JP3733715B2 - Document disclosure apparatus, medium storing document disclosure program, and document disclosure method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a document disclosure device that discloses an electronic document in response to a request from a user.,Medium on which document disclosure program is recordedAnd document disclosure methodIn particular, a document disclosing device for disclosing a document in a state in which a part of the contents is not disclosed,Medium on which document disclosure program is recordedAnd document disclosure methodAbout.
[0002]
[Prior art]
When creating a document, it is very helpful to see similar documents created by others. For example, in order to increase the productivity of the group, it is useful to disclose sample documents within the group so that group members can refer to them as needed.
[0003]
However, even for members of the same group, it may be inappropriate to disclose the entire text of a document as a sample document due to differences in subgroups or differences in member authority. For example, a product proposal specifically describes the problems that the proposal has, but it is inappropriate to disclose the details to other departments in order to comply with the confidentiality obligation with the proposal. is there. In addition, the product offer price is described specifically in the product proposal, but the discretionary power of the discount offered by the proposer and the approver is other members of the authority (for example, those with lower ranks in the workplace, (In this case, it is inappropriate to disclose the entire description of the proposal.)
[0004]
Therefore, the disclosure content of the sample document needs to be in accordance with the other party who wants to refer to the document. As a conventional technique related to the disclosure of a document according to a referrer, for example, as described in Japanese Patent Laid-Open No. 7-98708, an access authority is set for each element constituting the document, and the other party who refers to the document Depending on the profile, the contents included in the element may be disclosed or not disclosed.
[0005]
Also, as disclosed in Japanese Patent Laid-Open No. 9-153912, a plurality of different contents for a certain matter are prepared in advance, and the contents to be referred to are switched according to the selection or profile on the side of referring to the document. .
[0006]
[Problems to be solved by the invention]
However, in the technique described in Japanese Patent Application Laid-Open No. 7-98708, a part of the content of the document is completely invisible, so that the reference person cannot know what was written in the non-disclosure part. . In order for the disclosed document to serve as a sample, it is required that the referrer can understand the topic of each part of the document as well as the structure of the entire document. That is, the technique described in Japanese Patent Application Laid-Open No. 7-98708 does not satisfy the requirement to use as a sample. In addition, the access right must be set for each part of the contents, and the manpower burden on the information disclosing side becomes very large as the number of documents to be disclosed increases.
[0007]
In the technique described in Japanese Patent Laid-Open No. 9-153912, the contents must be prepared in advance according to the partner to be referred to. As for disclosure of sample documents, it is desirable that many documents are disclosed because it is easy for the referring side to find a document that is close to their own situation, and to grasp a knack by comparing a plurality of documents. In the technique described in Japanese Patent Application Laid-Open No. 9-153912, many documents are disclosed, but it is unavoidable to add a large number of documents that restrict the contents of those documents. Is very big.
[0008]
The present invention has been made in view of the above points, and is a document disclosure device that can generate a document that can sufficiently serve as a sample while limiting the content transmitted to a referrer with a small man-hour burden. The purpose is to provide.
[0009]
Another object of the present invention is a document that can cause a computer to perform a process of generating a document that can sufficiently play a role as a sample while restricting the contents transmitted to a referrer with a small man-hour burden. It is to provide a medium on which a disclosed program is recorded.
  Another object of the present invention is to provide a document disclosure method for generating a document that can sufficiently fulfill the role of a sample while restricting the content transmitted to a referrer with a small man-hour burden. is there.
[0010]
[Means for Solving the Problems]
In the present invention, in order to solve the above-described problem, in a document disclosure device that discloses an electronic document, a document storage unit that stores the electronic document, and a disclosure request that specifies the document in the document storage unit are received. And a blur rule determining means for analyzing the profile information about the request source of the disclosure request and determining a blur location detection method and a blur method according to the profile information, and among the disclosure target documents specified by the disclosure request From the blur location detection means for detecting the blur location by the blur location detection method determined by the blur rule determination means, and the blur location detected by the blur location detection means in the disclosure target document A blurred document generating means for executing a blurring process by the blurring method determined by the rule determining means and generating a blurred document. Document supplying apparatus is provided, wherein.
[0011]
According to this document disclosure apparatus, when a disclosure request designating a document in the document storage unit is input, profile information regarding the request source of the disclosure request is analyzed by the blur rule determining unit, and blurring according to the profile information is performed. A location detection method and a blurring method are determined. Then, the blur location detection means detects the blur location from the disclosure target document designated by the disclosure request. Then, the blurred document generation unit executes the blurring process by the blurring method determined by the blurring rule determination unit on the blurred portion detected by the blurring portion detection unit, and generates a blurred document.
[0012]
As a result, a document whose content is blurred can be disclosed to a third party without a person who discloses the document changing the content of the original document.
Further, on a medium recording a document disclosure program for disclosing an electronic document, a document storage means for storing the electronic document, and upon receiving a disclosure request designating a document in the document storage means, the disclosure A blur rule determining unit that analyzes profile information about a request source of the request and determines a blur location detection method and a blur method according to the profile information, and the blur rule from among the disclosure target documents specified in the disclosure request A blur spot detection unit that detects a blur spot by the blur spot detection method determined by the determination unit, and the blur rule determination unit determines the blur spot detected by the blur spot detection unit in the disclosure target document. The computer functions as a blurred document generation means that generates a blurred document by executing a blurring process using the blurred method. Medium recording a document disclosure program for causing is provided.
[0013]
By causing the computer to execute the document disclosure program recorded on this medium, it is possible to cause the computer to perform the processing that the document disclosure apparatus according to the present invention should have.
Further, in a document disclosure method for disclosing an electronic document, when a disclosure request designating a document in a document storage means for storing the electronic document is received, profile information relating to the request source of the disclosure request is analyzed. And determining a blur location detection method and a blur method according to the profile information, detecting a blur location by the determined blur location detection method from the disclosure target document specified in the disclosure request, and the disclosure There is provided a document disclosure method characterized by executing a blurring process by a determined blurring method on a detected blurring part in a target document to generate a blurry document.
According to such a document disclosure method, when a disclosure request designating a document in the document storage unit is input, profile information relating to a request source of the disclosure request is analyzed, and a blur location detection method according to the profile information A blurring method is determined. Then, the blurring part is detected from the disclosure target document designated by the disclosure request. And the blurring process by the determined blurring method is performed with respect to the blurring part detected by the blurring part detection means, and a blurring document is produced | generated.
[0014]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a principle configuration diagram of the present invention. The document storage unit 1 stores a large number of electronic documents.
[0015]
The blur rule determination unit 2 receives a disclosure request designating a document in the document storage unit 1, analyzes profile information regarding the request source of the disclosure request, and determines a blur location detection method and a blur method according to the profile information. To do. Here, the document specified by the disclosure request becomes the disclosure target document 1a. The blur rule determining means 2 stores a plurality of blur rules 2a in advance in order to determine a blur location detection method and a blur method. Each blurring rule 2a consists of a set of a blur location detection method and a blurring method. By selecting which blurring rule to apply from these, it is possible to determine the blur location detection method and the blurring method according to the profile information.
[0016]
The blur location detection unit 3 detects the blur location by the blur location detection method determined by the blur rule determination unit 2 from the disclosure target document 1a specified by the disclosure request.
[0017]
The blurred document generation unit 4 executes the blurring process by the blurring method determined by the blurring rule determination unit 2 on the blurring part detected by the blurring part detection unit 3 in the disclosure target document 1a. Generate.
[0018]
According to such a document disclosure device, when a disclosure request is input, the blurred document 5 whose contents are automatically blurred according to the profile information of the request source of the disclosure request is created. For example, the company name is replaced with “◯” or the numerical value is replaced with a black line. In such a blurred document 5, the contents belonging to personal privacy and trade secret are hidden, but other document formats remain the same, so it is effective as a sample when creating a similar document. Can be used. Moreover, the person who discloses the document is not burdened with an extra burden.
[0019]
Hereinafter, embodiments of the present invention will be described in detail.
FIG. 2 is a diagram showing a system configuration according to the embodiment of the present invention. In the present embodiment, the document creation device 20, the plurality of requesting subsystems 30 and 30 a, and the disclosure subsystem 100 are connected to the network 10, and various data are exchanged via the network 10. As the network 10, the Internet, an intranet, or the like can be used. The document creation apparatus 20 is an apparatus for creating a document by a user of the disclosure-side subsystem 100 (hereinafter referred to as a “discloser”). Of the documents created by the document creation device 20, a document disclosed to others is sent to the disclosing subsystem 100. In this embodiment, it is assumed that HTML (HyperText Mark-up Language) is used as the format of the document to be disclosed.
[0020]
The requesting subsystems 30 and 30a are devices that output a document disclosure request and display the contents of the received document on the screen of the display device. The disclosure-side subsystem 100 is a device that creates a new document in which the content of the requested document is blurred according to the profile of the request source of the disclosure request and transmits it to the request source.
[0021]
Hereinafter, the relationship between the functions of the function units constituting each subsystem and other function units will be described for each function unit.
First, the functional unit of the requesting subsystem 30 will be described. The functional units described below also have other requesting subsystems 30a as well.
[0022]
The disclosure target document designating unit 31 has a function of designating a document requested to be disclosed by a user of the requesting subsystem (hereinafter referred to as a requester). The specification of the document is performed by the requester using this function unit to input an identifier assigned to the document stored by the document storage unit 101 of the disclosure subsystem 100 to be described later. When the input of the identifier is completed, the disclosure target document specifying unit 31 notifies the disclosure request transmitting unit 33 described later of the identifier.
[0023]
The profile management unit 32 has a function of managing the requester's profile and the profile of the requesting subsystem 30. Here, the requester's profile describes information related to the individual requester. Further, the profile of the requesting subsystem 30 describes information unique to each requesting subsystem. Therefore, when a plurality of people use a certain requesting subsystem, profiles corresponding to the plurality of requesters are managed in one requesting subsystem. The profile of the requesting subsystem is different for each subsystem. These various profiles are stored in the profile management unit 32 in advance.
[0024]
One profile is expressed as a set having a plurality of pairs of attribute names and attribute values. An example of a profile managed by the profile management unit 32 is shown below.
[0025]
FIG. 3 is a diagram showing an example of a requester's profile. In this profile, an attribute name and an attribute value that can be taken in the attribute are registered. In the example of FIG. 3, the possible attribute value for the attribute name “name” is “first and last name”. The attribute value that can be taken for the attribute name “mail address” is “SMTP mail address”. The attribute value that can be taken for the attribute name “affiliation group” is “name of the organization to which it belongs”. The attribute value that can be taken for the attribute name “affiliation office” is “the name of the establishment to which it belongs”. The attribute value that can be taken for the attribute name “Department” is “Name of department”. The attribute value that can be taken for the attribute name “office system” is “current office system”. The attribute value that can be taken for the attribute name “class” is “current class”.
[0026]
FIG. 4 is a diagram illustrating an example of a profile of a requesting subsystem. In this profile, an attribute name and an attribute value that can be taken in the attribute are registered. In the example of FIG. 4, the attribute value that can be taken for the attribute name “machine name” is “character string”. A possible attribute value for the attribute name “machine address” is “TCP / IP address”. A possible attribute value for the attribute name “domain” is “Internet domain”. The attribute value that can be taken for the attribute name “management organization” is “name of organization to be managed”. An attribute value that can be taken for the attribute name “management establishment” is “name of establishment to be managed”. The attribute value that can be taken for the attribute name “management department” is “name of department to be managed”.
[0027]
The profile managed by the profile management unit 32 is used for data transmitted by the disclosure request transmission unit 33 described later.
Returning to FIG. 2, the disclosure request transmission unit 33 has a function of transmitting a document disclosure request to the disclosure subsystem 100. When the disclosure request transmitting unit 33 is notified of the identifier from the disclosure target document designating unit 31, the disclosure request transmitting unit 33 acquires the requester's profile and the requester side subsystem profile from the profile management unit 32. Data including these profiles and identifiers is sent as a disclosure request to the disclosure subsystem 100 via the network 10.
[0028]
The document reception unit 34 has a function of receiving a document transmitted by the document transmission unit 116 of the disclosure-side subsystem 100 described later.
The document display unit 35 has a function of displaying the document received by the document receiving unit 34 on the screen of the display device.
[0029]
The above is the contents of the functions of the components of the requesting subsystem 30. Next, functional units constituting the disclosure-side subsystem 100 will be described.
The document storage unit 101 has a function of storing a plurality of documents that are permitted to be disclosed to others. Of the documents created by the document creation device 20, documents permitted to be disclosed to others are sent to the disclosure subsystem 100 via the network 10. The document storage unit 101 receives the sent document, assigns a unique identifier to the document, and stores the document in association with the identifier. In this embodiment, a URL (Uniform Resource Locator) is used as a notation of an identifier for a document. The document storage unit 101 transcribes a document to be disclosed into a disclosure target document storage unit 102 to be described later in accordance with a notification from a disclosure request receiving unit 103 to be described later.
[0030]
The disclosure target document storage unit 102 has a function of temporarily storing a document to be disclosed for replacement processing of contents to be described later. The document to be disclosed is transferred to the disclosure target document storage unit 102 by the document storage unit 101.
[0031]
The disclosure request receiving unit 103 has a function of receiving a disclosure request sent via the network 10 from the disclosure request transmitting unit 33 of the requesting subsystem 30 for the document stored in the document storage unit 101. In the present embodiment, processing according to another disclosure request is not started until a series of disclosure processing started by one disclosure request is completed. That is, a plurality of disclosure processes are not executed in parallel. The disclosure request receiving unit 103 determines whether or not the disclosure process has been completed by examining whether or not a document is stored in the disclosure target document storage unit 102. If a document is stored in the disclosure target document storage unit 102, it is determined that processing is in progress.
[0032]
When the disclosure request receiving unit 103 receives a new disclosure request and the document is not stored in the disclosure target document storage unit 102, the disclosure request receiving unit 103 notifies the document storage unit 101 of an identifier included in the disclosure request. Thus, the document to be disclosed is stored in the disclosure document storage unit 102. At the same time, the request storage and the profile of the requesting subsystem 30 included in the disclosure request are notified to the profile storage unit 104 described later. If a document is stored in the disclosure target document storage unit 102, the functional unit does not perform subsequent processing.
[0033]
The profile storage unit 104 has a function of storing the requester's profile and the requesting subsystem profile included in the disclosure request received by the disclosure request receiving unit 103. When a profile is sent from the disclosure request receiving unit 103, the profile storage unit 104 deletes the profile stored up to that point and stores the newly sent profile. The profile stored in the profile storage unit 104 is used in the selection process by the replacement rule selection unit 112 described later. It is also used when the document transmission unit 116 described later specifies a transmission destination.
[0034]
The content replacement method storage unit 105 has a function for storing a method of replacing a document with a blurred content. The method stored in the content replacement method storage unit 105 is described as a series of procedures executed by the content replacement unit 115 described later. In the present embodiment, a plurality of replacement methods are stored in advance, and an identifier for uniquely identifying each replacement method is assigned. The identifier is used to configure a specific rule stored in a replacement rule storage unit 107 described later. In this embodiment, a comment relating to the replacement method indicated by the identifier is stored in association with the identifier of the replacement method. The stored comments are used to help the disclosing person understand the contents of the replacing method when the disclosing person uses the replacement rule setting unit 108 described later.
[0035]
The replacement method used in this embodiment is roughly divided into four types. The four types are called semantic abstraction, modeling abstraction, meaninglessness, and noise addition. The characteristics of each replacement method will be described below.
[0036]
Semantic abstraction replaces specific data with an expression having a high level of abstraction, such as 12345 → “5-digit positive number” → “numerical value”. In this type of replacement method, a plurality of levels of abstraction and their hierarchical relationships (for example, “positive number” → “numerical value”) are defined in advance, and a specific data characteristic conversion formula (for example, 12345 → This can be realized by defining a “five-digit”) and describing a procedure for calculating by combining these. As a data structure that defines a plurality of abstraction levels and their upper and lower relationships, for example, the following can be considered.
[0037]
FIG. 5 is a diagram illustrating an example of hierarchical structure information that defines a plurality of abstraction levels and their upper and lower relationships. This hierarchical structure information 41 has a certain level of abstraction as a node and expresses a hierarchical relationship as a link, and forms a tree structure as a whole. In the notation of the lowest node, actual data or a data type definition corresponding to the hardware architecture of the system (for example, a definition such that “the first bit of 16-bit data is 1”) is described.
[0038]
In addition to the numerical values described above, there are words and images as data types to which this type of replacement method can be applied. Examples of phrase abstraction include Nakai-cho, Kanagawa Ashigara-gun → “Location of office” → “Name of place”. Further, as an abstraction of an image, for example, by defining a formula for converting an impression word for an image from a lightness or hue distribution tendency, a specific image can be changed to a “bright photo” or “warm illustration”. .
[0039]
Modeling abstraction replaces specific data with an expression that has a high level of abstraction.
FIG. 6 is a diagram illustrating an example of modeling abstraction. In this example, the abstraction of data is performed by replacing a character string in the document 42 with a black line. Therefore, in the converted document 42a, four lines of character strings are represented by four parallel lines.
[0040]
Modeling abstraction is to define a data type replacement relationship (for example, character string → line) and a formula for converting features (for example, number of lines → number of lines) in advance, and describe a procedure to calculate by combining them. Can be realized. In addition to the above-described character string, an image (for example, a region occupied by an image is replaced with a graphic such as a rectangle) can be cited as a type of data to which modeling abstraction can be applied.
[0041]
The meaningless conversion is to replace specific data with meaningless data that does not depend on the data, such as “12345” → “******”. This type of replacement method is realized by describing a procedure for uniformly replacing specific data or a procedure for replacing with random data.
[0042]
In addition to the numerical values described above, data types to which meaninglessness can be applied include character strings, images (for example, masking and mosaic), and voice (for example, silence and replacement with a dial tone).
[0043]
In the noise addition, for example, an image is deteriorated to have a rough image quality, and the specific data is replaced with a data obtained by adding the same type of data as the data. This kind of replacement method is realized by defining a creation method (for example, a function or a probability) of data to be added and describing a procedure for adding the data obtained from the creation method to the replacement data.
[0044]
As data types to which noise addition can be applied, in addition to the above-described images, there are voices (for example, frequency shift of uttered sound).
Returning to FIG. 2, the replacement location designation method storage unit 106 has a function for storing a method for designating a location whose content is to be replaced. The replacement location designation method stored in the replacement location designation method storage unit 106 is described as a series of procedures executed by the replacement location detection unit 114 described later. In the present embodiment, a plurality of methods are stored in advance, and an identifier for uniquely identifying each replacement location designation method is assigned. The identifier is used to configure a specific rule stored in a replacement rule storage unit 113 described later. Further, in the present embodiment, a comment regarding the method indicated by the identifier is stored in association with the identifier of the replacement location designation method. This comment is used to assist the disclosing person in understanding the replacement location designation method in the operation by the disclosing person using the replacement rule setting unit 108 described later.
[0045]
The replacement location designation method used in the present embodiment is roughly divided into two types. One uses the semantic classification of the content, and the other uses the layout.
[0046]
Examples of semantic classification include human notation, object notation, place notation, time notation, quality notation, quantity notation, and the like. The specification method based on semantic classification defines the possible values for each data type, or defines the abstraction level and the relationship for each data type in the same way as the semantic abstraction described above, and conforms to that definition. This is realized by describing a procedure for searching for the contents of a document to be executed.
[0047]
In the present embodiment, dictionary information is defined that defines semantic classification items composed of a plurality of hierarchies and data belonging to each item. For example, the notation “Kamiashigara Shokai” belongs to the item “thing” as a major classification, and belongs to the item “company name” as a middle classification. In the present embodiment, by specifying an item in a certain hierarchy, a place where data belonging to the item exists in the document is detected as a place to be replaced.
[0048]
Examples of layouts that can be used include headings and subheadings, table cells, underlined parts, bulleted parts, enclosed parts, parts whose color usage is different from the default setting, and links to other documents. This type of designation method is realized by defining a possible value of data defining the layout of the document and describing a procedure for searching for the contents of the document conforming to the definition. In the present embodiment, since the document format of the disclosed document is HTML, it is used as a definition of a value that can be taken by an HTML tag.
[0049]
The replacement rule storage unit 107 has a function for storing a rule for replacing contents set using a replacement rule setting unit 108 described later. One rule stored in the replacement rule storage unit 107 includes one or more method identifiers stored in the replacement location designation method storage unit 106, and one method identifier stored in the content replacement method storage unit 105. Is a set. Here, when there are a plurality of identifiers for the replacement location designation method in a certain rule, the location corresponding to the logical product of these is the location where the content is replaced by the content replacement method defined in the rule. The replacement rule storage unit 107 assigns an identifier for uniquely identifying each stored rule. This identifier is used as data stored in the disclosure condition storage unit 109 described later.
[0050]
The replacement rule setting unit 108 has a function for a disclosure person to set a rule for replacing contents. In the present embodiment, replacement rule setting section 108 is realized by an input / output device having a GUI (Graphical User Interface). The output of the replacement rule setting unit 108 is data stored in the content replacement method storage unit 105, the replacement location designation method storage unit 106, and the replacement rule storage unit 107. Also, the input of the replacement rule setting unit 108 is an operation for data stored in the replacement rule storage unit 107 and a command for calling an output to the screen.
[0051]
Using the replacement rule setting unit 108, the disclosing person interacts with an operation for creating a pair of the method identifier stored in the replacement location designation method storage unit 106 and the method identifier stored in the content replacement method storage unit 105. To implement. In order to assist the operation, by specifying an identifier, a comment regarding a method stored in association with the identifier is displayed. The result of the identifier pair creation operation and permutation creation operation is immediately reflected in the data stored in the replacement rule storage unit 107.
[0052]
The disclosure condition storage unit 109 has a function for storing a plurality of disclosure conditions set by using a disclosure condition setting unit 111 (to be described later) together with the priority order. In the present embodiment, the disclosure condition indicates which one of the replacement rules stored in the replacement rule storage unit 107 is used for the disclosure request received by the disclosure request receiving unit 103. Specifically, one disclosure condition is described as a set of one replacement rule identifier and a logical expression having a plurality of profile allowable ranges as terms. Here, one profile allowable range describes an attribute name that can exist as an attribute of a requester's profile or a requesting subsystem profile, and a range that can be taken as an attribute value of the attribute name.
[0053]
When a value (defined by the system) indicating “arbitrary” is defined as a possible range of the attribute value, the attribute name in the profile allowable range exists in the requester's profile or the requesting subsystem profile. Is a condition. Further, when a negation operator (NOT) is applied to a profile allowable range having a value indicating “arbitrary”, an attribute name in the profile allowable range may not exist in the requester's profile or the requesting subsystem profile. Means a condition. The disclosure condition storage unit 109 stores a permutation composed of sets. The disclosure condition at the front of the permutation is prioritized in the content replacement process described later.
[0054]
The logical expression list storage unit 110 has a function of storing a list in which a logical expression having a profile allowable range as a term and a name defined by a disclosing person are associated with each other. For example, the name of a disclosing person is described in terms that he / she can understand, such as “acquaintance”, “trustworthy partner”, “contact person”, “customer”, “task team”, and the profile allowable range. The logical expressions can be associated with each other and stored in the logical expression list storage unit 110. The list stored in the logical expression list storage unit 110 is used when a disclosure person sets disclosure conditions using a disclosure condition setting unit 111 described later.
[0055]
The disclosure condition setting unit 111 has a function for the disclosing person to set a disclosure condition. In the present embodiment, the disclosure condition setting unit 111 is realized by an input / output device having a GUI. The output of the disclosure condition setting unit 111 is data stored in the disclosure condition storage unit 109 and the logical expression list storage unit 110. The input of the disclosure condition setting unit 111 is an operation on data stored in the disclosure condition storage unit 109 and the logical expression list storage unit 110.
[0056]
The discloser uses the disclosure condition setting unit 111 to
1) Input of profile tolerance range,
2) Create a logical expression with the entered profile tolerance as a term,
3) Register the created logical expression in the logical expression list,
4) List of names registered in the formula list,
5) Creation of a pair of the created logical expression or the logical expression registered in the logical expression list and the replacement rule identifier stored in the replacement rule storage unit;
6) Create a permutation consisting of the created set,
6 types of operations can be performed. The result of the operation is immediately reflected in the data stored in the disclosure condition storage unit 109 and the logical expression list storage unit 110.
[0057]
In the operation of 5), the names stored in the logical expression list storage unit 110 can be used without directly inputting logical expressions. When the discloser inputs a name, the logical expression associated with the name in the logical expression list storage unit 110 is transferred to data stored in the disclosure condition storage unit 109.
[0058]
The replacement rule selection unit 112 applies rules for disclosure from the rules stored in the replacement rule storage unit 107 according to the profile stored in the profile storage unit 104 and the disclosure conditions stored in the disclosure condition storage unit 109. It has a function to select. The replacement rule selection unit 112 determines whether or not the profile stored in the profile storage unit 104 satisfies the logical expression of the disclosure condition in order from the beginning of the permutation disclosure conditions stored in the disclosure condition storage unit 109. Investigate. If the condition is satisfied, the replacement rule identifier of the disclosure condition is notified to the application rule storage unit 113 described later. When all the disclosure conditions stored in the disclosure condition storage unit 109 have been examined, the replacement rule selection unit 112 notifies the replacement location detection unit 114 of the start of the replacement process.
[0059]
The application rule storage unit 113 has a function of storing the identifier of the replacement rule notified from the replacement rule selection unit 112. The application rule storage unit 113 stores the notified plurality of identifiers in a permutation according to the order of notification. However, when a plurality of replacement rules having the same content replacement location are notified, only those notified previously are stored. That is, when a certain identifier is notified, if the replacement rule indicated by the identifier stored up to that point includes the same value as the identifier of the replacement location designation method included in the replacement rule indicated by the identifier, The identifier notified later is not stored. Data stored in the application rule storage unit 113 is used for detection processing of a replacement location detection unit 114 described later.
[0060]
The replacement part detection unit 114 has a function of detecting a part whose content is to be replaced from the contents of the document stored in the disclosure target document storage unit 102 using the replacement rule stored in the application rule storage unit 113. . When receiving the notification of the start of the replacement process from the replacement rule selection unit 112, the replacement location detection unit 114 executes a series of processes described below.
[0061]
The applied rule storage unit 113 stores zero or more replacement rule identifiers in a permutation. Therefore, the replacement location detection unit 114 first searches the replacement rule storage unit 107 for a replacement rule associated with the identifier at the head of the permutation. Next, the calculation of the designation method indicated by the identifier of the substitution location designation method included in the found substitution rule is executed, and the location whose contents are to be replaced with the document stored in the disclosure target document storage unit 102 is specified. Then, information indicating the specified replacement location and the content replacement method identifier included in the replacement rule are notified to the content replacement unit 115 described later. Next, when a return value for the notification is received from the content replacement unit 115, the replacement part is identified and notified to the content replacement unit 115 for the second replacement rule from the top of the permutation, and the return value is received. Thereafter, this process is repeated in order with respect to the permutation of identifiers of the replacement rule. Finally, the end of the replacement process is notified to the document transmission unit 116 described later.
[0062]
The content replacement unit 115 has a function of replacing the content of the document stored in the disclosure target document storage unit 102 in accordance with the selected replacement rule. When the content replacement unit 115 is notified of the replacement location information and the replacement method identifier from the replacement location detection unit 114, the content replacement unit 115 is present at the location indicated by the notified information of the document stored in the disclosure target document storage unit 102. The content to be replaced is replaced with the result of calculating the replacement method stored in the content replacement method storage unit 105 indicated by the notified identifier. After the content replacement is completed, a return value indicating the end is notified to the replacement location detector 114.
[0063]
The document transmission unit 116 has a function of transmitting the document stored in the disclosure target document storage unit 102 to the requester who has sent the disclosure request received by the disclosure request reception unit 103 after the content replacement processing is completed. . Upon receiving the notification of the completion of the replacement process from the replacement location detection unit 114, the document transmission unit 116 determines the transmission destination of the document based on the requester's profile stored in the profile storage unit 104 and the requesting system's profile. The document stored in the disclosure target document storage unit 102 is transmitted. After sending the document, the document is deleted from the disclosure target document storage unit 102.
[0064]
Heretofore, the functional units constituting the disclosure-side subsystem 100 have been described.
Here, the correspondence between the functions of the components of the principle configuration of the present invention shown in FIG. 1 and the functional units of the system of the embodiment shown in FIG. 2 will be described. The function of the document storage unit 1 is realized by the document storage unit 101. The function of the blurring rule determining unit 2 is realized by the replacement rule selecting unit 112 and various peripheral storage units. The function of the blur location detection means 3 is realized by the replacement location detection unit 114 and various storage units around it. The function of the blurred document generation unit 4 is realized by the content replacement unit 115 and various storage units around it.
[0065]
Next, a processing flow of the disclosure subsystem 100 from reception of a disclosure request to transmission of a document is shown.
FIG. 7 is a flowchart showing a flow of processing from reception of a disclosure request to transmission of a document.
[S1] The disclosure request receiving unit 103 receives a document disclosure request.
[S2] The disclosure request receiving unit 103 determines whether or not a disclosure target document is stored in the disclosure target document storage unit 102. If the document to be disclosed is stored, the process returns to step S1, and if not stored, the process proceeds to step S3.
[S3] The disclosure request receiving unit 103 notifies the document storage unit 101 of an identifier included in the disclosure request, and causes the disclosure target document storage unit 102 to store the document to be disclosed.
[S4] The disclosure request receiving unit 103 stores the profile of the requester and the requesting subsystem 30 included in the disclosure request in the profile storage unit 104.
[S5] The replacement rule selection unit 112 changes the disclosure from the rules stored in the replacement rule storage unit 107 according to the profile stored in the profile storage unit 104 and the disclosure conditions stored in the disclosure condition storage unit 109. Select the replacement rule to apply. Then, the application rule storage unit 113 is notified of the identifier of the selected replacement rule. The application rule storage unit 113 stores the identifier.
[S6] The replacement location detection unit 114 extracts the replacement rule associated with the identifier in order from the top of the permutation in the application rule storage unit 113, and the replacement location designation method identifier included in the extracted replacement rule is extracted. The designated method shown is executed to detect a place to be replaced from the document stored in the disclosure target document storage unit 102.
[S7] The replacement location detection unit 114 determines whether there is a location detected in the process of step S6. If there is a detected part, the process proceeds to step S8, and if there is no detected part, the process proceeds to step S9.
[S8] The content replacement unit 115 replaces the content of the document stored in the disclosure target document storage unit 102 in accordance with the selected replacement rule.
[S9] The replacement location detection unit 114 determines whether or not processing has been performed for all replacement rules that meet the disclosure conditions. If the processing for all the replacement rules has been completed, the process proceeds to step S10, and if not, the process returns to step S6.
[S10] The document transmission unit 116 transmits the document stored in the disclosure target document storage unit 102 to the request source of the disclosure request.
[S11] The document transmission unit 116 deletes the document stored in the disclosure target document storage unit 102.
[S12] The application rule storage unit 113 deletes the stored replacement rule, and the process returns to step S1.
[0066]
In this way, whenever there is a document disclosure request, the contents of the disclosure target document are replaced as necessary and transmitted to the request source.
Next, an example of replacing the contents of a document according to this embodiment will be specifically described. In this replacement example, it is assumed that the disclosing person is a sales department in the sales department, and a plurality of sales proposals are stored in the document storage unit 101 as documents that may be disclosed. The disclosure condition storage unit 109, the replacement rule storage unit 107, the replacement location designation method storage unit 106, and the content replacement method storage unit 105 store data as shown in FIGS. 8 to 11, respectively. To do.
[0067]
FIG. 8 is a diagram illustrating an example of the permutation data 43 stored in the disclosure condition storage unit 109. Here, what is surrounded by “{}” indicates one disclosure condition, and “” indicates a permutation starting from the left. “# Rule1” to “# rule4” indicate replacement rule identifiers, and “outside”, “outside of department”, “non-sales staff”, and “other than manager” are stored in the logical expression list storage unit 110. A logical expression indicated by each name is stored.
[0068]
Here, “external” indicates that the attribute “affiliation organization” of the requester's profile is not the same as that of the discloser, or that the attribute “management organization” of the requesting subsystem profile is not the same as that of the discloser. A name that points to a logical expression. For example, if a person of the same company requests disclosure from the requesting subsystem of the other company at the destination, “outside” applies. Similarly, a logical expression indicated by “out of department” is also defined. “Non-sales position” is a name indicating a logical expression indicating that the attribute “job system” of the requester's profile is not a sales position. “Non-advanced” is a name indicating a logical expression indicating that the attribute “class” of the requester's profile is not higher than the class of the presenter.
[0069]
FIG. 9 is a diagram illustrating an example of data 44 stored in the replacement rule storage unit 107. Here, what is surrounded by {} indicates a set of a replacement location designation method and a replacement method. “# Loc1”, “# loc2”, and “# loc3” indicate identifiers of replacement place designation methods, and “# rep1”, “# rep2”, and “# rep3” indicate identifiers of replacement methods.
[0070]
FIG. 10 is a diagram illustrating an example of the data 45 stored in the replacement location designation method storage unit 106. In this example, the replacement location designation method with the identifier “# loc1” designates the contents in the table cell as the replacement location. In the replacement location designation method with the identifier “# loc2”, a numerical value is designated as the replacement location. The replacement location designation method with the identifier “# loc3” specifies the company name as the replacement location.
[0071]
FIG. 11 is a diagram illustrating an example of data 46 stored in the content replacement method storage unit 105. In this example, the replacement method with the identifier “# rep1” is a semantic abstraction indicating the number of digits. The replacement method with the identifier “# rep2” is a geometric abstraction by lines. The replacement method with the identifier “# rep3” is meaningless by ○.
[0072]
Here, consider the case of replacing the contents of a disclosure target document as shown below.
FIG. 12 is a diagram illustrating an example of the contents of the disclosure target document 50. This disclosure target document 50 is a proposal when a PC (personal computer) and a printer are sold to Kamiashigara Shokai. This proposal shows the list price for each item and the actual offer price. Here, most of the characters in the table are small fonts, but the fonts that are slightly larger for the offer price ("¥ 210,000", "¥ 60,000") for PC and printers. Is used. Furthermore, a larger font is used in the “total price” column (“¥ 270,000”) of “Price for Kamiashigari Shokai”.
[0073]
When the disclosed document contains the content shown in FIG. 12, if a disclosure request is made by an outside person as viewed from the disclosing person or an outside requesting subsystem, “# rule1” is set. Priority is applied.
[0074]
FIG. 13 is a diagram illustrating an application result 51 of # rule1. # rule1 is the object to be replaced (# loc1) in the table cell and performs the abstraction by line (# rep2). Therefore, all the characters in the table cell are replaced with black lines. At this time, the larger the font size of the original character is, the larger the line is replaced with.
[0075]
In addition, when a person outside the department and not in the sales position, or a person other than the sales position from the requesting subsystem outside the department requests disclosure, “# rule2” and “# rule3” are applied.
[0076]
FIG. 14 is a diagram illustrating the application result 52 of # rule2 and # rule3. # rule2 uses the company name as the replacement target (# loc3) and makes it meaningless (# rep3) by ○. # rule3 sets the numerical value in the table cell as the replacement target (# loc1 and # loc2 Logical product), and the abstraction of lines (# rep2). Therefore, “Offer price for Kamiashigara Shokai” in FIG. 12 is replaced with “Offer price for Mr. XX” (# rule2), and the part representing the price is replaced with a black line (# rule3) .
[0077]
Also, if a person outside the department and in the sales position, or a sales person from the requesting subsystem outside the department requests disclosure, # rule2 and # rule4 are applied.
FIG. 15 is a diagram illustrating the application result 53 of # rule2 and # rule4. The contents of # rule2 are as described above, and # rule4 performs the semantic abstraction (# rep1) representing the number of digits, using the numbers in the table cell as the replacement target (logical product of # loc1 and # loc2) Is. Therefore, “Offer price for Kamiashigara Shokai” in FIG. 12 is replaced with “Offer price for Mr. XX” (# rule2), and the part representing the price is a positive number and the positive number It has been replaced with content that indicates the number of digits (# rule4). When replacing # rule4, the original font size is used.
[0078]
Also, if a person in the same department as the disclosing person, a sales position, and a person who is not higher than the disclosing person requests disclosure from a subsystem in the same department, #rule 4 is applied.
FIG. 16 is a diagram illustrating the application result 54 of # rule4. The contents of # rule4 are as described above. Therefore, the part representing the price is replaced with a content indicating that it is a positive number and the number of digits of the positive number.
[0079]
In addition, when a senior manager of a disclosing person (that is, a sales department in the same department as the disclosing person and a sales staff higher than the disclosing person) requests disclosure from the requesting subsystem in the same department, the contents shown in FIG. 12 are not replaced. Is done.
[0080]
The above is the description of the embodiment of the present invention.
In the present embodiment, the disclosure target designation and the request source profile are sent together as a request for document disclosure from the requesting subsystem to the disclosure subsystem. First, only the designation of the disclosure target is sent from the requesting subsystem to the disclosure subsystem, and after the disclosure subsystem receives it, the profile management unit of the requesting subsystem is accessed to obtain the profile. It may be configured as follows. In the case of this configuration, the disclosing subsystem can acquire only profile attributes necessary for selection of replacement rules.
[0081]
Further, in the present embodiment, the profile included in the document disclosure request sends all the attributes of the profile managed by the requesting subsystem. This may be configured such that the requester selects and sends only a part. In this case, there may be a disadvantage in selecting a replacement rule, but the requester can avoid sending attributes that he / she does not want to inform the disclosing person.
[0082]
In this embodiment, the request source subsystem manages the request source profile. This may be configured such that a disclosure-side subsystem or a subsystem managed by a third party manages a request-side profile, and the disclosure-side subsystem acquires the profile and uses it for selection of a replacement rule. In this case, the disclosure side or a third party can assign unique attributes such as ratings to the profile.
[0083]
Further, the above processing functions can be realized by a computer. In that case, the processing contents of the functions that the requesting subsystem and the disclosure subsystem should have are described in a program recorded on a computer-readable recording medium, and this program is executed by the computer. The above processing is realized by a computer. Examples of the computer-readable recording medium include a magnetic recording device and a semiconductor memory. When distributing the market, store the program in a portable recording medium such as a CD-ROM (Compact Disk Read Only Memory) or floppy disk, or store it in a storage device of a computer connected via a network. In addition, it can be transferred to another computer through the network. When executed by a computer, the program is stored in an auxiliary storage device such as a hard disk device in the computer, loaded into the main memory and executed.
[0084]
According to the document disclosure apparatus as described above, a document in which the content of the document requested to be disclosed is blurred is disclosed according to the profile of the request source of the disclosure request. As a result, there are the following advantages.
[0085]
First, since the content of the document is replaced based on a replacement method prepared in the document disclosure device that blurs the content of the document, it is not necessary for the disclosure side to prepare the content that matches the request side.
[0086]
In addition, as a method of blurring the content of the document, the requesting side can be made concrete by using the types of increasing the semantic abstraction of the content, increasing the abstract level of abstraction, replacing it with meaningless ones, and adding noise. Although the value is not known, it is possible to grasp what kind of thing is written there, or it is not possible to know what is written there, but it is possible to grasp the overview of the whole document.
[0087]
In addition, since the document disclosure device uses the semantic feature or layout feature of the content to detect the replacement part of the content, the disclosure side does not have to search the document for the part where the disclosure should be restricted and set the access right one by one. Good.
[0088]
As described above, compared to the conventional technique, the disclosed document serves as a sample, and the contents transmitted to the reference person are restricted, and the man-hour burden associated with the disclosure is reduced.
[0089]
As another effect, a document disclosed with its contents replaced is newly generated, and no changes are made to the original document. Therefore, the revision history of the original document is maintained correctly without depending on the disclosure. There is an effect that.
[0090]
【The invention's effect】
As described above, in the document disclosure device of the present invention, the blur location detection method and the blur method are determined according to the profile information related to the request source of the disclosure request, and the blur document is generated using these methods. It is possible to disclose to a third party a document that can be used as a sample while some information is hidden without burdening the disclosing person.
[0091]
Further, in the medium on which the document disclosure program of the present invention is recorded, a blur location detection method and a blur method are determined according to profile information relating to a request source of a disclosure request, and a blur document is generated using those methods. Since it is possible to have a computer execute the processing, a document that can be used as a sample is disclosed to a third party using a computer, with some information hidden, without incurring a heavy burden on the disclosing person. it can.
  In the document disclosure method of the present invention, the blur location detection method and the blur method are determined according to the profile information related to the request source of the disclosure request, and the blurred document is generated using these methods. However, a document that can be used as a sample can be disclosed to a third party while some information is hidden.
[Brief description of the drawings]
FIG. 1 is a principle configuration diagram of the present invention.
FIG. 2 is a diagram showing a system configuration according to the embodiment of the present invention.
FIG. 3 is a diagram showing an example of a requester profile;
FIG. 4 is a diagram showing an example of a profile of a requesting subsystem.
FIG. 5 is a diagram illustrating an example of hierarchical structure information that defines a plurality of abstraction levels and their upper and lower relationships.
FIG. 6 is a diagram illustrating an example of modeling abstraction.
FIG. 7 is a flowchart showing a flow of processing from reception of a disclosure request to transmission of a document.
FIG. 8 is a diagram illustrating an example of permutation data stored in a disclosure condition storage unit;
FIG. 9 is a diagram illustrating an example of data stored in a replacement rule storage unit.
FIG. 10 is a diagram illustrating an example of data stored in a replacement location designation method storage unit.
FIG. 11 is a diagram illustrating an example of data stored in a content replacement method storage unit.
FIG. 12 is a diagram illustrating an example of contents of a disclosure target document.
FIG. 13 is a diagram illustrating a result of applying # rule1.
FIG. 14 is a diagram illustrating application results of # rule2 and # rule3.
FIG. 15 is a diagram illustrating application results of # rule2 and # rule4.
FIG. 16 is a diagram illustrating an application result of # rule4.
[Explanation of symbols]
1 Document storage means
1a Documents to be disclosed
2 Blur rule decision means
2a Blur rule
3 Blur spot detection means
4 Blur document generation means

Claims (14)

In a document disclosure device that discloses an electronic document,
Document storage means for storing electronic documents;
When a disclosure request designating a document in the document storage means is received, profile information relating to the request source of the disclosure request is analyzed, and a blur rule determination for determining a blur location detection method and a blur method according to the profile information Means,
A blur location detection unit that detects a blur location by the blur location detection method determined by the blur rule determination unit from the disclosure target document specified in the disclosure request;
A blurred document generation unit that performs a blurring process by the blurring method determined by the blurring rule determination unit with respect to the blurred point detected by the blurred point detection unit in the disclosure target document, and generates a blurred document;
A document disclosure device characterized by comprising: The blur rule determining means stores in advance a plurality of blur rules consisting of a blur location detection method and a blur method, and by selecting a blur rule according to the profile information, a blur location condition and a blur method are obtained. The document disclosure device according to claim 1, wherein the document disclosure device is determined. The document disclosure apparatus according to claim 1, wherein the blurring rule determination unit includes a blurring method by replacing a blurring part with another notation in the deciding blurring method. The blur rule determining means holds hierarchical structure information in which a plurality of notation methods are arranged hierarchically from a notation method in which specific contents are indicated to a notation method having a high degree of abstraction, and uses the hierarchy structure information. The document disclosure apparatus according to claim 1, wherein a blurring method by replacing the blurring portion notation method with an abstract notation is included in the determinable blurring method. The blur rule determining unit holds hierarchical structure information in which a plurality of drawing methods are arranged hierarchically from a drawing method in which a specific image appears to a drawing method with a high degree of abstraction, and uses the hierarchical structure information. The document disclosure apparatus according to claim 1, wherein the blurring method by replacing the blurring portion drawing method with a drawing method having a high degree of abstraction is included in the determinable blurring method. 2. The document disclosure apparatus according to claim 1, wherein the blurring rule determining means includes a blurring method by replacing the content of the blurring portion with content that does not depend on the original content. . The blurring rule determination means, the document discloses apparatus according to claim 1, characterized in that the blurring process, including a determinable blur manner by adding noise to the content of the blur point. The document disclosure apparatus according to claim 1, wherein the blurring rule determining means includes a blurring location designation method using the meaning content of characters in the definable blurring location designation method. The document disclosure apparatus according to claim 1, wherein the blur rule determining unit includes a blur location designation method using layout information of document contents in the determinable blur location designation method. The document disclosure apparatus according to claim 1, wherein the blurring rule determination unit acquires profile information related to a request source of the disclosure request from a requesting apparatus that has output the disclosure request. The blur rule determining means analyzes a blur information detecting method and a blur method according to the profile information by analyzing profile information including information on a requester who has input a command to output the disclosure request. The document disclosure device according to claim 1, wherein the document disclosure device is determined. The blur rule determining unit determines a blur location detection method and a blur method according to the profile information by analyzing profile information including information about the device that has output the disclosure request. Item 1. The document disclosure device according to Item 1. In a medium recording a document disclosure program for disclosing an electronic document,
Document storage means for storing electronic documents;
When a disclosure request designating a document in the document storage means is received, profile information relating to the request source of the disclosure request is analyzed, and a blur rule determination for determining a blur location detection method and a blur method according to the profile information means,
A blur spot detection unit that detects a blur spot by the blur spot detection method determined by the blur rule determination unit from among the disclosure target documents specified in the disclosure request;
A blurred document generation unit that generates a blurred document by performing a blurring process according to the blurring method determined by the blurring rule determination unit on the blurred part detected by the blurred part detection unit in the disclosure target document;
A medium having recorded thereon a document disclosure program characterized by causing a computer to function as: In a document disclosure method for disclosing an electronic document,
Upon receiving a disclosure request designating a document in a document storage means for storing an electronic document, profile information relating to the request source of the disclosure request is analyzed, and a blur location detection method and a blur method according to the profile information, Decide
From the disclosure target document specified in the disclosure request, detect a blur location by the determined blur location detection method,
Performing a blurring process by the determined blurring method on the detected blurring part in the disclosure target document to generate a blurry document;
A document disclosure method characterized by the above.

Images