JP2021179899A - Information processing program, method for processing information, and information processor - Google Patents

Abstract

To make it easier to confirm the state of managing a document.SOLUTION: A holding data list acquisition unit acquires information on places (a drive, a folder) that include documents in an examination target terminal. A secrecy degree determination unit determines the degree of secrecy of documents. A secrecy degree screen output unit calculates the ratio of existence of documents according to secrecy degrees for each drive or each folder, generates a screen that shows the ratio of existence of documents for each calculated secrecy degree, and displays the screen on a display unit.SELECTED DRAWING: Figure 8

Description

The present invention relates to an information processing program, an information processing method and an information processing apparatus.

In recent years, in offices and the like, networks such as LAN (Local Area Network) and the Internet are often used. One of the advantages of utilizing a network is resource sharing, and file (document) sharing is the most important.

Generally, in order to share documents, the drives and folders (directories) of servers and terminals installed on the network are set to be shared so that documents can be freely read and written from terminals on the network. (See, for example, Patent Document 1 and the like).

Japanese Patent Application Laid-Open No. 2003-280961 Japanese Patent Application Laid-Open No. 2003-288275 Japanese Unexamined Patent Publication No. 2016-212451

It is not preferable to store documents that should not be shared in a drive or folder that is set to be shared because it may lead to information leakage. However, in order to confirm how sensitive the documents are stored in each drive or folder, it is necessary for a person to confirm the contents of each document, which is troublesome.

In one aspect, it is an object of the present invention to provide an information processing program, an information processing method, and an information processing apparatus capable of easily confirming the management state of a document.

In one embodiment, the information processing program acquires information about the location of the document and information about the density of the document, and identifies and identifies the abundance ratio of the document for each location for each location. It is an information processing program for causing a computer to execute a process that displays the existence ratio for each machine density for each place.

You can easily check the management status of documents.

It is a figure which shows roughly the structure of the information processing system which concerns on 1st Embodiment. It is a figure which shows the hardware configuration of a server. It is a functional block diagram of a server. It is a flowchart (the 1) which shows the process of the server which concerns on 1st Embodiment. It is a figure (the 1) which shows the retained data list which concerns on 1st Embodiment. It is a figure (the 2) which shows the retained data list which concerns on 1st Embodiment. It is a figure which shows the density table which concerns on 1st Embodiment. It is a figure (the 1) which shows the screen example in 1st Embodiment. It is a figure (the 2) which shows the screen example in 1st Embodiment. It is a flowchart (the 2) which shows the processing of the server which concerns on 1st Embodiment. It is a figure (the 3) which shows the screen example in 1st Embodiment. It is a network diagram in 2nd Embodiment. It is a flowchart which shows the process of the server which concerns on 2nd Embodiment. FIG. 14 (a) is a diagram showing a retained data list according to the second embodiment, and FIG. 14 (b) is a diagram showing a confidentiality table according to the second embodiment. It is a figure which shows the screen example in 2nd Embodiment. It is a layout diagram in 3rd Embodiment. It is a figure which shows the retention data list which concerns on 3rd Embodiment. It is a figure which shows the density table which concerns on 3rd Embodiment. It is a figure which shows the screen example in 3rd Embodiment.

<< First Embodiment >>
Hereinafter, the first embodiment of the information processing system will be described in detail with reference to FIGS. 1 to 11. FIG. 1 schematically shows the configuration of the information processing system 100 according to the first embodiment.

The information processing system 100 is, for example, a system installed in an office, and as shown in FIG. 1, includes a server 10 as an information processing device and a plurality of terminals 70. The server 10 and the terminal 70 are connected to a network 80 such as a LAN (Local Area Network). In the first embodiment, the folder is shared by each terminal 70, and the documents stored in the folder can be read and written by each terminal 70.

The server 10 is a device that connects to the terminal 70 to be investigated designated by the user and generates and displays a screen for visually displaying the management status of documents in each folder of the terminal 70 to be investigated. FIG. 2 shows the hardware configuration of the server 10. As shown in FIG. 2, the server 10 includes a CPU (Central Processing Unit) 90, a ROM (Read Only Memory) 92, a RAM (Random Access Memory) 94, a storage unit (here, an HDD (Hard Disk Drive)) 96, and a network. It includes an interface 97, a display unit 93, an input unit 95, a portable storage medium drive 99, and the like. Each component of the server 10 is connected to the bus 98. The display unit 93 includes a liquid crystal display and the like, and the input unit 95 includes a keyboard, a mouse, a touch panel and the like. In the server 10, the CPU 90 executes a program (including an information processing program) stored in the ROM 92 or the HDD 96, or a program (including an information processing program) read from the portable storage medium 91 by the portable storage medium drive 99. By doing so, the functions of each part shown in FIG. 3 are realized. The functions of each part in FIG. 3 may be realized by, for example, an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

FIG. 3 shows a functional block diagram of the server 10. As shown in FIG. 3, in the server 10, when the CPU 90 executes a program, the holding data list acquisition unit 12, the machine density determination unit 14, the machine density screen output unit 16, the alert output unit 18 as a warning unit, And the function as the detail display unit 20 is realized. Note that FIG. 3 also shows a holding data list 30 stored in the HDD 96 and the like, and a density matching table 32.

The retained data list acquisition unit 12 connects to the terminal 70 to be investigated specified by the user, and acquires the information of the documents stored in each drive and each folder of the terminal 70. The retained data list acquisition unit 12 stores the acquired document information in the retained data list 30. FIG. 5 shows an example of the data structure of the retained data list 30. As shown in FIG. 5, in the retained data list 30, a "folder hierarchy" can be stored for each "device name", and the "document name" of the document existing in each folder and the "device density" of the document can be stored. "Can be registered.

The machine density determination unit 14 determines the machine density of each document by referring to the contents of each document possessed by the terminal 70 to be investigated. Then, the machine density determination unit 14 stores the determination result in the “machine density” column of the holding data list 30 (see FIG. 6). In the first embodiment, the confidentiality determination unit 14 refers to whether or not each document contains a character string of "confidentiality" or "confidentiality". Then, if the character strings "related party confidential" and "confidential" are not included, it is determined to be "public information", and if it is included, it is determined to be "related party confidential information" and "confidential information". Here, the degree of confidentiality means the type of confidentiality (secret), and it is assumed that the level of confidentiality decreases in the order of "confidentiality of related parties"-> "confidentiality"-> "public information". In addition, as a method of determining the degree of confidentiality, another method may be adopted. For example, the importance of each document (that is, the degree of confidentiality in the present embodiment) may be determined by using the technique disclosed in Japanese Patent Application Laid-Open No. 2019-159839 filed earlier by the present applicant.

The machine density screen output unit 16 specifies the abundance ratio of the document for each machine density in each folder with reference to the retained data list 30, and stores it in the machine density table 32. Here, as shown in FIG. 7, the "device name", "folder hierarchy", "machine density", and "ratio" can be stored in the machine density table 32 in association with each other. Information similar to that of the retained data list 30 is stored in the "device name" and "folder hierarchy". The confidentiality table 32 can store the existence ratio of documents for each confidentiality (confidential information, confidential information, public information) in each drive and folder. Further, the machine density screen output unit 16 generates a screen as shown in FIG. 8 based on the machine density table 32 and displays it on the display unit 93.

The alert output unit 18 refers to the existence ratio of documents for each sensitivity in each drive and folder, and identifies a drive or folder having a problem in the state of confidentiality management (hereinafter referred to as confidentiality management). Then, the alert output unit 18 displays an alert on the screen displayed on the display unit 93 so that the specified drive or folder can be identified (see FIG. 9).

The detail display unit 20 displays information on a document having a problem in confidentiality management when the user selects (clicks, etc.) the alert display displayed on the screen via the input unit 95 (see FIG. 11). ).

(About the processing of server 10)
Next, the processing of the server 10 in the first embodiment will be described in detail with reference to other drawings according to the flowcharts of FIGS. 4 and 10.

As a premise of the processing of FIG. 4, it is assumed that the user has input the information (IP address) of the terminal 70 to be investigated via the input unit 95.

In the process of FIG. 4, first, in step S10, the retained data list acquisition unit 12 connects to the terminal 70 to be investigated using the input IP address and acquires the device name.

Next, in step S12, the retained data list acquisition unit 12 acquires information on all folders and documents including the lower layer folder from the uppermost layer folder of each drive in the connected terminal 70.

Next, in step S14, the retained data list acquisition unit 12 outputs the device name, the folder hierarchy, and the document name to the retained data list 30. FIG. 5 shows an example of the retained data list 30 after the execution of step S14. In the state of FIG. 5, the column of "confidentiality" is empty.

Next, in step S16, the machine density determination unit 14 determines the machine density of all the documents included in the retained data list 30. Here, as described above, the confidentiality determination unit 14 determines the confidentiality (confidentiality of related parties, confidential information, disclosure) based on whether each document contains "confidentiality of related parties" or "confidentiality of related parties". Information) is determined.

Next, in step S18, the machine density determination unit 14 stores the machine density of all documents in the retained data list 30. FIG. 6 shows a state in which the confidentiality of each document is stored in the retained data list 30.

Next, in step S20, the machine density screen output unit 16 calculates the abundance ratio of the document for each machine density in each drive and folder and stores it in the machine density table 32. FIG. 7 shows a state in which the abundance ratio of documents for each machine density is stored in the machine density table 32.

Next, in step S22, the machine density matching screen output unit 16 creates a screen with reference to the machine density matching table 32, and displays (outputs) it on the display unit 93. FIG. 8 shows an example of a screen created from the density table 32. On the screen shown in FIG. 8, the existence ratio of documents for each sensitivity in each drive and folder is displayed in an identifiable state. This allows the user to check in which folder and what kind of confidentiality documents are stored. In the screen of FIG. 8, the lower folders are displayed on the right side. However, the present invention is not limited to this, and only the upper folder may be displayed first, and when the upper folder is clicked by the user, the information of the lower folder of the clicked folder may be displayed. ..

Next, in step S24, the alert output unit 18 refers to the confidentiality table 32, identifies a folder having a problem in confidentiality management, and displays it on the screen. A folder that has a problem in confidentiality management is a folder that contains a large amount of public information, but also contains confidential information of confidential information and confidential information of related parties. More specifically, it is assumed that the folder satisfies the following three conditions.
(1) Two or more documents are stored.
(2) Documents of multiple types of confidentiality are mixed.
(3) The existence ratio of "public information" is larger than the total of the existence ratio of documents whose confidentiality is "confidential" and the existence ratio of documents whose confidentiality is "confidential". ..

In the example of FIG. 7, the folder "catalog" is identified as a folder having a problem with confidentiality management. Therefore, as shown in FIG. 9, the alert output unit 18 displays an alert (for example, a “!” Mark) in the folder “catalog”. As a result, the user can easily confirm that there is a problem in the confidentiality management of the folder "catalog" by referring to the screen of FIG.

As a result, the process of FIG. 4 is completed.

Next, the process executed by the server 10 while the screen of FIG. 9 is displayed on the display unit 93 will be described with reference to other drawings according to the flowchart of FIG.

In the process of FIG. 10, first, in step S30, the detail display unit 20 waits until the folder in which the alert is displayed is selected (clicked or the like). When the user selects the folder in which the alert is displayed on the screen of FIG. 9, the detail display unit 20 proceeds to step S32.

When the process proceeds to step S32, the detailed display unit 20 displays information on a document having a high degree of confidentiality (the degree of confidentiality is “confidentiality” or “confidentiality”) among the selected folders from the retained data list 30. get. For example, when the folder "catalog" is selected, the detailed display unit 20 selects the document name "customer list.xls" whose confidentiality is "confidential information of related parties" from the folder "catalog" in FIG. get. It should be noted that this document "customer list.xls" is a document that has a problem in confidentiality management because it is mixed in a document with a low degree of confidentiality even though it has a high degree of confidentiality.

Next, in step S34, the detail display unit 20 displays the acquired document information on the screen. For example, as shown in FIG. 11, the detailed display unit 20 pops up the document name “customer list.xls”, which is confidential information of related parties, in the vicinity of the folder “catalog”. This allows the user to easily see which documents in the folder have a confidentiality problem.

As a result, the process of FIG. 10 is completed.

As is clear from the explanation so far, in the first embodiment, the retention data list acquisition unit 12 and the machine density determination unit 14 provide information on the location of each document and the type of machine density of each document. The function as an acquisition unit is realized. Further, in the first embodiment, the machine density screen output unit 16 displays a specific unit that specifies the document existence ratio for each machine density for each place, and a document presence rate for each place for each place. The function as a display processing unit is realized.

As described in detail above, according to the first embodiment, the retained data list acquisition unit 12 acquires information on the location (drive, folder) where the document exists in the terminal 70 to be investigated (S14). .. Further, the machine density matching determination unit 14 determines the machine density matching of the document (S16). Then, the machine density screen output unit 16 calculates the existence ratio of the document for each machine density for each drive or folder (S20), and displays the document existence ratio for each calculated machine density for each drive or folder. A screen is generated and displayed on the display unit 93 (S22). As a result, the user can confirm which drive or folder has a problem in confidentiality management by referring to the document existence ratio for each sensitivity in each drive or folder displayed on the screen. Users can also see if there is a problem with the confidentiality of a shared drive or folder by referring to the information that indicates which drive or folder is shared.

Further, in the first embodiment, the alert output unit 18 identifies a folder having a problem in confidentiality management based on the existence ratio of documents for each sensitivity in each folder, and displays an alert on the screen (S24). .. As a result, the user can easily identify the folder having a problem in confidentiality management without considering the existence ratio of the document for each sensitivity in detail.

Further, in the first embodiment, when the user selects a folder having a problem with confidentiality management (S30: affirmative), a document having a problem with confidentiality management is identified from the documents existing in the folder. And display (S32, S34). As a result, the user can easily recognize which document has a problem in confidentiality management without checking the contents of all the documents in the folder.

In the first embodiment, the case where the alert is displayed as shown in FIG. 9 has been described, but the present invention is not limited to this, and the alert display may be omitted without performing step S24 in FIG. Further, in the process of FIG. 10, when the user selects a folder having a problem with confidentiality management, the information of the document having a problem with confidentiality management is displayed as shown in FIG. 11, but this is limited to this. is not it. For example, the information of a document that has a problem with confidentiality management may be displayed from the beginning without the user's selection. Further, in the first embodiment, the process of FIG. 10 may be omitted. That is, it is not necessary to display the information of the document having a problem in confidentiality management. In addition, on the screen of FIG. 8 or the like, information indicating which folder is shared may also be displayed.

<< Second Embodiment >>
Next, the second embodiment will be described in detail with reference to FIGS. 12 to 15.

In the second embodiment, the network diagram as shown in FIG. 12 displays the abundance ratio of documents for each degree of confidentiality in terminals and devices. In the second embodiment, the hardware configuration, functions, and the like of the server 10 are the same as those in the first embodiment. Therefore, the description of these will be omitted. However, in the second embodiment, instead of the terminal 70 of the information information system 100 of FIG. 1, each device (firewall (FW1, FW2) and server (Web server 1, mail server) in the network diagram of FIG. 12 is used. 1, ...) shall be provided.

FIG. 13 is a flowchart showing the processing of the server 10 of the second embodiment. As a premise of the process of FIG. 13, it is assumed that the network diagram of FIG. 12 is input to the server 10. Further, it is assumed that the retained data list acquisition unit 12 has acquired the IP addresses of the devices (FW1, FW2, Web server 1, mail server 1, ...) Included in the network diagram of FIG.

In the process of FIG. 13, first, in step S8, the retained data list acquisition unit 12 determines whether or not the process of all the devices that have acquired the IP address is completed. When the determination in step S8 is denied, one of the devices that have acquired the IP address is specified, and the processing of steps S10, S12, S14, S16, and S18 is performed on the specified device in the first embodiment. Execute in the same way as. After that, the process returns to step S8, and the above process is repeated until the determination in step S8 is affirmed. Note that FIG. 14A shows an example of the retained data list 30 at the stage when the determination in step S8 is affirmed. As shown in FIG. 14A, the retained data list 30 stores the density of documents included in each device included in the network diagram.

Then, when the determination in step S8 is affirmed and the process proceeds to step S20', the machine density screen output unit 16 calculates the abundance ratio of the document for each machine density in each device and stores it in the machine density table 32. FIG. 14B shows a state in which the machine density table 32 stores the abundance ratio of documents for each machine density in each device.

Next, in step S22, the machine density matching screen output unit 16 creates a screen with reference to the machine density matching table 32, and displays (outputs) it on the display unit 93. At this time, as shown in FIG. 15, the machine density screen output unit 16 creates a screen for displaying the network diagram of FIG. 12 by superimposing a pie chart showing the abundance ratio of documents for each machine density. This allows the user to check which device stores the document of what kind of confidentiality. With the above, all the processing of FIG. 13 is completed.

The user can select one device, for example, on the screen of FIG. In this case, the server 10 refers to the retained data list 30 of FIG. 14A and displays a screen (screens of FIGS. 8 and 9) showing the abundance ratio of the document for each sensitivity in the selected device. .. This allows the user to easily determine which of the folders contained in the selected device has a security problem. Further, when the user selects the folder in which the alert is displayed on the screen of FIG. 9, as shown in FIG. 11, the information of the document having a problem in confidentiality management is displayed. This allows the user to easily see documents that have confidentiality issues.

As described above, in the second embodiment, the machine density screen output unit 16 displays the document existence ratio for each machine density on the network diagram when the screen is displayed, so that the user can use which device in the network. You can easily check if there is a problem with the confidentiality management of.

<< Third Embodiment >>
Next, the third embodiment will be described in detail with reference to FIGS. 16 to 19.

In the third embodiment, it is an example of displaying the abundance ratio of documents for each degree of confidentiality in terminals and devices on an office layout diagram as shown in FIG. In the third embodiment, the configuration of the information processing system 100, the hardware configuration and functions of the server 10, and the like are the same as those of the first embodiment. Therefore, the description of these will be omitted.

In the third embodiment, the server 10 executes the same processing as in the second embodiment (FIG. 13). In the third embodiment, the layout diagram of FIG. 16 is input to the server 10, and the holding data list acquisition unit 12 acquires the IP address of the device included in the layout diagram of FIG. It shall be.

In the third embodiment, the retained data list 30 as shown in FIG. 17 is obtained by repeating the processing / determination in steps S8 to S18 of FIG. Further, by executing the process of step S20'in FIG. 13, the confidentiality table 32 as shown in FIG. 18 can be obtained. Therefore, in step S22 of FIG. 13, the machine density matching screen output unit 16 refers to the machine density matching table 32 (FIG. 18), and the layout diagram of FIG. 16 as shown in FIG. 19 shows the document for each machine density matching. Create a screen that overlays a pie chart showing the abundance ratio. This allows the user to check which device in the office contains the document of what kind of confidentiality.

The user can select one device, for example, on the screen of FIG. In this case, the server 10 displays a screen (screens of FIGS. 8 and 9) showing the abundance ratio of documents for each degree of confidentiality in the selected device. This allows the user to easily determine which of the folders contained in the selected device has a security problem. Further, when the user selects the folder in which the alert is displayed on the screen of FIG. 9, as shown in FIG. 11, the information of the document having a problem in confidentiality management is displayed. This allows the user to easily see documents that have confidentiality issues.

As described above, in the third embodiment, when the confidentiality screen output unit 16 displays the screen, the user displays the document existence ratio for each confidentiality on the layout diagram of the office, so that the user can use the office. You can easily see which device has a security problem.

In each of the above embodiments, a case where a device (server 10) different from the terminal or device to be investigated executes the processes of FIGS. 4, 10, 13, etc. has been described, but the investigation is not limited to this. The target terminal itself may execute the above processing.

The above processing function can be realized by a computer. In that case, a program that describes the processing content of the function that the processing device should have is provided. By executing the program on a computer, the above processing function is realized on the computer. The program describing the processing content can be recorded on a computer-readable storage medium (however, the carrier wave is excluded).

When a program is distributed, it is sold in the form of a portable storage medium such as a DVD (Digital Versatile Disc) or a CD-ROM (Compact Disc Read Only Memory) on which the program is recorded. It is also possible to store the program in the storage device of the server computer and transfer the program from the server computer to another computer via the network.

The computer that executes the program stores, for example, the program recorded on the portable storage medium or the program transferred from the server computer in its own storage device. Then, the computer reads the program from its own storage device and executes the processing according to the program. The computer can also read the program directly from the portable storage medium and execute the processing according to the program. In addition, the computer can sequentially execute processing according to the received program each time the program is transferred from the server computer.

The embodiments described above are examples of preferred embodiments of the present invention. However, the present invention is not limited to this, and various modifications can be made without departing from the gist of the present invention.

The following additional notes will be further disclosed with respect to the description of the above embodiments.
(Appendix 1) Obtain information on the location of the document and information on the confidentiality of the document.
Specify the abundance ratio of documents for each location, and specify the abundance ratio of documents for each density.
The abundance ratio for each of the specified machine densities is displayed for each place.
An information processing program that causes a computer to execute processing.
(Appendix 2) The information processing program according to Appendix 1, wherein in the display process, the specified abundance ratio is displayed on a diagram showing the layout of each location.
(Appendix 3) Based on the existence ratio specified in the specified process, the management state of the document in each place is determined, and information for identifying a place having a problem in the management state based on the determined management state is provided. indicate,
The information processing program according to Appendix 1 or 2, wherein the computer further executes the processing.
(Appendix 4) From the documents existing in the location where the management status is problematic, the document having the management status is identified and displayed.
The information processing program according to Appendix 3, wherein the computer further executes the processing.
(Appendix 5) Obtain information on the location of the document and information on the confidentiality of the document.
Specify the abundance ratio of documents for each location, and specify the abundance ratio of documents for each density.
The abundance ratio for each of the specified machine densities is displayed for each place.
An information processing method characterized in that a computer executes processing.
(Appendix 6) An acquisition unit that acquires information on the location of the document and information on the confidentiality of the document.
A specific part that specifies the abundance ratio of documents for each location, and
A display processing unit that displays the abundance ratio for each of the specified machine densities for each location, and
Information processing device equipped with.
(Supplementary Note 7) The information processing apparatus according to Supplementary Note 6, wherein the display processing unit displays the specified abundance ratio on a diagram showing a layout of each location.
(Appendix 8) The management state of the document in each place is determined based on the existence ratio specified by the specific unit, and information for identifying a place having a problem in the management state is displayed based on the determined management state. The information processing apparatus according to Appendix 6 or 7, further comprising a warning unit.
(Supplementary Note 9) The information processing apparatus according to Supplementary Note 8, further comprising a detailed display unit for identifying and displaying a document having a problem in the management state from the documents existing in a place having a problem in the management state.

10 Server (information processing device)
12 Retained data list acquisition unit (part of the acquisition unit)
14 Machine density determination unit (part of acquisition unit)
16 Confidentiality screen output section (specific section, display processing section)
18 Alert output section (warning section)
20 Detailed display

Claims (6)

Obtain information about the location of the document and information about the confidentiality of the document.
Specify the abundance ratio of documents for each location, and specify the abundance ratio of documents for each density.
The abundance ratio for each of the specified machine densities is displayed for each place.
An information processing program that causes a computer to execute processing. The information processing program according to claim 1, wherein in the display process, the specified abundance ratio is displayed on a diagram showing the layout of each place. Based on the existence ratio specified in the specified process, the management state of the document in each place is determined, and information for identifying a place having a problem in the management state is displayed based on the determined management state.
The information processing program according to claim 1 or 2, wherein the computer further executes the processing. From the documents existing in the location where the management status is problematic, the document having the management status is identified and displayed.
The information processing program according to claim 3, wherein the computer further executes the processing. Obtain information about the location of the document and information about the confidentiality of the document.
Specify the abundance ratio of documents for each location, and specify the abundance ratio of documents for each density.
The abundance ratio for each of the specified machine densities is displayed for each place.
An information processing method characterized in that a computer executes processing. An acquisition unit that acquires information on the location of the document and information on the confidentiality of the document.
A specific part that specifies the abundance ratio of documents for each location, and
A display processing unit that displays the abundance ratio for each of the specified machine densities for each location, and
Information processing device equipped with.

Images