JP2013037442A - Access management device, access management method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To set an access right depending on a use of data.SOLUTION: An access right determination unit 103 determines a use of data stored in an electronic file storage unit 101, and sets an access right to the data depending on the use of the data. An access control unit 105 controls access to the data on the basis of the set access right.

Description

  The present invention relates to a technique for setting access rights to data.

  With the recent introduction of IT, in companies, operation terminals such as PCs, office equipment such as multifunction peripherals, and various servers such as file servers and schedule management servers are connected via an in-house network (hereinafter referred to as an in-house LAN). The environment connected to each other has become common. On the other hand, the ratio of meetings to business is still high, and the efficiency of meetings and meeting preparation is an important issue for companies. Here, as a specific measure to improve the efficiency of conference preparation by effectively utilizing the in-house LAN environment, for example, materials scheduled to be distributed at the conference are stored in a file server in advance, and the conference participants can advance through the in-house LAN in advance. A method of browsing the material can be considered. It is also effective to capture the paper data to be projected at the conference by a scanner before the conference starts and store it as an electronic file in a file server and project it during the conference.

  On the other hand, from the viewpoint of security, an access right for restricting access is set for the electronic file stored in the file server. The same applies to electronic files stored on the file server at the conference preparation stage. In other words, there is a demand for an electronic file used in a conference that only accepts access from a specific access source while being previously stored on a file server. More specifically, for example, a request for granting only viewing authority to a conference participant is assumed for materials scheduled to be distributed at a conference. In addition, for example, a request for only viewing authority from a conference room or a display device used in a meeting is assumed for an electronic file to be projected in a meeting. And in order to respond | correspond easily to these requests | requirements, the method of giving an access right using the schedule information regarding an applicable meeting can be considered.

  Patent Document 1 discloses a method for generating an access control policy based on conference holding information as a technique for controlling access to a specific electronic file using schedule information separately stored.

JP 2006-53824 A

  However, electronic files used for a conference have a plurality of uses. For example, as described above, different access right settings may be required depending on the purpose of browsing in advance and the purpose of projection. In some cases, a single electronic file may be used for a plurality of purposes. Furthermore, there may be a use case in which a plurality of different electronic files corresponding to uses are created as a result of taking in paper data with a scanner, and an access right is set for each use. However, in the conventional method, since the access right is set without being aware of the use of the electronic file, it has not been possible to cope with the use case as described above.

  Accordingly, an object of the present invention is to set an access right according to the use of data.

  An access management apparatus according to the present invention includes a determination unit that determines a use of data stored in a storage unit, and a setting unit that sets an access right to the data according to the use of the data determined by the determination unit. And control means for controlling access to the data based on the access right set by the setting means.

  According to the present invention, it is possible to set an access right according to the use of data.

It is a figure which shows the structure of the electronic file management system which concerns on embodiment of this invention. It is a flowchart which shows the process of the electronic file management system which concerns on embodiment of this invention. It is a flowchart which shows the detail of step S203 of FIG. It is a figure which shows the list of schedule information. It is a figure which shows an example of a meeting selection dialog. It is a figure which shows an example of a classification setting dialog. It is a figure which shows an example of the meeting information acquired from a schedule management server. It is a figure which shows an example of meeting information. It is a figure which shows the specific example of access right information. It is a figure which shows the specific example of access right information. It is a flowchart which shows the process which controls the access with respect to an electronic file. It is a flowchart which shows the process which tracks the change of schedule information. It is a figure which shows the list of the schedule information after a change. It is a figure which shows the specific example of access right information.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments to which the invention is applied will be described in detail with reference to the accompanying drawings. However, the technical scope of the present invention is not limited to the embodiments described below.

  FIG. 1 is a diagram showing a configuration of an electronic file management system according to an embodiment of the present invention. In FIG. 1, reference numeral 101 denotes an electronic file storage unit that accepts registration of an electronic file from a user and stores the electronic file. The electronic file referred to here may include files of any form created by the user, but in the following, electronic information created especially for display via paper or an electronic display medium is an example. It shall be listed in An electronic file may be generated using image creation software on a PC, or may be generated as a result of image information on paper being captured by a scanner unit of a multifunction peripheral and converted to electronic information. There is also a case. The entity of the electronic file storage unit 101 may be, for example, a file server connected to an in-house LAN, or a pair of a file storage function and a storage device incorporated in a multifunction machine connected to the in-house LAN. May be.

  Reference numeral 102 denotes a schedule information acquisition unit that acquires user schedule information registered in advance in any location on the in-house LAN. The schedule information acquired here includes, for example, the user's conference schedule information and conference room reservation information, and is stored in, for example, a schedule management server connected to the in-house LAN. Furthermore, the schedule information acquisition part 102 acquires this change result at any time, when a change arises in a user's schedule information.

  Reference numeral 103 denotes an access right determination unit that determines an access right for an electronic file stored in the electronic file storage unit 101. Here, there are mainly three types of access rights. That is, an authority to permit browsing of the electronic file (hereinafter referred to as “Read authority”), an authority to permit rewriting to the electronic file (hereinafter referred to as “Write authority”), and an authority to permit execution of the electronic file. Among these, the access right determination unit 103 can determine at least the Read right and the Write right, and handle these separately. Further, the access right determination unit 103 identifies the type of the electronic file in order to determine the access right according to the type of the electronic file.

  An access right information storage unit 104 stores access right information indicating the access right determined by the access right determination unit 103 in association with the target electronic file. Reference numeral 105 denotes an access control unit. When access to the electronic file stored in the electronic file storage unit 101 occurs via the in-house LAN, the access control unit 105 uses the access source information and the access right information stored in the access right information storage unit 104. Then, it is determined whether or not the electronic file can be accessed. The electronic file management system shown in FIG. 1 has a configuration that is an application example of an access management apparatus.

  FIG. 2 is a flowchart showing processing of the electronic file management system according to the embodiment of the present invention. Note that the processing from step S201 to step S204 in FIG. 2 is repeated while the electronic file management system is activated.

  In step S201, the electronic file storage unit 101 accepts an electronic file storage request. The following example is assumed for this processing depending on the form of the electronic file storage unit 101. That is, when the electronic file storage unit 101 is a file server connected to the in-house LAN, it is conceivable to receive an electronic file storage request from a PC of a user who is also connected to the in-house LAN. When the electronic file storage unit 101 is a pair of a file storage function and a storage device mounted on the multifunction device, image information on the paper surface is read by the scanner unit included in the multifunction device and converted into an electronic file. , It is considered to be accumulated. In the present invention, the form of the electronic file storage unit 101 is not limited, but the following description is based on the assumption that an electronic file is stored on a storage device mounted on the multifunction device by a user operation. I do.

  In step S202, the access right determination unit 103 identifies a user (hereinafter referred to as a registrant) who is performing an electronic file storage operation. In the example of the multifunction device described above, the registrant who operates the multifunction device is specified. As a specific method, for example, a method of prompting the input of registrant information before accepting all operations on the multifunction peripheral and identifying the registrant through an authentication process can be considered. The method is not limited.

  In step S203, the access right determination unit 103 determines an access right to be added to the electronic file. Details of step S203 will be described later. In step S204, the electronic file storage unit 101 stores the electronic file, and the access right information storage unit 104 stores access right information indicating the access right determined in step S204 in association with the electronic file.

  FIG. 3 is a flowchart showing details of step S203 in FIG. 2, and shows details of processing for determining the access right to be added to the electronic file.

  In step S301, the schedule information acquisition unit 102 acquires the registrant's future schedule information from, for example, a schedule management server connected to the in-house LAN, and displays it on a display device (not shown).

  FIG. 4 is a diagram illustrating an example of a list of schedule information held in the schedule management server. In the present embodiment, the schedule management server holds a list of schedule information of data strings as shown in FIG. The list of schedule information includes a user name (User Name), a meeting time (Meeting Date), a meeting name (Meeting Name), and the like. As another holding form of the schedule information list in the schedule management server, a method of holding a user ID and a conference ID in association with each other is conceivable. However, the present invention does not limit the holding form of the list of schedule information. Absent.

  Here, it is assumed that “J. Tanaka” is identified as the registrant of the electronic file in step S202 described above. In this case, all schedule information corresponding to “J. Tanaka”, that is, schedule information 401 and 402 is acquired from the list of schedule information shown in FIG. Next, the acquired schedule information 401 and 402 is displayed to the registrant. Here, as the schedule information display means, various output devices such as an external monitor connected to the multifunction device, a touch panel and a liquid crystal screen mounted on the multifunction device are assumed. Schedule information is displayed on the touch panel.

  In step S302, the schedule information acquisition unit 102 selects, from the schedule information displayed on the touch panel, the schedule information for the meeting that uses the electronic file to be stored, according to the registrant's selection operation. As schedule information selection means, for example, various input devices such as a keyboard, a mouse, a digitizer, a touch panel, and a joystick are assumed. Here, the schedule information is selected by operating a touch panel mounted on the multifunction peripheral. Shall.

  FIG. 5 is a diagram illustrating an example of a conference selection dialog. In step S301, all schedule information corresponding to the registrant is displayed on the conference selection dialog shown in FIG. In step S302, the schedule information of the meeting using the electronic file to be stored is selected from the meeting selection dialog. That is, reference numerals 501 and 502 in FIG. 5 are display information generated based on the schedule information 401 and 402 acquired in step S301. FIG. 5 shows that the schedule information corresponding to the display information 501 is selected as the schedule information for the conference using the storage target electronic file.

  In step S303, the access right determination unit 103 displays the electronic file type candidates for which the electronic file storage unit 101 has accepted the storage request in step S201. Here, the type of electronic file is an attribute for determining the use of the electronic file in the conference, and includes, for example, “for distribution”, “for display”, “for registrant reference”, and the like. For example, if the type “for distribution” is set for an electronic file, the electronic file is distributed at the start of the meeting or before the start of the meeting as a reference material for the meeting, and is viewed by all participants in the meeting Electronic file to be. In addition, when the type “for display” is set for an electronic file, the electronic file is a material displayed by a display or a projector during a meeting, and should be referred to at the meeting location. . Further, when the type “for registrant reference” is set for the electronic file, the electronic file is an electronic file used as a memorandum of the registrant himself.

  In step S304, the access right determination unit 103 selects a type to be set for the electronic file from the electronic file type candidates displayed in step S303 in accordance with the registrant's selection operation. Although various operation devices are assumed as the input means used for selecting the type, here, it is assumed that the input means is a touch panel mounted on the multifunction peripheral. In step S304, a plurality of types may be selected. In this case, a plurality of electronic files are generated in step S306 described later, and different attributes are set for each electronic file.

  FIG. 6 is a diagram illustrating an example of the type setting dialog. In step S303, candidate types of electronic files to be stored are displayed on the type setting dialog shown in FIG. In step S304, the type of electronic file to be stored is selected. The example of FIG. 6 indicates that both “distribution” 601 and “display” 602 types have been selected in step S304. In another embodiment, the electronic file type may be automatically set without using the type setting dialog shown in FIG. For example, a specific type may be set for an electronic file stored by a specific registrant, or a specific type may be set based on an extension normally added to the electronic file. Good.

  The processes from step S305 to step S310 described below are repeatedly executed for the number of types selected in step S304. In the example of FIG. 6, since two types of “for distribution” 601 and “for display” 602 are selected as the types of electronic files, the number of repetitions is two. In step S <b> 305, the access right determination unit 103 generates an electronic file to be stored in the electronic file storage unit 101. This process is executed for each type selected in step S304. For example, a different electronic file may be generated depending on the type. For example, when the “distribution” type is selected, the captured data may be generated as an electronic file in PDF format and generated in a form that can be widely handled by users of the electronic file. In addition, when the “for display” type is selected, it may be generated, for example, as an electronic file in JPEG format and generated in a form that can be projected on a display device scheduled to be used in a conference.

  In step S306, the access right determination unit 103 determines whether or not the type selected in step S304 is “for distribution”. If the selected type is “for distribution”, the process proceeds to step S307. On the other hand, if the selected type is not “for distribution”, the process proceeds to step S308.

  In step S307, the access right determination unit 103 adds an access right for the conference participant to the electronic file generated in step S305. In the example shown in FIG. 5, conference participants for the conference “ModuleB Design Review” are extracted, and an access right is added. FIG. 7 is a diagram illustrating an example of conference information acquired from the schedule management server. The meeting information is information acquired by the schedule information acquisition unit 102, and includes a meeting ID (Meeting ID), a meeting name (Meeting Name), a meeting date and time (Meeting Data), a meeting room (Meeting Room), and participants (Participants). Is included. When conference information as shown in FIG. 7 is acquired, in step S307, access rights are set for “A. Kimura”, “J. Tanaka”, and “H. Suzuki”. Further, the access right set here may be a Read right that permits only browsing of an electronic file, or may be a Read / Write right that permits permission including writing.

  In step S308, the access right determination unit 103 determines whether or not the type selected in step S304 is “for display”. If the selected type is “for display”, the process proceeds to step S309. On the other hand, if the selected type is not “for display”, the process proceeds to step S310. In step S309, the access right determination unit 103 adds an access right for the display device used in the conference to the electronic file generated in step S305. For example, when the conference information shown in FIG. 7 is acquired by the schedule information acquisition unit 102, the access right determination unit 103 determines that the conference “ModuleB Design eview” is held in the conference room “A105”. Next, the schedule information acquisition unit 102 acquires the conference room information shown in FIG. 8 using the conference room “A105” in the conference information shown in FIG. 7 as a key. The access right determination unit 103 obtains information on the display device installed in “A105” from the conference room information shown in FIG.

  Here, the access right to the display device may be set based on, for example, the IP address assigned to the display device, or when the router facility is installed in the conference room, the access right is set based on the IP address of the router. May be. When a portable display device is used separately from the conference room, the access right may be set based on the reservation information of the display device. In the example of the conference room information shown in FIG. 8, the access right from “172.36.28.XXX” and “172.36.28.YYY” is set for the electronic file as the processing result of step S309. In step 310, the access right determination unit 103 adds the access right of the registrant to the electronic file. This process is executed in preparation for the case where the registrant performs correction or change of the electronic file between the present and the time of the conference, but the present invention does not limit the presence or absence of this process.

  Specific examples of the access right information set as the above processing results are shown in FIGS. FIG. 9 is a diagram showing a specific example of access right information stored in the access right information storage unit 104 when the process shown in FIG. 3 is applied to an electronic file in which the type of “for distribution” is set. is there. In FIG. 9, reference numeral 901 denotes registrant information, which stores registrant information “J. Tanaka” specified in step S202. Reference numeral 902 denotes a conference ID (Meeting ID) which is stored by specifying a conference in which the electronic file is used based on the conference information acquired by the schedule information acquisition unit 102. Reference numeral 903 denotes a type, which stores the type selected in step S304. Reference numeral 904 denotes an access right, which is an access right set to the electronic file as a result of the execution of the processes in steps S307 and S310. In the example indicated by reference numeral 904 in FIG. 9, Read authority is set for the conference participants, and Read / Write authority is set for the registrants. Here, the setting of the access right may be performed in more detail based on the schedule information acquired by the schedule information acquisition unit 102. For example, in the example shown by 904 in FIG. 9, Read authority is set for a conference participant (A. Kimura, H. Suzuki) only during the period before the start of the conference, and the registrant (J. For “Tanaka”, Read / Write authority is set without dividing the period.

  FIG. 10 shows a specific example of access right information stored in the access right information storage unit 104 when the processing shown in FIG. 3 is applied to an electronic file in which the “display” type is set. FIG. In FIG. 10, reference numeral 1001 denotes registrant information, which stores the registrant information “J. Tanaka” specified in step S202. Reference numeral 1002 denotes a meeting ID, which is stored by specifying a meeting in which the electronic file is used based on the meeting information acquired by the schedule information acquisition unit 102. Reference numeral 1003 denotes a type, which stores the type selected in step S304. Reference numeral 1004 denotes an access right, which is an access right set to the electronic file as a result of performing the processing in steps S309 and S310. Further, as indicated by 1004 in FIG. 10, the access right setting period is limited in the access right information in FIG. Specifically, an access right is added to each display device only between the start time and end time of the conference.

  FIG. 11 is a flowchart showing processing for controlling access to an electronic file. This process is a process that may always occur before or after the process shown in FIG. 2 or in parallel. Hereinafter, processing for controlling access to an electronic file will be described with reference to FIG. Note that the processing from step S1101 to step S1106 in FIG. 11 is repeated while the electronic file management system is activated.

  In step S1101, the access control unit 105 receives an access request for an electronic file. In step S1102, the access control unit 105 selects a user or device that requests access to an electronic file stored in a storage device on the multifunction peripheral (hereinafter, these are collectively referred to as an access source). Identify. As an access source specifying method, for example, a method of prompting user information to be input before accepting all operations and executing and confirming an authentication process can be considered. However, in the present invention, the access source specifying method is limited. Not.

  In step 1103, the access control unit 105 acquires access right information associated with the electronic file from the access right information storage unit 104. In step S1104, the access control unit 105 refers to the access right information acquired in step S1103 to determine whether the access source specified in step S1102 has the access right for the electronic file. . If the access source has an access right, the process proceeds to step S1105. On the other hand, if the access source does not have an access right, the process proceeds to step S1106. For example, when there is a browsing request or a print request from “A. Kimura” for an electronic file for which the type of “for distribution” is set, the access control unit 105 is based on the access right information as shown in FIG. Then, it is recognized that the Read authority for “A. Kimura” is set. In step S1105, the access control unit 105 permits access to the electronic file. In step S1106, the access control unit 105 rejects access to the electronic file.

  With the above processing, when storing an electronic file, an access right corresponding to the use of the electronic file can be determined and added for each use. Accordingly, for example, it is possible to set an appropriate access right for an electronic file used in various scenes of a meeting, and the security of the electronic file can be ensured.

  FIG. 12 is a flowchart showing a process for following the change of the schedule information. The process shown in FIG. 12 is a process that may occur before or after the processes shown in FIGS. 2 and 11 or in parallel. Here, it is assumed that the process shown in FIG. 12 occurs after the process shown in FIG.

  In step S1201, the schedule information acquisition unit 102 acquires the changed schedule information. This process may be used by constructing a mechanism for automatically notifying the schedule information acquisition unit 102 when a change process to the schedule information occurs, or the schedule information acquisition unit 102 The change of the schedule information may be actively confirmed at a certain time interval. In any case, in the present invention, the method for acquiring the schedule information after the change is not limited. Here, it is assumed that the schedule information acquisition unit 102 has acquired a change to the list of schedule information shown in FIG.

  FIG. 13 is a diagram showing a list of schedule information after the change. The difference from the list of schedule information before change shown in FIG. 4 is that schedule information 1301 is newly added. In step S1202, the schedule information acquisition unit 102 extracts the electronic file associated with the meeting corresponding to the schedule information 1301 and the access right information of the electronic file. That is, an electronic file associated with “ModuleB Design Review” and its access right information are extracted. As a result, access right information (FIG. 9) for the electronic file with the “distribution” type set and access right information (FIG. 10) for the electronic file with the “display” type set are extracted. The

  The processing from step S1203 to step S1208 is processing that is repeated by the number of electronic files extracted in step S1202. In step S1203, the access right determination unit 103 deletes the already set access right information. As a result, the access right information 904 for the access right information (FIG. 9) for the electronic file with the “distribution” type set, and the access right information for the electronic file with the “display” type (FIG. 10). Access right 1004 is deleted.

  In step S1204, the access right determination unit 103 determines whether or not the type of the electronic file is “for distribution”. If the electronic file type is “for distribution”, the process proceeds to step S1205. On the other hand, if the type of the electronic file is not “for distribution”, the process proceeds to step S1206. In step S1205, the access right determination unit 103 re-adds the access right for the conference participant to the electronic file whose access right has been deleted in step S1203. Here, the Read right is set for the conference participants “A. Kimura”, “J. Tanaka”, “H. Suzuki”, “N. Mizuno” of “Moduleb Design Review”.

  In step S1206, the access right determination unit 103 determines whether the type of the electronic file is “for display”. If the type of the electronic file is “for display”, the process proceeds to step S1207. On the other hand, if the type of the electronic file is not “for display”, the process proceeds to step S1208. In step S1207, the access right determination unit 103 adds an access right to the display device used in the conference to the electronic file whose access right has been deleted in step S1203. This process is the same as step S309 in FIG. Here, as the processing result of step S1207, Read authority from “172.36.28.XXX” and “172.36.28.YYY” is set for the electronic file. In step S1208, the access right determination unit 103 adds the access right of the registrant to the electronic file. This process is the same as step S309 in FIG.

  FIG. 14 shows a specific example of the access right information for the “distribution” type electronic file updated as a result of the above processing. Compared to the access right information shown in FIG. 9, a Read right 1401 for “N. Mizuno” is newly set. The access right information for the “display” type electronic file is not changed from the access right information shown in FIG. 10 in this specific example.

  In the above, the case where two types are set simultaneously at the maximum is illustrated, but the same applies to the case where three or more types are set simultaneously. Further, it goes without saying that one or more electronic files obtained as a result of executing the processing described above can be subjected to a wide range of browsing and writing processing within the scope of the access right set in the present embodiment. Absent.

  The present invention can also be realized by executing the following processing. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, or the like) of the system or apparatus reads the program. It is a process to be executed.

  101: Electronic file storage unit, 102: Schedule information acquisition unit, 103: Access right determination unit, 104: Access right information storage unit, 105: Access control unit

Claims (11)

Determination means for determining the use of data stored in the storage means;
Setting means for setting an access right to the data according to the use of the data determined by the determining means;
An access management apparatus comprising: control means for controlling access to the data based on the access right set by the setting means. Further comprising obtaining means for obtaining information relating to a conference in which the data is used;
The access management apparatus according to claim 1, wherein the setting unit sets an access right to the data according to a use of the data in the conference based on information related to the conference.   The information related to the conference includes information indicating a participant of the conference, and the setting unit has an access right to the data according to the use of the data in the conference based on the information indicating the participant of the conference. The access management apparatus according to claim 2, wherein:   The said setting means sets the access right with respect to the said data based on the information which shows the participant of the said meeting, when the use of the said data in the said meeting is a use for distribution. Access control device.   The information related to the conference includes information indicating at least one of a display device and a conference room used in the conference, and the setting unit includes the display device and the conference room used in the conference. The access management apparatus according to any one of claims 2 to 4, wherein an access right to the data according to a use of the data in the conference is set based on information indicating at least one of them. .   When the use of the data in the conference is for display, the setting means obtains an access right to the data based on information indicating at least one of a display device and a conference room used in the conference. The access management apparatus according to claim 5, wherein the access management apparatus is set.   The setting means, when there are a plurality of uses of the data stored in the storage means, sets an access right for each of the plurality of data corresponding to each use according to the use of each data. The access management apparatus according to any one of claims 1 to 6.   When the information related to the meeting is changed, the acquisition means acquires information related to the changed meeting, and the setting means accesses the data based on the information related to the changed meeting. The access management apparatus according to claim 2, wherein the right is updated. Specifying means for specifying a user for storing the data in the storage means;
Selecting means for selecting the meeting in which the data is used among the meetings in which the user specified by the specifying means participates;
The access management apparatus according to any one of claims 2 to 8, wherein the acquisition unit acquires information related to the conference when the conference is selected by the selection unit. An access management method executed by an access management device,
A determination step for determining the use of data stored in the storage means;
A setting step for setting an access right to the data according to the use of the data determined by the determination step;
And a control step of controlling access to the data based on the access right set in the setting step. A determination step for determining the use of data stored in the storage means;
A setting step for setting an access right to the data according to the use of the data determined by the determination step;
A program for causing a computer to execute a control step of controlling access to the data based on the access right set in the setting step.

Images