JP2014038506A - Data storage device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data storage device capable of suppressing a difference between a predetermined time as a time for making data unusable and a time when data becomes actually unusable from being generated, and a program.SOLUTION: The data storage device has first storage means for storing at least one or more data, movement means for moving at least one or more data in which a time till a deletion predetermined time is within a predetermined time among data stored in the first storage means, second storage means for storing at least one or more data moved by the movement means, and deletion means for collectively deleting at least one or more data stored in the second storage means during the deletion predetermined time.

Description

  The present invention relates to a data storage device and a program.

  Patent Document 1 discloses key information indicating a classification of records held in a database, a time when the record becomes valid or a time when the record becomes valid, and a time when the record becomes invalid or invalid. A field for storing the scheduled time is added to the above record and held in the database. Based on the current time and the valid / invalid time, the current information that is currently valid and the past valid Discriminating between log information, which is information, and pending information, which is information scheduled to become effective in the future, is disclosed.

  Patent Document 2 describes, in the record of information management data, the start date and time as the date and time when the information becomes valid or the date when the information is scheduled to be valid, Log information based on the current date and time, start date and time, and end date and time, with fields for storing the registration number given when the record was created and the deletion number given when the record information was invalidated Disclosure of discriminating in-use information and in-process information and leaving a history of processing for records using the registration number and deletion number fields.

  Patent Document 3 discloses means for storing a storage device management record including history information and information indicating a storage location in the storage device for each data record having the same history information, means for searching for a storage device management record, search As a result of the comparison between the history information of the stored storage device management record and the set deletion deadline information and the comparison means, the history information date of the storage device management record was before the deletion deadline of the deletion deadline information Means for referring to information indicating a storage location in the storage device that is sometimes included in the storage device management record, and collectively deleting data records stored in the corresponding storage location in the storage device Is disclosed.

JP-A-10-301824 Japanese Patent Laid-Open No. 11-031097 JP 2000-148548 A

  An object of the present invention is to provide a data storage device and program capable of suppressing the occurrence of a difference between a predetermined time when data is unavailable and a time when data is actually unavailable. It is.

  According to the first aspect of the present invention, there is provided a first storage means for storing at least one or more data, and a period until the scheduled deletion time is predetermined among the data stored in the first storage means. The moving means for moving at least one or more data within a period, the second storage means for storing at least one data moved by the moving means, and the second storage means The data storage device includes a deletion unit that deletes at least one or more pieces of data collectively at a scheduled deletion time.

  The present invention according to claim 2 is the data storage device according to claim 1, further comprising movement history recording means for recording a movement history by the movement means.

  The present invention according to claim 3 is the data storage device according to claim 1 or 2, further comprising a deletion history recording means for recording a history of deletion by the deletion means.

  According to a fourth aspect of the present invention, in the reference control, the deletion unit performs control so as to reject the reference of the data after the time when the deletion unit deletes at least one or more pieces of data stored in the second storage unit. 4. The data storage device according to claim 1, further comprising means.

  The present invention according to claim 5 further includes time predicting means for predicting a time required for data movement by the moving means, and the moving means is configured to store data based on the time predicted by the time predicting means. 5. The data storage device according to claim 1, wherein a movement start time is determined.

  The present invention according to claim 6 further includes processing load prediction means for predicting the processing load due to data movement by the movement means, and the movement means is based on the processing load predicted by the processing load prediction means. 6. The data storage device according to claim 1, wherein a data movement start time is determined.

  The present invention according to claim 7 further includes a processing load information acquisition unit that acquires information about a processing load applied to the own device, wherein the moving unit is configured to process the processing load acquired by the processing load information acquisition unit. 7. The data storage device according to claim 1, wherein a data movement start time is determined based on the information.

  The present invention according to claim 8 returns the data whose scheduled deletion time is changed among the at least one data stored by the second storage means to be stored by the first storage means. 8. The data storage device according to claim 1, further comprising return movement means for performing movement.

  According to the ninth aspect of the present invention, the data whose scheduled deletion time is changed among at least one or more data stored by the second storage means is returned to be stored by the first storage means. 5. The apparatus according to claim 4, further comprising return movement means for performing movement, wherein when the data is moved by the return movement means, the deletion means waits for deletion until data movement by the return movement means is completed. A data storage device.

  According to a tenth aspect of the present invention, there is provided a first storage means for storing information indicating a storage location of the data for at least one or more data, and a storage location of data stored in the first storage means Information indicating the storage location of at least one or more data moved by the moving means, and moving information that moves within a predetermined period of time until the scheduled deletion time of the data Data having a second storage means for storing data, and a deletion means for collectively deleting information indicating the storage location of at least one or more data stored by the second storage means at the scheduled deletion time It is a storage device.

  The present invention according to claim 11 is characterized in that the first storage means stores, for at least one or more encrypted data, a set of information indicating a storage location of the data and information used for decrypting the data. The moving means has a predetermined period of time until the scheduled deletion time of the data among a set of information indicating the data storage location and information used for decoding the data stored in the first storage means. The set of information within a period is moved, the second storage means stores at least one information set moved by the moving means, and the deletion means is moved by the second storage means. 11. The data storage device according to claim 10, wherein at least one set of stored information is collectively deleted at a scheduled deletion time.

  The present invention according to claim 12 includes a first storage step for storing at least one data and a period until the scheduled deletion time among the data stored in the first storage step. A moving step for moving at least one or more data within a period, a second storing step for storing at least one or more data moved by the moving step, and a second storing step. This is a program for causing a computer to execute a deletion step of deleting at least one or more pieces of data collectively at a scheduled deletion time.

  According to a thirteenth aspect of the present invention, there is provided a first storage step for storing information indicating a storage location of the data for at least one or more data, and a storage location of the data stored in the first storage step. Information indicating the storage location of at least one or more data moved by the moving step, and a moving step of moving information whose period until the scheduled deletion time of the data is within a predetermined period And a deletion step of deleting information indicating a storage location of at least one or more data stored in the second storage step collectively at a scheduled deletion time. This is a program to be executed.

  According to the first aspect of the present invention, it is possible to suppress the occurrence of a difference between a predetermined time for making data unusable and a time for actually making the data unusable, and to delete the data. A data storage device can be provided.

  According to the present invention of claim 2, in addition to the effect of the present invention of claim 1, it is possible to provide a data storage device capable of leaving a record as to which data has been moved and when.

  According to the present invention of claim 3, in addition to the effect of the present invention of claim 1 or 2, it is possible to provide a data storage device capable of leaving a record as to when data has been deleted.

  According to the fourth aspect of the present invention, in addition to the effect of the present invention according to any one of the first to third aspects, a data storage device that can be deleted without performing exclusive control on the data to be deleted is provided. can do.

  According to the fifth aspect of the present invention, in addition to the effect of the present invention according to any one of the first to fourth aspects, a data storage device capable of adjusting the start time of movement based on the time required for movement is provided. can do.

  According to the sixth aspect of the present invention, in addition to the effect of the present invention according to any one of the first to fifth aspects, a data storage device capable of adjusting the start time of movement based on the processing load given by movement. Can be provided.

  According to the present invention according to claim 7, in addition to the effects of the present invention according to any one of claims 1 to 6, the start time of movement can be adjusted according to the state of the processing load applied to the own apparatus. A data storage device can be provided.

  According to the present invention of claim 8, in addition to the effects of the present invention according to any one of claims 1 to 7, data storage that can prevent data whose scheduled deletion time has been changed from being deleted at an incorrect time An apparatus can be provided.

  According to the present invention of claim 9, in addition to the effect of the present invention of claim 4, it is possible to prevent a conflict between the return movement process and the deletion process for the data to be moved back. A data storage device can be provided.

  According to the tenth aspect of the present invention, there is provided a data storage device capable of suppressing a difference between a predetermined time when data is unavailable and a time when data is actually unavailable. Can be provided.

  According to the eleventh aspect of the present invention, in addition to the effect of the present invention according to the tenth aspect, even if data from which the information indicating the storage location is deleted is obtained, the data storage cannot decrypt the data. An apparatus can be provided.

  According to the present invention of claim 12, there is provided a program capable of suppressing the occurrence of a difference between a predetermined time when data is unavailable and a time when data is actually unavailable. be able to.

  According to the thirteenth aspect of the present invention, there is provided a program capable of suppressing the occurrence of a difference between a predetermined time when data is unavailable and a time when data is actually unavailable. be able to.

It is a figure which shows the hardware constitutions of the data storage device 2 which concerns on the 1st Embodiment of this invention. It is a block diagram which shows the function structure of the data storage device 2 implement | achieved by executing a control program. 4 is a flowchart illustrating an operation of registering data in a data storage unit 20 in the data storage device 2. It is a schematic diagram which illustrates the state of the data storage part 20 and the log | history storage part 26 at the time of registering data "contract A", and (a) has illustrated the state of the data storage part 20, (B) illustrates the state of the history storage unit 26. 4 is a flowchart illustrating a control operation by a movement deletion control unit 48 in the data storage device 2. 10 is a flowchart illustrating an operation in which a deletion plan process (step 204) is performed under the control of a movement deletion control unit 48. It is a schematic diagram which illustrates the state of the deletion management information storage part 24, (a) shows before deletion plan processing is performed, (b) shows that it is under execution, (c) shows after execution. . FIG. 6 is a schematic diagram illustrating the state of the deletion management information storage unit 24 when determining the movement time only based on whether or not the period until the latest scheduled deletion time is within a predetermined period in step 306; a) shows before the deletion plan processing is executed, (b) shows that it is being executed, and (c) shows after it is executed. It is a schematic diagram which illustrates the state of the data storage part 20, (a) shows before deletion plan processing is performed, (b) has shown after execution. It is a schematic diagram which illustrates the state of the deletion plan data storage part 22, (a) shows before execution of a deletion plan process, (b) has shown after execution. 4 is a flowchart illustrating an example of an operation performed by a travel time prediction unit 42. It is a schematic diagram which shows an example of the information regarding the processing load which the processing load information acquisition part 46 acquired. 10 is a flowchart illustrating an operation in which a deletion execution process (step 202) is performed under the control of a movement deletion control unit 48. 4 is a flowchart illustrating an operation when data is updated by an operation processing unit. It is the schematic diagram which showed an example of the information which shows the calculation rule of the scheduled deletion time stored in the deletion management information storage part 24, when a calculation date and a preservation | save period are defined for every data classification. It is a schematic diagram which shows the data storage system 60 which concerns on the 2nd Embodiment of this invention. FIG. 4 is a schematic diagram illustrating an example of information stored in a data storage unit when the data storage device stores a set of information indicating a storage location of encrypted data content and information used for decryption. .

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram showing a hardware configuration of a data storage device 2 according to the first embodiment of the present invention.

  The data storage device 2 of this embodiment is configured as, for example, a database management system. As shown in FIG. 1, a CPU 4, a memory 6, a storage unit 8 such as a hard disk drive (HDD) as a database, and a network as shown in FIG. A communication interface (IF) 10 that transmits and receives data to and from an external device, and a user interface (UI) unit 12 including a touch panel or a liquid crystal display and a keyboard are included. These components are connected to each other via a control bus 14.

  The CPU 4 executes processing based on a control program stored in the memory 6 or the storage unit 8 and controls the operation of the data storage device 2. In the present embodiment, the CPU 4 has been described as reading and executing a control program stored in the memory 6 or the storage unit 8. However, the program is stored in a storage medium such as a CD-ROM and stored in the CPU 4. It can also be provided, or can be provided to the CPU 4 via the communication IF 10.

  The storage unit 8 stores data such as documents. In the present embodiment, the storage unit 8 is constructed as a relational database (relational database), and operations such as registration, search, update, and deletion of data in the storage unit 8 are executed by executing the program. Is made.

  FIG. 2 is a block diagram showing a functional configuration of the data storage device 2 realized by executing the control program.

  As shown in FIG. 2, the data storage device 2 of the present embodiment includes a data storage unit 20, a scheduled deletion data storage unit 22, a deletion management information storage unit 24, a history storage unit 26, and an operation processing unit 28. A data movement unit 30, a data return movement unit 32, a deletion unit 34, a movement history recording unit 36, a deletion history recording unit 38, an operation processing history recording unit 40, a movement time prediction unit 42, a processing A load prediction unit 44, a processing load information acquisition unit 46, a movement deletion control unit 48, and a reference control unit 50 are provided.

  The data storage unit 20 is a database area for storing data such as documents, and can store at least one data.

  The scheduled deletion data storage unit 22 is a database area that stores data moved as data scheduled to be deleted by the data moving unit 30 described later, and can store at least one data.

  The deletion management information storage unit 24 is a database area for storing setting information used for performing management for deleting data at the scheduled deletion time determined for each data.

  The history storage unit 26 is a database area that stores history information about operations performed on data. Note that, as the history information to be stored, for example, information on the date and time when the operation was performed, information on the operation content, and the like are stored.

  The operation processing unit 28 receives instructions about various operations on data such as registration, search, update, and deletion from the UI unit 12, performs operations corresponding to the received instructions on the data, and sends processing results to the UI unit 12. indicate. The processing target by the operation processing unit 28 is not limited to the data stored in the data storage unit 20, but the data stored in the scheduled deletion data storage unit 22, the information stored in the deletion management information storage unit 24, and the history storage Information stored in the unit 26 is also included.

  The data moving unit 30 is at least one or more of the data stored in the data storage unit 20 under the control of the movement deletion control unit 48 to be described later. Are moved to the scheduled deletion data storage unit 22. Specifically, the data moving unit 30 moves the data stored in the data storage unit 20 with the latest scheduled deletion date to the deletion planned data storage unit 22.

  Note that the data to be moved is not limited to one, and if there is a plurality of data set with the same scheduled deletion time, a plurality of data will be moved. Further, not only data for which the exact same scheduled deletion time is set, but also data having the latest scheduled deletion time and data having a difference between the scheduled deletion times within a predetermined range may be moved.

  For example, data A in which the predetermined range is one day and the scheduled deletion time is set to 3:00 on March 31, 2012, and data B is set on March 31, 2012 at 12:30. If the data with the latest scheduled deletion date is data A, the data moving unit 30 may move not only the data A but also the data B.

  The data return moving unit 32 moves the data stored in the scheduled deletion data storage unit 22 whose scheduled deletion time has been changed to the data storage unit 20 under the control of the movement deletion control unit 48 described later. . In the present embodiment, the data return movement unit 32 performs a movement to return data when a change is made such that the preset scheduled deletion time is postponed.

  The deletion unit 34 collectively deletes at least one or more data stored in the planned deletion data storage unit 22 at the scheduled deletion time under the control of the movement deletion control unit 48 described later.

Note that the batch deletion at the scheduled deletion time includes not only the deletion at the scheduled deletion time but also the deletion at the time corresponding to the scheduled deletion time.
For example, when data whose difference in scheduled deletion time is within a predetermined range is stored in the scheduled deletion data storage unit 22 as described above, the deletion unit 34 is controlled under the control of the movement deletion control unit 48, for example. Other data may be deleted at once in accordance with the scheduled deletion time of any data stored in the deletion planned data storage unit 22.

  In addition, the deletion unit 34 may delete the data at a specific time according to the scheduled data deletion time. For example, when there is data described as the data A and the data B, the deletion unit 34 sets the data A and the data B at 23:59 on March 31, 2012 as the time corresponding to the scheduled deletion time. It may be deleted. In this embodiment, as will be described later, the deletion is executed when a predetermined period has elapsed and the processing timing has come.

  The movement history recording unit 36 records history information about data movement by the data moving unit 30 and the data return moving unit 32 in the history storage unit 26. For example, the movement history recording unit 36 records the data ID and the destination table name for each movement target data.

  The deletion history recording unit 38 records history information regarding data deletion by the deletion unit 34 in the history storage unit 26. For example, the deletion history recording unit 38 records the table name to be deleted.

  The operation processing history recording unit 40 records history information about data operations performed by the operation processing unit 28 in the history storage unit 26. For example, the operation processing history recording unit 40 records information such as operation date / time, operator, operation content, operation target data, and the like.

  The movement time prediction unit 42 predicts the time required for the data movement unit 30 to move the data. The travel time prediction unit 42 according to the present embodiment predicts the travel time based on the information on the travel time results in the past data movement stored in the deletion management information storage unit 24.

  The processing load prediction unit 44 predicts the processing load to be applied to the data storage device 2 by the data movement by the data moving unit 30. Note that the processing load may be predicted based on information on the processing load performance at the time of past data movement, or a preset processing load (for example, a CPU usage rate of 10%) is used as a predicted value. Also good.

  The processing load information acquisition unit 46 acquires information about the processing load on the data storage device 2. The processing load information acquisition unit 46 of this embodiment periodically acquires information about the processing load applied to the data storage device 2.

  The movement deletion control unit 48 controls the movement of data by the data movement unit 30 and the data return movement unit 32 and the data movement by the deletion unit 34 in order to perform two processes of data deletion, deletion plan and deletion execution. Control deletion. Here, the deletion plan refers to a process of moving data that is about to be deleted to the deletion planned data storage unit 22 and storing management information for deleting the data in the deletion management information storage unit 24. The deletion execution refers to a process of deleting data stored in the scheduled deletion data storage unit 22.

  The movement / deletion control unit 48 determines, for example, periodically whether or not the data stored in the data storage unit 20 should be moved to the scheduled deletion data storage unit 22 for the data at the latest scheduled deletion time. In the case of movement, the data movement unit 30 is notified to move the data. Specifically, the movement deletion control unit 48 is configured to delete the scheduled deletion data storage unit 22 when the period until the scheduled deletion time is within a predetermined period (for example, one week) with respect to the data at the latest scheduled deletion time. Control to move to. The movement deletion control unit 48 of the present embodiment is determined based on information provided by the movement time prediction unit 42, the processing load prediction unit 44, or the processing load information acquisition unit 46 within a predetermined period. Control is performed so that the data is moved to the scheduled deletion data storage unit 22 at the movement start time. The predetermined period may be stored as deletion management information.

  Further, when the scheduled deletion time of the data stored in the scheduled deletion data storage unit 22 is changed, the movement deletion control unit 48 causes the data return movement unit 32 to return the data to the data storage unit 20. Control.

  Further, the movement deletion control unit 48 controls the deletion unit 34 to delete the data stored in the planned deletion data storage unit 22 at the scheduled deletion time, and after the time when the deletion unit 34 performs the deletion, In order to prevent the deletion target data stored in the scheduled deletion data storage unit 22 from being referred to, the reference control unit 50 described later is notified to limit the reference.

  When the data return movement unit 32 moves the data, the movement deletion control unit 48 waits for the deletion by the deletion unit 34 until the data movement by the data return movement unit 32 is completed. As described above, when the data return moving process is performed, the deleting process by the deleting unit 34 is not started, and the conflict between the moving process to return the data stored in the scheduled deletion data storage unit 22 and the deleting process is performed. It is not necessary to perform the exclusive control required by.

  When receiving the notification from the movement deletion control unit 48, the reference control unit 50 controls to limit reference (access) to the data stored in the scheduled deletion data storage unit 22. As a result, the operation processing unit 28 cannot perform processing such as registration, search, update, and deletion on the data.

  FIG. 3 is a flowchart illustrating an operation of registering data in the data storage unit 20 in the data storage device 2.

  In step 100 (S100), the operation processing unit 28 receives a data registration request input via the UI unit 12. The input contents include, for example, information (ID) for identifying data, data contents, scheduled data deletion time (storage expiration), and the like. Note that, as information related to deletion, a scheduled deletion time may be registered, or a storage time limit may be registered instead of the scheduled deletion time. In the present embodiment, when a storage deadline is registered, data is deleted using the registered storage deadline as a scheduled deletion time.

  In step 102 (S102), the operation processing unit 28 stores the information received in step 100 in the data storage unit 20.

  In step 104 (S104), the operation process history recording unit 40 stores history information about the registration operation in the history storage unit 26.

  In step 106 (S106), the operation processing unit 28 displays the result of the registration operation on the UI unit 12. For example, the operation processing unit 28 displays information about whether or not the data registration is successful.

  FIG. 4 is a schematic diagram illustrating the states of the data storage unit 20 and the history storage unit 26 when the data “contract document A” is successfully registered. FIG. 4A illustrates the state of the data storage unit 20, and FIG. 4B illustrates the state of the history storage unit 26.

  As shown in FIG. 4A, data registered in the data storage unit 20 includes, for example, “name”, “document content”, “storing time limit”, “document type”, “contract expiration date”, and the like. Stored as a record for a table with attributes.

  As shown in FIG. 4B, in the history storage unit 26, the history information about the operation includes, for example, “operation date”, “operator”, “operation type”, “operation target”, “operation success / failure”, and the like. It is stored as a record for a table having the attribute of

  FIG. 5 is a flowchart illustrating the control operation by the movement deletion control unit 48 in the data storage device 2. Here, an example in which the movement deletion control unit 48 performs the deletion execution process and the deletion plan process at regular timing will be described. In the example shown in FIG. 5, the deletion execution process is first performed and then the deletion plan process is controlled. However, the deletion plan process may be performed and then the deletion execution process may be controlled. .

  In step 200 (S200), the movement deletion control unit 48 determines whether or not a predetermined period has elapsed and the processing timing has come. If the processing timing has come, the process moves to step 202. For example, the movement deletion control unit 48 receives a notification at 0:00 every day from a timer (not shown), and proceeds to step 202 at 0:00 every day.

  In step 202 (S202), as deletion execution processing, control is performed so as to perform processing for deleting data stored in the scheduled deletion data storage unit 22. Details of the deletion execution process will be described with reference to FIG.

  In step 204 (S204), as deletion plan processing, control is performed such that data that is about to be deleted is moved to the deletion planned data storage unit 22 and management information for deleting the data is stored in the deletion management information storage unit 24. To do. Details of the deletion plan process will be described with reference to FIG.

  FIG. 6 is a flowchart illustrating an operation in which the deletion plan process (step 204) is performed under the control of the movement deletion control unit 48.

  In step 300 (S300), the movement deletion control unit 48 determines whether or not a new deletion plan is necessary. When the data moved from the data storage unit 20 is stored in the planned deletion data storage unit 22, it is determined that a new deletion plan is unnecessary, and the data moved from the data storage unit 20 to the planned deletion data storage unit 22 Is not stored, it is determined that a new deletion plan is necessary.

  In the present embodiment, specifically, information stored in the deletion management information storage unit 24 is referred to as described later to determine whether a new deletion plan is necessary. In this embodiment, the information about the scheduled deletion date in the management information stored in the deletion management information storage unit 24 is deleted when the data moved from the data storage unit 20 is stored in the planned deletion data storage unit 22. Scheduled time is set. On the other hand, in a state where the data in the scheduled deletion data storage unit 22 has been deleted (waiting for new data to be moved), a Null value is set as information about the scheduled deletion date. The movement deletion control unit 48 determines whether or not the scheduled deletion date is set on the scheduled deletion date in the management information of the deletion management information storage unit 24.

  In step 302 (S302), the movement deletion control unit 48 acquires the latest scheduled deletion time among the scheduled deletion times (retention period) of the data stored in the data storage unit 20.

  In step 304 (S304), the movement deletion control unit 48 acquires the number of data set with the latest deletion scheduled time acquired in step 302 among the data stored in the data storage unit 20.

  In step 306 (S306), the movement deletion control unit 48 determines whether or not it is time to move to the deletion planned data storage unit 22 for the data for which the latest scheduled deletion time has been set. If it has, the process proceeds to step 308, and if it is not yet time to move, the process ends.

  Here, the movement deletion control unit 48 determines whether or not the period until the latest scheduled deletion time is within a predetermined period (for example, within one week), the movement time prediction unit 42, the processing load prediction unit 44, or It is determined whether or not the movement start time determined based on the information provided by the processing load information acquisition unit 46 has arrived. The period until the latest scheduled deletion time is within a predetermined period, and the movement time prediction When the movement start time determined based on the information provided by the unit 42, the processing load prediction unit 44, or the processing load information acquisition unit 46 has arrived, the process proceeds to step 308.

  The details of the movement start time determined based on the information provided by the movement time prediction unit 42, the processing load prediction unit 44, or the processing load information acquisition unit 46 will be described later.

  In step 308 (S308), the movement deletion control unit 48 sets the deletion management information, and stores the set information in the deletion management information storage unit 24. Specifically, for example, a dummy value is set as the setting information for the scheduled deletion date to indicate that the deletion planning process is being executed, and the current date and time information is set as the setting information for the planned start date. The number of data acquired in step 304 is set as the data number setting information. In the present embodiment, the movement history recording unit 36 stores history information indicating that movement is started in the history storage unit 26.

  In step 310 (S310), the movement deletion control unit 48 controls the data movement unit 30 to execute the movement process. Under the control of the movement deletion control unit 48, the data movement unit 30 converts the data stored in the data storage unit 20 to the data set with the latest scheduled deletion time acquired in step 302. The data is moved from 20 to the scheduled deletion data storage unit 22.

  In step 312 (S312), the movement deletion control unit 48 uses the latest deletion acquired in step 302 to indicate that the deletion management information stored in the deletion management information storage unit 24 has been deleted. The scheduled time is set as setting information for the scheduled deletion date (the dummy value in step 308 is rewritten to the value of the latest scheduled deletion date). Further, the current date / time information is set as the setting information for the planned completion date. In the present embodiment, the movement history recording unit 36 further records the ID of the moved data and the table name of the movement destination in the history storage unit 26 as the history information about the data movement.

  FIG. 7 is a schematic diagram illustrating the states before (a), during execution (b), and after (c) execution of the deletion plan process for the deletion management information storage unit 24. In the example shown in FIG. 7, as shown in FIG. 7B, “9999/1/1” is set as a dummy value to be set on the scheduled deletion date, and the deletion planning process is being executed. It shows that it is in a state. In FIG. 7, the date is set as information to be set for the scheduled deletion date, the plan start date, and the plan completion date, but time information may be included.

  In the flowchart of the deletion plan process, an example in which information provided by the movement time prediction unit 42, the processing load prediction unit 44, or the processing load information acquisition unit 46 is used in the determination of the data movement time in step 306 will be described. However, in step 304, the determination may be made only based on whether or not the period until the latest scheduled deletion time is within a predetermined period (for example, within one week). In this case, the step of acquiring the number of data (step 304) is not necessary. Also, setting information about the plan start date and the plan completion date is unnecessary.

  FIG. 8 shows a case in which, in step 306, when the movement time is determined only based on whether or not the period until the latest scheduled deletion time is within a predetermined period, the deletion plan process is executed (a). It is a schematic diagram which illustrates the state of the deletion management information storage part 24 inside (b) and after execution (c).

  FIG. 9 is a schematic diagram illustrating the state before (a) and after (b) execution of the deletion plan process for the data storage unit 20.

  FIG. 10 is a schematic diagram illustrating the states before (a) and after (b) execution of the deletion plan process for the deletion planned data storage unit 22.

  In the example shown in FIG. 9 and FIG. 10, the data “contract A” and “contract” among the data “contract A”, “contract B”, and “contract C” stored in the data storage unit 20. “Document B” has been moved to the scheduled deletion data storage unit 22. As shown in FIGS. 9 and 10, in the deletion schedule data storage unit 22, a table having the same schema as the table (table) in which the data “contract document A” and “contract document B” are registered in the data storage unit 20. (Table) is created, and data “contract document A” and “contract document B” are registered.

Next, the setting of the movement start time based on the information provided by the movement time prediction unit 42, the processing load prediction unit 44, or the processing load information acquisition unit 46 will be described.
FIG. 11 is a flowchart illustrating an example of the operation performed by the travel time prediction unit 42.

  In step 400 (S400), the movement time prediction unit 42 that has received an inquiry from the movement deletion control unit 48 in step 306 confirms whether or not there is a record of the movement time. If it does not exist, the process proceeds to step 404. Specifically, for example, the deletion management information storage unit 24 determines whether there is deletion management information in which information on the number of data, the plan start date, and the plan completion date is set. Check if it exists.

  In step 402 (S402), the movement time prediction unit 42 predicts the movement time of the data based on the number of data acquired in step 304 and notifies the movement deletion control unit 48 of the predicted movement time. Specifically, for example, the maximum value of travel time per number of data is calculated from past results (number of data, plan start date and plan completion date), and multiplied by the number of data acquired in step 304 above. Predict travel time.

  On the other hand, in step 404 (S404), the movement deletion control unit 48 is notified of a predetermined value as the set value of the movement time.

  The movement deletion control unit 48 determines the movement start time based on the movement time notified from the movement time prediction unit 42. For example, when the movement time notified from the movement time prediction unit 42 is T1, the date and time that is T1 before the scheduled deletion time of the data to be moved is determined as the movement start time. Of course, a predetermined margin time T2 may be set for T1, and the date and time that is T1 + T2 before the scheduled deletion time may be set as the movement start time.

  By determining the movement start time based on the predicted movement time in this way, a situation in which the data movement is not completed by the scheduled deletion time can be prevented. Further, when the scheduled deletion time of the data stored in the scheduled deletion data storage unit 22 is postponed, the data is returned to the data storage unit 20, but it is necessary by determining the movement start time based on the predicted movement time. Since it is prevented from being moved to the deletion schedule data storage unit 22 at an early stage as described above, the possibility of the return movement process when the scheduled deletion time is postponed is reduced.

  In addition, the movement deletion control unit 48 may determine the movement start time using the processing load prediction information from the processing load information acquisition unit 46.

  FIG. 12 is a schematic diagram illustrating an example of information about the processing load acquired by the processing load information acquisition unit 46. For example, the processing load information acquisition unit 46 periodically acquires normal time information (information of a time zone during which the deletion plan process is not executed), and stores the information illustrated in FIG. 12 in the deletion management information storage unit 24. deep. The movement deletion control unit 48 determines the movement start time based on the processing load information acquired by the processing load information acquisition unit 46, for example, so that the processing load does not become excessive.

  Specifically, for example, the movement deletion control unit 48 performs data movement in a time zone in which the maximum CPU usage rate does not exceed a predetermined value (for example, 90%). For example, the movement deletion control unit 48 determines the movement start time so that the maximum CPU usage rate does not exceed a predetermined value during the movement time predicted by the movement time prediction unit 42.

  In addition, for example, only a predetermined value (for example, 10%) is used even if the CPU usage rate is maximum due to data movement, and if a plurality of data movement processes are executed in parallel, CPU usage is directly proportional to the number of concurrent executions. In this case, the number of simultaneous executions may be increased as much as possible so that the maximum CPU usage rate is 100% or less including data movement processing. By executing the data movement process in parallel, the data movement time is shortened compared to the case where the data movement process is not executed in parallel.

  Further, the movement deletion control unit 48 may determine the movement start time using the processing load prediction information from the processing load prediction unit 44. For example, when the data movement is performed, the processing load prediction unit 44 acquires the CPU usage rate of the data movement process and stores it in the deletion management information storage unit 24. The processing load prediction unit 44 predicts the processing load when moving the data amount to be moved based on the acquired processing load information, and the movement deletion control unit 48 is predicted by the processing load prediction unit 44. The movement start time is determined using the processing load.

  By determining the movement start time based on the load information in this way, it is possible to reduce the hindrance to the execution of processes other than the deletion plan process.

  The movement deletion control unit 48 may determine the movement start time using all of the information provided by the movement time prediction unit 42, the processing load prediction unit 44, or the processing load information acquisition unit 46. The movement start time may be determined using the information.

  FIG. 13 is a flowchart illustrating an operation in which the deletion execution process (step 202) is performed under the control of the movement deletion control unit 48.

  In step 500 (S500), the movement deletion control unit 48 determines whether or not the scheduled deletion time of the data stored in the deletion scheduled data storage unit 22 has arrived. The process proceeds to step 502, and ends if not yet received. Specifically, for example, the scheduled deletion time stored in the deletion management information storage unit 24 is compared with the current date and time information to determine whether the scheduled deletion time has arrived.

  In step 502 (S502), the movement deletion control unit 48 determines whether or not the data stored in the scheduled deletion data storage unit 22 is being moved back by the data return moving unit 32, and is not moving back. In step 504, the process proceeds to step 504.

  In step 504 (S504), the movement deletion control unit 48 controls the deletion unit 34 to execute the deletion process, and notifies the reference control unit 50 to limit the reference. The deletion unit 34 collectively deletes the data stored in the scheduled deletion data storage unit 22 for each table under the control of the movement deletion control unit 48. For example, the deletion unit 34 deletes using the SQL sentence “TRUNCATE”. Thus, when deletion is performed by the deletion unit 34, reference is limited, and exclusive control is not required for data to be deleted.

  In step 506 (S506), the movement deletion control unit 48 uses the deletion management information for which deletion of data has been completed in order to indicate that the deletion management information stored in the deletion management information storage unit 24 has been deleted. The scheduled deletion date is a Null value. In this embodiment, the deletion history recording unit 38 further records the name of the table to be deleted as history information regarding data deletion.

Next, data update will be described.
FIG. 14 is a flowchart illustrating an operation when data is updated by the operation processing unit 28.

  In step 600 (S600), the operation processing unit 28 accepts a data update request input via the UI unit 12.

  In step 602 (S602), the operation processing unit 28 determines whether or not the received data update request requires a change in the scheduled deletion time (storing time limit) of the data. If a change is necessary, the process proceeds to step 604, and if a change in the scheduled deletion time (retention period) is not required, the process proceeds to step 610.

  In step 604 (S604), it is determined whether or not the scheduled deletion time (retention period) has been changed to a period before the scheduled deletion time (retention period) already set in the update target data. If it is not a forward change, the process proceeds to step 606. If it is a forward change, the process proceeds to step 612.

  In step 606 (S606), it is determined whether the data to be updated is data stored in the scheduled deletion data storage unit 22, and if the data is stored in the planned deletion data storage unit 22, If the data is stored in the data storage unit 20, the process proceeds to step 610.

  In step 608 (S608), the operation processing unit 28 notifies the movement deletion control unit 48 of the occurrence of an exception.

  In step 610 (S610), the operation processing unit 28 performs an update according to the data update request received in step 600. Upon receipt of the exception occurrence notification, the movement deletion control unit 48 controls the data return movement unit 32 to return the updated data from the deletion planned data storage unit 22 to the data storage unit 20. The data return moving unit 32 returns the data to be returned to the table of the movement source by the data moving unit 30.

  On the other hand, in step 612 (S612), the operation processing unit 28 performs control so as not to accept an update accompanying a change to a time before the scheduled deletion time (storing time limit) already set in the update target data.

  In step 614 (S614), the operation process history recording unit 40 stores history information about the update operation in the history storage unit 26.

  In step 616 (S616), the operation processing unit 28 displays the result of the update operation on the UI unit 12. For example, the operation processing unit 28 displays information about whether or not the data update is successful.

  In the flowchart shown above, in step 612, an update with a change to a time earlier than the scheduled deletion time (retention period) already set in the update target data is not accepted. If the target data is data stored in the data storage unit 20, the data update may be permitted and the process may proceed to step 610.

  Further, in the present embodiment, as illustrated in FIGS. 3 and 4, it has been described that a deletion time limit (storage time limit) can be set for data. However, a predetermined data attribute (for example, data registration date or The time when a predetermined storage period (for example, 5 years) has elapsed from the contract expiration date or the like may be used as the deletion deadline. In this case, for example, a predetermined storage period may be set for each type of data.

  FIG. 15 is a schematic diagram illustrating an example of information indicating a calculation rule for a scheduled deletion time stored in the deletion management information storage unit 24 when a calculation date and a retention period are determined for each data type.

  As described above, when the information indicating the calculation rule for the scheduled deletion time is stored, when there is an update that changes the calculation rule, an exception occurrence notification as shown in step 612 is performed. . Specifically, when the scheduled deletion time of the data stored in the data storage unit 20 is postponed due to the update of the information indicating the calculation rule for the scheduled deletion time, the operation processing unit 28 moves the movement deletion control unit. 48 is notified of the occurrence of the exception. The movement deletion control unit 48 that has received the notification controls the data return movement unit 32 to return the data.

  As described above, the data storage device 2 deletes data stored in the deletion schedule storage folder in a batch. For example, when deleting data that is scheduled to be deleted one by one or when the SQL statement “ The time required for the deletion process is shortened compared to the case where a record that satisfies the conditions for the scheduled deletion time is extracted by DELETE etc., and the time required for the deletion process is reduced. It is suppressed that a difference arises with the time when it becomes unavailable.

  Further, when the search target data is stored separately in a plurality of storage areas (tables), it takes time to search compared to the case where the data is stored in one storage area (table). However, in the data storage device 2, until the movement is controlled by the movement deletion control unit 48, only the data stored in the data storage unit 20 needs to be searched, and the degradation in search performance can be suppressed.

  Next, a second embodiment of the present invention will be described. In the first embodiment, the content of data (for example, the content of a document) is stored in the data storage device 2, but in the second embodiment, the content of the data is stored in the file storage server 64, The data storage device 62 stores information (path information) indicating the storage location of the data contents.

  FIG. 16 is a schematic diagram showing a data storage system 60 according to the second embodiment of the present invention. As shown in FIG. 16, in a data storage system 60, a data storage device 62 and a file storage server 64 for storing data files are connected via a communication line 66 including the Internet.

  The data storage device 62 is the same as the data storage device 2 of the first embodiment. However, the data storage device 62 is, for example, instead of the attribute “document content” shown in FIGS. This is different from the first embodiment in that path information indicating the position of the document content stored in the file storage server 64 is stored. In this case, the path information is deleted by the deletion unit 34 and the data cannot be used.

  The file storage server 64 stores the content of the encrypted data, and the data storage device 62 stores information indicating the storage location of the encrypted data content and information used for decrypting the data content ( For example, a pair with key information) may be stored.

  FIG. 17 shows an example of information stored in the data storage unit 20 when the data storage device 62 stores a pair of information indicating the storage location of the encrypted data content and information used for decryption. It is a schematic diagram.

  As shown in FIG. 17, storage location information and decryption key information are stored for each data. When the data is moved to the scheduled deletion data storage unit 22, the deletion planned data storage unit 22 stores the data in a table having the same schema as the table shown in FIG.

  In the data storage device 62, even if the deletion unit 34 deletes the data stored in the scheduled deletion data storage unit 22, the data contents are not deleted because they are stored in the file storage server 64. However, when the data content stored in the file storage server 64 is encrypted as described above, the decryption key information is deleted by the deletion unit 34 and the data cannot be decrypted. Note that, among the data contents stored in the file storage server 64, the data storage device 62 may be configured to delete data for which the storage location information is deleted.

2: Data storage device 20: Data storage unit 22: Scheduled data storage unit 24: Deletion management information storage unit 26: History storage unit 28: Operation processing unit 30: Data movement unit 32: Data return movement unit 34: Deletion unit 36 : Movement history recording unit 38: deletion history recording unit 40: operation processing history recording unit 42: movement time prediction unit 44: processing load prediction unit 46: processing load information acquisition unit 48: movement deletion control unit 50: reference control unit 60: Data storage system 62: Data storage device 64: File storage server

Claims (13)

First storage means for storing at least one or more data;
Of the data stored in the first storage means, moving means for moving at least one data whose period until the scheduled deletion time is within a predetermined period;
Second storage means for storing at least one or more data moved by the moving means;
A data storage device comprising: deletion means for deleting at least one or more pieces of data stored in the second storage means collectively at a scheduled deletion time. The data storage device according to claim 1, further comprising a movement history recording unit that records a movement history of the movement unit. The data storage device according to claim 1, further comprising: a deletion history recording unit that records a history of deletion by the deletion unit. The reference control means for controlling to reject the reference of the data after the time when the deletion means deletes at least one or more data stored in the second storage means. Any one of the data storage devices. A time predicting means for predicting a time required for data movement by the moving means;
The data storage device according to any one of claims 1 to 4, wherein the movement unit determines a data movement start time based on the time predicted by the time prediction unit. Processing load prediction means for predicting the processing load due to data movement by the movement means,
The data storage device according to claim 1, wherein the moving unit determines a data movement start time based on the processing load predicted by the processing load prediction unit. It further has processing load information acquisition means for acquiring information about the processing load applied to its own device,
The data storage device according to any one of claims 1 to 6, wherein the movement unit determines a data movement start time based on information on the processing load acquired by the processing load information acquisition unit. Return movement means for performing movement to return data in which the scheduled deletion time is changed among at least one data stored in the second storage means so as to be stored in the first storage means The data storage device according to claim 1. There is further provided a return movement means for performing a movement to return the data whose scheduled deletion time has been changed among the at least one data stored by the second storage means to be stored by the first storage means. And
The data storage device according to claim 4, wherein when the data is moved by the return movement unit, the deletion unit waits for deletion until the data movement by the return movement unit is completed. First storage means for storing information indicating a storage location of the data for at least one or more data;
Of the information indicating the storage location of the data stored in the first storage means, moving means for moving information whose period until the scheduled deletion time of the data is within a predetermined period;
Second storage means for storing information indicating a storage location of at least one or more data moved by the moving means;
A data storage device comprising: deletion means for collectively deleting information indicating a storage location of at least one or more data stored by the second storage means at a scheduled deletion time. The first storage means stores, for at least one or more encrypted data, information indicating a storage location of the data and a set of information used for decrypting the data;
The moving means has a predetermined period of time until the scheduled deletion time of the data, out of a set of information indicating the data storage location and information used for decoding the data stored in the first storage means Move a set of information within,
The second storage means stores at least one set of information moved by the moving means,
The data storage device according to claim 10, wherein the deleting unit collectively deletes at least one set of information stored by the second storage unit at a scheduled deletion time. A first storing step for storing at least one or more data;
A moving step of moving at least one or more of the data stored in the first storing step within a predetermined period of time until the scheduled deletion time;
A second storing step for storing at least one or more data moved by the moving step;
A program for causing a computer to execute a deletion step of deleting at least one or more pieces of data stored in the second storage step at a scheduled deletion time. A first storage step for storing, for at least one or more data, information indicating a storage location of the data;
A moving step of moving the information indicating the storage location of the data stored in the first storage step, the information being within a predetermined period until the scheduled deletion time of the data;
A second storing step for storing information indicating a storage location of at least one or more data moved by the moving step;
A program for causing a computer to execute a deletion step of deleting information indicating a storage location of at least one or more data stored in the second storage step at a scheduled deletion time.

Images