JP3537245B2 - Information management system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to various electronic materials,
The present invention relates to an information management system that manages drawing data, standard data, and the like, and more particularly, to an information management system that can finely manage access to the information.

[0002]

2. Description of the Related Art Various materials such as drawing data and standard data are used by many users in an organization. In recent years, such information has been digitized and managed by an information processing system. However, some of these information cannot be disclosed to a third party, or cannot be updated by a third party, and can be referred / updated by a person without access right (hereinafter referred to as read / write).
Need to be protected from Conventionally, the access right is controlled by setting the read / write right of the owner (hereinafter referred to as a user), the group to which the user belongs, the user, and a third party (hereinafter referred to as a world) other than the group. However, control was performed within that range.

FIGS. 13 and 14 are diagrams for explaining the above-described conventional access right control. FIG. 13 shows an example of a user registration file. As shown in FIG. 13, the user registration file includes a user name (for example, A
1234) and the group to which the user belongs (eg, Gr
p1) is registered. FIG. 14 is a diagram showing a basic form of an access right in the conventional data management. As shown in FIG. 14, the access right control file includes, as shown in FIG. A group name and a file name are registered. In the access right in FIG. 14, [R] means that the device has a read right, [RW] means that the device has a read / write right, and [•] means that the device has no read / write right.

[0004] For example, file aaa. Regarding dat, the user A1234 and a person belonging to the same group Grp1 as the user have read / write right, and the other third party (world) does not have access right. Similarly, the file bbbb. About dat, user A1
234 has the read / write right and is the same G as the user.
Those who belong to rp1 and the world have only the read right.

[0005] In FIG. 13 and FIG.
a. dat-eeee. When dat is accessed, access to each file is controlled as follows. For example, the file aaaa. A123 to dat
4 accesses the file shown in FIGS. 13 and 14, and confirms the access right of A1234. The file aaaa. In the case of dat, since the user is A1234, read / write is unconditionally permitted to A1234.

[0006] For example, a file aaa. dat
Is accessed by B5678, the group to which B5678 belongs is checked with reference to the user registration file of FIG. 13 (Grp2 in this case), and the file shown in FIG. 14 is referenced. The file aaaa. For dat, user A
Since only 1234 and those belonging to group Grp1 have access rights, B5678 belonging to group Grp2 is not granted access rights.

That is, access is unconditionally permitted to the owner of the file, and to the person other than the owner,
The file is managed by examining whether the file belongs to the same group as the file owner, determining the range of access rights to be granted according to the group to which the file belongs.

[0008]

The above-mentioned prior art has the following problems. (1) Since the access right is only managed separately for the owner, the group to which the owner belongs, and the other (world), if the access right is granted to a group other than the group to which the owner belongs, the world The access right is granted to everyone, and the access right is granted to everyone. (2) When giving permission to a plurality of groups, FIG.
3. All permitted groups must be set as shown in FIG. 14 (for example, C90 in FIG. 13 and FIG. 14).
12). (3) Fine-grained access rights cannot be set according to the state of the data, such as the state of the data being private or public.

In order to address the above problems (1) and (2),
In correspondence with each file, register the accessible hierarchical information indicating the hierarchical position of the organizational hierarchy of the user who can access the file or the upper / lower positional relationship, and prepare the hierarchical position information of the user's organizational hierarchy, and A technique has been proposed for managing file access rights based on the user's hierarchical position information and the accessible hierarchical information when there is an access to the file (for example, Japanese Patent Application Laid-Open No. Sho 62-2410).
No. 61).

[0010] However, the above technique has a problem that accessible hierarchical information must be registered in correspondence with each file, file management is complicated, and access rights cannot be finely controlled. Further, in order to solve the problem (3), information to be managed is stored in each file separately into “non-public information”, “unconfirmed / public information”, “confirmed / public information”, and the like. A technique for managing access rights to information stored in each file has been proposed (JP-A-5-241932). However, the above technique has a problem in that each file must be prepared according to the state of the file (public / non-public, etc.), and the file cannot be centrally managed.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems of the prior art, and an object of the present invention is to manage a plurality of files in a unified manner and to design / register a plurality of files. Data status, data disclosure /
It is an object of the present invention to provide an information management system capable of performing fine-grained access right management corresponding to a secret state or a user / group to which the user belongs.

[0012]

FIG. 1 is a diagram showing the principle of the present invention. In FIG. 1, reference numeral 1 denotes electronic data storage means for storing electronic data such as drawings, standards, design data, specifications, etc., and 2 denotes information for specifying electronic data such as product number / version number, basic access right, and management data such as STATUS. 3 is organization information storage means for storing organization information such as the organization structure of a company, 4 is user information for storing user / group name, default access right for each user / group, qualification, etc. The storage unit 5 is a special access right information storage unit that stores the special access right. Reference numeral 6 denotes data read / access right determination means for reading data and determining access rights to users, groups, and worlds, and reference numeral 7 denotes data write / access rights for performing new data registration / data distribution / access right change processing. Setting means.

Referring to FIG. 1, the present invention solves the above problem as follows. (1) An electronic data storage unit 1 for storing electronically created data and a data read / access right determination unit 6 for reading data and determining an access right to the data are provided. Further, an organization information storage unit 3 storing information on an organization using the data, and a user information storage unit 4 storing a user name, a group name, a default access right for each user / group, and a user qualification are provided. Further, information for specifying data such as the product number and version number of the data in the management data storage means 2, the basic access right to the data, the state of the data, the availability of data release, the location of the data, and the presence or absence of the special access right And the like, and to set addition / removal of an access right to a specific user / group or world, a special access right information storage unit 5 is provided to register the special access right. The data read / access right determination means 6 receives the management data storage means 2, the organization information storage means 3, the user information storage means 4, Access right information storage means 5
To determine whether the access requester is the owner of the data, belongs to the same group as the owner, or is a third party other than the world, and determines whether the owner / group / world Basic access rights, data status,
Access permission / inhibition is determined based on public / non-public and special access right.

(2) In the above (1), the data write / access setting means 7 is provided, and when new data is registered, the management data storage means 2 is set based on the default access right set in the user information storage means 4. When the basic access right is registered, the data state and the release mode registered in the management data storage means 2 are set to “under design” and “non-disclosure”, respectively. The special access right is set in the access right information storage means 5. At the time of data distribution, the data writing / access setting means 7 changes the data state of the management data storage means 2 to “registered”, changes the disclosure mode to “public”, and sets a special access right. The special access right is set in the special access right information storage unit 5. Further, when a request for changing the access right is made, the basic access right and the disclosure mode of the management data storage means 2 are changed based on the request for changing the access right, and the special access right is set according to the setting of the special access right. Information storage means 2
Register special access rights to

(3) In the above (1) and (2), when managing the access right to the drawing data, the user information storage means 4
, Qualification information of a designer, a checker, and an approver is added to the data, and the data read / access right determination means 6 uses the qualification information to determine whether or not the drawing data stored in the electronic data storage means 1 can be accessed. judge. (4) In the above (3), the data read / access right judging unit 6 stores the data in the electronic data storage unit 1 based on the basic access right, data state, and data availability information stored in the management data storage unit 2. When the state of the registered drawing data is under design, access to the manufacturing department of the drawing data is disabled, and when the state of the data is registered, the manufacturing department of the drawing data is accessible. (5) In the above (3) and (4), when the manufacturing department needs access to the drawing data being designed, the data writing / access setting unit sets the publication mode of the drawing data to public, and the manufacturing department The special access right is set in the special access right information storage means so that the access can be made.

Since the invention of claim 1 of the present invention is configured as in the above (1), it is possible to manage various electronic data in a unified manner, and to access various electronic data in accordance with the status of data, data Can be finely managed in accordance with the public / non-public state of the user or the user / group to which the user belongs.

[0017] The invention of claim 2 of the present invention performs a new registration / data distribution / access process when data changes provided the data write / access setting means 7 to <br/> so the above (2) Thus, the setting of the data status / public mode at the time of new registration and data distribution can be automatically performed, and depending on the data status / public mode, the access right may be granted to the one that does not originally have the access right. For example, it is possible to appropriately manage access rights according to the actual use status of electronic data. Since the inventions of claims 3 to 5 of the present invention are configured as described in (3) to (5) above, it is possible to manage the access right to the drawing data according to the actual work content.

[0018]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, the specification converted into electronic data,
An embodiment of the present invention will be described with respect to management of access rights such as design data, drawings, and standards. FIG. 2 is a diagram showing the configuration of the system according to the embodiment of the present invention. In the figure, 1
1 is a data write / access setting unit, and the data write / access setting unit 11 is a basic access right setting processing unit 1
1a, a special access right setting processing unit 11b for setting a special access right to be described later, a STATUS setting processing unit 11c for setting a state such as under design / registered, and a public mode setting processing unit for setting public / non-public. 11d.

Reference numeral 12 denotes a data read / access determination unit. The data read / access determination unit 12 includes a user access right determination processing unit 12a, a company organization determination processing unit 12b that determines a group / organization to which a user belongs, It is composed of a data access determination processing unit 12c that determines an access right based on the determination result of the organization determination processing unit 12b. Reference numeral 13 denotes a management data file storing management data. As shown in FIG. 3, the management data file 13 includes a product number, a version number, access rights to each data, an owner name, a STATUS, and the like. , A disclosure mode indicating disclosure / non-disclosure, location information of the data, presence / absence of special access right, and other attribute information are registered.

In the access right shown in FIG. 3, the first two characters indicate the access right of the owner, for example, [RW ×
[Xxx]] indicates that the owner has the read / write right. The next two characters indicate the access right of the group. For example, [xx RW xx] indicates that those belonging to the group to which the access right is assigned have the read / write right. In addition, the next two characters are World (third party)
For example, [XXXR] indicates that the world has only read right ([] in [R] indicates that it does not have write right).

Reference numeral 14 denotes a user registration file in which a user / group, default access right, user qualification and the like are registered. As shown in FIG. 4, the user registration file 14 includes a user name, a group name to which the user belongs, The default access right to / group / world, user qualifications, and various attribute information are registered.

Reference numeral 15 denotes a company organization file indicating the organization structure of a company or the like. When the structure of the company organization is, for example, the structure shown in FIG. 5, the company organization file 15 includes the upper group name and the group name as shown in FIG. Each group name and various attribute information below are registered. In FIG. 5, belonging to the same group means that the group name is the same. For example, it is determined that the group is different between Grp111 and Grp112. Also, belonging to the same organization described later means the same organization in the example of FIG.
Those belonging to Grp11, Grp111, etc. of the lower group of 1 belong to the same organization, and similarly, those belonging to Grp211 and Grp212 of the lower group of Grp2 belong to the same organization.

Reference numeral 16 denotes a special access file in which access rights for a specific user / group are set. As shown in FIG. 7, the special access file 16 has a file corresponding to the product number shown in FIG. TAG (corresponding to, for example, the product number cccc in FIG. 3), an access category indicating whether the user or the group is granted the access right, the user name / group name for which the special access right is granted, and the contents of the access right An access right indicating whether the read right is a read right or a write right is registered. 1
7 is a design data, a standard,
This file stores electronic data such as specifications and drawings.

Next, access right management in this embodiment will be described. (1) Creation of User Registration File / Company Organization File / Management Data File The data shown in FIG. 4 is created in advance and registered in the user registration file 14. That is, A1234, B567
8, a group name such as Grp1111, Grp1242, etc. to which the user belongs, a default access right to a user / group / world, and various attributes such as a qualification and a name of the user.

Further, the company organization configuration diagram shown in FIG. 5 represented by the group name corresponding to the department code of the company or the like is represented as in the example of FIG.
Register to 5. In the company organization file 15, as shown in FIG. 6, a group name and a group immediately above the group are also registered. Further, a management data file 13 is prepared for managing each electronic data. The management data file 13 stores a product number for uniquely identifying the electronic data to be managed, a version number, and the location of the electronic data, and has a basic access right / owning user name for each user / group / world, and a design / approval. STATUS that manages the status such as completed / registered, data open / disable identification, and the presence / absence of special access when granting other than the basic access right. In addition, in order to grant the above-mentioned special access, FIG.
A special access file as shown in (1) is prepared, and the special access right is managed in this file.

(2) Processing for New Registration of Data / Change of Access Right / Data Release FIG. 8A is a flowchart showing processing for new registration and data release of data. A process for newly registering data and releasing data will be described. When newly registering data, the basic access right setting processing unit 1 of the data writing / access setting unit 11 shown in FIG.
1a reads the corresponding owner and the default access right from the user registration file 14, and sets the owner and the default access right [step S in FIG.
011]. The STATUS setting processing unit 11c sets STATUS to "under design" because the data is newly registered (step S012). In addition, the disclosure mode setting processing unit 11d sets “non-public” (step S01).
3]. Then, these data are collectively set in the access right, owner, STATUS, and disclosure mode columns of the management data file 13.

When setting a special access right other than the basic access right, the special access right setting processing unit 1
In step 1b, the file TAG, the access category, the user / group name, and the access right of the data to be subjected to the special access are set in the special access right file 16, and the special access right in the management data file 13 is set. [Step S024].

By setting a special access right, an access right can be given to an object that does not originally have an access right (one that does not have a default access right) (addition of an access right), or can have a default access right. You can strip access rights from things. For example,
To completely deny access rights, register the name of the user or group whose access rights are to be denied in the user or owner column of the special access right file shown in FIG.
Register [••] in the access right column. To deprive only the right to write, enter [R
・] Is registered. Note that the access right registered in the special access right file has priority over the default access right. Furthermore, when adding a user with access right, register the user name or group name to which the access right is added in the user or owner column of the special access right file. Register [R.] in the right column.

On the other hand, at the time of data release, FIG.
As shown in (3), the STATUS setting processing unit 11c changes the STATUS column of the management data file 13 to “registered” (or “approved”) (step S032), and the public mode setting processing unit 11d Is changed to "public" in step S03.
3]. In addition, if there is a special access right setting,
The special access right is set as described above.

FIG. 8B is a flowchart showing a process when the access right is changed. The change of the access right will be described with reference to FIG. It should be noted that the access right is changed as necessary after new registration of data. To change the access right, the user / group / world access right is arbitrarily set by the basic access right setting processing unit 11a (step S021 in FIG. 8B),
Also, "public / non-public" is set in the public mode setting processing unit 11d.
(Step S023 in FIG. 8B).
Further, in the special access right setting processing unit 11b, a special access right other than the basic access right is set as described above. Note that when the STATUS is “designing” and the disclosure mode is “public”, only the access with the special access right is permitted as described later, so the special access right must be set.

(3) Processing at Access Right Determination FIG. 9 is a diagram showing an access right determination flow at the time of data reference. The access right determination processing at the time of data reference will be described with reference to FIG. When referring to the data, the data read / access determination processing unit 12 shown in FIG. 2 reads the specified management data from the management data file 13 and obtains the owner of the corresponding product number, the basic access right, and the STATU.
S, information about the access right such as the public mode is obtained (step S101 in FIG. 9). The user access right determination processing unit 12a obtains information on the user who is trying to access and the owner of the data to be accessed from the user registration file 14, and determines the relationship between the user and the owner. If the user is the owner, the access is unconditionally permitted (step S102). For example, if the user who refers to the data (product number aaa) in FIG.
In the case of 1234, access is permitted. Otherwise, the process proceeds to the next step S102.

In step S102, it is determined from the relationship between the groups registered in the company organization file 15 whether the user and the owner belong to the same group. For example, when referring to the data (product number aaa) in FIG. 3 and the user is C9012 in FIG.
012 belong to the group Grp111, and the owner A1234 of the data also belongs to the group Grp111.
Proceed to. On the other hand, if the user uses B5678, D3 in FIG.
In the case of E456 and E456, the group is different from the owner A1234, and the process proceeds to step S111.

When the user and the owner belong to the same group, the data access determination processing unit 12c refers to the basic access right obtained from the management data file 13 and determines whether or not access within the group is permitted (see FIG. 4). Step S104). If access within the group is permitted, the process proceeds to step S105, and the presence or absence of the special access right is confirmed. If the intra-group access right is not permitted, the process proceeds to step S107, the access right is determined to be NG, an error message is output, and the process ends. For example, if the C9012 is a user, the access right of the group of the data (product number aaa) in FIG. 3 is [RW] and the read is permitted, so that step S
Proceed to 105.

In step S105, the presence / absence of a special access is checked by referring to the special access column of the management data file 13. If there is no special access, the process proceeds to step S106 and the access is OK. In addition, when there is a special access, it is confirmed that the access right of the group is not deprived by referring to the special access file 16, and when it is not deprived, the access is OK.
It becomes. For example, when the C9012 refers to the data in FIG. 3, the access is OK because “there is no special access right”.

If it is determined in step S103 that the group does not belong to the same group, the flow advances to step S111 to determine whether access to the world is permitted by the basic access right of the management data file. In addition,
When it is determined that the user belongs to a group other than the same group, for example, when the user of B5678, D3456, or E7890 of FIG.
In this case, a user other than the user refers to the data in FIG. If access to the world is not permitted, the process proceeds to step S107, and the access right becomes NG. If access to the world is permitted, STATUS is determined (step S11).
2). If the STATUS is "under design", the process proceeds to step S113, and it is determined whether the disclosure mode is "public". If STATUS is not being designed, the process proceeds to step S121.

If the open mode is not "open", the flow advances to step S107, and the access right becomes NG.
STATUS is "under design" and open mode is "open"
In the case of, the process proceeds to step S114, and it is determined whether or not the special access right is permitted.
Proceed to 7 and access is OK. If the special access right is not permitted, the process proceeds to step S107, and the access right becomes NG. For example, in FIG.
ATUS is "under design" and the public mode is "public",
The data to which the special access right is set is the data shown in FIG. 3. In this case, as shown in FIG. 7, only the user of D3456 becomes OK in the world due to the setting of the special access right.

If it is determined in step S112 that STATUS is not under design, a special access right is determined in step S121. If the setting of the special access right is OK, the process proceeds to step S106, and the access is OK. If the special access right is not defined, the process proceeds to step S122, and it is determined whether the group of the user and the group of the owner are in the same organization with reference to the company organization file 15 (see FIG. As described above, for example, when the group of the sub-organization of Grp1 is in the same organization, the group of the sub-organizations of Grp1 and Grp2 is outside the same organization, and in the same organization, the process proceeds to step S106 and the access is permitted. If not within the same organization, the process proceeds to step S107, and the access is NG.

For example, when the user of E7890 reads the data of FIG. 3, the group to which E7890 belongs is Grp213, and the special access right file is given special access rights to those belonging to group Grp213. E789
The user 0 is permitted access by the special access right. For other users, the company organization file 1
5 and the access is permitted. Also, when reading the data of FIG.
Since the user belonging to 211 does not belong to the same organization as the data owner, access is not permitted.

Next, a case where the present invention is applied to access management in a series of procedures from creation of drawing data to approval, distribution / reception will be described. FIG. 10 is a diagram showing a procedure from creation of drawing data to approval, distribution / reception, and a configuration of a group of files for managing the drawing data in the present embodiment. The data write / access setting unit 11 and the data read / access determination unit 12 are omitted.

In FIG. 10, reference numeral 21 denotes a location information file storing location information of drawing data, 22 denotes a process management information file, and the process management information file 22 stores the drawing number / version number, basic The access right, STATUS, open mode information, and special access right information are stored. The combination of the location information file 21 and the process management information file 22 corresponds to the management data file 13 shown in FIG.

Reference numeral 23 denotes a design change distribution destination information file storing design change distribution destination information, 24 denotes an approval destination information file storing destinations for requesting approval of drawings, and 25 denotes a reception for managing a drawing data reception state. This is a management information file. Reference numeral 26 denotes a user information file storing user information corresponding to the user registration file 14 shown in FIG. 2, and the user information file 26 includes, as shown in FIG. Access rights, user qualifications (designer, checker, approver, etc.) are registered. Reference numeral 27 denotes an organization information file corresponding to the company organization information file 15 shown in FIG. 2, and the upper group name and the lower group name are registered in the organization information file 27 as shown in FIG. Reference numeral 28 denotes a drawing data file corresponding to the electronic data file 17 shown in FIG. 2, and the drawing data file 28 stores digitized drawing data.

In FIG. 10, the procedure from creation of drawing data to distribution / reception is performed as follows. (1) Drawing Creation / Drawing Registration When the drawing data is created by the designer, FIG.
The drawing data is registered by the new registration processing shown in FIG. At the time of new registration of drawing data, as described above, the default access right of the corresponding owner is read from the user information file 26, the owner and the default access right are written in the process management information file 22, and the STATUS is set to "designing". , And the disclosure mode is set to “non-disclosure”, and is written to the process management information file 22. Further, the location of the drawing data is written in the location information file 21 and the drawing data is stored in the drawing data file 28. Further, as needed, the design change distribution destination information, the approval destination information, and the reception management information of the drawing data are registered in the design change distribution destination information file 23, the approval destination information file 24, and the reception management information file 25, respectively.

(2) Approval Request Approval request is made for the drawing number selected within the range of the design change unit. After the approval, it is possible to set whether registration and distribution are automatically performed. When making an approval request, the approval destination information and the like are read from the approval destination information file 24 and the like, and the design change number, drawing number, version number, STATUS, designer, etc. Specify the conditions and request the surveyor and approver for inspection and approval using e-mail or the like. FIG. 11 is an example of an object list for approval request, which is displayed on the screen of the terminal by the above operation, and an example of an approval request content designation screen. When a condition is designated on the screen shown in FIG. It is issued to checkers and approvers by e-mail or the like. The ECO shown in the figure means a design change unit.

(3) Checking / Approval The checker and approver confirm the contents of the drawing for the requested approval with reference to the drawing data, determine whether or not to approve, and return it to the requestor. . The STATUS of the drawing data in this state is usually “under design”,
The open mode is “non-public”, and for example, access rights are not given to those in the manufacturing department, but access rights are given to checkers and approvers belonging to the same group as the designer. By doing so, it is possible to protect the drawing data being designed from being leaked.

FIG. 12 shows an example of a check / approval reply screen displayed on the terminal. When the checker and the approver make a check / approval reply on the above screen, the approval information is stored in the process management information file 22. Stored drawing data file 28
The approval is recorded in the drawing data stored in the. And
If automatic registration / distribution is specified at the same time as approval, the process automatically proceeds to the next registration / delivery process.

(4) Registration / Distribution Upon approval of all the drawing data related to one design change is completed, the designer related to the drawing registers and distributes the drawing data in units of design change. At the time of registration / distribution, the processing at the time of data release shown in FIG. 8A is performed. That is, STATUS is changed to “registered”, and the disclosure mode is changed to “public”. When the registration is made, the registration information such as the registration date is recorded in the process management information file 22, and the design change distribution destination information file 23
Is notified to a predetermined distribution destination by e-mail or the like based on the distribution destination information stored in.

(5) Delivery / Receiving The drawing information is referenced / printed / file output is performed for the notified delivery, and the receiving information is recorded in the receiving management information file 25. (6) Via the status reference terminal, it is possible to confirm the receiving status of the approval request or the distributed one, how far the procedure has progressed, and the like.

(7) Change of Access Right In the above-mentioned procedure, reference is made to those having no access right so as not to leak the drawing data in the course of design, but for those that require a manufacturing turn. In some cases, the manufacturing department may have to start manufacturing in advance, and it is necessary to give the manufacturing department access rights even when STATUS is in the “designing” state. In this case, the access right changing process shown in FIG. 8B is performed. That is, change the public mode to "public"
Add access to the departments you need. This allows the manufacturing department to refer to the corresponding drawing even when STATUS is in the “designing” state.

In addition, although it belongs to an inaccessible group according to the judgment on the company organization, access may be required in some cases. This corresponds to, for example, the case of joint development with a related company or the outsourcing of manufacturing. Also in the above case, special access rights are set and the relevant department or
Grant access to individuals.

[0050]

As described above, in the present invention,
The following effects can be obtained. (1) An electronic data storage unit for storing electronically created data and an access right determination unit for determining an access right to the data are provided, and the access right determination unit determines the basics of the data for a user / group / world. In addition to the access right, whether or not to access the data is determined based on at least the configuration of the organization using the data, the state of the data, and whether or not the data can be released, so that various types of electronic data are centrally managed. In addition, access to various types of electronic data can be finely managed in accordance with the state of data, the open / closed state of data, or the user / group to which the user belongs.

(2) Since data writing / access setting means is provided to perform processing when newly registering data / distributing data / changing the access right, the data status / public mode at the time of new registration and data distribution is set. Settings can be made automatically, and depending on the data status / public mode, access rights can be granted to those who do not originally have access rights. Access rights can be managed. (3) When managing the access right to drawing data, qualification information of a designer, a checker, and an approver is added to the user information storage means, and drawing data is being designed / registered, and published / privately disclosed. The access right in the manufacturing department or the like is managed in accordance with the status, the special access right, etc., so that the access right to the drawing data can be managed in accordance with the actual work content.

[Brief description of the drawings]

FIG. 1 is a principle configuration diagram of the present invention.

FIG. 2 is a diagram showing a configuration of a system according to an embodiment of the present invention.

FIG. 3 is a diagram showing an example of a management data file according to the embodiment of the present invention.

FIG. 4 is a diagram showing an example of a user registration file according to the embodiment of the present invention.

FIG. 5 is a diagram showing a configuration example of a company organization according to the embodiment of the present invention.

FIG. 6 is a diagram showing an example of a company organization file according to the embodiment of the present invention.

FIG. 7 is a diagram illustrating an example of a special access right file according to the embodiment of the present invention.

FIG. 8 is a diagram showing processing at the time of new registration / data release / access right change.

FIG. 9 is a diagram showing an access right determination process when referring to data.

FIG. 10 is a diagram showing an embodiment in which the present invention is applied to access right management of drawing data.

FIG. 11 is a diagram showing an example of a screen displayed at the time of requesting approval of drawing data.

FIG. 12 is a diagram showing an example of a check and approval reply screen.

FIG. 13 is a diagram showing an example of a conventional user registration file.

FIG. 14 is a diagram showing a basic form of an access right in conventional data management.

[Explanation of symbols]

1 Electronic data storage means 2 Management data storage means 3 Organization information storage means 4 User information storage means 5 Special access right information storage means 6 Data reading / access right determination means 7 Data write / access right setting means 11 Data write / access setting section 11a Basic access right setting processing unit 11b Special access right setting processing unit 11c STATUS setting processing unit 11d setting processing unit 12 Data read / access judgment unit 12a User access right determination processing unit 12b Company organization judgment processing section 12c Data access determination processing unit 13 Management data file 14 User registration file 15 Company organization file 16 Special access file 17 files containing electronic data 21 Location information file 22 Process management information file 23 Design change distribution destination information file 24 Approval destination information file 25 Receipt management information file 26 User information file 27 Position information file 28 Drawing data file

──────────────────────────────────────────────────続 き Continuation of the front page (56) References JP-A-5-324446 (JP, A) JP-A-7-56794 (JP, A) JP-A-7-262072 (JP, A) 280139 (JP, A) JP-A-6-149841 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) G06F 12/00 G06F 12/14

Claims (5)

(57) [Claims] An electronic data storage means for storing data created electronically, information for specifying data such as a product number and a version number of the data, a basic access right to the data, a data state, and a data release Management data storage means for storing availability, presence of data, and presence or absence of special access rights; organization information storage means for storing information on organizations using the data; user names, group names, and user / group User information storage means storing default access rights and user qualifications, special access right information storage means storing special access rights, the management data storage means, organization information storage means, user information storage means, special cases Data read / access right determination for determining the access right to the data based on the information stored in the access right information storage means The data read / access right determination means refers to the management data storage means, the organization information storage means, the user information storage means, and the special access right information storage means when there is an access request to the data. Then, it is determined whether the access requester is the owner of the data, belongs to the same group as the owner, or is a third person other than the world, and the basic access to the owner / group / world is determined. Right,
And access permission is determined based on the special access right, and if the access request is a world,
An information management system for determining whether or not access is possible based on the status of the data and whether or not the data is open in addition to the basic access right and the special access right, and permitting the user who has access to access the data; . 2. A data writing / access setting means, wherein the data writing / access setting means is provided with a default data set in a user information storage means when newly registering data.
Based on the access right, the basic access right is registered in the management data storage unit, and the data state and the release mode registered in the management data storage unit are set to designing and non-public, respectively. When there is, the special access right is set in the special access right information storage means, and at the time of data distribution, the data state of the management data storage means is changed to “registered”, and the public mode is changed to public.
Further, when the special access right is set, the special access right is set in the special access right information storage unit. When the access right is requested to be changed, the management data storage unit is set based on the access right change request. 2. The information management system according to claim 1 , wherein the basic access right and the disclosure mode are changed, and the special access right is registered in the special access right information storage means according to the setting of the special access right. 3. Qualification information of a designer, a checker, and an approver is added to the user information storage means, and the data read / access right determination means is stored in the electronic data storage means using the qualification information. 3. The information management system according to claim 1, wherein whether access to drawing data is permitted is determined. 4. The data reading / access right judging means comprises:
When the state of the drawing data stored in the electronic data storage unit is under design based on the basic access right, data state, and data disclosure availability information stored in the management data storage unit,
4. The information management system according to claim 3 , wherein access to the manufacturing department of the drawing data is disabled, and access to the manufacturing department of the drawing data is enabled when the state of the data is registered. 5. When the manufacturing department needs access to the drawing data being designed, the data writing / access setting means sets the drawing mode of the drawing data to open,
5. The information management system according to claim 3 , wherein the special access right is set in the special access right information storage means so that the manufacturing department can access the information management system.