JP4754412B2 - Electronic data sharing method and system with real-time usage control - Google Patents

Description

  The present invention performs a use authorization determination using a preset use rule in response to a use request for a copy of shared electronic data from a user, and when the determination result is permission, the copied shared electronic data The present invention relates to an electronic data sharing system that allows a user to use.

  With the widespread use of high-speed networks and ICT (Information and Communication Technology) technology, the need to share and use electronic data regardless of public or private use is increasing, and this kind of electronic data sharing system is proposed in Patent Document 1 and others Has been.

Here, while the threshold for sharing electronic data is low, the leakage of data that has been accidentally shared has become a problem. Even if you try to update or delete the replicated data, the location of the replicated data is often unknown, and when you update / delete the contents of the shared electronic data or update the usage rules, it is already in use. The data will not be affected, and the change will be reflected for the first time in the usage authorization decision. Therefore, inconsistencies and disadvantages due to having old data indefinitely may occur, and the provider side remains uneasy.
Japanese Patent Laid-Open No. 2005-063400

  Once the electronic data is shared, the cache (replicated electronic data) becomes awkward and may remain in the local environment of each user, which may prevent thorough updating and deletion of the cache. Can't share. It is necessary to prevent leakage of electronic data that has been accidentally shared or electronic data that should no longer be shared due to changing circumstances.

  An object of the present invention is to provide an electronic data sharing method and system for thoroughly updating or deleting contents when the contents of the shared electronic data are updated or when the shared electronic data is deleted.

Electronic data sharing method of order present invention to achieve the above object, the shared use request copies of electronic data from the user, the usage rule evaluator is preset in the use authorization decision side apparatus If the determination result is permission, the user side device acquires the copied shared electronic data, temporarily stores it in the memory in the device, and the copied shared electronic data In an electronic data sharing method for allowing the user to use data,
The evaluator is
When a voter who has the right to change the content of the shared electronic data changes the content of the shared electronic data, or a voter who has the right to delete the shared electronic data deletes the shared electronic data, Obtaining identification information of a user side device that has been given a pre-stored permission, requesting the user side device of the identification information to update or delete the contents of the copied shared electronic data being used,
The user side device is
When update or deletion of the copied shared electronic data being used is requested from the evaluator, the copied shared electronic data by an application program that realizes use of the copied shared electronic data by the user Force data usage interruption,
The copied shared electronic data stored in the memory is updated or deleted according to the instruction of the evaluator, and when the updated or deleted copied electronic data is finished, the application program can use the updated shared electronic data. Resuming use of the copied shared electronic data,
When the copied shared electronic data is used by the application program, the application program monitors whether or not the copied shared electronic data is legitimately used. This is a method of canceling the use of the shared electronic data.
On the other hand, in the electronic data sharing system of the present invention, in response to a usage request for copying of shared electronic data from a user, a usage authorization determination is made using a usage rule in which an evaluator in the usage authorization determiner side device is set in advance If the determination result is permission, the user side device acquires the copied shared electronic data, temporarily stores it in the memory in the device, and stores the copied shared electronic data in the user In the electronic data sharing system used by
The pre-evaluator is
Save the identification information of the user side device that you have given permission in advance,
When a voter who has the right to change the content of the shared electronic data changes the content of the shared electronic data, or a voter who has the right to delete the shared electronic data deletes the shared electronic data, Obtaining identification information of the user-side device that has given the stored permission, and requesting the user-side device of the identification information to update or delete the content of the copied shared electronic data being used;
The user side device is:
A memory manager for updating or deleting the replicated shared electronic data stored in the memory according to instructions of the evaluator;
When update or deletion of the contents of the copied shared electronic data being used is requested from the evaluator, the copied program by an application program that realizes use of the copied shared electronic data by the user The use of shared electronic data is forcibly interrupted, and the application program monitors whether or not the copied shared electronic data is used properly, and if the unauthorized use is confirmed, the copied shared electronic data is confirmed. An AP manager to cancel the use of
When the evaluator requests update or deletion of the replicated shared electronic data, the AP manager is notified of the suspension of use of the replicated shared electronic data and is stored in the memory by the memory manager. When the copied shared electronic data is updated or deleted, and the updated or deleted result of the copied shared electronic data is responded from the memory manager, the copied shared data that can be used by the application program A downloader for notifying the AP manager of the resumption of use of electronic data;
Have

  In the present invention, when the content of the shared electronic data is updated or when the shared electronic data is deleted, the copied shared electronic data that is being used promptly is identified, and after updating the content or deleting the copied data, If necessary, the shared electronic data whose use is restricted or copied is deleted and the use is stopped.

  In addition, if a voter who has the right to change the contents of the shared electronic data usage rules changes the contents of the shared electronic data usage rules, it promptly locates the copied shared electronic data in use and However, the use authorization determination may be performed again, and based on the result, the use may be stopped by deleting the shared electronic data whose use is restricted or copied as necessary.

  According to the present invention, once electronic data is shared, when updating or deleting the contents, or updating the usage rules, the update or deletion is reflected in the cache being used. Share with confidence.

  Next, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block diagram of an electronic data sharing system according to an embodiment of the present invention.

  The electronic data sharing system according to the present embodiment includes an updater 1, a storage manager 2, a storage 3, an evaluator 4, a world recognizer 5, a downloader 6, a memory manager 7, a memory 8, an AP manager 9, and an AP (Application Program). 10 is comprised. Blocks 1 to 5 realize functions on the electronic data provider / manager side, and blocks 6 to 10 realize functions on the electronic data user side. All blocks are connected via software or locally on the terminal. Any block may be in any physical terminal. Normally, a node has all 1-10 blocks. Here, a node is a resident process that exists on a network and has different characteristics in various aspects. When a user uses it to request authorization for use of information or use information, it becomes a user node, when information is managed / stored, it becomes an information management node, and when authorization judgment is made, use authorization It becomes a decision node. There may be a plurality of all blocks.

  The updater 1 receives a request for the operation from a voter who has the right to update the content of the shared electronic data, delete the shared electronic data, or update the usage rule of the shared electronic data, and receives an evaluator 4 The storage manager 2 is requested to execute the operation, and the result is received via the evaluator 4 and shown to the voters.

  The storage manager 2 manages attached information such as shared electronic data and usage rules thereof, and requests for registration / update of shared electronic data to the storage 3 via the evaluator 4 by the updater 1 and a downloader. 6 accepts a shared electronic data acquisition request from the storage 3 via the evaluator 4 and responds thereto. The storage manager 2 operates the shared electronic data on the storage 3, receives a response, and notifies the evaluator 4 that the content of the shared electronic data has been updated / deleted and the usage rules have been updated. To do. The notification to the evaluator 4 may be in response to an inquiry from the evaluator 4. One storage manager 2 may manage a plurality of storages 3.

  The storage 3 stores attached electronic data and attached information such as usage rules thereof, and realizes the operation of the shared electronic data based on a request from the storage manager 2. The storage 3 is composed of one physical storage or a plurality of physical storages that are transparently regarded as one virtual storage. In the latter case, the shared electronic data may be distributed using an information division algorithm such as a threshold secret sharing method.

  The evaluator 4 performs use authorization determination of the shared electronic data at the request of the updater 1. When the use authorization determination result is permission, the evaluator 4 updates / deletes the shared electronic data and updates the use rules. To request. The evaluator 4 passes the copied shared electronic data (hereinafter referred to as “replicated shared electronic data”) to the downloader 6. Further, the evaluator 4 makes a use authorization determination for the copy shared electronic data at the request of the downloader 6, and if the use authorization determination result is permission, passes the copy shared electronic data to the downloader 6. The usage rule is used for the usage authorization determination. At this time, the attribute and context value necessary for the determination are acquired from the world recognizer 5. The evaluator 4 may perform a plurality of use authorization determinations in order to improve reliability. The evaluator 4 manages to which downloader 6 the duplicate shared electronic data has been passed. The evaluator 4 may periodically verify the communication possibility with respect to each downloader 6. The evaluator 4 determines reuse authorization through each downloader 6 when the usage rule is changed.

  The world recognizer 5 acquires attributes and context values necessary for use authorization determination and passes them to the evaluator 4. There may be a plurality of world recognizers 5 for each attribute or context value to be acquired. Here, the attributes are attributes belonging to the user terminal such as user ID, affiliation group, qualification, identity authentication result, number of times of use, HDD remaining amount of the user terminal, security measures, etc. And so on. The context refers to an environment or situation such as time. The world recognizer 5 obtains the attribute value from a user terminal device or the like, and obtains the context value from the clock or the like of the terminal device in which it exists.

  The downloader 6 receives a use request from the AP 10 and returns a response to the request. The downloader 6 requests the evaluator 4 to make an authorization decision, and also receives the shared electronic data, its license condition, and its attached information as necessary. When the downloader 6 obtains the duplicate shared electronic data, etc., the downloader 6 requests the memory manager 7 to temporarily store them in the memory 8, and the AP 10 correctly uses the AP manager 9. Ask for monitoring. Based on the request from the evaluator 4, the downloader 6 requests the memory manager 7 to update or delete the content of the duplicate shared electronic data. The downloader 6 may not only passively receive the notification from the evaluator 4, but may make an inquiry to the evaluator 4 periodically or whenever a specific attribute or context value is changed.

  The memory manager 7 receives an operation request for a plurality of shared electronic data on the memory 8 from the downloader 6 or the AP 10 and operates the memory 8. The memory 8 stores the copy shared electronic data, its permission conditions, and attached information as necessary, and realizes the operation of the copy shared electronic data based on a request from the memory manager 7.

  The AP manager 9 monitors whether the AP 10 is correctly using the duplicate shared electronic data at the request of the downloader 6. The AP manager 9 receives a notification from the downloader 6 that the content of the copy shared electronic data being used has been updated / deleted and that the usage rules have been updated, and forcibly restricts the use of the AP 10 and cancels the usage. Notify the user. The AP manager 9 may not only passively receive the notification from the downloader 6 but also make an inquiry to the downloader 6 periodically or whenever a specific attribute or context value is changed. One AP manager 9 may manage a plurality of APs 10.

  The AP 10 receives a copy shared electronic data use request from a user and realizes the use, and there may be a plurality of types. The AP 10 requests the downloader 6 to use the shared electronic data and obtains a response. The AP 10 accesses the duplicate shared electronic data via the memory manager 7 and deletes the duplicate shared electronic data via the memory manager 7 when the use is completed. The AP 10 is monitored by the AP manager 9 as to whether the copy shared electronic data is being used properly.

  Each block may be on one physical terminal or all on different physical terminals.

  FIG. 2 is a sequence diagram for explaining the operation from the use request for copy shared electronic data to the start of use in the present embodiment.

  The user requests the AP 10 to use the duplicate shared electronic data (step 101). The AP 10 throws the request to the downloader 6 (step 102). The downloader 6 throws the request to the evaluator 4 (step 103). The evaluator 4 acquires usage rules for the shared electronic data to be copied, extracts necessary parameters (attributes and contexts) from the rules (step 104), and sends the values of the parameters to the world recognizer 5. Acquisition is requested (step 105). The evaluator 4 acquires the value of the above parameter from the world recognizer 5 (step 106), performs usage authorization determination (step 107), and if the usage authorization judgment result is permission, the storage manager 2 is A request for acquisition of duplicate shared electronic data is made (step 108). The storage manager 2 requests the storage 3 to obtain duplicate shared electronic data (step 109), and obtains duplicate shared electronic data from the storage 3 (step 110). The evaluator 4 acquires the copy shared electronic data from the storage manager 2 (step 111), and stores information for accessing the downloader 6 as a licensee (step 112). The downloader 6 acquires the duplicate shared electronic data from the evaluator 4 (step 113). Instead of acquiring the copy shared electronic data via the evaluator 4, it may be acquired directly from the storage manager 2. The downloader 6 requests the memory manager 7 to store the copy shared electronic data, the permission condition, and the attached information as necessary in the memory 8 (step 114). The memory manager 7 requests the memory 8 to store the duplicate shared electronic data and the like (step 115). After storing them, the memory 8 responds to the memory manager 7 with the storage result of the duplicate shared electronic data and the like (step 116). The memory manager 7 returns the storage result to the downloader 6 (step 117). The downloader 6 indicates the conditions (license conditions) to be observed when the AP 10 uses the copy shared electronic data to the AP manager 9 and requests monitoring of proper use (step 118). The AP manager 9 monitors whether or not the AP 10 uses the copy shared electronic data properly (step 119). If the AP manager 9 confirms the unauthorized use, the AP manager 9 stops the use and passes the copy shared electronic data via the memory manager 7. Delete. On the other hand, the downloader 6 returns a use authorization determination result to the AP 10 (step 120). The AP 10 responds to the user with the use authorization determination result (step 121), and starts using the copy shared electronic data. If the use authorization determination result is permission, the AP 10 acquires the duplicate shared electronic data on the memory 8 via the memory manager 7.

  FIG. 3 is a sequence diagram showing operations from the update / deletion of shared electronic data to the reflection to the user environment in the present embodiment.

  A voter who has the right to update or delete the contents of the shared electronic data requests the updater 1 to update / delete the shared electronic data (step 201). The updater 1 throws the request to the evaluator 4 (step 202). The evaluator 4 acquires usage rules for updating / deleting the contents of the shared electronic data, extracts necessary parameters (attributes and contexts) from the rules (step 203), and sends the above parameters to the world recognizer 5. A value is requested (step 204), the value of the parameter is obtained from the world recognizer 5 (step 205), and a use authorization decision is made (step 206). If the use authorization determination result is permission, the storage manager 2 is requested to update / delete the contents of the duplicate shared electronic data (step 207). The storage manager 2 requests the storage 3 to update / delete the copy shared electronic data content (step 208). The storage 3 updates / deletes the content of the duplicate shared electronic data, and the storage manager 2 obtains a result response from the storage 3 (step 209). The storage manager 2 passes the response to the evaluator 4 (step 210). The evaluator 4 passes the response to the updater 1 (step 211). The updater 1 notifies the voter of the result (step 212).

  On the other hand, the evaluator 4 acquires the downloader 6 information of the user who is permitted to use the replicated data of the updated / deleted shared electronic data (step 213). All the downloaders 6 are requested to update / delete the contents of the duplicate shared electronic data (step 214). The downloader 6 requests the AP manager 9 to suspend / cancel the use of the duplicate shared electronic data (step 215). The AP manager 9 requests the AP 10 to suspend / cancel the use of the duplicate shared electronic data (step 216). The downloader 6 requests the memory manager 7 to update / delete the contents of the duplicate shared electronic data (step 217). The memory manager 7 requests the memory 8 to update / delete the contents of the duplicate shared electronic data (step 218). The memory 8 updates / deletes the contents of the duplicate shared electronic data, and returns the result to the memory manager 7 (step 219). The memory manager 7 passes the response to the downloader 6 (step 220).

  If the use of the copy shared electronic data can be resumed, the downloader 6 requests the AP manager 9 to resume the use (step 221). The AP manager 9 requests the AP 10 to resume use (step 222). The downloader 6 may report to the evaluator 4 that the update / deletion of the duplicate shared electronic data has been successful.

  FIG. 4 is a sequence diagram showing an operation from update of the usage rule of the duplicate shared electronic data to reflection in the user environment in the present embodiment.

  A voter who has the right to update the copy sharing data usage rule requests the updater 1 to update the copy sharing electronic data usage rule (step 301). The updater 1 throws the request to the evaluator 4 (step 302). The evaluator 4 obtains a usage rule for updating the usage rule for the duplicate shared electronic data, extracts necessary parameters (attributes and contexts) from the usage rule (step 303), and sends the above parameters to the world recognizer 5. A value is requested (step 304), the value of the parameter is acquired from the world recognizer 5 (step 305), and a use authorization decision is made (step 306). If the usage authorization determination result is permission, the storage manager 2 is requested to update the usage rule for the duplicate shared electronic data (step 307). The storage manager 2 throws the request to the storage 3 (step 308). The storage 3 updates the usage rule for the duplicate shared electronic data, and the storage manager 2 acquires the response from the storage 3 (step 309). The storage manager 2 passes the response to the evaluator 4 (step 310). The evaluator 4 passes the response to the updater 1 (step 311), and the updater 1 notifies the voter of the result (step 312).

  On the other hand, the evaluator 4 acquires the downloader 6 information of the user who is permitted to use the copy shared electronic data to which the updated use rule is to be applied (step 313). A request for updating the usage rules of the shared electronic data is made (step 314). The downloader 6 requests the AP manager 9 to suspend / cancel the use of the duplicate shared electronic data (step 315). The AP manager 9 requests the AP 10 to temporarily suspend / cancel the use of the duplicate shared electronic data (step 316).

  The downloader 6 requests the evaluator 4 to make a reuse authorization determination using the updated usage rule (step 317). The evaluator 4 performs reuse authorization determination (step 318). The contents of the step are the same as steps 303 to 306, although the usage rules to be applied are different. The downloader 6 acquires the reuse authorization determination result from the evaluator 4 (step 319). If the reuse authorization determination result is rejection, the downloader 6 requests the memory manager 7 to delete the copy shared electronic data (step 320). The memory manager 7 requests the memory 8 to delete the duplicate shared electronic data (step 321). The memory 8 deletes the duplicate shared electronic data and returns the result to the memory manager 7 (step 322). The memory manager 7 passes the response to the downloader 6 (step 323). On the other hand, if the reuse authorization determination result is permission, the downloader 6 requests the AP manager 9 to resume use (step 324). The AP manager 9 requests the AP 10 to resume use (step 325). The downloader 6 may report to the evaluator 4 that the copy sharing electronic data reuse authorization determination has been performed.

  The following can be considered as another embodiment of the present invention.

  When the attribute / qualification of the user / user terminal or the like changes, the evaluator 4 performs the use authorization determination again, and based on the result, the use is continued, the use is restricted, the copy shared electronic data Delete and cancel the use.

  When the environment changes such as the time, the evaluator 4 makes a use authorization determination again, and based on the result, the use is continued, the use is restricted, or the copy shared electronic data is deleted and the use is stopped. .

  The node of the user who has finished using the information notifies the node of the use authorization determiner to that effect, and the licensee recognized by the use authorization determiner is only the person currently in use.

  Confirm that the node of the usage authorization judge notifies the user side node at regular intervals.

  When updating the contents of the copy shared electronic data, limiting the use, or deleting the copy shared electronic data and canceling the use, the evaluator 4 displays a warning on the user side node and waits for a certain period of time. .

  When updating the contents of the copy shared electronic data, limiting the use, or deleting the copy shared electronic data and canceling the use, the evaluator 4 waits until the user's consent is obtained.

  An electronic data sharing system according to the present invention records a program for realizing its function on a computer-readable recording medium, causes the computer to read the program recorded on the recording medium, and executes the program. Also good. The computer-readable recording medium refers to a recording medium such as a flexible disk, a magneto-optical disk, and a CD-ROM, and a storage device such as a hard disk device built in a computer system. Further, the computer-readable recording medium is a medium that dynamically holds the program for a short time (transmission medium or transmission wave) as in the case of transmitting the program via the Internet, and in the computer serving as a server in that case Such as a volatile memory that holds a program for a certain period of time.

  Specific examples will be described below.

Example 1
Shared electronic information = “Number of customers currently queuing in popular ramen shop X”
Usage rule = “Members can view”
Voter = “Ramen shop X staff”
User = “Member A”
(1) Member A is viewing “Number of customers currently queuing in popular ramen store X” (2) The staff of ramen store X is based on the current situation “Number of customers currently queuing in popular ramen store X” Is updated (3), the “number of customers currently queuing in the popular ramen store X” displayed on the screen of the browsing AP of the member A is automatically updated.

Example 2
Shared electronic information = "Video Y"
Usage rule = “Members can view”
Voter = “Video distribution staff”
User = “Member A”
(1) Assume that member A is browsing “video Y”.
(2) The staff of the video distribution company notices that “video Y” contains an inappropriate video, and deletes “video Y”.
(3) Then, “video Y” flowing on the screen of the browsing AP of member A ends. At that time, an apology message is displayed as an option.

Example 3
Shared electronic information = “Customer information of company Z”
Usage rule = “Anyone can browse from the Z in-house terminal” → “Able to browse from the Z in-house terminal and from Z company employees”
Voter = "Company Z person in charge"
User = “Part-time job using Z internal terminal”
(1) It is assumed that a part-time job using a Z in-house terminal is browsing “Z company customer information”.
(2) The person in charge of Company Z updates the usage rule from “Anyone can view from the Z in-house terminal” to “A user from the Z in-house terminal and can view from any Z company employee”.
(3) Then, “Company Z customer information” displayed on the screen of the browsing AP of the part-time job using the Z in-house terminal is automatically deleted. As an option, a message is then displayed.

1 is a block diagram of an electronic data sharing system according to an embodiment of the present invention. It is a sequence diagram which shows the operation | movement from the utilization request | requirement of replication share electronic data in embodiment of FIG. 1 to utilization start. It is a sequence diagram which shows operation | movement from the update / deletion of shared electronic data to reflection in a user environment in embodiment of FIG. It is a sequence diagram which shows operation | movement from the update of the utilization rule of replication share electronic data in embodiment of FIG. 1 to reflection in a user environment.

Explanation of symbols

1 Updater 2 Storage Manager 3 Storage 4 Evaluator 5 World Recognizer 6 Downloader 7 Memory Manager 8 Memory 9 AP Manager 10 AP
101-121, 201-222, 321-325 steps

Claims (4)

In response to a usage request for a copy of the shared electronic data from the user, the evaluator in the usage authorization judge side device performs usage authorization judgment using a preset usage rule, and if the judgment result is permission, In the electronic data sharing method in which the user side device acquires the copied shared electronic data, temporarily stores it in a memory in the device, and causes the user to use the copied shared electronic data.
The evaluator is,
When a voter who has the right to change the content of the shared electronic data changes the content of the shared electronic data, or a voter who has the right to delete the shared electronic data deletes the shared electronic data, Obtaining identification information of a user side device that has been given a pre-stored permission , requesting the user side device of the identification information to update or delete the contents of the copied shared electronic data being used ,
The user side device is
When update or deletion of the copied shared electronic data being used is requested from the evaluator, the copied shared electronic data by an application program that realizes use of the copied shared electronic data by the user Force data usage interruption,
The copied shared electronic data stored in the memory is updated or deleted according to the instruction of the evaluator, and when the updated or deleted copied electronic data is finished, the application program can use the updated shared electronic data. Resuming use of the copied shared electronic data,
When the copied shared electronic data is used by the application program, the application program monitors whether or not the copied shared electronic data is legitimately used. Electronic data sharing method with real-time usage control for stopping the use of shared electronic data .   When a voter who has the right to change the content of the shared electronic data usage rule changes the content of the shared electronic data usage rule, the evaluator performs the usage authorization determination again, and based on the result, The electronic data sharing method with real-time use control according to claim 1, wherein the user side device is allowed to continue using the copied shared electronic data, restrict the use, or stop the use. In response to a usage request for a copy of the shared electronic data from the user, the evaluator in the usage authorization judge side device performs usage authorization judgment using a preset usage rule, and if the judgment result is permission, In the electronic data sharing system in which the user side device acquires the copied shared electronic data, temporarily stores it in a memory in the device, and allows the user to use the copied shared electronic data.
The pre-evaluator is
Save the identification information of the user side device that you have given permission in advance,
When a voter who has the right to change the content of the shared electronic data changes the content of the shared electronic data, or a voter who has the right to delete the shared electronic data deletes the shared electronic data, Obtaining identification information of the user-side device that has given the stored permission, and requesting the user-side device of the identification information to update or delete the content of the copied shared electronic data being used;
The user side device is:
A memory manager for updating or deleting the replicated shared electronic data stored in the memory according to instructions of the evaluator;
When update or deletion of the contents of the copied shared electronic data being used is requested from the evaluator, the copied program by an application program that realizes use of the copied shared electronic data by the user The use of shared electronic data is forcibly interrupted, and the application program monitors whether or not the copied shared electronic data is used properly, and if the unauthorized use is confirmed, the copied shared electronic data is confirmed. An AP manager to cancel the use of
When the evaluator requests update or deletion of the replicated shared electronic data, the AP manager is notified of the suspension of use of the replicated shared electronic data and is stored in the memory by the memory manager. When the copied shared electronic data is updated or deleted, and the updated or deleted result of the copied shared electronic data is responded from the memory manager, the copied shared data that can be used by the application program A downloader for notifying the AP manager of the resumption of use of electronic data;
An electronic data sharing system. The evaluator, when a voter who has the right to change the contents of the shared electronic data usage rule changes the contents of the shared electronic data usage rule, makes a use authorization determination again, and based on the result, the replicated shared use of electronic data to continue or to limit the usage or electronic data sharing system with real-time usage control according to 請 Motomeko 3 Ru stops the use, the user-side device.

Images