JP2011248665A - Spreadsheet program add-in and spreadsheet program add-in system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent know-how from leaking out even in an environment where users with ill intent are present, and prepare a spreadsheet that keeps personal information or the like confidential by restricting startup according to the environment and the user.SOLUTION: A spreadsheet program add-in 110 that can be added to a spreadsheet program and protected from alteration has a mathematic function/macro invalidating function to create a new spreadsheet by removing macros and calculation formulas from the original spreadsheet and leaving only the results of calculation and a secure check code incorporating function to add a secure check code 114 to the new spreadsheet to make it a secure Excel 116, wherein the secure check code 114 is executed at the time of starting up the secure Excel 116 and has a function to suspend the startup of the secure Excel 116 if the computer in which the startup is to take place fails to satisfy prescribed conditions.

Description

  The present invention relates to a spreadsheet software add-in that can be added to spreadsheet software, and a spreadsheet software add-in system including an installer that installs the add-in.

  In 2006, the Financial Instruments and Exchange Act was enacted, and J-SOX (Japanese version of the SOX Act) was enforced from 2008 as a new internal control rule. Re-recognized.

  On the other hand, spreadsheets handled by spreadsheet software represented by Excel (registered trademark) have become widespread as calculation means that are simple and capable of EUC (End User Computing). Spreadsheets are also frequently used in processes that affect the reporting of financial statements required by J-SOX (for example, Patent Document 1). This is because if a spreadsheet is used, financial statements can be easily created by inputting and calculating necessary parameters.

  However, since spreadsheets have been used in the EUC environment, they are often created based on personal ideas and are free to improve and remodel. On the other hand, there is a risk of bugs and tampering. Access management is required.

  Therefore, for example, Patent Document 2 discloses a spreadsheet internal control system 11 that provides a hidden sheet 18 that a user cannot refer to only a spreadsheet 20 to be managed, as shown in FIG. According to Patent Document 2, the spreadsheet 18 is opened using spreadsheet software (not shown) having an add-in that operates by reading the information of the hidden sheet 18.

  According to Patent Document 2, whether or not the spreadsheet is a management target can be determined by the presence or absence of the hidden sheet 18. Even if the spreadsheet 20 to be managed is stored in a local computer, the add-in incorporated in the computer has a function of checking whether or not the latest version is available when the spreadsheet 20 is opened. Have. With this function, according to Patent Document 2, version number management can be easily realized.

Special table 2003-67550 gazette JP 2010-039652 A

  However, the technique described in Patent Document 2 shown in FIG. 7 is the version number management of the spreadsheet in the environment 10 (for example, in the same organization) where the spreadsheet 20 is handled in the presence of an add-in (not shown). It is aimed at. After the spreadsheet 20 is distributed (shipped) as shown by the arrow 50, the spreadsheet 20 is handled in an environment where internal control does not work (no add-in), and the hidden sheet is not processed. Version management is not possible.

  Therefore, management of the spreadsheet 20 after being shipped is left to the person in charge at the shipping destination. However, a spreadsheet such as an Excel book can be easily attached to an e-mail, and it may be used in an environment where the internal control does not necessarily work effectively. Therefore, if the person in charge has a low management awareness, the spreadsheet 20 is unprotected in the environment 70 where the malicious user 60 is present. For example, as shown in FIG. 7, there are the following problems.

  (1) Function / macro reverse analysis is possible: The spreadsheet 20 includes macros and calculation formulas (functions). If a malicious person 60 performs reverse analysis (reverse engineering), the sheet 20 Know-how, which is a valuable asset of the company that created the company, will be known. Even if you set passwords in the spreadsheet, they are vulnerable and can be removed relatively easily using a commercial release tool. As a means for protecting know-how, there is a method of partially encrypting the entire file including the spreadsheet or the data in the spreadsheet. However, these means are complicated and require separate operations, and even if such means are taken, the possibility of reverse engineering cannot be excluded.

  (2) Risky data is exposed: In addition to the macro and the calculation formula, the spreadsheet 20 includes information such as the calculation result and what the calculation result indicates. For example, if the spreadsheet 20 is distributed from a financial institution, personal information to be kept secret such as an individual name and a deposit balance may be included. However, there is a risk of leakage to the malicious user 60 if measures for effectively protecting these are not taken.

  (3) Unable to restrict use: If it is possible to restrict the use of the spreadsheet 20 after it has been shipped, that is, the activation itself can be permitted, the above-mentioned know-how and personal information can be prevented from being leaked. However, the spreadsheet protection password that comes standard with spreadsheet software is fragile and can be easily removed.

  (4) Unknown who used: It is unknown who used the spreadsheet 20 after it was created. The use of the spreadsheet 20 including functions, macros, and personal information should be recorded in the usage record, but it is not desirable to use it freely in an environment where it is not possible.

  (5) Tampering is possible in an environment without add-ins: Since the spreadsheet 20 after shipment is handled in an environment 70 without add-ins, unlike the shipping company (environment 10), tampering can be freely performed. End up.

  The concept of IRM (Information Rights Management) has been proposed for the above problems (1) to (5). According to the IRM, a legitimate user who has received content to which access restrictions are applied prevents the content from being used in an unintended manner (transfer, copy / paste, modification, printing, FAX transmission, etc.).

  According to the IRM, access restrictions can be applied regardless of the location of content. However, in the environment 70 where the malicious user 60 is present, it is possible to enable / disable content browsing, but if browsing is enabled, reverse engineering may be possible. Therefore, IRM cannot respond to a request that it is possible to browse but wants to prevent the leakage of know-how.

  In view of such a problem, the present invention provides a spreadsheet that does not leak know-how even in an environment where a malicious user exists, and conceals personal information etc. by restricting activation according to the environment and the user. An object of the present invention is to provide an add-in for spreadsheet software and an add-in system for spreadsheet software.

  In order to solve the above-described problems, the present invention is a spreadsheet software add-in that can be added to spreadsheet software and is protected to prevent modification. A means for creating a new spreadsheet to be retained and a means for adding a new macro to the new spreadsheet to make it a safe spreadsheet. The new macro is executed when the safety spreadsheet is activated and is activated. The computer has a function of stopping activation of the safety spreadsheet when the computer does not satisfy the predetermined condition. Furthermore, the newly added macro is characterized in that it has no influence on the display result (calculation result).

  According to the above configuration, the add-in creates a safe spreadsheet in which macros and calculation formulas are deleted from the original spreadsheet. In other words, the safety spreadsheet includes only the information on the surface of the sheet, such as the calculation result and a description explaining it. Since macros and calculation formulas are excluded in this way, the safety spreadsheet cannot be reversely analyzed, and the know-how included as macros and calculation formulas in the original spreadsheet does not flow out.

  In addition, a new macro added to the safety spreadsheet stops the activation of the safety spreadsheet itself when the computer does not meet the predetermined condition. In this way, the activation of a new macro can be restricted autonomously according to the environment and the user. Therefore, the information that should be kept secret, such as the calculation result and the description explaining it, is not browsed indefinitely.

  The predetermined condition may be that the spreadsheet software add-in is installed in the computer. According to this configuration, the safety spreadsheet is activated on the computer on which the add-in is installed, but the activation is stopped on the computer on which the add-in is not installed. As a result, any computer on which an add-in is installed can be operated assuming that it is under internal control.

  The above-mentioned new macro further has a function of recording the fact that the safety spreadsheet has been activated as an access log in a predetermined access log storage path, and the predetermined condition is applied to a network that can reach the access log storage path. A computer may be connected. According to such a configuration, it is possible to operate such that the safety spreadsheet cannot be activated in an environment in which an access log indicating who has accessed the safety spreadsheet at what time can not be saved, such as a computer not connected to the network.

  The new macro further has a function of setting the safety level of the safety spreadsheet to at least three levels of high, medium, and low. When the safety level is high, the predetermined condition is set in the computer with the spreadsheet software. If the computer is connected to a network that can reach the access log storage path, and the safety level is medium, the above-mentioned predetermined condition is that the computer calculates the spreadsheet. It is only that the software add-in is installed, and when the safety level is low, the predetermined condition may not exist.

  According to said structure, according to the content of a safety spreadsheet, a safety level can be set. A safety spreadsheet with a high safety level is the most sensitive sheet, a computer under the internal control where the add-in is installed (for users in the organization), and a computer that can store access logs Otherwise, it will not start. A safety spreadsheet with a safety level of “medium” is activated even if an access log cannot be left on a computer under the internal control in which the add-in is installed. A safety spreadsheet with a safety level of “low” will start even on computers that have no add-ins and no access logs.

  The new macro may further have a function for prohibiting overwriting of the safety spreadsheet. Although the safety spreadsheet can be viewed in a predetermined environment according to the safety level, it cannot be overwritten and saved, and therefore cannot be altered at all regardless of the safety level. As a result, it is possible to prevent the spread of spreadsheets with incorrect calculation results.

  The software add-in may further include means for locking the new macro for preventing modification. This is to prevent a malicious user from falsifying a new macro.

  When the safety spreadsheet is created, the above software add-in saves the creation fact as a safety spreadsheet creation log in a predetermined creation log storage path, and uses the created safety spreadsheet as a trail. And a means for saving in the trail saving path. According to such a configuration, the created safety spreadsheet can be stored as a trail and can be audited.

  The software add-in may further include means for encrypting / decrypting the calculation result included in the safety spreadsheet. If the calculation result is encrypted, the calculation result cannot be browsed even if the safety spreadsheet is activated unless the computer has the add-in installed (has decryption means). As described above, by encrypting and decrypting, for example, the safety level of a spreadsheet whose safety level is “low” is effectively set to “medium”, and the safety of the sheet can be increased.

  In order to solve the above-described problems, a spreadsheet software add-in system according to the present invention includes a spreadsheet software add-in that can be added to the spreadsheet software and is protected for correction, and a spreadsheet software add-in. The installer includes the user identification information of the spreadsheet software add-in, and the installation log indicating that the user has performed the installation is stored in a predetermined installation log storage path set to be unchangeable. If it can't be saved, or if it can't access the trail storage path set as unchangeable, it has a means to stop the installation, and the spreadsheet add-in removes macros and formulas from the original spreadsheet New spray that holds only the calculation results And a means for adding a new macro to a new spreadsheet to create a safety spreadsheet, and the new macro is executed when the safety spreadsheet is activated, and the computer to be activated is predetermined by the computer When the above condition is not satisfied, the safety spreadsheet is stopped.

  According to the above configuration, the installer can leave as an installation log “who” has installed the spreadsheet application add-in on the computer at what time. By periodically checking such an installation log, it is possible to prevent an unauthorized person from illegally obtaining an installer and installing an add-in. You can also check whether the number of add-in licenses is within the contracted number.

  According to the present invention, know-how is not leaked even in an environment where a malicious user exists, and a spreadsheet that can create a spreadsheet that conceals personal information by restricting activation depending on the environment and the user Software add-ins and spreadsheet software add-in systems can be provided.

It is a figure which shows embodiment of the add-in system for spreadsheet software by this invention. It is a figure which shows the function which the add-in of FIG. 1 has, and the content of the secure check code | cord | chord which the add-in of FIG. 1 incorporates in a secure Excel. FIG. 3 is a flowchart showing a process of creating a secure Excel by the add-in of FIG. 2 and an operation of a secure check code when the secure Excel is activated. It is a figure which shows the kind of safety level of the secure Excel set in FIG. It is a figure which shows preservation | save of the installation log of FIG. 1, a creation log, and an access log. It is a figure which shows the function of the installer of FIG. It is a figure which shows the example of a prior art.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. The dimensions, materials, and other specific numerical values shown in the embodiments are merely examples for facilitating understanding of the invention, and do not limit the present invention unless otherwise specified. In the present specification and drawings, elements having substantially the same function and configuration are denoted by the same reference numerals, and redundant description is omitted, and elements not directly related to the present invention are not illustrated. To do.

  FIG. 1 is a diagram showing an embodiment of a spreadsheet software add-in system 100 according to the present invention (hereinafter sometimes referred to as “system 100”). The system 100 is installed in a computer with a spreadsheet software add-in 110 (hereinafter, abbreviated as “add-in 100”) that can be added to spreadsheet software (not shown) and protected for correction prevention. The installer 102 is provided.

(Add-in to create secure Excel)
FIG. 2 is a diagram showing the functions of the add-in 110 in FIG. 1 (FIG. 2A) and the contents of the secure check code (FIG. 2B) that the add-in in FIG. 1 incorporates into secure Excel. As shown in FIG. 2A, the spreadsheet software add-in 110 removes macros and calculation formulas from the original spreadsheet 15 (FIG. 7), and creates a new spreadsheet that holds only the operation results ( A function / macro invalidation function 112); The add-in 110 also has a secure check code built-in function 117. The function 117 adds a new macro (hereinafter referred to as “secure check code 114”) to a new spreadsheet, and is referred to as a safety spreadsheet (hereinafter referred to as “secure Excel 116”. “Excel” is a registered trademark of Microsoft Corporation, USA. ).

  FIG. 3 is a flowchart showing a process in which the add-in 110 of FIG. 2 creates the secure Excel 116 and an operation of the secure check code 114 when the secure Excel 116 is activated. Hereinafter, this flowchart will be described with reference to FIGS. As shown in FIG. 3, when creating the secure Excel 116, the add-in 110 first performs step 120 by the function / macro invalidation function 112, and invalidates the function / macro from the original spreadsheet (Original.xls) 15. (Delete). As a result, the secure Excel 116 includes only information on the sheet surface such as a calculation result and a description explaining it.

  Therefore, even if a computer on which the add-in 110 is installed (for example, the computer 146 in FIG. 1) is used, the secure Excel 116 can only view the calculation results, but the macros and the calculation formulas are excluded. It is impossible to analyze. Thereby, the know-how included in the original spreadsheet 15 as a macro or a calculation formula does not flow out.

  The add-in 110 then performs step 122 with the secure check code incorporation function 117 to create a secure Excel 116 incorporating the secure check code 114. The secure check code 114 of FIG. 2B is incorporated in the secure Excel 116 in a form that is exchanged with a macro or the like deleted from the original spreadsheet 15, so that both program codes do not contradict each other.

(Secure Excel safety level setting)
As shown in FIG. 2A, the add-in 110 has a safety level setting function 118 for setting a safety level in the secure Excel 116, thereby performing step 124 in FIG. 3 to set the safety level in the secure Excel 116. To do. The safety level may be set by the user.

  FIG. 4 is a diagram showing the types of secure Excel safety levels set in FIG. In the present embodiment, as shown in FIG. 4, the safety level is three levels of high, medium and low, but the number of levels may be increased or decreased freely. The safety level set by the add-in 110 is incorporated in the secure Excel 116 as a safety level function 126 in the secure check code 114, as shown in FIG. The safety level defines under what conditions the secure Excel 116 is activated.

  In this embodiment, when the safety level of the secure Excel 116 is set to “high”, as shown in FIG. 4, in order for the secure Excel 116 to start, the condition 1: the add-in 110 is installed in the computer. And condition 2: the computer is connected to a network that can reach the access log storage path. That is, if the two conditions of add-in + log storage (network connection) are not satisfied, secure Excel 116 does not start and even the calculation result cannot be viewed. This is the highest level of security in this embodiment.

  By determining the condition 1, the computer in which the add-in 110 is installed (for example, the computer 146) (a person who uses the computer) can be operated assuming that the computer is under internal control. If the computer 146 is used, the secure Excel 116 can be started without any problem, and the user can view the calculation result of the secure Excel 116.

  When the safety level of the secure Excel 116 is set to “medium”, as shown in FIG. 4, the condition for starting the secure Excel 116 is only the condition 1: the add-in 110 is installed on the computer. is there. Even if the computer is not connected to the network and the access log cannot be taken, if the add-in 110 is installed, the secure Excel 116 is activated. This safety level assumes that the computer with the add-in installed is used outside the company.

  When the safety level of the secure Excel 116 is “low”, no condition is required for the secure Excel 116 to start as shown in FIG. 4. That is, even if the add-in is not installed (hereinafter also referred to as “add-inless”) and the computer is not connected to the network, the secure Excel 116 is activated.

(Add-in: Data encryption / decryption function)
As shown in FIG. 2A, the add-in 110 further includes means (data encryption / decryption function 128) for encrypting / decrypting the calculation result included in the secure Excel 116. With this function 128, the add-in 110 can perform step 130 of FIG. 3 and encrypt the calculation result of the secure Excel 116. Encryption / decryption is not a necessary measure. However, if the calculation result is encrypted, the calculation result cannot be browsed even if the secure Excel 116 is activated unless it is a computer in which the add-in 110 is installed (having decryption means). That is, by encryption / decryption, for example, even if the safety level of the secure Excel 116 is set to “low”, it is effectively set to “medium”, and the safety of the seat can be improved.

(Add-in: Project lock function)
As shown in FIG. 2A, the add-in 110 further includes means (project lock function 132) for locking the secure check code 114 to prevent correction. This is to prevent a malicious user from falsifying the secure check code 114. With this function 132, the add-in 110 performs step 134 in FIG. 3 and locks the secure check code 114 for correction prevention.

(Add-in: Creation log and trail storage function)
As shown in FIG. 2A, when the secure Excel 116 is created, the add-in 110 saves the creation fact (who made it when) as a secure Excel 116 creation log in a predetermined creation log storage path. And means for saving the created secure Excel 116 as a trail in a predetermined trail saving path (creation log / trait saving function 136). With this function 136, the add-in 110 can perform step 138 of FIG. 3 and store the created secure Excel 116 as a trail for auditing.

  FIG. 5 is a diagram showing storage of the installation log, creation log, and access log of FIG. When the secure Excel 116 is created by the computer 141 in which the add-in 110 is installed, the creation log is saved in the log saving path 139. This is a path that is provided on a specific server and cannot be corrected, and is preferably a path that is regularly backed up. This path information is automatically inherited from the installer 102 when the add-in 110 is installed (FIG. 1). Alternatively, path information may be set when the add-in 110 is installed.

  In the present embodiment, as shown in FIG. 5, the log storage path 139 is a common path for storing not only the creation log of the secure Excel 116 but also an access log and an installation log described later. However, different paths may be used.

(Secure check code: Storage management function)
As shown in FIG. 2B, the secure check code 114 further has a function (storage management function 140) for prohibiting overwriting of the secure Excel 116. Although secure Excel 116 can be viewed in an environment where the above conditions 1 and 2 are established according to the safety level (high, medium and low), overwriting is prohibited regardless of the safety level. No tampering is possible. As a result, it is possible to prevent the spread of spreadsheets with incorrect calculation results. Furthermore, there is an effect that it is possible to provide a spreadsheet that can only be referred to (cannot be edited) without know-how leaking.

(Secure check code: forced termination function)
As shown in FIG. 2B, the secure check code 114 has a function (forced termination function 148) for stopping the activation of the secure Excel 116 when a predetermined condition is not satisfied.

(Secure check code: access log function)
As shown in FIG. 2B, the secure check code 114 further has a function (log function 149) for recording the fact that the secure Excel 116 has been activated as an access log in a predetermined log storage path 139. The forced termination function 148 sets the above-mentioned “predetermined condition” that the computer is connected to a network that can reach the log storage path 139, and can stop the start of the secure Excel 116 when the computer is not connected.

  According to such a configuration, it is possible to operate the secure Excel 116 so that it cannot be activated in an environment in which an access log indicating who accessed the secure Excel 116 at what time can not be saved, such as a computer not connected to the network. For example, the safety level of the secure Excel 116 may be set to “high”.

(Secure check code: Cooperation function with add-in)
The secure check code 114 has a cooperative function 151 with the add-in 110 as shown in FIG. As a result, the function of the add-in 110 can be used when the add-in 110 is installed on the computer on which the secure Excel 116 is activated, while at the same time eliminating the camouflaged add-in. For example, the operation result of the secure Excel 116 can be decrypted using the data encryption / decryption function 128.

(Operation of secure check code: Secure Excel startup is canceled if condition 1 is not satisfied)
The secure check code 114 is executed when the secure Excel 116 is activated (step 142 in FIG. 3). The secure check code 114 autonomously checks the environment regardless of the presence of the add-in 110 (step 150 in FIG. 3). That is, at step 150, the secure check code 114 checks whether or not the condition 144 that the add-in 110 is installed in the computer is satisfied for the computers 144 and 146 where the secure Excel 116 is activated.

  When the condition 1 is not satisfied with add-in, as in the computer 144 of FIG. 1, if the safety level (FIG. 4) of the secure Excel 116 is set to “high” or “medium”, FIG. The forced termination function 148 of the secure check code 114 is activated. As a result, the process proceeds to step 152 in FIG. 3 and the activation of the secure Excel 116 is stopped. On the other hand, when the add-in 110 is installed and the condition 1 is satisfied as in the computer 146 of FIG. 1, the process proceeds to step 154 of FIG. However, if the safety level is set to “low”, the process proceeds to step 154 regardless of whether the add-in is present or not in any of the computers 144 and 146.

  In step 154, the secure check code 114 determines whether the computer 146 on which the secure Excel 116 is activated satisfies the condition 2: the computer is connected to a network that can reach the log storage path 139. To check.

(Operation of secure check code: Secure Excel startup is canceled if condition 2 is not satisfied)
When the computer is connected to a network that can reach the storage path 139 as in the computer 146 of FIG. 1 and satisfies the condition 2, if the safety level is set to “high” (FIG. 4), step 156 is performed. Proceed to That is, the log function 149 of the secure check code 114 is activated, and records the fact that the secure Excel 116 is activated in the predetermined storage path 139 as an access log.

  However, if the computer 146 does not satisfy the condition 2, if the safety level is set to “high”, the process proceeds to step 152 and the start of the secure Excel 116 is stopped.

  On the other hand, if the safety level is set to “medium” or “low”, step 156 is skipped (no log is taken) regardless of whether condition 2 is satisfied, and the process proceeds directly to step 158.

  As described above, the feature of the present embodiment is that the secure check code 114 incorporated in the secure Excel 116 autonomously checks the environment whether or not the conditions 1 and 2 are satisfied.

  According to the present embodiment, the activation of the secure Excel 116 is restricted depending on the environment and the user, so that the information to be concealed such as the calculation result still remaining in the secure Excel 116 and the description explaining it is unlimited. It will not be viewed.

  According to the start restriction method of the secure Excel 116 by the secure check code 114, the security is significantly improved as compared with the spreadsheet protection by the password as used in the prior art. Note that this embodiment does not exclude spreadsheet protection by password. A password may be used together when creating the secure Excel 116. Although it is highly likely that the password protection will be canceled by the cancellation tool if time is taken, the spreadsheet is double protected by using it together with the secure check code 114.

(Operation of secure check code: decryption of encrypted operation result)
In step 158, the secure check code 114 determines whether or not the calculation result of the secure Excel 116 is encrypted. If the environment is encrypted and the add-in 110 is installed like the computer 146, the user can use the data encryption / decryption function 128 of the add-in 110 and perform a decryption operation 160 to perform secure Excel. The operation result of 116 can be decoded (step 162).

  According to such a configuration, when the calculation result of the secure Excel 116 whose safety level is set to “low” is encrypted, the secure Excel 116 can be activated, but the calculation result is virtually viewed unless the add-in 110 is provided. Can not. In this case, the safety level of the secure Excel 116 becomes substantially “medium”, and the safety of the seat can be improved.

  On the other hand, if it is determined in step 158 that encryption has not been performed, step 162 does not need to be performed and is skipped.

(Operation of secure check code: Secure Excel cannot be overwritten)
Further, since the secure Excel 116 is prohibited from being overwritten by the storage management function 140 of the secure check code 114, even if a save operation 164 is performed, overwriting is prohibited as indicated by a prohibition mark 166. Therefore, the secure Excel 116 cannot be tampered at all regardless of the safety level.

(installer)
FIG. 6 is a diagram showing functions of the installer of FIG. As shown in FIG. 6, the installer 102 is initially created as an unconfigured installer 102b. Then, the user license, the number of user licenses, log storage path information (IP address, etc.), etc. are set, and the installer 102 is ready for distribution. The installer 102 includes user identification information of the add-in 110. As shown in FIG. 5, the installer 102 stores an install log indicating that the user has installed the add-in 110 in a predetermined log storage path 139 set to be unchangeable. save. The installation log is saved by an add-in registration environment confirmation function 167 and an install log function 168 in the add-in 110 shown in FIG.

  When the installer 102 cannot store the installation log in the log storage path 139 or when the installer 102 cannot access the trail storage path set to be unchangeable (the log storage path 139 also serves as this in this embodiment) Has means for canceling the installation (installation stop function 170).

  According to the above configuration, the installer can leave as an installation log “who” has installed the spreadsheet application add-in on the computer at what time. By periodically checking such an installation log, it is possible to prevent an unauthorized person from illegally obtaining an installer and installing an add-in. You can also check whether the number of add-in licenses is within the contracted number.

  Note that each step in FIG. 3 of the present specification does not necessarily have to be processed in time series in the order described in the flowchart, and may include processing in parallel or by a subroutine.

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  The present invention can be used for a spreadsheet software add-in system including an add-in for spreadsheet software that can be added to the spreadsheet software and an installer for installing the add-in.

15 ... Original spreadsheet 100 ... Spreadsheet software add-in system 102 ... Installer 110 ... Spreadsheet software add-in 112 ... Invalidation function 114 ... Secure check code 116 ... Secure Excel 117 ... Secure check code built-in function 118 ... Safety level Setting function 126 ... Safety level function 128 ... Data encryption / decryption function 132 ... Project lock function 136 ... Creation log and trail storage function 139 ... Log storage path 140 ... Storage management function 141, 144, 146 ... Computer 148 ... Forced termination function 149 ... Log function 170 ... Installation cancellation function

Claims (9)

In the spreadsheet software add-in that can be added to the spreadsheet software and protected against modification,
A means to remove macros and formulas from the original spreadsheet and create a new spreadsheet that holds only the results,
Means for adding a new macro to the new spreadsheet to form a safe spreadsheet;
With
The new macro is executed when the safety spreadsheet is activated, and has a function of canceling the activation of the safety spreadsheet when a computer on which the activation is performed does not satisfy a predetermined condition. Add-in for.   2. The spreadsheet software add-in according to claim 1, wherein the predetermined condition is that the spreadsheet software add-in is installed in the computer. The new macro further has a function of recording the fact that the safety spreadsheet is activated as an access log in a predetermined access log storage path,
3. The spreadsheet software add-in according to claim 2, wherein the predetermined condition is that the computer is connected to a network that can reach the access log storage path. The new macro further has a function of setting the safety level of the safety spreadsheet to at least three levels of high, medium, and low.
When the safety level is high, the predetermined condition is that the spreadsheet software add-in is installed in the computer and the computer is connected to a network that can reach the access log storage path. That is,
When the safety level is medium, the predetermined condition is only that the spreadsheet software add-in is installed in the computer,
4. The spreadsheet software add-in according to claim 3, wherein the predetermined condition does not exist when the safety level is low.   5. The spreadsheet software add-in according to claim 1, wherein the new macro further has a function of prohibiting overwriting of the safety spreadsheet. 6.   6. The spreadsheet software add-in according to claim 1, further comprising means for locking the new macro to prevent correction. Means for saving the creation fact as a safety spreadsheet creation log in a predetermined creation log storage path when the safety spreadsheet is created;
Means for storing the created safety spreadsheet as a trail in a predetermined trail storage path;
The spreadsheet software add-in according to claim 1, further comprising:   The spreadsheet software add-in according to any one of claims 1 to 7, further comprising means for encrypting and decrypting a calculation result included in the safety spreadsheet. An add-in for spreadsheet software that can be added to spreadsheet software and protected to prevent modification,
An installer for installing the spreadsheet software add-in on a computer;
The installer includes user identification information of the spreadsheet software add-in, and when the installation log indicating that the user has performed the installation cannot be stored in a predetermined installation log storage path that cannot be changed, Alternatively, if the trail storage path set to unchangeable is inaccessible, it has means for canceling the installation,
The spreadsheet software add-in is:
A means to remove macros and formulas from the original spreadsheet and create a new spreadsheet that holds only the results,
Means for adding a new macro to the new spreadsheet to form a safe spreadsheet;
Have
The new macro is executed when the safety spreadsheet is activated, and has a function of canceling the activation of the safety spreadsheet when a computer on which the activation is performed does not satisfy a predetermined condition. Add-in system.

Images