JP2013246575A - Information processing device, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device which can properly control access to data.SOLUTION: An information processing device receives data identification information for identifying data from a device which cannot browse data stored in a storage device, then, from a storage unit storing device identification information for identifying a device displaying a screen of data stored in the storage device in association with data identification information for identifying data, acquires device identification information associated with the received data identification information, and transmits request to share a screen of data identified by the data identification information to a device identified by the device identification information.

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program.

In recent years, instead of the conventional video conference system using audio and video images, the display screen and operation commands of the terminal are shared between multiple points, and materials, data, etc. displayed on the screen are browsed and edited. Multi-point conferencing systems are widespread.
In general, documents such as materials and data used in business are centrally managed by the document server, so that access to documents (reference, editing, etc.) is strictly restricted from the viewpoint of information security. became. In addition, it is desirable to restrict access to materials, data, and the like used in the conference system for information security, and a technology for controlling the display of conference data according to the access rights of conference participants is disclosed (patent) Reference 1).

Japanese Patent No. 4636058

When referring to a document used for work stored in a document server from a conference terminal of a multipoint conference system, the document cannot be accessed due to network configuration, system installation location, information security measures, etc. There is a case.
In such a case, it is necessary for the participant to open the document at a conference terminal that can access the document, and to perform an operation of sharing the screen with the conference terminal that cannot access it, which is very time consuming and laborious.

  The present invention has been made in view of such a problem, and an object thereof is to more appropriately control access to data.

  Therefore, an information processing apparatus according to the present invention includes a receiving unit that receives data identification information for identifying the data from a device that cannot reference the data stored in the storage device, and a screen of the data stored in the storage device. Acquiring device identification information associated with the data identification information received by the receiving unit from a storage unit that associates and stores device identification information that identifies the device being displayed and data identification information that identifies the data And means for transmitting a request to share the data screen of the data identification information to the device identified by the device identification information.

  The present invention may be a method, a program, a system, a storage medium, and the like.

  According to the present invention, access to data can be controlled more appropriately.

It is a figure which shows an example of a structure of a multipoint conference system. It is a figure which shows an example of a hardware structure of information processing apparatus. It is a figure which shows an example of a structure of the module of a conference terminal. It is a figure which shows an example of a structure of the module of a conference server. It is a figure which shows an example of a structure of the module of a document server. It is a figure which shows an example of the content displayed on the display apparatus of a conference terminal. It is a figure which shows an example of the content displayed on the display apparatus of a conference terminal. It is a figure which shows an example of the content displayed on the display apparatus of a conference terminal. It is a figure which shows an example of the flowchart which concerns on a file open process. It is a figure which shows an example of file operation information. It is a figure which shows an example of the flowchart which concerns on a sharing process. It is a figure which shows an example of the flowchart which concerns on a sharing process. It is a figure which shows an example of file operation information.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The embodiments do not limit the present invention, and all the configurations described in the embodiments are not necessarily essential to the means for solving the problems of the present invention.

<First Embodiment>
In the present embodiment, a configuration will be described in which when a user cannot access (for example, refer to) a file from his / her conference terminal, the screen of the file opened on another conference terminal is shared.
FIG. 1 is a diagram illustrating an example of a configuration of a multipoint conference system. Each of the conference terminal 101, the conference terminal 102, and the conference terminal 103 is an example of an information processing apparatus (computer), and is installed in each conference room. The conference terminals (101, 102, 103) are connected to the conference server 105 and the document server 106 via the network 104.
The conference terminals (101, 102, and 103) are not necessarily installed in the conference room, and an appropriate configuration that exists at a position that can be connected to the conference server 105 and the document server 106 via the network 104 can be adopted. Further, the number of conference terminals is not limited to three.
The conference server 105 and the document server 106 are examples of information processing apparatuses (computers). The conference server 105 and the document server 106 are shown as separate servers, but may be a single server.

FIG. 2 is a diagram illustrating an example of a hardware configuration of the information processing apparatus, more specifically, the conference terminals (101, 102, 103), the conference server 105, and the document server 106.
The display device 201 is a display or the like, and displays a user interface such as a screen. The input device 202 is a keyboard, a mouse, or the like, and inputs various information. The main storage device 203 is a RAM or the like, and temporarily stores (saves) data acquired from the outside, a value during execution of the program, and output data generated by execution of the program.

The auxiliary storage device 204 is a hard disk or the like, and stores various data. The conference terminal (101, 102, 103) and the auxiliary storage device 204 of the conference server 105 store a program for controlling the conference system, a program for performing data processing, conference data, and the like. The auxiliary storage device 204 of the document server 106 stores a program for controlling the document management system, a program for performing data processing, a document (an example of a file), and the like.
The central processing unit 205 is a CPU or the like and controls the entire apparatus. A network I / F 206 is an interface board or the like for connecting to an external device, and connects the conference terminals (101, 102, 103), the conference server 105, and the document server 106 to each other. A bus 207 connects the devices.

In the present embodiment, the central processing unit 205 of the conference terminal performs processing according to the procedure of the program stored in the auxiliary storage device 204, so that the functions in the conference terminal (modules described later) and the processes related to flowcharts described later are performed. Is realized. Further, the central processing unit 205 of the conference server 105 performs processing according to the procedure of the program stored in the auxiliary storage device 204, so that functions (such as modules described later) in the conference server 105 and processing related to flowcharts described later are performed. Realized.
Further, the central processing unit 205 of the document server 106 performs processing according to the procedure of the program stored in the auxiliary storage device 204, thereby realizing functions (such as modules described later) in the document server 106 and processing related to flowcharts described later. Is done.

FIG. 3 is a diagram illustrating an example of a module configuration related to software (application) in the conference terminals (101, 102, 103). The display unit 301 outputs a screen showing conference information and the like, a screen showing file contents and the like (file screen), and the like to the display device 201. The file acquisition unit 302 acquires a file stored in the auxiliary storage device 204 of the document server 106. The file operation state notification unit 303 transmits a file operation state notification indicating the file operation state to the conference server 105.
The screen information transmission unit 304 transmits the screen information of the file screen output from the display device 201 to the conference server 105. The screen information receiving unit 305 receives screen information of a file screen output from another conference terminal transmitted from the conference server 105. The sharing request receiving unit 306 receives the sharing request transmitted from the conference server 105. The operation command receiving unit 307 receives an operation command for another conference terminal transmitted from the conference server 105. The operation command transmission unit 308 transmits an operation command to the conference server 105.

FIG. 4 is a diagram illustrating an example of a module configuration related to software (application) in the conference server 105. The shared terminal determination unit 401 determines a conference terminal that can share a file screen from among the conference terminals (101, 102, 103) connected to the network 104. The screen information receiving unit 402 receives screen information transmitted from the conference terminals (101, 102, 103). The screen information transmission unit 403 transmits the screen information received by the screen information reception unit 402 to other conference terminals.
The operation command receiving unit 404 receives an operation command to another conference terminal transmitted from the conference terminals (101, 102, 103). The operation command transmission unit 405 transmits the operation command received by the operation command reception unit 404 to another conference terminal. The database 406 stores conference information, information for managing file operation status and file sharing status, and the like. Information in the database 406 is stored in the auxiliary storage device 204, which is an example of a storage unit.

FIG. 5 is a diagram illustrating an example of a module configuration related to software (application) in the document server 106.
The access right management unit 501 manages file access rights. For example, the access right management unit 501 determines the access right based on the user count and password information transmitted from the conference terminal (101, 102, 103), and has the read access right or the write access right. Allow file retrieval. The shared folder 502 indicates a storage location for storing the file, and stores the file in the auxiliary storage device 204.

FIG. 6 is a diagram showing an example of contents displayed on the display device 201 of the conference terminals (101, 102, 103) sharing the screen information and operation commands of the file screen in the multipoint conference system. The file screen 601 is displayed on the display device 201 of the conference terminal 101. Similar to the conventional technology for sharing the screen, the screen information of the file screen output from the display device 201 of the conference terminal 101 is transmitted to the conference terminals (102, 103) via the network 104, and the conference terminals (102, 103) are transmitted. The file screen is output on the display device 201 of FIG.
In addition, an operation command input from the input device 202 of the conference terminal (101, 102, 103) is transmitted from the operation command transmission unit 308 to the conference server 105. For example, when the operation command transmitted from the conference server 105 is received by the operation command receiving unit 307 of the conference terminal 101, the operation command is processed in the same manner as the input of the input device 202 of the conference terminal 101.
In this way, the screen information and operation instructions of the file screen of the file opened on one conference terminal are shared with other conference terminals.

FIG. 7 is a diagram illustrating an example of content displayed on the display device 201 of the conference terminal (101, 102, 103) during the conference in the multipoint conference system.
The conference screen 701 displays conference information (meeting minutes information, link 702 of a file used in the conference, etc.). When the file link 702 is selected, the selected file stored in the shared folder 502 of the document server 106 is downloaded, and the contents of the file are displayed on the display device 201 as a file screen.

FIG. 8 is a diagram illustrating an example of contents displayed on the display device 201 of the conference terminal (101, 102, 103) when the file link 702 is selected.
When the file link 702 in the minutes window on the conference screen 701 is selected, the conference terminals (101, 102, 103) download the selected file stored in the shared folder 502 of the document server 106. The conference terminals (101, 102, 103) activate an application according to the extension of the downloaded file, and the file contents are displayed on the file screen 801 generated by the application.

Next, in the multipoint conference system, processing of the conference terminal (101, 102, 103) when opening a file in the shared folder 502 of the document server 106 from the conference terminal (101, 102, 103) (file open processing) Will be described. FIG. 9 is a diagram illustrating an example of a flowchart according to the file open process. Hereinafter, a case where the conference terminal 101 opens a file will be described as an example.
In this embodiment, the conference terminal identifier of the conference terminal 101 is “A_client”, the conference terminal identifier of the conference terminal 102 is “B_client”, and the conference terminal identifier of the conference terminal 103 is “C_client”. The storage location of the file opened by the conference terminal 101 is “\\ server \ project A \ conference material \ progress meeting.ppt”. The conference terminal identifier is an example of device identification information for identifying a device. The file identifier is an example of data identification information for identifying data, and is the same as the storage destination in the present embodiment.

In step S <b> 901, the file acquisition unit 302 of the conference terminal 101 transmits an instruction to open a file stored in the shared folder 502 in the document server 106 (file open instruction) to the document server 106. For example, in the file open instruction, the file acquisition unit 302 transmits the account and password information input by the user to the document server 106.
In step S902, the conference terminal 101 determines whether the file can be opened. For example, the conference terminal 101 can open a file based on a response from the access right management unit 501 of the document server 106 indicating whether or not a specified file can be opened with an account and password input by the user. Determine if you can. If the conference terminal 101 determines that the file can be opened, the process proceeds to step S905. If the conference terminal 101 determines that the file cannot be opened, the process proceeds to step S903.

In S905, the file acquisition unit 302 downloads the file. The conference terminal 101 activates an application corresponding to the extension of the downloaded file, and the display unit 301 displays the content of the file on the display device 201 as a screen (file screen).
In step S <b> 906, the file operation state notification unit 303 transmits a file operation state notification to the conference server 105. The file operation status notification includes a conference terminal identifier “A_client”, a file identifier “\\ server \ project A \ conference material \ progress meeting.ppt”, and information (access right information) indicating an access right to the file. The conference terminal identifier, file identifier, and access right information are stored in the database 406 of the conference server 105 in the format of the file operation information management table shown in FIG.
FIG. 10 is a diagram illustrating an example of file operation information. The file operation information is stored in the database 406 as a file operation information management table in which information such as the conference terminal identifier 1001, the file identifier 1002, and the access right 1203 is associated.

In S903, the file acquisition unit 302 receives an error notification from the document server 106 or the like.
In step S <b> 904, the file operation state notification unit 303 transmits a file operation state notification to the conference server 105. The file operation status notification includes a conference terminal identifier “A_client”, a file identifier “\\ server \ project A \ conference material \ progress meeting.ppt”, and error information. In the present embodiment, when the file cannot be opened, if the file is opened by another conference terminal (102, 103), the file screen of the file is shared. The sharing method will be described with reference to FIG.

FIG. 11 relates to processing (sharing processing) of the conference server 105 until the conference terminal 101 cannot open the selected file in FIG. 9 until the screen is shared with other conference terminals (102, 103). It is a figure which shows an example of a flowchart. Hereinafter, a case where the conference terminal 101 transmits a file operation state notification including error information or the like to the conference server 105 will be described as an example.
In S1101, when the conference server 105 receives a file operation status notification including error information transmitted from the file operation status notification unit 303 of the conference terminal 101, the conference terminal identifier and the file included in the file operation status notification are received. Get an identifier.
In S1102, the conference server 105 refers to the file operation information management table in the database 406, identifies the conference terminal that has opened the file with the file identifier acquired in S1101, and stores the conference terminal identifier and the like of the identified conference terminal in the database. Obtained from 406. When the conference server 105 can identify the conference terminal (when there is a conference terminal that has opened the file), the conference server 105 proceeds to S1103. On the other hand, when the conference terminal cannot be identified (the conference terminal that has opened the file) If not, the process is terminated. For example, when the file identifier is “\\ server \ project A \ conference material \ progress meeting.ppt”, the conference server 105 determines from the table shown in FIG. Is identified.

In step S1103, the conference server 105 determines whether or not the identified conference terminal has a read access right. If the conference server 105 determines that it has the read access right, it proceeds to S1104. If it determines that it does not have the read access right, the conference server 105 proceeds to S1105. In S1104, the conference server 105 makes a file sharing request to the identified conference terminal. For example, since the access right of B_client 1004 is read 1006, the conference server 105 makes a file sharing request to the conference terminal 102 that has opened the file.
In S1106, the conference server 105 receives the screen information of the file screen displayed on the conference terminal from the conference terminal for which the sharing request has been made via the screen information receiving unit 402, and the screen information of the file screen. Is transmitted to the conference terminal 101 via the screen information transmission unit 403.

For example, when the identified conference terminal is the conference terminal 102, the operation command of the conference terminal (101, 102) is received by the operation command receiving unit 404 via the conference server 105, and the conference is transmitted by the operation command transmitting unit 405. It is transmitted to the terminals (101, 102).
Further, for example, an operation command for the conference terminal 101 is received by the operation command receiving unit 404 of the conference terminal 102 via the conference server 105, and screen information after the execution of the operation command is received from the screen information transmitting unit 403 of the conference terminal 102. It may be transmitted to the conference terminal 101.

If the conference server 105 determines in S1103 that the file access right is not read, that is, it can be written, in S1105, the conference server 105 requests the conference terminal that is opening the file to share the read file. . For example, according to a read file sharing request, an operation command related to writing transmitted from the conference terminal 101 is invalidated (ignored) at the sharing source conference terminal and is not processed.
In addition, it is not restricted to the above-mentioned structure. For example, the conference server 105 may invalidate all operation commands transmitted from the conference terminal 101 at the sharing source conference terminal and request the sharing source conference terminal not to perform processing. Further, for example, the conference server 105 may be configured to request the conference terminal 101 not to transmit a write operation command or all operation commands.

Here, in general screen sharing, not only the screen information but also the operation instructions are shared. Therefore, depending on the access right of the screen sharing source, the conference terminal that originally has no access right not only browses the document but also the document. Editing is also possible, which is a security problem. However, according to the above-described configuration, such a problem can be avoided.
As described above, according to the present embodiment, a conference terminal that cannot access a file can also refer to the contents of the file. Moreover, according to this embodiment, security when sharing a screen can be improved.

<Second Embodiment>
In this embodiment, when there are a plurality of conference terminals that open a file during a conference, a method for specifying a conference terminal to be shared from among them will be described. Also in this embodiment, the conference terminal identifier of the conference terminal 101 is “A_client”, the conference terminal identifier of the conference terminal 102 is “B_client”, and the conference terminal identifier of the conference terminal 103 is “C_client”. The storage location of the file opened on the conference terminal 101 is “\\ server \ project A \ conference material \ progress meeting.ppt”, and the file identifier is the same as the storage location.
FIG. 12 relates to processing (sharing processing) of the conference server 105 until the conference terminal 101 cannot open the selected file in FIG. 9 until the screen is shared with other conference terminals (102, 103). It is a figure which shows an example of a flowchart. In the present embodiment, the description of the same configuration as that of the first embodiment is omitted as appropriate.

In S1201, when the conference server 105 receives the file operation status notification including the error information transmitted from the file operation status notification unit 303 of the conference terminal 101, the conference terminal identifier and the file included in the file operation status notification are received. Get an identifier.
In S1202, the conference server 105 refers to the file operation information management table in the database 406, identifies the conference terminal that has opened the file with the file identifier acquired in S1201, and stores the conference terminal identifier and the like of the identified conference terminal in the database. Obtained from 406. When the conference server 105 can identify the conference terminal (when there is a conference terminal that has opened the file), the conference server 105 proceeds to S1203. On the other hand, when the conference terminal cannot be identified (the conference terminal that has opened the file) If not, the process is terminated.
For example, assume that the file identifier is “\\ server \ project A \ meeting material \ progress meeting.ppt”. In this case, the conference server 105 specifies the conference terminal 102 of the B_client 1304 and the conference terminal 103 of the C_client 1307 as the conference terminals that have opened the file from the table shown in FIG.

In S1203, conference server 105 determines whether there are a plurality of identified conference terminals. If it is determined that there are a plurality of conference servers 105, the process proceeds to S1204. On the other hand, if it is determined that one exists, the process proceeds to S1103.
In step S1204, the conference server 105 determines (specifies) the sharing source by giving priority to the conference terminal (conference terminal with lower authority) having the read access authority lower than the write access authority. For example, when the conference server 105 identifies the conference terminal 102 and the conference terminal 103, the conference server 105 determines the conference terminal 103 of the C_client 1307 that has opened the file by reading 1309 as the sharing source.

In step S1205, the conference server 105 issues a file sharing request to the determined conference terminal.
In S1206, the conference server 105 receives the screen information of the file screen displayed on the conference terminal from the conference terminal for which the sharing request has been made via the screen information receiving unit 402, and the screen information of the file screen. Is transmitted to the conference terminal 101 via the screen information transmission unit 403.

For example, when the determined conference terminal is the conference terminal 103, the operation command of the conference terminal (101, 103) is received by the operation command receiving unit 404 via the conference server 105, and the conference is transmitted by the operation command transmitting unit 405. It is transmitted to the terminals (101, 103).
Further, for example, an operation command for the conference terminal 101 is received by the operation command receiving unit 404 of the conference terminal 103 via the conference server 105, and screen information after the execution of the operation command is received from the screen information transmitting unit 403 of the conference terminal 103. It may be transmitted to the conference terminal 101.
As described above, according to the present embodiment, a conference terminal that cannot access a file can also refer to the contents of the file. Moreover, according to this embodiment, security when sharing a screen can be improved. Further, according to the present embodiment, it is possible to share the screen of a conference terminal with lower authority.

<Other embodiments>
The present invention can also be realized by executing the following processing. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, etc.) of the system or apparatus reads the program. It is a process to be executed.

  According to the configuration of the above-described embodiment, access to data can be controlled more appropriately.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

101 conference terminal, 102 conference terminal, 103 conference terminal, 105 conference server, 106 document server

Claims (8)

Receiving means for receiving data identification information for identifying the data from a device that cannot refer to the data stored in the storage device;
Data identification information received by the receiving unit from a storage unit that associates and stores device identification information for identifying a device displaying a screen of data stored in the storage device and data identification information for identifying the data Obtaining means for obtaining device identification information associated with
An information processing apparatus comprising: a transmission unit configured to transmit a request to share a data screen of the data identification information to a device identified by the device identification information. The receiving means receives screen information of the screen from a device identified by the device identification information;
The information processing apparatus according to claim 1, wherein the transmission unit transmits the screen information of the screen to the apparatus that transmitted the data identification information. The receiving means receives an instruction for data of the data identification information from a device that has transmitted the data identification information;
The information processing apparatus according to claim 2, wherein the transmission unit transmits the instruction to a device identified by the device identification information. In the storage unit, the authority information of the device is further associated and stored,
When the transmission unit determines that the device identified by the device identification information has an authority to write the data of the data identification information, the transmission unit writes the data identification information together with the request. The information processing apparatus according to claim 3, wherein a request for ignoring an instruction related to the information is transmitted to the apparatus identified by the apparatus identification information. In the storage unit, the authority information of the device is further associated and stored,
When the acquisition unit determines that there are a plurality of device identification information associated with the data identification information received by the reception unit, the acquisition unit preferentially acquires the device identification information of a device with lower authority. The information processing apparatus according to claim 3. A receiving step of receiving data identification information for identifying the data from a device that cannot refer to the data stored in the storage device;
Data identification information received in the receiving step from the storage unit for associating and storing device identification information for identifying a device displaying a screen of data stored in the storage device and data identification information for identifying the data An acquisition step of acquiring device identification information associated with
And a transmission step of transmitting a request for sharing a data screen of the data identification information to a device identified by the device identification information. A receiving step of receiving data identification information for identifying the data from a device that cannot refer to the data stored in the storage device;
Data identification information received in the receiving step from the storage unit for associating and storing device identification information for identifying a device displaying a screen of data stored in the storage device and data identification information for identifying the data An acquisition step of acquiring device identification information associated with
A program for causing a computer to execute a transmission step of transmitting a request for sharing a data screen of the data identification information to a device identified by the device identification information. A system having a storage device for storing data, a plurality of devices, and an information processing device,
Each of the plurality of devices is
Requesting means for requesting the storage device to access data stored in the storage device;
A notification means for notifying the information processing apparatus of device identification information for identifying a device and data identification information for identifying the data when accessing data stored in the storage device;
The information processing apparatus includes:
Storage means for associating the device identification information and the data identification information notified from the notification means with each other and storing them in a storage section;
Receiving means for receiving data identification information for identifying the data from a device that cannot refer to data stored in the storage device among the plurality of devices;
Obtaining means for obtaining device identification information associated with the data identification information received by the receiving means from the storage unit;
A transmission unit configured to transmit a request for sharing a data screen of the data identification information to a device identified by the device identification information.

Images