JP3910492B2 - Access level management device and access level management program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an access level management apparatus and an access level management program.
[0002]
[Prior art]
Technology that collects data from multiple companies, processes them, analyzes them, creates reports of the analysis results, and distributes the reports so that they can be viewed from companies so that they can be compared between companies. (Service) has been proposed. The analysis result report includes data before and after processing in order to explain the analysis result. For this reason, when a company user accesses to view a report, the access right is managed and the report is published so that which user can view which report and which user cannot view the report. There must be.
[0003]
[Problems to be solved by the invention]
However, in the prior art, when the access right is managed and released, there arises a problem that the setting of the access right becomes complicated due to the following reasons.
[0004]
(1) As the number of data and reports increases, the access right setting itself becomes difficult.
(2) It becomes difficult to change the access right setting due to data processing, report change, and user change.
[0005]
As a result, in order to make it a safer method, publishing is prohibited, change to a highly directional method such as e-mail, report creation restriction, etc., and there is a problem that reports can not be effectively shared by multiple companies . In addition, man-hours are required for checking the setting status of the access right, and there is a problem that it imposes excessive pressure on the report creator and the access right setting, thereby hindering free work.
[0006]
This invention has been made in view of the above circumstances, provides an easy to manage, access level management device and the access level management program can set the access level after processing the sharable sharing information among users For the purpose.
[0007]
[Means for Solving the Problems]
In order to solve the above-described problem, in the invention according to claim 1, an access level storage means for storing an access level indicating a level accessible to the user for each of the access target data, and for each user In order to determine the access level of data after processing when processing is performed using the user management database storing the access level and two data to create one data, the type and processing of the two data Based on the type, when processing processing setting rule storage means for storing processing processing setting rules for calculating the access level of processed data and processing using two data to create one data, The access level of each of the two data to be processed stored in the access level storage means, and the processing Data management means for calculating the access level of the processed data with reference to the rules stored in the fixed rule storage means, and setting the access level of the processed data based on the calculation result It is characterized by .
[0010]
In order to solve the above-described problem, in the invention described in claim 2 , an access level storage means for storing an access level indicating a level accessible to the user for each access target data, and each user In order to determine the access level of the processed data when processing is performed by using the user management database storing the access level and two data to create one data, the two data types and Access for setting an access level of data in an access level management device comprising a processing setting rule storage means for storing a processing setting rule for calculating an access level of data after processing based on the type of processing A level management program that uses two pieces of data to create one piece of data In this case, referring to the access level of each of the two data to be processed stored in the access level storage means and the processing setting rule stored in the processing setting rule storage means, An access level is calculated, and a computer performs data management processing for setting an access level of processed data based on the calculation result .
[0014]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
A. Configuration of Embodiment FIG. 1 is a block diagram showing a configuration of an information browsing access right management system according to an embodiment of the present invention. In FIG. 1, user terminals 1-1, 1-2,..., 1-n are those of companies that intend to use them for their product development, marketing, etc., respectively. While reporting the rate and the like, the server 2 is accessed via the communication line 4 such as the Internet, and a report of the company or other companies made of charts and criticisms prepared according to the report is received.
[0015]
The server 2 sends a report made up of charts and criticism sentences, which are created according to capital investment between companies, shareholding ratio, etc., reported from the user terminals 1-1 to 1-n, via the communication line 4. Disclose to user terminals 1-1 to 1-n. The report is created by a specialized consulting company. Therefore, the server 2 may be managed and operated by the consulting company, or may be managed and operated by a service business company that has received a request from the consulting company.
[0016]
The server 2 sets the access level and access right for each data in data analysis and processing in consideration of the conflict of interest between companies and the collaborative work between companies and information sharing. The access level and the access right are automatically set based on the process setting rule. Thereby, according to a report, it distributes so that browsing is possible only to the accessible user.
[0017]
The server 2 includes pre-processing data 2-1, user management database 2-2, processing setting rule base 2-3, access right management unit 2-4, and post-processing data 2-5. The pre-processing data 2-1 is pre-processing data such as capital investment between companies and a stockholding ratio reported from the user terminals 1-1 to 1-n. The pre-processing data 2-1 includes, for example, POS data, a product master, a sales promotion master, and a customer master as shown in FIG. In the pre-processing data 2-1, an access level and an access authority are set. The access level indicates which data (which is classified into a group and an individual user) is accessible to which data. The access authority indicates a group and a user who can access the corresponding data.
[0018]
The user management database 2-2 stores data indicating which data each user can access, at which processing level, and to which group. In the user management database 2-2, as shown in FIG. 3, an access level, a processing level, and a member are set for each user (classified as a group and an individual user). The access level indicates the access level of each user, and indicates that access is possible if the data is below the access level. The processing level indicates the processing level of each user. A member indicates a user constituting the group.
[0019]
The processing setting rule base 2-3 includes processing processing setting rules (table) for updating the access level of the post-processing data 2-5 after processing and converting the pre-processing data 2-1, and which data. A table processing pattern correspondence table indicating what processing pattern is executed for (single unit, combination) is set. FIG. 4 is a conceptual diagram showing a table processing pattern correspondence table. In the figure, reference symbols A to D correspond to data before processing or after processing. In this embodiment, POS data is reference symbol A, product data is reference symbol B, a sales promotion master is reference symbol C, and a customer master. Corresponds to the symbol D. For example, when “decyl” processing is performed using the POS data and the customer master, a location where the symbol A (vertical) and the symbol D (horizontal) intersect, that is, a processing pattern P7 (described later) is applicable. become.
[0020]
FIG. 5 is a conceptual diagram showing the processing setting rule (table). In the drawing, the processing includes a process “reference”, a process “export”, a process “select”, a process “Group by, sum, avg”, a process “decyl”, and a process “Join”. The process “Join” is a process for combining a plurality of data. “Group by, sum, avg” is a processing for performing aggregation. “Decyl” is a processing process in which data is tabulated in 10 stages. “Export” is a process of saving data in a file. “Reference, selection” is a process of viewing data (reference is all, selection is narrowed down).
[0021]
Each processing process has a plurality of processing patterns that determine how to set the access level, access authority, etc. of the processed data corresponding to the processing pattern of the table processing pattern correspondence table. Each machining process is set with a machining level, level correction, and authority (some of them are not available). The processing level defines an access level of a user who can perform the process, and can be performed by a user having an access level higher than the processing level. The level correction indicates the degree to which the level of the target data is corrected when the processing is performed. In addition, the authority is set to a processing process that combines and processes two or more data (in one case, “inherit”), and indicates which data access authority is to be taken after the processing process. Is. In other words, the access right is corrected in such a direction as to give priority to the list with the higher level of pre-processing data, such as whether to take over one access right, or “or” or “and” of both. When performing processing that combines both, processing that increases the level of detail by combining them is corrected in a direction that increases the data level.
[0022]
Here, FIG. 6 is a conceptual diagram showing the relationship of processing for various data (POS data, product master, sales promotion master and customer master) obtained from the table processing pattern correspondence table and the processing setting rule. In the figure, the circled “◯” indicates POS data, product master, sales promotion master, and customer master. Each square is surrounded by “□”. In the processing process in which a plurality of data and lines are drawn, a process of combining both is performed. For example, the process “decyl” is a process performed using POS data and a customer master, and the process “join” is a process performed using POS data and a sales promotion master.
[0023]
Next, FIG. 7 is a conceptual diagram for explaining the access authority set for the processed data in each processing process. When combining a plurality of pre-processing data, if the source extends to a plurality of companies, it is possible that the access authority is not completely inclusive, but only partially overlaps. In such a case, a designation method as shown in FIG. 7A can be considered as a rule for generating access authority after processing. FIG. 7B shows the inclusion relationship of the access right set of groups / users. The access authority setting method for the processed data is a variation of the contents specified by the access authority of the processing process setting rule described above.
[0024]
B. Operation of Embodiment Next, the operation of this embodiment will be described in detail. Here, FIG. 8 to FIG. 10 are conceptual diagrams for explaining the operation of the present embodiment. Hereinafter, a case where the processing process “decyl” is performed using the POS data and the customer master will be described.
[0025]
First, as shown in FIG. 2, the access right management unit 2-4 sets the access level and access right of the user / group for the pre-processing data 2-1. Next, the access right management unit 2-4 sets an access level and a processing level for each user in the user management database 2-2 as shown in FIG. Furthermore, the table processing pattern correspondence table shown in FIG. 4 and the processing setting rule (table) shown in FIG. 5 are set as necessary.
[0026]
As shown in FIG. 8, when “POS data” and “customer master” are combined to perform processing “decyl”, the POS data corresponds to “A” and the customer master corresponds to “D”. Therefore, it can be seen that the processing pattern P7 corresponds to the table processing pattern correspondence table. Next, referring to the processing process “decyl” of the processing pattern P7 from the processing processing setting rule, the processing level is “2”, the level correction is “−2”, the authority is “both (and)”, and the post-processing pattern is “C”. ing. That is, it is shown that the processing “decyl” can be executed only by a user having a processing level higher than the processing level “2”.
[0027]
The access level after decyl processing is
1 (POS data) +3 (customer master) + (− 2) (decyl) = 2
It becomes. For (decyl), the numerical value of “level correction” is applied.
[0028]
Next, since the access authority is “both (and)” in the processing process “decyl” of the processing pattern P7, the user of the POS data is “c” and the user of the customer master is “c”. The later access authority is the user “c”. Further, since the POS data group is “A” and the customer master group is “none”, the access authority after processing is the group “none”. Further, the processed pattern after processing is “C” because the post-processing pattern is “C” as shown in FIG. That is, as shown in FIG. 10, when the processing “decyl” is performed by combining “POS data” and “customer master”, the access level “2” and the access authority are applied to the new data after processing. Becomes the group “none”, the user “c”, and the correspondence “C”.
[0029]
Incidentally, when the access authority is set, if the authority after processing in the processing setting rule is “high on one side”, the access authority is given to the higher group / user at any level. When the authority is “both (or)”, the access authority is given to the group / user including both by taking “or” at both levels. If the authority is “one (designated)”, the access authority is given to any data group / user.
[0030]
According to the above-described embodiment, when the detail level of data increases in processing by combining a plurality of data, correction is automatically made in the direction in which the access level of the processed data increases, and Since the access authority of the data after processing is automatically set to give priority to the access authority of the data before processing, which has higher access authority, without burdening the user, It is possible to easily set the access right to the data, and to improve the reliability of the processed data.
[0031]
【The invention's effect】
As described above, according to the present invention, the access level storage means for storing the access level indicating the level accessible by the user for each access target data, and the user management storing the access level for each user In order to determine the access level of data after processing when processing using a database and two data to create one data, based on the two types of data and the type of processing, A processing setting rule storage means for storing a processing setting rule for calculating an access level of data, and storing in the access level storage means when processing is performed using two pieces of data to create one data Stored in the processing level setting storage means and the access level of each of the two data to be processed Referring to factory processing setting rule, calculates the access level of the data after the processing, based on the calculation result, since so as to set the access level of the data after processing, shared information can be shared among users The advantage is that the access level after processing can be easily managed and set.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of an information browsing access right management system according to an embodiment of the present invention.
FIG. 2 is a conceptual diagram showing an example of setting an access level and access authority for pre-processing data.
FIG. 3 is a conceptual diagram illustrating an example of setting access levels, processing levels, and members constituting a group for a user / group.
FIG. 4 is a conceptual diagram showing a table processing pattern correspondence table.
FIG. 5 is a conceptual diagram showing a processing setting rule (table).
FIG. 6 is a conceptual diagram showing the relationship of processing for various data (POS data, product master, sales promotion master, and customer master) obtained from a table processing pattern correspondence table and processing processing setting rules.
FIG. 7 is a conceptual diagram for explaining access authority set for data after processing in each processing process;
FIG. 8 is a conceptual diagram for explaining the operation of the present embodiment.
FIG. 9 is a conceptual diagram for explaining the operation of the present embodiment.
FIG. 10 is a conceptual diagram for explaining the operation of the present embodiment.
[Explanation of symbols]
1-1, 1-2, 1-n User terminal 2 Server 2-1 Pre-processing data (access right storage means)
2-2 User management database 2-3 Machining processing setting rule base (rule storage means)
2-4 Access right management section (access right management means)
2-5 Data 4 after processing Communication line

Claims (2)

Access level storage means for storing an access level indicating a level accessible to the user for each of the access target data;
A user management database storing the access level for each user;
In order to determine the access level of data after processing when processing using two data and creating one data, the data of the processed data is determined based on the two data types and the processing type. Processing setting rule storage means for storing processing setting rules for calculating the access level;
When processing using two data to create one data, the access level of each of the two processing target data stored in the access level storage means and the processing setting rule storage means are stored. Data management means for calculating the access level of the processed data with reference to the rule, and setting the access level of the processed data based on the calculation result;
An access level management device comprising: For each access target data, an access level storage means for storing an access level indicating a level accessible by the user, a user management database storing the access level for each user, and processing using two data In order to determine the access level of the processed data when one data is created, processing for calculating the access level of the processed data based on the two data types and the processing type In an access level management device comprising a processing setting rule storage means for storing processing setting rules, an access level management program for setting an access level of data,
When processing using two data to create one data, the access level of each of the two processing target data stored in the access level storage means and the processing setting rule storage means are stored. A data management process for calculating the access level of the processed data with reference to the processing setting rule and setting the access level of the processed data based on the calculation result
An access level management program characterized in that it is executed by a computer.

Images