JP2015203919A - information processing apparatus, information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem in which: in paint-out processing of deleting confidential information, the presence of non-display layers, non-display notes, and unsearchable characters may cause overlooking of the confidential information.SOLUTION: An information processing apparatus includes paint-out processing means for painting out an object at a position overlapped with a set area, and changing means for changing the area painted out by the paint-out processing means according to the attribute of the object and the level set to the object.

Description

  The present invention relates to an information processing apparatus, an information processing method, and a program for processing information included in a document.

  Conventionally, in order to prevent leakage of confidential information in a document, there is a method of printing by replacing a character corresponding to confidential information with another character such as X during printing, which is disclosed in Patent Document 1. The character string transposition processing unit of the form creation system of Patent Document 1 generates data in which character strings in a form are arranged separately when performing test printing or the like. Alternatively, data replaced with another character such as X is generated. After that, the generated data is stored in the spool area and printed to retain confidential information.

JP 2012-203483 A

  However, the character string transposition processing unit of Patent Document 1 cannot cope with secrets other than characters such as images. In addition, there is a possibility of being overlooked when there is similar confidential information other than the place set by itself. The possibility of oversight increases especially in a document in which a hidden layer and a hidden annotation can be set.

  The information processing apparatus according to the present invention includes a redaction processing unit that redacts an object that overlaps a set area, and the redaction processing unit according to an attribute of the object and a level set for the object. And changing means for changing the redone region.

  According to the present invention, confidential information that has been overlooked outside the area set by the user is corrected, and even in a document with a large number of pages or objects, checking and correcting the confidential area according to the confidentiality level in a short time without any trouble. Can be performed.

It is a block diagram which shows the hardware constitutions of this embodiment. It is a flowchart of the process which the redaction process part 7 and the redaction area check part 8 perform. It is explanatory drawing explaining the process of this embodiment. It is explanatory drawing explaining the process of the redaction area | region check part. It is a flowchart of the process which the redaction area | region check part 8 performs. It is a flowchart of the process which the redaction area | region check part 8 performs. It is a flowchart of the process which the redaction area | region check part 8 performs. It is a flowchart of the process which the redaction area | region check part 8 performs. It is a flowchart of the process which the redaction area | region check part 8 performs. It is a flowchart of the process which the redaction area | region check part 8 performs. It is explanatory drawing explaining the process of this embodiment. It is a flowchart of the process which the redaction area | region check part 8 performs.

[Embodiment 1]
The best mode for carrying out the present invention will be described below with reference to the drawings.

  FIG. 1 shows the hardware configuration of the information processing apparatus according to this embodiment. 1 is a CPU, 2 is a keyboard for data input, 3 is a display for displaying a document image, 4 is a hard disk for storing the document, and 5 is a ROM for previously storing a program for controlling the apparatus and necessary information. Reference numeral 6 denotes a RAM used as various work areas, and reference numeral 7 denotes a redaction processing unit that deletes all data in the set area. Reference numeral 8 denotes a redaction area check unit which is a feature of the present invention. A data bus 9 transfers various data.

  Hereinafter, processing executed by the CPU 1 using a program stored in the ROM 5 will be described.

  Specifically, the operation of the redaction processing unit 7 and the redaction area check unit 8 in FIG. 1 in the process of deleting confidential data from the document will be described in detail.

  FIG. 2 is a flowchart illustrating an example of a processing procedure for deleting confidential data in the electronic document control apparatus (information processing apparatus) according to the present exemplary embodiment. FIG. 3 is an explanatory diagram for explaining the present embodiment.

  In step S201, the user is allowed to set a redaction area. Reference numeral 301 in FIG. 3A denotes an operation screen of the electronic document control apparatus of the present embodiment displayed on the display 3. The document 302 includes an image 303 and a character string 304. When the setting button 305 is clicked, a blackout area setting mode is entered, and the user sets a blackout area to delete which area of data on the document 302 is to be deleted with the mouse. The redaction areas 307 and 308 in FIG. 3B indicate the redaction areas set by the user.

  Next, in step S202, a secure level is set. Allow the user to set a secure level by displaying a dialog. Alternatively, a secure level may be set in advance, or a fixed secure level may be used. In this embodiment, the secure level can be set from 1 to 3. Level 1 leaves data as much as possible to improve the readability of the user and keep the minimum confidentiality. Level 3 deletes all relevant data so that it can be kept as confidential as possible. Examples of operation contents at each level for OBJ and non-display attributes are as shown in the table of FIG. Although the attributes in the four cases are described here, a table OBJ, a path drawing OBJ, and the like may be defined. Levels 1 to 3 are also shown, but it may be less or more.

  Next, in step S203, it is determined whether the redaction secure check button 312 has been pressed. If the redone secure check button 312 in FIG. 3C has been pressed by the user, the process proceeds to step 204. If not, the process proceeds to step S214. In step S214, if the redaction execution button 306 is pressed, the process proceeds to step S213, and the redaction process is executed. If not, the process returns to step 203 and continues to wait until the user presses the button. In step S204, the secure level is confirmed, the secure level value is held in the RAM 6, and the process proceeds to step S205.

  In step S205, one object (hereinafter referred to as OBJ) that overlaps the redaction area is extracted. It can be easily determined that the redaction area 307 in FIG. 3B overlaps with the image 303 from the positional relationship. Similarly, the redaction area 308 overlaps the character string 304. When all the OBJs are extracted, the process proceeds to step S206.

  In step S206, one OBJ is extracted to determine whether it is an image. If it is an image, the process proceeds to step S217. If it is not an image, the process proceeds to step S207. In step S217, an area expansion process corresponding to the secure level is performed on the image. Details of the processing will be described with reference to the flowchart of FIG.

  In step S501, the process is changed depending on the number of secure levels confirmed and stored in step S204. In the case of level 1, the process proceeds to step S505. In the case of level 2, the process proceeds to step S502. Similarly, in the case of level 3, the process proceeds to step S508. The definition of processing at each level is as shown in the table of FIG. In this embodiment, the level is set to 1 to 3, but it may be less or more than this.

In step S505, the ratio of the area of the redaction region to the total area of the image is calculated. For example, assume that the image 303 in FIG. 3 has a length of 15 cm and a width of 20 cm. If the vertical area of the redaction area 307 is 2 cm and the width is 6 cm, the ratio to be calculated is
(Ratio) = (area of the redaction area) ÷ (area of the entire image)
= (2 × 6) ÷ (15 × 20) = 0.04
It becomes. If the calculation is completed, the process proceeds to step S506.

In step S506, the ratio obtained in step S505 is compared with a preset threshold value 0.1. When (ratio) <(threshold) holds, the process proceeds to step S507. If it does not hold, the image erasing area expansion process is terminated and the process proceeds to step S210. In this example,
Ratio = 0.04 <threshold value 0.2
Since the conditional expression is satisfied, the process proceeds to step S507. In step S507, the area is enlarged by 30% in the vertical and horizontal directions. Since the length of the redaction area 307 is 2 cm, it is expanded in the vertical direction by 0.6 cm, which is 30% of the length. Similarly, since the width is 6 cm, it is expanded to the left and right by 1.8 cm, which is 30%.

  Accordingly, in the redaction region 307, the upper left point rises 0.6 cm upward and moves 1.8 cm to the left. Similarly, the upper right point rises 0.6 cm upward and moves 1.8 cm to the right. The lower left point drops 0.6 cm down and moves 1.8 cm to the left. The lower right point drops 0.6 cm down and moves 1.8 cm to the right. As a result, the redaction area 307 extends over a rectangular area of 2 + 0.6 × 2 = 3.2 cm in length and 6 + 1.8 × 2 = 9.6 cm in width. When the area enlargement process is completed, the image redaction area expansion process is terminated, and the process proceeds to step S210.

  If it is level 2 in step S501, the process proceeds to step S502 to perform face area recognition and character area recognition processing in the image. Any general method may be used as the face region recognition method and the character region recognition method. If the area can be recognized, the process proceeds to step S503.

  In step S503, it is determined whether the redaction area overlaps the face area and the character area.

  If they overlap, the process proceeds to step S504. If they do not overlap, the image redaction area expansion process ends and the process proceeds to step S210. In step S504, the redaction area is made the same as the face area and the character area.

  In the example of FIG. 3C, the redaction area 307 is expanded to be the same as the face area 310. This completes the image redaction region expansion processing and proceeds to step S210.

  If it is level 3 in step S501, the process proceeds to step S508, and the redaction region is made the same as the entire image. In the example of FIG. 3, the redaction area 307 is expanded to the same size as the image 303. This completes the image redaction region expansion processing and proceeds to step S210.

  Step S207 in the flowchart of FIG. 2 will be described. In step S207, it is determined whether the extracted OBJ is a text OBJ. If it is a text OBJ, the process proceeds to step S215. Otherwise, the process proceeds to step S208. The redaction area expansion process according to the secure level of the text OBJ in step S215 will be described in detail with reference to the flowchart of FIG.

  In step S601, the process is changed depending on the number of secure levels confirmed and stored in step S204. If it is level 3, the process proceeds to step S602. Otherwise, the process of erasing the text is terminated and the process proceeds to step S210.

  In step S602, it is determined whether or not there is Unicode conversion information. When the document is a PDF, it is possible to embed a font, but it has only information on characters used to reduce the file size, and character identification is performed by CID (character ID). In the case of a search, a character is specified based on conversion information between CID and Unicode. However, since the Unicode conversion information is not essential information, it is not necessarily included in the document. Therefore, the process is changed depending on whether or not the Unicode information is present. When it has Unicode information, it progresses to step S607. If not, the process proceeds to step S603.

  In step S603, the CID information of characters in the area is extracted. For example, since the redaction area 308 in FIG. 3 overlaps the four characters “Taro Yamada” in the character string 304, the four-character CID is extracted. 14a3-23e3-12b4-347b.

  In step S604, the CID information of the character area of the same font as the character extracted in step S603 in the page is extracted. In step S605, the same character string is extracted by comparing the CID of characters in the redaction area extracted in step S603 with the CID information of characters in the entire page.

  Next, step S607 will be described. If it is determined in step S602 that there is Unicode conversion information, the process advances to step S607 to extract Unicode information of characters in the area. In the example of FIG. 3A, the Unicode information of “Taro Yamada” in the character string 304 that overlaps the redaction area 308 is extracted.

  In step S608, all the Unicodes in the character area in the page are extracted, and in step S609, characters having the same Unicode are extracted from the character area. In the example of FIG. 3B, the character string “Taro Yamada” 309 is newly extracted. Next, the process proceeds to step S606.

  In step S604, only the CID information that depends on the font can be found, so only the characters of the same font can be searched. However, if there is Unicode information, it can be searched from all the characters without depending on the font, and the redaction extension process is further effective. Become.

  The same area as the character string extracted in step S606 is additionally set as a redaction area. The additional setting process will be described in detail with reference to the flowchart of FIG. In step S701, it is determined whether or not the OBJ area to be newly added as the redaction area is in the non-display area. If it belongs to the non-display area, the process proceeds to step S702. If it is a display area, the process proceeds to step S705.

  In step S702, it is determined whether the annotation is a hidden annotation. If it is a non-display annotation, the process proceeds to step S703. Otherwise, it is determined as a non-display layer, and the process proceeds to step S704. Here, two non-display attributes are described, but more or less may be used.

  In step S703, a hidden annotation expansion process is performed. Processing will be described with reference to the flowchart of FIG. In step S1201, the level confirmed in step S204 is confirmed, and the process is changed accordingly. If it is level 1-2, the process proceeds to step S1202, and if it is level 3, the process proceeds to step S1203.

  In step S1202, an OBJ area is additionally set as a redaction area. FIGS. 3D and 3E show that the same character string 314 as the character string “Taro Yamada” that overlaps the redaction area 308 exists in the hidden annotation 313, and the area occupied by the character string 314 is newly added. It has shown that it added as the redaction area | region 315. This completes the hidden annotation expansion process, and the process advances to step S706.

  In step S1203, the entire hidden annotation is set as a redaction area. In the example of FIG. 3D, the entire hidden annotation 313 is newly set as a redaction area. That is, the entire annotation 313 is deleted when the redaction process is executed. This completes the hidden annotation expansion process, and the process advances to step S706.

  Next, the non-display layer expansion process in step S704 will be described with reference to the flowchart of FIG. In step S801, the level confirmed in step S204 is confirmed, and the process is changed accordingly. If it is level 1-2, the process proceeds to step S802, and if it is level 3, the process proceeds to step S803.

  In step S802, an OBJ area is additionally set as a redaction area. FIGS. 3 (f) and 3 (g) show that the same character string 317 as the character string “Taro Yamada” that overlaps the redaction area 308 exists in the non-display layer 316, and the area occupied by the character string 317 is newly added. It has shown that it added as the redaction area | region 318. This completes the non-display layer expansion process and proceeds to step S706.

  In step S803, the entire non-display layer is set as a redaction area. In the example of FIG. 3F, the entire non-display layer 316 is newly set as a redaction area. That is, the entire layer 316 is deleted when the redaction process is executed. This completes the non-display layer expansion process and proceeds to step S706.

  Next, the process of step S705 will be described. In step S705, an OBJ area displayed as a redaction area is additionally set. In the example of FIGS. 3B and 3C, it is shown that the same character string 309 as the character string “Taro Yamada” overlapping the redaction area 308 exists, and a new area is occupied by the character string 309. This indicates that the erase area 311 has been added. Some document formats, such as non-display annotations and non-display layers, cannot be set to non-display, but in that case, all are processed in step S705. This ends the process and proceeds to step S706.

  In step S706, it is determined whether all areas to be added as the redaction area have been processed. If it has been processed, the redaction area addition process is completed and the process returns to the character area expansion (change) process. However, since the character area expansion process is also ended, the process proceeds to step S210.

  In step S210, it is determined whether all OBJs that overlap the redaction area have been processed. If any OBJ remains, the process returns to step S205 to continue the process. When all the processes are performed, the process proceeds to step S211. In step S211, the expanded (changed) area is displayed. Examples are the expanded redaction area 310 and the newly added redaction area 311 in FIG.

  Next, in step S212, the user is confirmed by a dialog or the like as to whether or not the area is acceptable. If it is confirmed that it is good, the process proceeds to step S213. If not, the process proceeds to step S219.

  In step S213, redaction processing is executed. That is, all OBJ data that overlaps the redaction area is deleted. This completes a series of redaction processes.

  In step S219, the added / modified redaction area is restored. Then, it returns to step S203 and waits for the button to be pressed.

  An example in which a user misses confidential information will be described. In the example of FIG. 3, “Yamada Taro” exists in the character string 309 in addition to the redaction area, but since there is no Unicode conversion information, a search with “Taro Yamada” and Unicode does not hit. According to the processing of this embodiment, even if confidential information remains without being noticed, it can be automatically added to the redaction area.

  According to this embodiment, confidential information that has been overlooked outside the area set by the user can be reliably deleted, and even in a document with a large number of pages and objects, it is possible to check the confidential area in accordance with the confidentiality level in a short time without trouble. Corrections can be made. Thereby, operability can be greatly improved.

[Embodiment 2]
The redaction area check unit 8 of the first embodiment performs the addition process of the redaction area from the display area, non-display annotation, non-display layer, and the like in the same page. Additional processing may be performed.

  FIG. 9 shows an example of Embodiment 2 of the process of extending the image redaction area in step S217. The processing from step S501 to step S508 is the same as that in the first embodiment. After the processing from step S501 to step S508 is completed, the process proceeds to step S901.

  In step S901, it is determined whether the same image is used in the document. Check if other pages use the same image as the image to be redone. If so, the process proceeds to step S902. If it is not used, the process is terminated.

  In step S902, the same image on another page is also added as a redaction area. This concludes the description of the image redaction area expansion process of the second embodiment.

  Next, an example of the second embodiment of the character redaction area expansion process in step S215 will be described with reference to FIG. The difference from the first embodiment is Step S604 and Step S608, which are Step S1001 and Step S1002, respectively.

  In step S1001, the CID of the character area is extracted from the document, that is, including another page. Similarly, in step S1002, the Unicode of the character area is extracted in the document, that is, including another page. With these processes, it is possible to perform the redaction process without forgetting not only the confidential information of the other page in the document but also the same page.

  The effects similar to those of the first embodiment can be obtained by the processing of the second embodiment.

[Embodiment 3]
The redaction area check unit 8 according to the first embodiment performs the addition process of the redaction area from the display area, the non-display annotation, the non-display layer, and the like in the same page. You may want to set it. Even in such a case, by showing an index as to whether the setting of the redaction area is sufficient, it is useful for checking the confidential area by itself, and has the effect of greatly improving the operability.

  The example of FIG. 11 is an explanatory diagram of the third embodiment. A coverage 1101 is shown for the redaction area 307 set by the user. Similarly, the coverage 1102 is shown for the redaction area 308. The coverage ratio 1101 is the ratio of the entire image to the area of the redaction area because the OBJ overlapping the redaction area 307 is an image. The specific method of obtaining is the same as the calculation formula performed in step S505. The feature of the third embodiment is that the result is displayed to the user.

For example, assume that the image 303 in FIG. 3 has a length of 15 cm and a width of 20 cm. If the vertical area of the redaction area 307 is 2 cm and the width is 6 cm, the ratio to be calculated is
(Ratio) = (area of the redaction area) ÷ (area of the entire image)
= (2 × 6) ÷ (15 × 20) = 0.04
Thus, the coverage rate 1101 is displayed as “4%”.

Similarly, since the area that overlaps the redaction area 308 is a character area,
(Ratio) = (number of characters overlapping the redaction area) ÷ (number of characters in the entire paragraph)
= (4 characters) ÷ (40 characters) = 0.1
Thus, the coverage rate 1102 is displayed as “10%”.

  Here, an example of displaying the coverage rate has been described, but the number of the same OBJs in the document may be indicated.

  The effects similar to those of the first embodiment can be obtained by the processing of the third embodiment.

  The present invention can also be realized by executing the following processing. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, or the like) of the system or apparatus reads the program. It is a process to be executed.

301 Display in Display 302 Document 303 Image in Document 304 Character String in Document 305 Redacting Setting Button 306 Redacting Execution Button 307, 308, 310, 311 Redacting Area 309 Character String 312 Redacting Area Secure Check Button

Claims (6)

An erasing processing means for erasing an object that overlaps the set area;
Change means for changing the area redone by the redaction processing means according to the attribute of the object and the level set for the object;
An information processing apparatus comprising:   The information processing apparatus according to claim 1, wherein the changing unit changes the set area also in an annotation or a layer of a page in which the area exists.   The information processing apparatus according to claim 1, wherein the changing unit changes the redone region regardless of whether the region in which the object exists is displayed or not.   The information processing apparatus according to claim 1, wherein the changing unit displays a ratio of the number of characters overlapping the set area to the entire image. A redacting step for redacting an object that overlaps the set area;
A change step of changing the area redone by the redaction processing means according to the attribute of the object and the level set for the object;
An information processing method characterized by comprising:   The program for functioning a computer as an information processing apparatus as described in any one of Claims 1 thru | or 4.

Images