JP2013200672A - Product document management system, product document management method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a product document management system capable of preventing leakage of knowhow in a document attached to a software product, and preventing reference between documents whose versions do not coincide with each other.SOLUTION: A content provider terminal creates documents while separating them into a common part, a user dependent part and a version dependent part. A product document management device inputs documents and a document policy; and encrypts, when creating a content on the basis of the documents in accordance with the document policy, at least one of the user dependent part and the version dependent part as a protected area. A content recipient terminal acquires, as well as a product, the content including license information and the protected area; transmits license information to the product document management device and receives license authentication when referring to the content including the protected area; and decrypts the protected area when decryption of the protected area is permitted, and displays the content including the protected area.

Description

  The present invention relates to a product document management system, and more particularly to a product document management system for managing documents attached to software products.

  In conventional software products, by granting a license to a program, the number of users, machines used, expiration date, etc. can be controlled according to the license policy of the product, but licenses can not be granted to product documents etc. There was a problem that documents could be referenced even after the expiration date. Product know-how is often accumulated in documents, and there was a problem that led to know-how outflow.

  In addition, in the case of product documents, enhancements of software products themselves, bug fixes, corrections associated with individual users, and corrections due to inadequacies in the product documents themselves are incidental. By copying and using product documents before modification and before individual users), there was a risk of misuse due to mismatch between product and document versions.

  Furthermore, in such a case, the product provider needs to perform branching management, and it is necessary to adopt an inefficient maintenance method such as the occurrence of multiple maintenance. He was also at risk for security incidents.

  As a related technique, Patent Document 1 (Japanese Patent Laid-Open No. 2002-014959) discloses a content distribution system and method, its recording medium, and a user terminal for content reception. In this related technology, the content extraction unit extracts content to be distributed to the user terminal from the content database that stores a plurality of content based on the content distribution database that stores information on the content to be distributed to the user terminal. The distribution means distributes the extracted content to the user terminal

  Patent Document 2 (Japanese Patent Laid-Open No. 2002-024211) discloses a document management method and system and a storage medium storing the processing program. In this related technology, when a new revision version is created, the content of the new revision version is tagged in the same manner as described above based on the difference extraction result from the latest version included in the multiversion document, and the multiversion document is assigned to the multiversion document. By having a multi-version document update step to be added, a multi-version document that efficiently expresses multiple versions is generated, and based on this multi-version document, a batch display of changes in multiple versions and a change history display regarding the change are displayed. I do.

  Patent Document 3 (Japanese Unexamined Patent Application Publication No. 2009-087265) discloses an information processing apparatus and a method thereof. In this related technology, the allowed layout input unit of the protected content generation device that sets the usage conditions when content is used for the object of the molded document inputs the feature quantity of the molding information of the molded document that can specify the output of the content. To do. The license information setting unit sets content usage conditions based on the feature amount.

  Patent Document 4 (Japanese Patent Laid-Open No. 2011-048649) discloses an information management method, an information management system, and a program. In this related technology, the data classification means inputs target data including protected data and non-protected data, and a protection policy that defines a storage location of protected data and a storage location of non-protected data in a predetermined storage device, The target data is stored in the storage device according to the protection policy. When there is an access request for the target data, the license verification unit edits the protected data or prohibits access based on the license information that defines the user who should be allowed to access the target data.

JP 2002-014995 A Japanese Patent Laid-Open No. 2002-024211 JP 2009-087265 A JP 2011-048649 A

  Product documents have important know-how to be protected, but the same document as the product is mixed when the trial version is distributed, etc., and it will be referenced even if the license expires. There were problems such as inconsistencies in document versions.

  Also, along with diversifying user needs, it is necessary to customize documents for each user. However, document maintenance for each user cannot be efficiently managed, and the maintenance work of the document increases. Had problems.

  An object of the present invention is to provide a product document management system that controls a document attached to a software product in the same manner as the license policy of the software product body and controls the display content of the document.

  The product document management system according to the present invention creates a document associated with a product by dividing it into a common part, a user-dependent part, and a version-dependent part, and creates a document policy, the document and the document A product document management apparatus that encrypts at least one of the user-dependent part and the version-dependent part as a protection area when inputting a policy and generating content based on the document according to the document policy, and the product Together with the license information and the content including the protected area, and referring to the content including the protected area, the license information is transmitted to the product document management apparatus to receive the license authentication. Decryption of protected area If it is Nuo, decoding the protected area, and a content receiving terminal to display the content including the protected area.

  The product document management apparatus according to the present invention includes means for acquiring a document divided into a common part, a user-dependent part, and a version-dependent part from a content provider terminal that creates a document associated with the product, and the content provider terminal A means for acquiring a document policy, a means for generating content based on the document in accordance with the document policy, and protecting at least one of the user-dependent portion and the version-dependent portion when generating the content Means for encrypting as an area, and means for performing license authentication when license information provided together with the product to the content recipient terminal is received from the content recipient terminal, and as a result of license authentication, the protection area If decryption is permitted, decryption of the protected area is permitted Information indicating that and means for transmitting to the content receiving terminal.

  In the product document management method according to the present invention, the content provider terminal creates a document associated with a product by dividing the document into a common part, a user-dependent part, and a version-dependent part, and creates a document policy. When the management apparatus inputs the document and the document policy and generates content based on the document according to the document policy, at least one of the user-dependent part and the version-dependent part is encrypted as a protection area And when the content receiver terminal obtains the license information and the content including the protection area together with the product and refers to the content including the protection area, the content receiver terminal transmits the license information to the product document management apparatus. License authentication, and as a result of license authentication, the protection If the decoding of the band is licensed, and a to decode the protected area, to display the content including the protected area.

  The program according to the present invention includes a step of obtaining a document divided into a common part, a user-dependent part, and a version-dependent part from a content provider terminal that creates a document associated with a product, and a document from the content provider terminal. Obtaining a policy, generating content based on the document according to the document policy, and encrypting at least one of the user-dependent portion and the version-dependent portion as a protection area when generating the content And when the license information provided together with the product to the content recipient terminal is received from the content recipient terminal, the step of performing license authentication and the decryption of the protected area as a result of the license authentication If permitted, decrypt the protected area Information indicating that Nuo is a program for executing the steps of transmitting to the content receiving terminal to the computer. The program according to the present invention can be stored in a storage device or a storage medium.

  It is possible to prevent document know-how from leaking and to prevent document inconsistencies between versions.

It is a block diagram which shows the structural example of the product document management system which concerns on this invention. It is a figure which shows the flow of a process in the product document management system which concerns on this invention.

<Embodiment>
Embodiments of the present invention will be described below with reference to the accompanying drawings.

[System configuration]
As shown in FIG. 1, the product document management system according to the present invention includes a content provider terminal 10, a product document management device 20, and a content recipient terminal 30. The number of devices is not limited.

[Content Provider Terminal Configuration]
The content provider terminal 10 includes a document creation unit 11, a document policy creation unit 12, and a content generation instruction unit 13.

  The document creation unit 11 creates a software product document according to the operation of the content provider. The document may be text data, image data, or a combination thereof. Here, the contents of the document are classified into a document (common part) 101, a document (user-dependent part) 102, and a document (version-dependent part) 103. It does not matter whether each of the document (common part) 101, the document (user-dependent part) 102, and the document (version-dependent part) 103 is an independent file or included in the same file. The document (common part) 101 stores common information that does not depend on the content recipient or the version of the document. The document (user dependent unit) 102 stores user-specific information depending on the content recipient. The document (version-dependent unit) 103 stores version-specific information that depends on the version of the document.

  The document policy creation unit 12 creates a protection definition file 104 as a document policy file in accordance with the operation of the content provider. The protection definition file 104 stores access control information for each user for a document and protection area definition information based on the presence or absence of a license.

  The content generation instruction unit 13 issues a content generation instruction to the product document management apparatus 20. In practice, the document creation unit 11 and the document policy creation unit 12 provide the product document management apparatus 20 with a document (common part) 101, a document (user-dependent part) 102, a document (version-dependent part) 103, and Transmission of the protection definition file 104 may be a “content generation instruction”. That is, the content generation instruction unit 13 may be the document creation unit 11, the document policy creation unit 12, or a combination thereof.

[Configuration of Product Document Management Device]
The product document management apparatus 20 includes a content generation unit 21, a license verification unit 22, and a content difference verification unit 23.

  The content generation unit 21 receives (inputs) a document (common part) 101, a document (user-dependent part) 102, a document (version-dependent part) 103, and a protection definition file 104 as input data. Upon receiving the content generation instruction, the content generation unit 21 generates the content 200 by merging (merging) the document (common unit) 101, the document (user-dependent unit) 102, and the document (version-dependent unit) 103. To do. Here, the content 200 is a merged document (integrated document). The content generation unit 21 may generate the content 200 in a file format different from the document. At this time, the content generation unit 21 divides the content 200 into a protected area 201 and an unprotected area 202 according to the information defined in the protection definition file 104. The protected area 201 is permitted to be referenced only when the content recipient has a license. The non-protected area 202 is permitted to be referenced regardless of whether the content recipient has a license. Here, the content generation unit 21 encrypts the protection area 201. Information regarding the encryption key of the protection area 201 may be included in the protection definition file 104. The content generation unit 21 provides the content recipient terminal 30 with the content 200 and license information 301 along with the software product. In the license information 301, authority information (access right, target version, expiration date, etc.) related to software products and documents is described. Note that the content 200 and the license information 301 may be managed online.

  Based on a license check API (Application Program Interface), the license verification unit 22 requests the content receiver terminal 30 to present the license information 301 and acquires the license information 301 from the content receiver terminal 30. The license verification unit 22 refers to the license information 301 and checks whether there is permission to access the document based on the authority information regarding the software product and the document. As a result of the check, if the access permission to the document is “Yes”, the license verification unit 22 informs the content recipient terminal 30 information related to the decryption of the protected area 201 (decryption instruction, decryption key, decryption password, etc. ). Note that the license verification unit 22 may pass information related to decryption of the protected area 201 to the content difference verification unit 23.

  The content difference verification unit 23 compares the latest content 200 with the content 200 corresponding to the license information 301 to create a difference content 203. For example, if the license verification unit 22 checks that the permission to access the document is “Yes”, the content difference verification unit 23 determines that the target version of the document (common unit) 101 and the document ( Each of the user-dependent unit 102 and the document (version-dependent unit) 103 is compared with the latest document of the target version, and if there is a difference, a difference content 203 is created. This is because the contents of the same version of the document may be changed due to corrections or additions depending on the release date. The content difference verification unit 23 may divide the difference content 203 into a protected area 201 and a non-protected area 202. The content difference verification unit 23 provides the difference content 203 to the content recipient terminal 30. The content difference verification unit 23 obtains information (decryption instruction, decryption key, decryption password, etc.) related to the decryption of the protection area 201 from the license verification unit 22 and the content recipient terminal 30 together with the difference content 203. You may send to.

[Content receiver terminal configuration]
The content recipient terminal 30 includes a license acquisition unit 31, a license presentation unit 32, a protected area decryption unit 33, a merge unit 34, and a content display unit 35.

  The license acquisition unit 31 acquires the content 200 and the license information 301 together with the software product. Note that the license information 301 may be provided in a file format together with the software product to the content recipient terminal 30 or may be centrally managed by a predetermined server on the network. At this time, the license acquisition unit 31 may acquire the software product, the content 200, and the license information 301 from the product document management apparatus 20 or may be acquired by another method. For example, the license acquisition unit 31 may acquire the software product, the content 200, and the license information 301 by purchasing a software product sold as a package at a store or the like. Alternatively, separately from the software product and license information 301, only the content 200 may be acquired from the product document management apparatus 20. Actually, the content 200 acquired by the license acquisition unit 31 may be the same as one of the content 200 generated by the product document management apparatus 20.

  When referring to the protected area 201 of the content 200, the license presentation unit 32 presents the license information 301 to the product document management apparatus 20.

  The protected area decrypting unit 33 decrypts the protected area 201 based on the license verification result in the product document management apparatus 20. For example, the protected area decryption unit 33 acquires information (decryption instruction, decryption key, decryption password, etc.) related to decryption of the protected area 201 from the product document management apparatus 20 and decrypts the protected area 201.

  The merge unit 34 acquires the difference content 203 from the product document management apparatus 20 and merges the content 200 and the difference content 203 to generate the display content 302. For example, the merge unit 34 adds / overwrites / deletes the difference content 203 to the content 200. When the difference content 203 is divided into the protected area 201 and the non-protected area 202, the merging unit 34 passes the protected area 201 of the difference content 203 to the protected area decrypting unit 33 and decrypts the difference content 203 with the content 200. The protected area 201 and the unprotected area 202 of each content 203 are merged to generate display content 302.

  The content display unit 35 displays the display content 302 according to the operation of the content recipient.

[Hardware example]
Hereinafter, a specific example of hardware for realizing the product document management system according to the present invention will be described.

  Here, as examples of the content provider terminal 10, the product document management device 20, and the content recipient terminal 30, a PC (personal computer), a mobile phone, a smartphone, a smart book, an appliance, a workstation, a mainframe, a super A computer such as a computer is assumed. In addition, not only a terminal and a server but a relay device and a peripheral device may be used. Moreover, an expansion board mounted on a computer or the like, or a virtual machine (VM: Virtual Machine) constructed on a physical machine may be used.

  Although not shown, each of the content provider terminal 10, the product document management device 20, and the content recipient terminal 30 includes a processor that is driven based on a program and executes predetermined processing, and a memory that stores the program and various data And an interface used for communication with the network.

  Examples of the processor include a CPU (Central Processing Unit), a network processor (NP), a microprocessor, a microcontroller, or a semiconductor integrated circuit (IC: Integrated Circuit) having a dedicated function. Conceivable.

  Examples of the memory include semiconductor storage devices such as a RAM (Random Access Memory), a ROM (Read Only Memory), an EEPROM (Electrically Erasable and Programmable Read Only Memory), a flash memory, and an HDD (Hold SMD). An auxiliary storage device such as State Drive), a removable disk such as a DVD (Digital Versatile Disk), a storage medium such as an SD memory card (Secure Digital memory card), or the like is conceivable. Further, a buffer or a register may be used. Alternatively, DAS (Direct Attached Storage), FC-SAN (Fibre Channel-Storage Area Network), NAS (Network Attached Storage), IP-SAN (IP-Storage Area), etc. may be used.

  Note that the processor and the memory may be integrated. For example, in recent years, a single chip such as a microcomputer has been developed. Therefore, a case where a one-chip microcomputer mounted on an electronic device or the like includes the processor and the memory can be considered.

  Examples of the interfaces include semiconductor integrated circuits such as substrates (motherboards and I / O boards) and chips that support network communication, network adapters such as NIC (Network Interface Card), and similar expansion cards and communication devices such as antennas. A communication port such as a connection port (connector) is conceivable.

  Examples of the network include the Internet, a LAN (Local Area Network), a wireless LAN (Wireless LAN), a WAN (Wide Area Network), a backbone (Backbone), a cable television (CATV) line, a fixed telephone network, a mobile phone network, WiMAX (IEEE 802.16a), 3G (3rd Generation), dedicated line (lease line), IrDA (Infrared Data Association), Bluetooth (registered trademark), serial communication line, data bus, and the like can be considered.

  The internal structure of each of the content provider terminal 10, the product document management apparatus 20, and the content receiver terminal 30 is a module, a component, a dedicated device, or a startup (calling) program thereof. good.

  However, actually, it is not limited to these examples.

[Process flow]
FIG. 2 shows a processing flow until the content recipient refers to the document provided by the content provider.

(1) Step S101
The document creation unit 11 of the content provider terminal 10 creates a document according to the operation of the content provider. Here, the document creation unit 11 creates a document by dividing it into a document (common part) 101, a document (user-dependent part) 102, and a document (version-dependent part) 103. The configuration of division is arbitrary, and can be freely configured and managed.

(2) Step S102
When the document creation is completed, the document policy creation unit 12 of the content provider terminal 10 creates the protection definition file 104 as a document policy file according to the operation of the content provider. Here, the document policy creation unit 12 describes in the protection definition file 104 a definition of a protected area / non-protected area of a document, and a method for fetching a document (version dependent part) and a document (user dependent part). As a result, the document policy creation unit 12 creates the protection definition file 104 for each release.

(3) Step S103
The content generation instruction unit 13 of the content provider terminal 10 issues a content generation instruction to the product document management apparatus 20 when the document creation and the document policy creation are completed.

(4) Step S104
The content generation unit 21 of the product document management apparatus 20 inputs a document (common unit) 101, a document (user-dependent unit) 102, a document (version-dependent unit) 103, and a protection definition file 104, and responds to a content generation instruction. Based on the protection definition file 104, the document (common part) 101, the document (user-dependent part) 102, and the document (version-dependent part) 103 are merged, and the protected area 201 is encrypted to be unprotected from the protected area 201. The content 200 including the area 202 is generated. The merge method / encryption method is arbitrary. The content generation unit 21 releases the content 200 including the generated protected area together with the software product to the content receiver terminal 30.

(5) Step S105
The license acquisition unit 31 of the content receiver terminal 30 acquires license information 301 necessary for document reference. The license information 301 is provided in the same license file format as the software product.

(6) Step S106
Next, when referring to the protection area 201 of the content 200, the license presentation unit 32 of the content recipient terminal 30 transmits the license information 301 to the product document management apparatus 20 and refers to the protection area 201 of the content 200. Give instructions. The transmission of the license information 301 may be used as a reference instruction for the protected area 201 of the content 200. Note that the unprotected area 202 of the content 200 can be normally referred to.

(7) Step S107
When the license verification unit 22 of the product document management apparatus 20 receives the license information 301 and receives a reference instruction for the protection area 201 of the content 200, the license verification unit 22 performs license verification, confirms the license information 301, and receives the received content. The authentication information based on the confirmation result is returned to the person terminal 30.

(8) Step S108
When receiving the returned authentication information, the protected area decrypting unit 33 of the content recipient terminal 30 decrypts the protected area 201 of the content 200. The protected area decryption unit 33 does not decrypt the protected area 201 when the content of the authentication information does not permit the decryption of the protected area 201. In this case, the protection area 201 is a non-display area.

(9) Step S109
Next, the content difference verification unit 23 of the product document management apparatus 20 compares the latest content 200 with the content 200 corresponding to the license information 301, creates the difference content 203, and transmits it to the content receiver terminal 30. . Depending on the contents of the license information 301, the protection area 201 may be excluded from the target when the differential content 203 is created.

(10) Step S110
The merge unit 34 of the content recipient terminal 30 merges the existing content 200 and the difference content 203 to generate the display content 302. If the protected area 201 is not decrypted, the protected area 201 itself is a non-display area even if the difference content 203 includes the difference of the protected area 201.

(11) Step S111
The content display unit 35 of the content recipient terminal 30 displays the display content 302.

  In the present invention, the following effects can be expected by dividing the document into protected areas / non-protected, applying the same license policy as that of the product, and switching the contents to the optimum contents for the user.

  The first effect is that the same license policy as software products can be applied to information such as PC-dependent information, number of users, and expiration date, so that information can be protected according to the license policy and know-how leaked. Can be prevented.

  As a second effect, it is possible to reduce the risk of misuse due to mismatch between the product and document versions by detecting the inconsistency state between the product and the document and switching to the content most suitable for the user.

  As a third effect, in the present invention, the document is divided into a common part, a user-dependent part, and a version-dependent part and managed, and the optimum contents are dynamically generated, so that the efficiency of document management is improved. And maintainability can be improved.

[Application of the present invention]
In the above description, the document is targeted. However, in addition to the document, the present invention can be applied to various multimedia contents such as moving images and images. For example, multimedia contents can also be used for changing display contents for each tenant.

  In the above description, the software product document is the target. However, the software product document is not limited to the software product document, and may be a hardware product document that requires license information. In this case, the content recipient terminal 30 obtains product and license information separately from the content (document).

<Features of the present invention>
As described above, the present invention protects documents attached to software products in the same manner as the license policy of the software product main body, and controls the display contents of the documents, thereby preventing the know-how leakage of the document, version It is possible to prevent inconsistent document reference. It also has a dynamic conversion function for reducing the document management burden of the product document provider.

  In the present invention, the same license policy as that of the product can be set for the document. Further, it is possible to switch the contents of a document based on the version and individual user information described in the license policy.

  Specifically, a protection definition file is defined for a document subject to license protection, and based on this information, encryption and logical deletion technologies are applied to protect the document and Detects the consistency status and switches to the content most suitable for the user.

  In addition, the protection definition file can be divided into a protected area and an unprotected area without changing the existing document.

  In addition, by applying a license policy similar to that for a product to a product document, it is possible to dynamically generate display content that is optimal for the user.

  Further, the document can be protected by using the same license check API as that of the product.

<Remarks>
As mentioned above, although embodiment of this invention was explained in full detail, actually, it is not restricted to said embodiment, Even if there is a change of the range which does not deviate from the summary of this invention, it is included in this invention.

DESCRIPTION OF SYMBOLS 10 ... Content provider terminal 11 ... Document preparation part 12 ... Document policy preparation part 13 ... Content generation instruction part 20 ... Product document management apparatus 21 ... Content generation part 22 ... License verification part 23 ... Content difference verification part 30 ... Content recipient Terminal 31 ... License acquisition unit 32 ... License presentation unit 33 ... Protection area decryption unit 34 ... Merge unit 35 ... Content display unit

Claims (8)

A content provider terminal for creating a document policy by creating a document attached to a product by dividing it into a common part, a user-dependent part, and a version-dependent part,
Product document management that inputs the document and the document policy and encrypts at least one of the user-dependent part and the version-dependent part as a protection area when content is generated based on the document according to the document policy Equipment,
When the license information and the content including the protection area are acquired together with the product and the content including the protection area is referred to, the license information is transmitted to the product document management apparatus to receive the license authentication, and the result of the license authentication And a content recipient terminal that decrypts the protected area and displays the content including the protected area when decryption of the protected area is permitted. A product document management system according to claim 1,
The product document management apparatus performs a difference verification between the content corresponding to the license information and the latest content, and if there is a difference as a result of the difference verification, creates a difference content and sends the difference content to the content recipient To the device,
The product recipient management system, wherein the content recipient terminal merges and displays the content including the protected area and the differential content. Means for acquiring a document divided into a common part, a user-dependent part, and a version-dependent part from a content provider terminal that creates a document attached to a product;
Means for obtaining a document policy from the content provider terminal;
Means for generating content based on the document according to the document policy;
Means for encrypting at least one of the user-dependent part and the version-dependent part as a protected area when generating the content;
Means for performing license authentication when license information provided together with the product is received from the content receiver terminal to the content receiver terminal;
A product document management apparatus comprising: means for transmitting, to the content receiver terminal, information indicating that the decryption of the protection area is permitted when the decryption of the protection area is permitted as a result of license authentication. The product document management device according to claim 3,
Means for verifying the difference between the content corresponding to the license information and the latest content;
If there is a difference as a result of the difference verification, a means for creating a difference content and transmitting the difference content to the content recipient terminal;
A product document management apparatus. The content provider terminal creates a document associated with the product by dividing the document into a common part, a user-dependent part, and a version-dependent part, and creating a document policy;
When the product document management apparatus inputs the document and the document policy and generates content based on the document according to the document policy, at least one of the user-dependent part and the version-dependent part is used as a protection area. Encryption,
When the content receiver terminal acquires the license information and the content including the protection area together with the product and refers to the content including the protection area, the content receiver terminal transmits the license information to the product document management apparatus to perform license authentication. If the decryption of the protected area is permitted as a result of the license authentication, the product document management method includes: decrypting the protected area and displaying the content including the protected area. The product document management method according to claim 5,
The product document management device performs a difference verification between the content corresponding to the license information and the latest content, and if there is a difference as a result of the difference verification, creates a difference content and sends the difference content to the content recipient Sending to your device,
The product document management method further comprising: the content recipient terminal merging and displaying the content including the protected area and the differential content. Obtaining a document divided into a common part, a user-dependent part, and a version-dependent part from a content provider terminal that creates a document accompanying the product;
Obtaining a document policy from the content provider terminal;
Generating content based on the document according to the document policy;
Encrypting at least one of the user-dependent part and the version-dependent part as a protected area when generating the content;
When license information provided with the product is received from the content recipient terminal for the content recipient terminal, performing license authentication;
As a result of license authentication, if decryption of the protected area is permitted, a program for causing a computer to execute a step of transmitting information indicating permission of decryption of the protected area to the content recipient terminal. The program according to claim 7,
Verifying the difference between the content corresponding to the license information and the latest content;
If there is a difference as a result of the difference verification, creating a difference content and transmitting the difference content to the content recipient terminal;
A program that causes the computer to further execute.

Images