information table 202 of the file take-out information management database 102. The user selects a file to be taken out from the list. For this selection, for example, a check box or the like is used so that the file selected by the user can be visually recognized. After selecting the file, the user inputs his / her user name in the applicant user name 403. When the application button 404 is pressed, application information is transmitted to the management server 100. When the cancel button 405 is pressed, the application process is stopped.

FIG. 5 is a diagram illustrating an example of a screen for approving a file take-out application.
The approval screen 501 is displayed on the display unit of the approver terminal 104. On the approval screen 501, a file list 502 is displayed first. The file list 502 displays a file name and an applicant user name indicating a user who has applied for take-out for each file for which application has been made. The user selects a file for approving the application from the list. For this selection, for example, a check box or the like is used so that the file selected by the user can be visually recognized. When an approval button 503 is pressed after selecting a file, approval information is transmitted to the management server 100. When the cancel button 504 is pressed, the approval process is cancelled.

FIG. 6 is a diagram illustrating an example of a screen for acquiring a file approved to be taken out.
The file acquisition screen 601 is displayed on the display unit of the applicant terminal 103. On the file acquisition screen 601, a file list 602 is displayed first. The file list 602 displays a file name, an approval result, and an approver user name for each file that has been applied. The user selects a file to be acquired from the list. For this selection, for example, a check box or the like is used so that the file selected by the user can be visually recognized. However, a file whose approval result is NG (application not permitted) is displayed with, for example, an X mark in the check box and cannot be selected. When an acquisition button 603 is pressed after selecting a file, the file can be acquired. Further, when a cancel button 604 is pressed, the acquisition process is stopped.

  The description of the configuration and function of the file take-out management system according to the present embodiment is finished, and the operation of the file take-out management system according to the present embodiment will be described below.

FIG. 7 shows an example of a flowchart of the file take-out application process.
When the user of the applicant terminal 103 starts application processing by pressing the application button displayed on the display unit using the mouse of the applicant terminal 103 or the like, the application processing unit 115 sends the file list to the management server 100. Request acquisition. Upon receiving the request, the management server 100 accesses the file take-out information management database 102 by the application information management unit 107, and includes the file name of the file and the approver user name indicating the name of the user who approves the file take-out. A file list is generated and transmitted to the applicant terminal 103 on which the user has applied. The applicant terminal 103 that has received the file list displays an application screen 401. The received file list is displayed in the file list 402 in the application screen 401 (step S701).

  The user who applies for file take-out uses the mouse of the applicant terminal 103 to select the file to be applied for take-out from among the files displayed in the file list 402 and uses it for the applicant user name 403. After inputting the user name, the application button 404 is pressed. In response to pressing of the application button 404, the application processing unit 115 transmits to the management server 100 application information including the file name of the file to be taken out and the name of the applicant user of the user who has applied for taking out (step) S702).

  When receiving the application information, the management server 100 accesses the file take-out information management database 102 and identifies the approver user name corresponding to the file name included in the application information. Then, the management server 100 specifies the approver terminal 104 used by the approver user based on the specified approver user name, and confirms that the application has been made to the specified approver terminal 104. Notice. At the same time, the access log 207 of the file information table 202 of the file take-out information management database 102 is updated, and information on the applicant user name 208 and the application date / time 209 is added. (Step S703). In addition, it is desirable for this notification to take a method that allows the approver user to confirm at an arbitrary timing, such as an e-mail.

FIG. 8 shows an example of a flowchart of the file take-out approval process.
When the approver user of the approver terminal 104 notified of the application requesting the acquisition of a list of files included in the application information by pressing the acquisition button using the mouse of the approver terminal 104 or the like The approval processing unit 119 requests the management server 100 to acquire a list of files. Upon receiving the request, the management server 100 includes the application information by accessing the file take-out information management database 102 based on the approver user name acquired when the approver terminal 104 is specified or by the approval information management unit 108. The approver user name corresponding to the file name to be obtained is acquired, and the application file name corresponding to the approver user name of the approver user who requested acquisition of the file list is selected from the file names included in the application information .
Then, the management server 100 generates an application file list including the file name of the selected application file and the applicant user name indicating the name of the user who applied for take-out, and transmits the application file list to the approver terminal 104. The approver terminal 104 that has received the application file list displays an approval screen 501. The received application file list is displayed in the application file list 502 in the approval screen 501 (step S801).

The approver user uses the mouse or the like to select one that approves the application from the files displayed in the application file list 502 and presses an approval button 503. In response to pressing of the approval button 503, the approval processing unit 119 manages the approval result information including the file name of the file that is approved to be taken out (OK) and / or the file that is not approved to be taken out (NG). 100 (step S802).
When the management server 100 receives the approval result information, the management server 100 notifies the applicant terminal 103 of the applicant user who applied for taking out the file corresponding to the file name included in the approval result information that the approval has been completed. At the same time, the access log 207 of the file information table 202 of the file take-out information management database 102 is updated, and information on the approval result 210 and the approval date 211 is added. (Step S803). In addition, it is desirable for this notification to take a method that can be confirmed by the applicant user at an arbitrary timing, such as an e-mail.

FIG. 9 shows an example of a flowchart of the file acquisition process.
When the applicant user of the applicant terminal 103 notified that the approval is completed requests acquisition of a list of application files including approval result information by pressing an acquisition button using the mouse of the applicant terminal 103 or the like. The file acquisition processing unit 117 requests the management server 100 to acquire a list of application files including approval result information. Upon receiving this acquisition request, the server 100 accesses the file take-out information management database 102 by the acquisition information management unit 109, generates an application file list including the approval result information, and transmits it to the applicant terminal 103. The applicant terminal 103 that has received the application file list including the approval result information displays the acquisition screen 601. The application file list including the received approval result information is displayed in the application file list 602 in the acquisition screen 601 (step S901).
The applicant user selects a file to be acquired from the files displayed in the application file list 602 and presses an acquisition button 603 using a mouse or the like. In response to pressing of the acquisition button 603, the file acquisition processing unit 117 of the applicant terminal 103 transmits a file acquisition request including the file name of the file to be acquired to the management server 100 (step S902).

When the management server 100 receives the biometric information and the applicant user name from the applicant terminal 103 following the file acquisition request, the management server 100 executes biometric authentication processing, and performs processing according to the result (steps S903 and S904). . Details of the biometric authentication process will be described later with reference to FIG.
When biometric authentication fails, the management server 100 notifies the applicant terminal 103 of acquisition failure. Upon receiving the notification, the applicant terminal 103 displays a message indicating that the acquisition has failed on the display unit and notifies the applicant user (step S905).
If the biometric authentication is successful, the management server 100 executes a confidential file generation process (step S906). Details of the confidential file generation processing will be described later with reference to FIG.

When the confidential file generation process is completed, the management server 100 transmits the generated confidential file to the applicant terminal 103 by the file distribution processing unit 112. At the same time, the access log 207 of the file information table 202 of the file take-out information management database 102 is updated, and information on the take-out date 212 is added. (Step S907).
Upon receiving the confidential file, the applicant terminal 103 stores the received confidential file in the external storage device 114 by the file movement processing unit 118 (step S908).

FIG. 10 shows an example of a detailed flowchart of the biometric authentication process in the file acquisition process of FIG.
After transmitting the file acquisition information to the management server 100, the applicant terminal 103 next controls the biometric authentication device 113 by the biometric information acquisition processing unit 116 to acquire the biometric information of the applicant user (step S1001). Alternatively, the applicant terminal 103 waits for a request for biometric information from the management server 100, and upon receiving a request for biometric information, the biometric information acquisition processing unit 116 controls the biometric authentication device 113 and the biometric information of the applicant user. Information is acquired (step S1001). The biometric information is acquired, for example, as a process of taking a fingerprint or finger vein image and processing it into a format suitable for collation.

The biometric information acquisition processing unit 116 of the applicant terminal 103 transmits the acquired biometric information to the management server 100 together with the applicant user name (step S1002).
The management server 100 that has received the biometric information and the applicant user name searches the received user name from the user information table 201 of the file take-out information management database 102 (step S1003).
If the received applicant user name is found as a result of the search, the biometric information corresponding to the user name is obtained from the user information table 201 and collated with the received biometric information (step S1004).

As a result of the collation, if the difference between the two pieces of biometric information is below a certain standard, it is determined that the two pieces of biometric information match, and if a certain standard is exceeded, the two pieces of biometric information do not match Judgment is made (step S1005).
If the applicant user name is not found in step S1003, and if the two pieces of biometric information do not match in step S1005, authentication failure is assumed (step S1006).
If the two pieces of biometric information match in step S1005, the authentication is successful (step S1007).

FIG. 11 shows an example of a detailed flowchart of the confidential file generation process in the file acquisition process of FIG.
The confidential file generation processing unit 111 of the management server 100 extracts information for one file from the acquired information received from the applicant terminal 103 (step S1101).
The file storage unit 106 acquires a file corresponding to the extracted acquisition information for one file from the storage device 101 and encrypts it to generate the encrypted data 302 (step S1102).
The encrypted data 302 and the biometric information included in the user information table 201 used for the collation in step S1004 are combined as biometric information 305 to form a set of data (step S1103).

The data combined in step S1103 is combined with the decryption program 303 and the biometric authentication program 304 to form one file. The file generated in this manner is set as the confidential file 301 (step S1104).
When all the files included in the received acquisition information have been processed, the process ends. If an unprocessed file remains, the process returns to step S1101 (step S1105).

FIG. 12 shows an example of a flowchart of processing for decrypting the acquired confidential file and referring to the original file.
The user executes the decryption program 303 included in the confidential file 301 (step S1201). The decryption program 303 executes the biometric authentication program 304 (step S1202). The biometric authentication program 304 controls the biometric authentication device 113 to acquire the user's biometric information. The acquired biometric information and biometric information 305 in the confidential file 301 are collated, and the collation result is determined (steps S1203 and S1204).

  If the verification fails, the user is notified of the failure (step S1205). If verification fails, the original data cannot be referenced. On the other hand, if the verification is successful, the decryption program 303 decrypts the encrypted data 302 and returns it to the original data (step S1206). By decoding in such a manner, the user can refer to the original data.

  In the above embodiment, the biometric information 305 included in the confidential file 301 is not encrypted, but the secret file 301 may include the encrypted biometric information 305.

  In the above embodiment, the user information table 201 includes the user name 203. However, the user name 203 is an example of information for identifying a user. Can be used. Similarly, the file information table 202 includes the file name 205 and the approver user name 206. The file name 205 and the approver user name 206 are examples of information for identifying the file and the approver user, respectively. Instead of these, other information for identifying the file and other information for identifying the approver user can be used.

  As described above, according to the present invention, browsing of a file taken out to an external storage device that can be carried from the management server can be restricted only to a user who took out the file without using a password.

  Although the embodiments of the present invention have been described above, various modifications and combinations necessary for design reasons and other factors are described in the inventions described in the claims and the specific embodiments described in the embodiments of the invention. It should be understood that it falls within the scope of the invention corresponding to the examples.

DESCRIPTION OF SYMBOLS 100 ... Management server 101 ... Storage device 102 ... File take-out information management database 103 ... Applicant terminal 104 ... Approver terminal 105 ... Network 106 ... File storage unit 107 ... Application information management unit 108 ... Approval Information management unit 109 ... Acquired information management unit 110 ... Biometric authentication processing unit 111 ... Confidential file generation processing unit 112 ... File distribution processing unit 113 ... Biometric authentication device 114 ... External storage device 115 ... Application processing unit 116: Biometric information acquisition processing unit, 117 ... File acquisition processing unit, 118 ... File movement processing unit, 119 ... Approval processing unit, 201 ... User information table, 202 ... File information table, 203 ... User name, 204 ... Biometric information 205 ... File name 206 ... Approver user name 207 ... Access log 208 ... Application User name, 209 ... application date and time, 210 ... approval result, 211 ... approval date and time, 212 ... take-out date and time, 301 ... confidential file, 302 ... encrypted data, 303 ... decryption program, 304 ... biometric authentication program, 305 ... biometric information ,

Claims (5)

A file take-out management system having a management server, an approver terminal, and an applicant terminal,
The management server
A user information including a set of user identification information and biometric information; a management information database in which file information including a set of file identification information, approver user identification information and access information is stored;
File storage means for storing a file corresponding to file identification information included in the file information stored in the management information database;
When a file list acquisition request is received from the applicant terminal, the file identification information of the file stored by the file storage unit and the approver user identification information are included based on the file information stored in the management information database. File list information transmitting means for generating file list information and transmitting the file list information to the applicant terminal that has transmitted the file list acquisition request;
When receiving application information including application file identification information applied for take-out and applicant user identification information from the applicant terminal that has received the file list information transmitted by the file list information transmission means, the management information database The approver user identification information corresponding to the application file identification information is identified based on the file information stored in the file, and the take-out application has been made to the approver terminal based on the identified approver user identification information Application information management means for updating access information included in the file information stored in the management information database based on the application information;
When an application file list acquisition request is received from the approver terminal that is notified that the take-out application has been made, the approval requesting acquisition of the application file list from the application file identification information included in the application information Selecting application file identification information corresponding to the approver user identification information of the approver user, and creating application file list information including the selected application file identification information and the applicant user identification information included in the application information , Application file list information transmitting means for transmitting the application file list information to the approver terminal that has transmitted the application file list acquisition request;
Approval result information including file identification information of a file approved for taking out and / or a file not approved for taking out from the approver terminal that has received the application file list information transmitted by the application file information list transmitting means , The approval information management means for notifying the applicant terminal that has transmitted the application information that the approval is completed and updating the access information included in the file information of the management information database based on the approval result information When,
Upon receiving an application file list acquisition request including approval result information from the applicant terminal that has been notified that the approval has been completed, the approval result is based on the access information included in the file information stored in the management information database. Generating an application file list information including information, and transmitting an application file list information with approval result information for transmitting the application file list information including the approval result information to the terminal for the applicant who has transmitted the application file list acquisition request;
Received a file acquisition request including file identification information of a file requesting acquisition from the applicant terminal that has received the application file list information including the approval result information transmitted by the application file list information transmitting means with the approval result information Acquisition information management means to
When receiving the file acquisition request from the applicant terminal and receiving the applicant user's biometric information and the applicant user identification information for identifying the applicant user, the user identification stored in the management information database Identifying biometric information corresponding to the applicant user identification information from the biometric information included in the user information stored in the management information database based on the information and the received applicant user identification information, Biometric authentication means for determining whether or not a user who has requested acquisition of a file is valid based on the identified biometric information and the biometric information received from the applicant terminal;
In response to determining that the user who requested the file acquisition by the biometric authentication unit is valid, the file identification information included in the file acquisition request is selected from the files stored by the file storage unit. A file conversion means for acquiring a corresponding file and converting the acquired file into a confidential file that can be referred only to a user who has requested acquisition of the file;
File distribution means for distributing the confidential file converted by the file conversion means to the applicant terminal that has transmitted the file acquisition request;
With
The approver terminal is
When notified from the management server that a take-out application has been made, an application file list acquisition request transmission means for transmitting the application file list acquisition request to the management server;
When the application file list information is received from the management server that has received the application file list acquisition request transmitted by the application file list acquisition request transmission means, the application file identification information included in the application file list information and the applicant user Application file list display means for displaying identification information on the display unit;
An approval result information transmission unit that accepts designation of a file to be approved for take-out by an approver user, creates the approval result information, and transmits the created approval result information to the management server;
With
The applicant terminal is
A biometric authentication device for obtaining biometric information of the applicant user;
An external storage device that is portable and can store files;
File list acquisition request transmission means for transmitting the file list acquisition request to the management server;
When the file list information is received from the management server that has received the file list acquisition request transmitted by the file list acquisition request transmitting means, the file identification information and the approver user identification information included in the file list information are displayed. File list display means to be displayed in
An application information transmission means for accepting designation of a file to be applied for take-out by an applicant user, creating the application information, and transmitting the created application information to the management server;
When notified from the management server that the approval has been completed, an application file list acquisition request with approval result information transmission means for transmitting an application file list acquisition request including the approval result information to the management server;
When receiving the application file list information including the approval result information from the management server that has received the application file list acquisition request including the approval result information transmitted by the application file list acquisition request transmitting means with the approval result information, An approval result display means for displaying the approval result information included in the application file list information including the result information on the display unit;
A file acquisition request transmission unit that accepts designation of one or more files that request acquisition by an applicant user, creates the file acquisition request, and transmits the created file acquisition request to the management server;
Biometric information transmitting means for acquiring the biometric information of the applicant user using the biometric authentication device following the transmission of the file acquisition request, and transmitting the acquired biometric information and the applicant user identification information to the management server. When,
A confidential file receiving means for receiving a confidential file distributed from the management server that has received the biological information and applicant user identification information transmitted by the biological information transmitting means;
File moving means for moving the confidential file received by the confidential file receiving means to the external storage device;
Comprising
A file export management system characterized by that. The file conversion means includes
Encryption means for encrypting the obtained file to generate encrypted data;
Encrypted data generated by the encryption unit and biometric information included in user information stored in the management information database used when the biometric authentication unit determines whether or not the user is legitimate. A confidential file generation means for generating the confidential file by combining a decryption program for decrypting the encrypted data and a biometric authentication program for collating biometric information;
The file take-out management system according to claim 1, further comprising: A user information including a set of user identification information and biometric information; a management information database storing file information including file identification information;
File storage means for storing a file corresponding to file identification information included in the file information stored in the management information database;
When receiving the file identification information, biometric information, and applicant user identification information of the file requesting acquisition from the applicant terminal, the user identification information stored in the management information database and the received applicant user identification The biometric information corresponding to the applicant user identification information is identified from the biometric information included in the user information stored in the management information database based on the information, and the identified biometric information and for the applicant Based on biometric information received from the terminal, biometric authentication means for determining whether the user who requested the file acquisition is valid;
In response to determining that the user who requested the file acquisition by the biometric authentication unit is valid, the file identification information included in the file acquisition request is selected from the files stored by the file storage unit. A file acquisition means for acquiring a corresponding file;
Encryption means for encrypting the obtained file to generate encrypted data;
Encrypted data generated by the encryption unit and biometric information included in user information stored in the management information database used when the biometric authentication unit determines whether or not the user is legitimate. A confidential file generation means for generating the confidential file by combining a decryption program for decrypting the encrypted data and a biometric authentication program for collating biometric information;
File distribution means for distributing the confidential file generated by the confidential file generation means to the applicant terminal that has transmitted the file acquisition request;
A file export management server characterized by comprising: Management information database storing user information including a set of user identification information and biometric information and file information including a set of file identification information, approver user identification information and access information, and a file stored in the management information database File take-out comprising a management server comprising a file storage means for storing a file corresponding to file identification information contained in the information, an approver terminal, and an applicant terminal comprising a biometric authentication device and an external storage device A file takeout management method in a management system,
The applicant terminal sends a file list acquisition request to the management server to send the file list acquisition request;
When the management server receives a file list acquisition request from the applicant terminal, the file identification information of the file stored by the file storage unit and the approver user based on the file information stored in the management information database A file list information transmission step for generating file list information including identification information and transmitting the file list information to the applicant terminal that has transmitted the file list acquisition request;
When the applicant terminal receives the file list information from the management server that has received the file list acquisition request, the file identification information and the approver user identification information included in the file list information are displayed on the display unit. A file list display step;
The applicant terminal accepts specification of a file to be applied for take-out by the applicant user, creates application information including application file identification information and applicant user identification information that have been filed for take-out, and the created application information Sending the application information to the management server;
When the management server receives the application information from the applicant terminal that has received the file list information, the approver corresponding to the application file identification information based on the file information stored in the management information database The user identification information is specified, the approver terminal is notified based on the specified approver user identification information that a take-out application has been made, and stored in the management information database based on the application information. An application information management step for updating the access information included in the file information;
When the approver terminal is notified that a take-out application has been made from the management server, an application file list acquisition request transmission step for transmitting an application file list acquisition request to the management server;
When the management server receives the application file list acquisition request from the approver terminal notified that the take-out application has been made, a list of application files is selected from the application file identification information included in the application information. An application file that selects application file identification information corresponding to the approver user identification information of the approver user who requested acquisition of the application file, and includes the selected application file identification information and the applicant user identification information included in the application information An application file list information transmission step of creating list information and transmitting the application file list information to the approver terminal that has transmitted the application file list acquisition request;
When the approver terminal receives the application file list information from the management server that has received the application file list acquisition request, the application file identification information and the applicant user identification information included in the application file list information are displayed. Application file list display step to be displayed in the department,
The approver terminal accepts designation of a file approved for take-out by an approver user, and creates approval result information including file identification information of a file approved for take-out and / or a file not approved for take-out, An approval result information transmission step of transmitting the created approval result information to the management server;
When the management server receives the approval result information from the approver terminal that has received the application file list information, the management server notifies the applicant terminal that has transmitted the application information that the approval has been completed, and the approval An authorization information management step for updating the access information included in the file information of the management information database based on the result information;
When the applicant terminal is notified that the approval has been completed from the management server, an application file list acquisition request with approval result information is transmitted to the management server, wherein an application file list acquisition request including approval result information is transmitted to the management server. When,
When the management server receives an application file list acquisition request including the approval result information from the applicant terminal notified of the completion of the approval, the access included in the file information stored in the management information database An application file with approval result information that generates application file list information including approval result information based on the information and transmits the application file list information including the approval result information to the terminal for the applicant that has transmitted the application file list acquisition request. A list information transmission step;
When the application terminal receives application file list information including the approval result information from the management server that has received the application file list acquisition request including the approval result information, the application file list information including the approval result information is received. An approval result display step for displaying the approval result information included in the display part,
The applicant terminal accepts specification of one or more files requesting acquisition by the applicant user, creates a file acquisition request including the file identification information of the file requesting acquisition, and the file acquisition request created Sending a file acquisition request to the management server;
The applicant terminal acquires the biometric information of the applicant user using the biometric authentication device following the transmission of the file acquisition request, and the acquired biometric information and the applicant user identification information are stored in the management server. A biometric information transmission step for transmitting to
An acquisition information management step in which the management server receives the file acquisition request from the applicant terminal that has received the application file list information including the approval result information;
When the management server receives the applicant user's biometric information and the applicant user identification information for identifying the applicant user following the file acquisition request from the applicant terminal, the management server stores it in the management information database. Biometric information corresponding to the applicant user identification information from the biometric information included in the user information stored in the management information database based on the user identification information that has been received and the received applicant user identification information A biometric authentication step for determining whether or not the user who requested the acquisition of the file is valid based on the specified biometric information and the biometric information received from the applicant terminal,
File identification information included in the file acquisition request from among the files stored by the file storage means in response to the management server determining that the user who requested the file acquisition is valid A file conversion step of acquiring a file corresponding to the file and converting the acquired file into a confidential file that can be referred to only by a user who has requested acquisition of the file;
The management server distributes the confidential file converted by the file conversion means to the applicant terminal that has transmitted the file acquisition request; and
A confidential file receiving step in which the applicant terminal receives the confidential file distributed from the management server that has received the biological information and the applicant user identification information transmitted by the biological information transmitting means;
The file transfer step for the applicant terminal to move the received confidential file to the external storage device;
A file export management method characterized by comprising: Computer
A user information including a set of user identification information and biometric information; a management information database in which file information including a set of file identification information, approver user identification information and access information is stored;
File storage means for storing a file corresponding to file identification information included in the file information stored in the management information database;
A file containing file identification information and approver user identification information of a file stored by the file storage means based on the file information stored in the management information database upon receipt of a file list acquisition request from the applicant terminal File list information transmitting means for generating list information and transmitting the file list information to the applicant terminal that has transmitted the file list acquisition request;
When receiving application information including application file identification information applied for take-out and applicant user identification information from the applicant terminal that has received the file list information transmitted by the file list information transmission means, the management information database Approver user identification information corresponding to the application file identification information is identified based on the file information stored in the file, and a take-out application has been made to the approver terminal based on the identified approver user identification information. Application information management means for updating the access information included in the file information stored in the management information database based on the application information,
When an application file list acquisition request is received from the approver terminal that is notified that the take-out application has been made, the approval requesting acquisition of the application file list from the application file identification information included in the application information Selecting application file identification information corresponding to the approver user identification information of the approver user, and creating application file list information including the selected application file identification information and the applicant user identification information included in the application information , Application file list information transmitting means for transmitting the application file list information to the approver terminal that has transmitted the application file list acquisition request;
Approval result information including file identification information of a file approved for taking out and / or a file not approved for taking out from the approver terminal that has received the application file list information transmitted by the application file information list transmitting means , The approval information management means for notifying the applicant terminal that has transmitted the application information that the approval is completed and updating the access information included in the file information of the management information database based on the approval result information When,
Upon receiving an application file list acquisition request including approval result information from the applicant terminal that has been notified that the approval has been completed, the approval result is based on the access information included in the file information stored in the management information database. Generating an application file list information including information, and transmitting an application file list information with approval result information for transmitting the application file list information including the approval result information to the terminal for the applicant who has transmitted the application file list acquisition request;
Received a file acquisition request including file identification information of a file requesting acquisition from the applicant terminal that has received the application file list information including the approval result information transmitted by the application file list information transmitting means with the approval result information Acquisition information management means to
When receiving the file acquisition request from the applicant terminal and receiving the applicant user's biometric information and the applicant user identification information for identifying the applicant user, the user identification stored in the management information database Identifying biometric information corresponding to the applicant user identification information from the biometric information included in the user information stored in the management information database based on the information and the received applicant user identification information, Biometric authentication means for determining whether or not a user who has requested acquisition of a file is valid based on the identified biometric information and the biometric information received from the applicant terminal;
In response to determining that the user who requested the file acquisition by the biometric authentication unit is valid, the file identification information included in the file acquisition request is selected from the files stored by the file storage unit. A file conversion means for acquiring a corresponding file and converting the acquired file into a confidential file that can be referred only to a user who has requested acquisition of the file;
File distribution means for distributing the confidential file converted by the file conversion means to the applicant terminal that has transmitted the file acquisition request;
File takeout management program to make it work.

Images