JP4485861B2 - Information processing apparatus, distribution apparatus, information distribution method, distribution program, and recording medium - Google Patents

Description

  The present invention relates to an information processing apparatus, a distribution apparatus, an information distribution method, a distribution program, and a recording medium, and more particularly, an information processing apparatus, an information distribution method, and a distribution program that request distribution of information to a distribution apparatus connected via a network. The present invention also relates to a distribution device that distributes information in response to a request from the information processing device.

  With the development of network technology, various information can be exchanged via the network. A typical system for exchanging information via a network is an electronic mail system. However, the exchange of information by e-mail has a drawback that it is unreliable from the viewpoint of security due to its public nature. Therefore, in the business field, a distribution system limited to a specific purpose such as a document distribution system is generally constructed. That is, in such a distribution system, since there is little demand for public nature, it is possible to define a unique agreement for ensuring security.

For example, Patent Document 1 discloses the confidentiality of document information by encrypting document information to be transmitted and executing transmission only when the sender and the recipient have handling qualifications for the document information. Techniques that can be improved are disclosed. Patent Document 2 discloses a technique for reducing a load associated with distribution of a decryption key for decrypting content in multicast distribution of encrypted content.
JP 2000-132541 A JP 2003-174440 A

  However, as is the case with the techniques described in Patent Document 1 and Patent Document 2, conventionally, information (document information and content) to be distributed has been subject to protection regarding security in the distribution system. It was lacking in the viewpoint of protecting the user (recipient) receiving the distribution. In other words, if the information to be distributed is illegal information such as a virus, even if the information is protected by encryption or the like, there is a sufficient possibility that the recipient of the information may be damaged by the virus or the like. It is done.

  The present invention has been made in view of the above points, and an object of the present invention is to provide an information processing apparatus, a distribution apparatus, an information distribution method, a distribution program, and a recording medium that can protect an information recipient. .

  Accordingly, in order to solve the above-described problem, the present invention provides an information processing apparatus that requests distribution of information to a distribution apparatus connected via a network, as described in claim 1, and instructs the distribution of the information. A determination unit configured to determine a value set for each authentication type based on a type of authentication received by the user, and a value determined by the determination unit and a distribution request for the information are transmitted to the distribution device. A distribution request unit configured to change the distribution destination of the information according to the value determined by the determination unit.

  In order to solve the above-mentioned problem, the present invention provides a distribution device for distributing information to a designated destination as described in claim 4, wherein the authentication received by a user instructing the distribution of the information It has a delivery destination judging means for judging a delivery destination of the information based on the type of the information.

  In such an information processing apparatus or distribution apparatus, the distribution destination can be changed depending on what kind of authentication the distributor has received or has not been authenticated. Distribution of information requested to be distributed from a user or a user who has only received authentication with low reliability can be rejected.

  In order to solve the above problems, the present invention may be an information distribution method in the information processing apparatus, a distribution program for causing a computer to execute the information distribution method, or a recording medium on which the distribution program is recorded. .

  According to the present invention, it is possible to provide an information processing apparatus, a distribution apparatus, an information distribution method, a distribution program, and a recording medium that can protect an information recipient.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a configuration example of a document management system according to an embodiment of the present invention. The document management system 1 according to the present embodiment is configured by connecting a client device 10, a document management server 20, an authentication server 30, a distribution server 40, and the like via a network 50 such as a LAN or the Internet. The network 50 may be either wired or wireless.

  The client device 10 is a terminal such as a PC (Personal Computer), a PDA (Personal Digital (Data) Assistants), or a mobile phone on which various applications directly used by the user of the document management system 1 are installed.

  The document management server 20 is a computer on which a management function (document management function) for document information (actual document data, bibliographic information, etc.) is implemented, and provides the document management function on the network 50. The authentication server 30 is a computer on which a user authentication function is implemented, and provides the authentication function on the network 50. The distribution server 40 is a computer in which a document distribution function to a specified destination is implemented, and provides the distribution function on the network 50.

  Next, details of the client device 10 will be described. FIG. 2 is a diagram illustrating a hardware configuration example of the client device according to the embodiment of the present invention. 2 includes a drive device 100, an auxiliary storage device 102, a memory device 103, an arithmetic processing device 104, and a network I / F (interface) device 105, which are connected to each other via a bus B. The input device 106 and the display device 107 are configured.

  A program for realizing processing in the client device 10 is provided by a recording medium 101 such as a CD-ROM. When the recording medium 101 on which the program is recorded is set in the drive device 100, the program is installed from the recording medium 101 to the auxiliary storage device 102 via the drive device 100. The auxiliary storage device 102 stores the installed program and also stores necessary files and data.

  The memory device 103 reads the program from the auxiliary storage device 102 and stores it when there is an instruction to start the program. The arithmetic processing device 104 executes functions related to the client device 10 in accordance with a program stored in the memory device 103. The network I / F device 105 includes, for example, a modem, a router, etc., and is used for connecting to the network 50 in FIG. The input device 106 includes a keyboard and a mouse, and is used to input various operation instructions. The display device 107 displays a GUI (Graphical User Interface) or the like by a program.

  Next, a functional configuration example of the document management system 1 will be described. FIG. 3 is a diagram illustrating a functional configuration example of the document management system according to the embodiment of the present invention. As shown in FIG. 3, the client device 10 includes a distribution application 11, a feature management module 12, a feature table 121, a local plug-in 13, a document management plug-in 14, a distribution plug-in 15, an authentication control module 16, and an authentication management module. 17 and the document management module 18 and the like.

  The distribution application 11 is an application provided with a GUI (screen) for receiving a document distribution instruction or the like from a user. The distribution instruction by the user is transmitted to the distribution server 40 via the distribution plug-in 15 or the like. Upon receiving the distribution instruction, the distribution server 40 distributes the document to the designated destination.

  The feature management module 12 is a module that determines the “feature” of the user who issued the distribution instruction based on the feature table 121. Here, “feature” is an attribute whose value is determined by the type of authentication received by the user who has issued the distribution instruction (separate password authentication, card authentication, biometric authentication, etc., hereinafter referred to as “authentication type”). Yes, the higher the reliability of the authentication received by the user, the larger the value. That is, the feature indicates a level of reliability with respect to the authentication type (hereinafter referred to as “authentication level”). The feature table 121 is a table that manages the correspondence between authentication types and authentication levels. In the present embodiment, the authentication type includes a state in which the user is not authenticated in one type.

  The local plug-in 13, the document management plug-in 14, the distribution plug-in 15, and the like are modules that are mounted as detachable plug-ins according to functions used in the client device 10. The local plug-in 13 is a plug-in that provides an interface for accessing a local document in the client device 10. The document management plug-in 14 is a plug-in that provides an interface for a document management function (document registration, search, deletion, update, etc.) in the document management server 20. The distribution plug-in 15 is a plug-in that provides an interface for a document distribution function in the distribution server 40.

  The authentication control module 16 is a module that receives a user authentication request from various plug-ins and controls processing executed based on the authentication request. The authentication management module 17 is a module that makes an authentication request to the authentication server 30 in response to a request from the authentication control module 16.

  The document management module 18 is a module in which various interfaces for using a document management service 21 (described later) in the document management server 20 are mounted. That is, the document management module 18 transmits a request corresponding to an interface called from a higher-level module (here, a plug-in or the like) to the document management service 21, and receives information returned from the document management service 21 in response thereto. Return it to the higher module.

  A document management service 21 is implemented in the document management server 20. The document management service 21 is a module group that provides a document information management function as a Web service. The document management service 21 can accept a request from a client (here, the client device 10) through a SOAP (Simple Object Access Protocol) interface.

  An authentication service 31 is implemented in the authentication server 30. The authentication service 31 is a module group that provides a user authentication function as a Web service. The authentication service 31 can accept a request from a client (here, the client device 10) through a SOAP interface.

  A distribution service 41 is mounted on the distribution server 40. The distribution service 41 is a module group that provides a document distribution function as a Web service. The distribution service 41 can accept a request from a client (here, the client device 10) through a SOAP interface.

  Hereinafter, the processing procedure of the document management system 1 of FIG. 3 will be described. FIG. 4 is a sequence diagram for explaining a document distribution process in the document management system.

  When a user issues a document distribution instruction to the distribution application 11, the distribution application 11 connects with a document management service 21 that manages a document to be distributed (hereinafter referred to as “current document”). User authentication is requested to the document management plug-in 14 (S101). The user authentication method is not limited to password authentication, domain authentication, card authentication, biometric authentication, or the like. If the authentication service 31 supports any one of the authentication methods, the authentication method may be used. If the authentication service 31 supports a plurality of authentication methods, it may be possible to select which authentication method is used at the time of user operation (when a password is input, etc.).

  In step S102 following step S101, the document management plug-in 14 performs session connection processing with the document management service 21 together with user authentication processing, and returns the result to the distribution application 11 (S103). . That is, the document management plug-in 14 makes an authentication request to the authentication service 31 using the authentication management module 17 and makes a session connection request to the document management service 21 using the document management module 18.

  Progressing to step S104 following step S103, the distribution application 11 inquires of the feature management module 12 about the authentication level of the current user. Proceeding to step S105 following step S104, the feature management module 12 inquires of the document management plug-in 14 about the authentication type to identify the authentication type of the authentication performed by the current user (type ID). Is acquired (S106). The authentication type may be held by the document management plug-in 14 when the user is authenticated in step S102 or may be held by the authentication service 31. In the former case, the document management plug-in 14 may simply return the authentication type held by itself in response to an inquiry from the feature management module 12. In the latter case, the document management plug-in 14 makes an inquiry about the authentication type to the authentication service 31 in response to the inquiry from the feature management module 12, and returns the authentication type returned from the authentication service 31 to the feature management module 12. That's fine.

  Progressing to step S107 following step S106, the feature management module 12 determines the authentication level of the current user based on the type ID and the feature table 121.

  FIG. 5 is a diagram illustrating a configuration example of the feature table. The feature table 121 illustrated in FIG. 5 is a table in which a type ID, a type name, an authentication level, and the like are defined for each authentication type. The type ID is identification information for uniquely identifying each authentication type. The type name is the name of each authentication type. The authentication level is the above-described authentication level, that is, a level indicating a high level of reliability due to receiving authentication by each authentication type. In the feature table 121 of FIG. 5, when authentication is not performed (no authentication), the authentication level is 0, and password authentication, domain authentication, original authentication (which is uniquely implemented), or biometric authentication is received. The authentication levels are defined as 1, 2, 3, 4 respectively. In FIG. 5, the authentication levels do not overlap, but the same authentication level may be set for a plurality of authentication types.

  Progressing to step S108 following step S107, the feature management module 12 outputs the determined authentication level to the distribution application 11. Progressing to step S109 following step S108, the distribution application 11 acquires actual data (document data) of the current document from the document management service 21 via the document management plug-in 14 (S110). In step S111 following step S110, when the distribution application 11 requests the distribution plug-in 15 to connect a session with the distribution service 41, the distribution plug-in 15 requests the authentication service 31 to authenticate the user. Both request the session connection to the distribution service 41 and connect the session (S112, S113).

  When the distribution plug-in 15 notifies that the session with the distribution service 41 is connected (S114), the distribution application 11 distributes the distribution plug-in with the document data of the current document, the destination information, and the authentication level. 15 is requested to distribute the document data (S115). Here, the destination information corresponds to a user name, a group name, or the like of a user designated as a document data distribution destination.

  In step S116 following step S115, the distribution plug-in 15 transmits the document data, destination information, and authentication level of the current document to the distribution service 41, thereby distributing the current document to the distribution service 41. To request. Progressing to step S117 following step S116, the distribution service 41 determines a distribution destination to actually distribute the document data based on the distribution destination determination table, and distributes the document data to the determined distribution destination.

  FIG. 6 is a diagram illustrating a configuration example of a distribution destination determination table. The distribution destination determination table 42 in FIG. 6 is a table in which a distribution destination corresponding to the authentication level is defined for each destination that can be designated as a distribution destination. For example, when User_A is designated as the destination and the authentication level is 1, it can be seen that the untransferred tray is the delivery destination. Here, the untransferred tray is a place where a document that has not been delivered to the destination is stored. Also, when User_B is designated as the destination, if the authentication level is 4 or higher, the mail address of User_B (BB@xxx.com) is the delivery destination, but the authentication level is 1 or 1 to 3 The untransferred tray is the delivery destination. Also, when User_D is specified as the destination, if the authentication level is 3 or higher, the mail address of User_D (DD@xxx.com) is the delivery destination, but if the authentication level is 0, the recycle bin is delivered. Be ahead. That is, by determining the distribution destination based on the distribution destination determination table 42, when the predetermined authentication level is not satisfied, distribution to the user or the like designated as the destination is not performed.

  When the distribution is completed, this is notified to the distribution application 11 via the distribution plug-in 15 (S118, S119), and the processing based on the distribution instruction ends.

  As described above, according to the document management system 1 in the present embodiment, the distribution destination is determined according to the reliability of the distributor (whether or not the authentication has been performed or what authentication has been received). For example, it is possible to refuse distribution of information requested to be distributed by a low-reliability distributor, and this may cause damage to the receiver by receiving unauthorized information. Can be prevented.

  The preferred embodiments of the present invention have been described in detail above, but the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・ Change is possible.

It is a figure which shows the structural example of the document management system in embodiment of this invention. It is a figure which shows the hardware structural example of the client apparatus in embodiment of this invention. It is a figure which shows the function structural example of the document management system in embodiment of this invention. It is a sequence diagram for demonstrating the delivery process of the document in a document management system. It is a figure which shows the structural example of a feature table. It is a figure which shows the structural example of a delivery destination determination table.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Document management system 10 Client apparatus 11 Distribution application 12 Feature management module 13 Local plug-in 14 Document management plug-in 15 Distribution plug-in 16 Authentication control module 17 Authentication management module 18 Document management module 20 Document management server 21 Document management service 30 Authentication server 31 Authentication Service 40 Distribution Server 41 Distribution Service 50 Network 100 Drive Device 101 Recording Medium 102 Auxiliary Storage Device 103 Memory Device 104 Arithmetic Processing Device 105 Network I / F Device 106 Input Device 107 Display Device 121 Feature Table B Bus

Claims (10)

An information processing apparatus that requests distribution of information to a distribution apparatus connected via a network,
Determining means for determining a value set for each type of authentication based on a type of authentication received by a user instructing delivery of the information;
A distribution request unit that transmits the value determined by the determination unit , destination information, and a distribution request for the information to the distribution device;
In the distribution destination determination information storage unit in which a distribution destination is set in accordance with the value with respect to the destination indicated by the destination information , the distribution device transmits the information to the distribution destination set for the received value. An information processing apparatus characterized by delivering a message. The information processing apparatus according to claim 1, wherein the value set for each type of authentication indicates high reliability with respect to each type of authentication. The information processing apparatus according to claim 1, further comprising management means for managing a value set for each type of authentication. Receiving a value set according to the type of authentication received by the user instructing distribution of information, destination information, and a distribution request for the information from an information processing apparatus connected via a network; A delivery destination determination information storage means in which a delivery destination is set according to the value for the destination indicated by the destination, and a delivery destination judgment means for judging the delivery destination of the information based on the received value. A distribution device. 5. The distribution apparatus according to claim 4, wherein the value indicates a high reliability with respect to a type of authentication received by the user. The distribution destination determination means does not distribute the information to the destination indicated by the destination information when a predetermined storage location is set for the received value in the distribution destination determination information storage means. 6. The distribution apparatus according to claim 4 or 5, wherein the determination is performed. A method of distributing information using a computer,
A determination procedure for determining a value set for each type of authentication based on a type of authentication received by a user instructing delivery of the information;
A distribution request procedure for transmitting a value determined in the determination procedure , destination information, and a distribution request for the information to a distribution apparatus connected via a network;
In the distribution destination determination information storage unit in which a distribution destination is set in accordance with the value with respect to the destination indicated by the destination information , the distribution device transmits the information to the distribution destination set for the received value. the method of delivery information, characterized in that to deliver. 8. The information distribution method according to claim 7, wherein the value set for each authentication type indicates a high degree of reliability with respect to each authentication type. On the computer,
A determination procedure for determining a value set for each type of authentication based on a type of authentication received by a user who instructs distribution of information;
A distribution request procedure for transmitting a value determined in the determination procedure , destination information, and a distribution request for the information to a distribution apparatus connected via a network;
In the distribution destination determination information storage unit in which a distribution destination is set in accordance with the value with respect to the destination indicated by the destination information , the distribution device transmits the information to the distribution destination set for the received value. distribution program, characterized in that to deliver. A computer-readable recording medium on which the distribution program according to claim 9 is recorded.

Images