JP2014229113A - Job management system and access control method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a job management system and an access control method for allowing access control for every process and improving accuracy of preventing a wrong operation, a wrong instruction, wrong selection of data, etc.SOLUTION: A job management server JS displays jobs shown by job information associated with user information showing a logged-in operation user on a client terminal Tm of the operation user, and issues access authentication keys for accessing a job folder of a job selected by the operation user among the displayed jobs and unique to every process and every job. Then, the client terminal Tm acquires the issued access authentication keys, accesses the job folder by using the access authentication keys, and executes data processing to data stored in the job folder.

Description

  The present invention relates to a technical field such as a job management system that manages, as a job, a work performed by a user who performs work for executing data processing distinguished for each of a series of a plurality of processes.

  Conventionally, a system disclosed in Patent Literature 1 is known as a job management system. In this job management system, the operation access authority of the job management system is defined as operation procedure data describing the operation period, user name, target job, authority level, permission command, and operation purpose. Operation IDs assigned at the time of review and approval of procedure data are managed in association with each other, and operations of the job management system are permitted only with the operation authority described in the operation procedure data associated with the operation ID specified at the time of operation. It is like that.

JP 2009-59293 A

  By the way, in Patent Document 1, although it is possible to prevent an operation other than an erroneous operation or an instruction by allowing an operation only with an access authority with an expiration date described in the operation procedure data, a series of a plurality of steps Access control is not performed for each process in the operation for executing the data processing distinguished for each process.

  Therefore, an object of the present invention is to provide a job management system and an access control method that enable access control for each process and improve accuracy to prevent erroneous operations, erroneous instructions, erroneous selection of data, and the like. One.

  In order to solve the above-mentioned problem, the invention described in claim 1 is a job management system for managing a work performed by a user who performs a work for executing a data process distinguished for each of a series of processes as a job. The server included in the job management system includes job information indicating the job, folder information indicating a job folder for storing data handled by the job, and a user indicating a user permitted to the job Job information storage means for storing information in association with each process and for each job, and a job indicated by the job information associated with the user information of the user on the terminal of the user permitted to the job Display control means for displaying the job information of the job selected by the user among the displayed jobs. Access key issuing means for issuing a unique access key for each process, which is an access key for accessing the job folder indicated by the folder information associated with the folder, and the terminal is issued by the server Access key acquisition means for acquiring the access key, and execution means for accessing the job folder using the access key and executing the data processing on the data stored in the job folder. Features.

  According to a second aspect of the present invention, in the job management system according to the first aspect, the server is configured to store the data subjected to the data processing in different job folders according to the execution result of the data processing. Control means for storing data in a job folder for storing data handled in a job in the next process is further provided.

  The invention according to claim 3 is an access control method in a job management system for managing a work by a user who performs a work for executing a data process distinguished for each of a series of a plurality of processes as a job, the server Job information indicating the job, folder information indicating a job folder for storing data handled by the job, and user information indicating a user permitted to the job for each process and each job. Storing in association with each other; causing the server to display a job indicated by the job information associated with the user information of the user on a terminal of a user permitted to the job; and Of the displayed jobs, the job information associated with the job information of the job selected by the user Issuing an access key that is an access key for accessing the job folder indicated by the folder information and is different for each process; the terminal obtaining an access key issued by the server; and And accessing the job folder using the access key and executing the data processing on the data stored in the job folder.

  According to the present invention, it is possible to perform access control for each process, and it is possible to improve the accuracy of preventing erroneous operations, erroneous instructions, erroneous selection of data, and the like.

It is a figure showing an example of outline composition of job management system S concerning this embodiment. It is a conceptual diagram which shows the relationship between each process in the job management system S, and the job folder of each job. It is a figure which shows the flow of a process in the job management system S which concerns on this embodiment.

  Hereinafter, an embodiment of a job management system of the present invention will be described in detail with reference to the drawings. The job management system according to the present invention is a job management system that manages a work performed by a user (hereinafter referred to as “working user”) who performs a work for executing a data process distinguished for each of a series of processes as a job. is there.

[1. Outline configuration of job management system S]
First, a schematic configuration of the job management system S according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram illustrating a schematic configuration example of a job management system S according to the present embodiment. As shown in FIG. 1, the job management system S according to the present embodiment includes a job management server JS, a data server DSn (n = 1, 2, 3,...), And the like. The job management server JS and the data server DSn are connected to the network NW. The network NW is configured by a LAN (Local Area Network), for example. Further, the client terminal Tm (m = 1, 2, 3,...) Can access the job management server JS and the data server DSn via the network NW. For example, a personal computer can be applied to the client terminal Tm.

  As shown in FIG. 1, the job management server JS is connected to a storage unit 1 composed of a hard disk or the like, a control unit 2 composed of a CPU, RAM, ROM, and the like, and a data server DSn connected to a network NW. And a communication unit 3 for communicating with the client terminal Tm. The storage unit 1 stores an operating system and application programs.

  The storage unit 1 stores a work user information management table, a job information management table (an example of job information storage means), and a folder access information management table. In the work user information management table, user information indicating work users in the job management system S is registered in association with each work user. The user information is information unique to each work user (information that the work user can know), for example, the user name and password of the work user. The user name and password of the work user are used for the work user to log in to the client terminal Tm and log in to the job management system S.

  The job information management table includes job information indicating a job, folder information indicating a job folder for storing data handled by the job, and user information indicating a work user who is permitted (for example, permitted by the administrator) of the job. Are registered in association with each job. Here, the job information is information unique to each job, for example, a job name. The folder information is information unique to each job folder, for example, a folder name and a path (storage location). Such a job information management table is provided for each process, for example. In the present embodiment, a single process includes a plurality of jobs, and a job folder is prepared for each job.

  In the folder access information management table, folder information indicating a job folder and an access authentication key (an example of an access key) for accessing the job folder are registered in association with each process and each job folder. This access authentication key is private information to the work user (that is, the server account is not issued directly to the work user). The access authentication key is a unique key for each process and for each job folder (that is, a one-time key in one process), and is calculated using a random number, for example. As a result, access management can be performed dynamically for each process and for each job folder, and access control is performed such that a specific work user can access only a specific job folder as the job progresses. be able to.

  The control unit 2 executes an application program, thereby enabling a work user management unit 21, a job management unit 22, a folder access management unit 23, a display control unit 24 (an example of display control means in the present invention), an access authentication key issuing unit. 25 (an example of an access key issuing unit in the present invention), a next process determination unit 26, a data movement control unit 27 (an example of a control unit in the present invention), and the like.

  The work user management unit 21 manages user information indicating a work user using the work user information management table. The job management unit 22 uses the job information management table to manage user information indicating a work user who is permitted to use a job. The job management unit 22 can control the job folder accessible to the work user by changing the permitted work user as needed according to the progress of the job. The folder access management unit 23 manages the access authentication key and the like described above using the folder access information management table.

  The display control unit 24 displays the job (for example, job name) indicated by the job information associated with the user information indicating the working user on the client terminal Tm of the working user who is permitted to perform the job.

  The access authentication key issuing unit 25 accesses to access the job folder of the job selected by the work user among the displayed jobs (that is, the job folder indicated by the folder information associated with the job information indicating the job). Issue an authentication key.

  When the next process determination unit 26 performs data processing on the data stored in the job folder of the job in the current process, the next process determination unit 26 determines the job folder of which job in the next process as the target of the data processing. It is determined whether to move (transfer) to (that is, a job folder for storing data handled by a job in the next process). The movement destination (job folder in the next process) of the data subjected to data processing in the current process differs depending on the execution result of the data process. Such data processing is executed, for example, by the client terminal Tm in which client software is installed. In this case, the client terminal Tm acquires the access authentication key issued by the access authentication key issuing unit 25, accesses the job folder using the access authentication key, and stores data for the data stored in the job folder. Execute the process. Examples of the data processing include data registration, data editing, data inspection, data output, data encryption, and data decryption.

  The data movement control unit 27 stores (moves) the data subjected to the data processing in the job folder determined by the next process determination unit 26.

  The data server DSn is provided for each process, for example. The data server DSn holds job folders for jobs in the corresponding processes.

  FIG. 2 is a conceptual diagram showing the relationship between each process in the job management system S and the job folder of each job. In the example of FIG. 2, the job folder 1-1 to 1-3 of the job in step 1 is held in the data server DS1, and the job folder 2-1 to 2-3 of the job in step 2 is held in the data server DS2. The data server DS3 holds job folders 3-1 to 3-3 for the job in step 3. In the example of FIG. 2, in step 1, the client terminal T1 operated by the work user A can access the job folder 1-1, and the client terminal T2 operated by the work user B can access the job folder 1-2. The client terminal T3 operated by the work user C can access the job folder 1-3. On the other hand, in step 2, the client terminal T4 operated by the work user D can access the job folder 2-1, and the client terminal T5 operated by the work user E can access the job folder 2-3. . Then, the data subjected to data processing in the job in step 1 is transferred (moved) to the job folder of the job in step 2 (that is, the job folder determined by the next step determination unit 26). The data subject to data processing in the job in is transferred to the job folder of the job in step 3.

[2. Operation of job management system S]
Next, the operation of the job management system S according to the present embodiment will be described with reference to FIG. FIG. 3 is a diagram showing a flow of processing in the job management system S according to the present embodiment. As a premise of this operation, for example, the administrator of the job management system S can determine which work user can access which job folder in which process (process design), for example, on the administrator terminal connected to the job management server JS. Perform on the display screen. Thereby, as described above, for each job in each process, folder information indicating the job folder of the job, user information indicating the work user who is permitted to use the job, and the like are registered in the job information management table.

  In the job management system S, the job management server JS starts the process N (initially N = 1) (step S1). Next, for example, the working user A logs in to the client terminal T1 in which the client software is installed using his / her user name and password (step S2). Next, the client terminal T1 makes a login request to the system (job management system S) to the job management server JS according to the instruction of the work user A (step S3).

  Next, in response to the login request from the client terminal T1, the job management server JS performs an authentication process for the work user and the client terminal T1 using the user name and password of the work user A (step S4). Thereby, when the work user A and the client terminal T1 are authenticated, the work user is logged in to the system, and the client software of the client terminal T1 is activated. Then, the client software of the client terminal T1 sends a job request for the logged-in work user A to the job management server JS (step S5).

  Next, the job management server JS refers to the job information management table in response to the job request from the client terminal T1, and searches for a job permitted to the working user A among the jobs in step 1 (step S6). Next, the job management server JS sends the searched job (that is, the job indicated by the job information associated with the user information indicating the working user A) to the client terminal T1 of the working user A who is permitted the searched job. The job name is displayed (step S7). Next, the working user A selects one job name from the job names displayed on the display screen by the client software of the client terminal T1 (operates and selects the client terminal T1) (step S8). Next, the client software of the client terminal T1 issues a job folder (job job folder) path and an access authentication key issuance request associated with the job indicated by the job name selected by the work user A to the job management server JS. Perform (step S9).

  Next, the job management server JS issues an access authentication key (for example, a one-time key in step 1) for accessing the job folder of the job selected by the work user A in response to an issue request from the client terminal T1. (Step S10). Next, the client software of the client terminal T1 acquires the job folder path of the job selected by the work user A and the issued access authentication key (step S11). Next, the client software of the client terminal T1 uses the acquired access authentication key to hold a job management server JS or an access request (including the access authentication key) to the job folder specified by the acquired path. For example, it is performed for the data server DS1 (step S12).

  Next, in response to the access request from the client terminal T1, the job management server JS or the data server DS1 performs an access authentication process using the access authentication key included in the access request (step S13). In this access authentication process, for example, it is determined whether or not the access authentication key included in the access request matches the access authentication key issued in step S10. Thus, when access authentication is performed, the client software of the client terminal T1 accesses the job folder specified by the path acquired in step S11 and opens the job folder (step S14). Thus, the work user A performs work on the opened job folder (step S15). In other words, the work user A issues a data processing instruction (for example, an instruction for data registration, data operation, processing, inspection, etc.) for data stored in the opened job folder. In response to this instruction, the client software of the client terminal T1 executes data processing on the data stored in the job folder (step S16). Then, when the work user A inputs the job end status (inputs by operating the client terminal T1) (step S17), the client software of the client terminal T1 sends the job end request selected in step 1 to the job management server. This is performed for JS (step S18).

  Next, in response to the job end request, the job management server JS performs the end registration of the job and executes the next process determination process (step S19). In this next process determination process, for example, the data subjected to the data process executed in the job in the process 1 is moved (transferred) to which job folder in the process 2 in accordance with the execution result of the data process. Is determined. For example, the job folder of the job in step 2 includes a normal processing folder and an error processing folder. If the data can be processed normally in the data processing, it is determined to move to the normal processing folder. On the other hand, if the data cannot be processed normally, it is determined to move to the error processing folder. For example, a work user D (for example, a work user other than the administrator) can access the normal processing folder, and a work user E (for example, only an administrator) can access the error processing folder, for example. It has become.

  Next, the job management server JS moves the data subjected to the data processing executed in the job in step 1 to the job folder determined in the next step determination processing (step S20). Then, the job management server JS shifts to the next process (N is incremented by 1) (step S21), and starts the next process (for example, process 2) (step S1). Thus, in the next step (for example, step 2), for example, the working user D logs in to the client terminal T4 in which the client software is installed using his / her user name and password (step S2), and the client terminal T4 In accordance with the instruction from the work user D, a login request to the system is made to the job management server JS (step S3). Then, the processing after step S4 is performed in the same manner as described above.

  As described above, according to the embodiment, the job management server JS displays the job indicated by the job information associated with the user information indicating the working user on the client terminal Tm of the logged-in working user, An access authentication key for accessing the job folder of the job selected by the work user from among the displayed jobs, which is issued for each process and for each job. The client terminal Tm is issued The access authentication key is obtained, and using the access authentication key, the job folder is accessed and the data processing is executed on the data stored in the job folder. And improve accuracy to prevent erroneous operations, erroneous instructions, incorrect data selection, etc. That. For example, when the data to be processed is plate-making data such as a book, and the plate-making data has a plurality of updated versions, erroneous selection of the plate-making data to be processed is efficiently prevented. be able to.

JS Job management server DSn Data server Tm Client terminal S Job management system

Claims (3)

A job management system that manages the work by a user who performs work for executing data processing distinguished for each of a plurality of series of processes as a job,
The server provided in the job management system includes:
Job information indicating the job, folder information indicating a job folder for storing data handled by the job, and user information indicating a user permitted to the job are associated with each process and each job. Job information storage means for storing
Display control means for displaying a job indicated by the job information associated with the user information of the user on a terminal of the user permitted to the job;
An access key for accessing the job folder indicated by the folder information associated with the job information of the job selected by the user among the displayed jobs, and issuing a unique access key for each process An access key issuing means,
With
The terminal
Access key acquisition means for acquiring an access key issued by the server;
Execution means for accessing the job folder using the access key and executing the data processing on the data stored in the job folder;
A job management system comprising:   The server is configured to store the data subjected to the data processing in a job folder for storing data handled in a job in a next process, which is different depending on an execution result of the data processing. The job management system according to claim 1, further comprising means. An access control method in a job management system for managing a work performed by a user who performs a work for executing a data process distinguished for each of a plurality of series of processes as a job,
The server includes job information indicating the job, folder information indicating a job folder for storing data handled by the job, and user information indicating a user permitted to the job for each process and each job. Storing in association with
The server displaying a job indicated by the job information associated with the user information of the user on a terminal of the user permitted to the job;
The server is an access key for accessing the job folder indicated by the folder information associated with the job information of the job selected by the user among the displayed jobs, and the access is different for each process. Issuing a key;
The terminal obtaining an access key issued by the server;
The terminal accessing the job folder using the access key and executing the data processing on the data stored in the job folder;
An access control method comprising: