JP4928507B2 - File management system - Google Patents

Description

The present invention relates to a file management system for managing files stored in an external storage medium such as a USB memory.

  A large number of computers are used in companies and the like, but in recent years, thorough information management has been demanded, and usable hardware resources are often limited. In particular, an external storage medium such as a semiconductor memory (such as a USB memory) that can easily take information to the outside is very convenient, but it is lost, stolen, or forgotten to erase files that are no longer needed after use. Inappropriate operation is a problem.

  Therefore, many companies take measures such as disabling external storage media to prevent information leakage.

  However, since the external storage medium itself is a highly convenient storage device, if it is prohibited to use it uniformly, business operations may be hindered.

  Therefore, Japanese Patent Application Laid-Open No. 2004-151620 discloses a system that notifies a warning when a confidential file is stored in an external storage medium, and stops the operation of storing the confidential file in the external storage medium depending on the case.

  Further, in order to prevent information leakage, companies and the like often register external storage media that can be used in the company in advance, and only registered external storage media can be used. However, even if an external storage medium that can be used is registered, the risk of losing the external storage medium cannot be excluded. There is a system that automatically deletes the file when it arrives. Patent Documents 2 to 4 exist as such systems.

JP 2005-149243 A JP-A-6-259293 Japanese Patent Laid-Open No. 10-333891 JP 2003-316619 A

  By using the system of the above-mentioned patent document 1, it is possible to control the operation of storing a confidential file or the like for an external storage medium according to the user's attribute. However, a user who has the authority to handle a confidential file can save the confidential file on an external storage medium, and the user loses the external storage medium while the confidential file is stored on the external storage medium. There is also a risk of end.

  Further, by using a system such as Patent Document 2 to Patent Document 4, when a certain period or a specified date and time arrives, the file stored in the external storage medium can be automatically deleted. The problem can be solved. However, as described above, in an enterprise or the like, a usable external storage medium is often registered, and the usable external storage medium is often shared within a department or between users. Therefore, if another user uses the external storage medium before a certain period or specified date and time arrives, the user can access a file stored in the external storage medium. Therefore, the risk of information leakage cannot be denied.

  Furthermore, since the external storage medium is a storage device that is very convenient as described above, it is frequently used for file transfer and the like. Therefore, files are often exchanged by storing important files in an external storage medium and passing the external storage medium to a third party. In this case, if the file stored in the external storage medium is automatically deleted with the arrival of a certain period or specified date and time, the user who received the external storage medium may interfere with the business. .

  Therefore, there is a demand for a file management system that reduces the risk of information leakage due to a file stored in an external storage medium and does not impair the convenience of the external storage medium. In other words, it is desirable that the file stored in the external storage medium is automatically deleted when the role is finished, but such a technique cannot be realized by the conventional technology as described above.

  In general, the act of saving a file in an external storage medium such as a USB memory often has the purpose of taking the file and using the file on another computer terminal. Therefore, the present inventor pays attention to the purpose of use of the external storage medium, determines whether the file stored in the external storage medium has finished its role, and if it determines that the role has been completed, Invented a file management system that solves the conflicting problems of reducing the risk of information leakage of a file stored in an external storage medium and not compromising the convenience of the external storage medium. .

  A first invention is a file management system for managing files on an external storage medium, wherein the file management system includes an external storage medium attachment / detachment management unit for managing a mounting state of the external storage medium to a computer terminal, and the external storage medium A monitoring target determining unit that identifies a file stored in a storage medium and determines the file as a monitoring target; a determination unit that determines whether the monitoring target file stored in the external storage medium has finished its role; and the determination result And a control unit that performs predetermined control on the monitoring target of the external storage medium, and the determination unit is related to the monitoring target of the computer terminal on which the external storage medium is mounted. Based on the operation log information, when the operation content in the operation log information satisfies a predetermined condition, the file stored in the external storage medium plays a role. It determines that were example, is a file management system.

  According to the configuration of the present invention, when it is determined that the file stored in the external storage medium has finished its role, it is possible to perform control such as deleting the file from the external storage medium. Therefore, a file management system that reduces the risk of information leakage and does not impair the convenience of the external storage medium becomes possible.

  Further, it is also possible to execute the determination process for determining whether or not the file has finished its role as in the present invention. That is, the determination unit determines that the operation log information satisfies a predetermined condition when the operation content of the operation log information is an operation content that changes a resource of a computer terminal on which the external storage medium is mounted. It can also be configured like a file management system.

  The first invention described above can be realized by causing the computer terminal to read and execute the program of the present invention. That is, at least one or more computer terminals, an external storage medium attachment / detachment management unit for managing the mounting state of the external storage medium to the computer terminal, monitoring for specifying a file stored in the external storage medium and determining as a monitoring target A target determination unit, a determination unit that determines whether the monitoring target file stored in the external storage medium has finished its role, and issues a predetermined control instruction to the monitoring target of the external storage medium according to the determination result A file management program that functions as a control unit, wherein the determination unit has a predetermined operation content in the operation log information based on operation log information related to the monitoring target of the computer terminal in which the external storage medium is mounted. A file management unit that determines that the file stored in the external storage medium has finished its role when the above condition is satisfied. It may be configured as a program.

According to the present invention, it is possible to realize a file management system that reduces the risk of information leakage due to a file stored in an external storage medium and does not impair the convenience of the external storage medium.

  A conceptual diagram of the file management system 1 of the present invention is shown in FIG. A conceptual diagram of the system configuration of the file management system 1 is shown in FIG. The external storage medium in the present invention includes a semiconductor memory such as a USB memory, an optical disk, a magneto-optical disk, a magnetic disk, and the like, and may be a storage medium or a storage device connected to a computer terminal to store data. Anything may be used.

  The file management system 1 of the present invention shows a case where it is implemented by a single management server 2 in FIG. 2, but each function of the system is distributed and arranged in a plurality of computer terminals (including servers). In addition, the processing may be realized by a plurality of computer terminals and servers.

  The file management system 1 of the present invention is realized by processing predetermined programs and modules in a computer terminal or server (hereinafter referred to as “management server 2”) that stores operation log information and the like of each client terminal 3. The The management server 2 preferably records what program is being executed in the plurality of client terminals 3. For this reason, each client terminal 3 is provided with information such as the program name and file name executed in the client terminal 3 periodically, or when a new program or file is executed or terminated. It is preferable to have a function of transmitting information on the program name and file name from the client terminal 3 to the management server 2 at the timing. The function of transmitting program name and file name information can be extracted by extracting the program name and file name being executed by the arithmetic unit 20 of the client terminal 3, or by extracting and transmitting the program name and file name in the memory. Good. That is, so-called operation log information may be transmitted from the client terminal 3 to the management server 2.

  The management server 2, the client terminal 3, and the like include an arithmetic device 20 such as a CPU that executes arithmetic processing of a program, a storage device 21 such as a RAM or a hard disk that stores information, a processing result of the arithmetic device 20, and a storage device 21. It has at least a communication device 24 that transmits and receives information to be stored via a network such as the Internet or a LAN. Each function (each unit) realized on the management server 2 and the client terminal 3 is executed when a unit (a program, a module, or the like) that executes the process is read into the arithmetic device 20. When using the information stored in the storage device 21 in the processing, each function reads the corresponding information from the storage device 21 and uses the read information for processing in the arithmetic device 20 as appropriate. Further, the management server 2, the client terminal 3, and the like may further include a display device 22 such as a display and an input device 23 such as a keyboard, a mouse, and a numeric keypad. FIG. 3 schematically shows an example of the hardware configuration of the computer terminal.

  Each means in the present invention is only logically distinguished in function, and may be physically or practically the same area.

  The client terminal 3 is a computer terminal used by a user, which is used in an organization such as a company, and has a function of transmitting the above-described operation log information.

  The file management system 1 of the present invention includes an operation log information acquisition unit 4, an operation log information storage unit 5, an external storage medium attachment / detachment management unit 6, a monitoring target determination unit 7, a monitoring target information storage unit 8, a determination unit 9, and a control unit. 10 and.

  The operation log information acquisition unit 4 acquires operation log information in the client terminal 3 from the client terminal 3 periodically or at a predetermined timing. The acquired operation log information is stored in the operation log information storage unit 5 to be described later, together with information for identifying the date and time, which user and which client terminal 3 is the operation log information. The operation log information may be information indicating the operation content in each client terminal 3, the processing content in the client terminal 3, and the like. For example, “file copy”, “file selection”, “drive addition”, “drive deletion” ”,“ Pointing device operation ”,“ Screen control (resizing window, scrolling, etc.) ”,“ Starting application software ”,“ Exiting application software ”,“ Sending e-mail ”,“ Adding storage media ”(external storage) Information indicating the operation of the operator (user) of the client terminal 3 such as medium insertion) or “storage medium deletion” (external storage medium removal).

  The operation log information is, for example, information indicating contents operated by the user using the input device 23 or the like, contents executed or executed in the client terminal 3, and an application or hardware processed in middleware, OS, or the like. There is information indicating control over the wearer. More specifically, key input, pointing device operation (button press, move, etc.), external storage medium attachment / detachment, connection with external device (printer, etc.), file operation (create, delete, copy, move, file name) Change, file read, file write, etc.), folder operation (create, delete, copy, move, folder name change, etc.), application operation (start, end, etc.), drive addition / deletion / detection, IP address change, computer name There is information indicating changes, storage media writing, printing, copying to the clipboard, and the like. These are merely examples and are not limited.

  When the management server 2 acquires operation log information from each client terminal 3, it may be received via a network, or the operation log information is recorded on a recording medium such as a DVD in the client terminal 3, and the recording medium May be read by the management server 2 and read by reading operation log information therefrom.

  The operation log information storage unit 5 stores the operation log information acquired from the client terminal 3 by the operation log information acquisition unit 4. The operation log information includes information for identifying the client terminal 3, information for identifying the user, date / time or information obtained by digitizing the date / time, and information indicating the operation content. In addition, the file identification information (file name, etc.) to be operated, application information (application name, etc.), information indicating the location of the file, identification information of the external storage medium (individual external storage medium such as serial number) Identification information, information for uniquely identifying the external storage medium, such as individual identification information set in advance by an administrator for the external storage medium, or the like may be included as additional information. FIG. 6 shows an example of operation log information. The operation log information is preferably stored for each client terminal 3 or each user (login name or the like). In addition, when associating the information indicating the operation content with the date and time, it may be performed at the client terminal 3, may be performed when the operation log information is acquired by the management server 2, or an operation log information storage unit This may be done when storing in step 5. The operation log information may include all or a part of these items. An example of the operation log information storage unit 5 is schematically shown in FIG.

  The external storage medium attachment / detachment management unit 6 manages the state of attachment, such as when the external storage medium is attached to the client terminal 3, being attached, or removed. This is an operation content indicating that the operation content in the operation log information acquired by the operation log information acquisition unit 4 is monitored and that an external storage medium such as “add storage medium” is attached to the client terminal 3 as the operation content. In this case, it is determined that the external storage medium is attached to the client terminal 3. Further, when the operation content is an operation content indicating that the external storage medium is removed from the client terminal 3 such as “delete storage medium”, it is determined that the external storage medium has been removed from the client terminal 3. Further, it is determined that the external storage medium is being mounted between the time when the external storage medium is mounted and the time when it is removed. That is, when the external storage medium is determined to be attached, the state is being attached, and when the external storage medium is removed, the attachment state is changed from being attached to being removed. The external storage medium attachment / detachment management unit 6 manages each of these attachment states. Further, when the mounting state can be acquired from a device (hardware) or driver software (software that controls a device such as an OS or firmware), it may be used.

  When the external storage medium attachment / detachment management unit 6 determines that the external storage medium is attached to the client terminal 3, the monitoring target determination unit 7 determines the operation log information or operation log information storage unit acquired by the operation log information acquisition unit 4. Whether or not a file has been saved in the external storage medium is determined based on the operation log information stored in FIG. When it is determined that the file is stored in the external storage medium, the file is determined as a monitoring target. Then, the file identification information of the file and the external storage medium identification information of the external storage medium that stores the file are stored in the monitoring target information storage unit 8. In addition, although the method of determining the saving of the file to the external storage medium from the operation log information when it is determined that the external storage medium is being mounted has been described, the external storage medium identification information is not determined without determining the external storage medium mounting state. It is also possible to determine whether to save or delete a file from the operation log information using only.

  For example, when the operation log information stored in the operation log information storage unit 5 is FIG. 7, there is operation log information whose operation content for the external storage medium “UUU-SSS-BBB” is “file pasting”. Therefore, the monitoring target determining unit 7 determines that the operation log information is operation log information indicating that the file is stored in the external storage medium, and extracts the file identification information and the external storage medium identification information of the file. . Then, the information is stored in the monitoring target information storage unit 8. This process is schematically shown in FIG.

  The monitoring target information storage unit 8 stores external storage medium identification information of an external storage medium storing a file to be monitored, file identification information of a file to be monitored, and the like. FIG. 9 schematically shows an example of the monitoring target information storage unit 8.

  When the external storage medium attachment / detachment management unit 6 determines that the external storage medium is attached to the client terminal 3, the determination unit 9 stores the operation log information acquired by the operation log information acquisition unit 4 and the operation log information storage unit 5. Based on the stored operation log information, it is determined whether the file has finished its role with respect to the file saved in the external storage medium set as the monitoring target.

  For example, assume that the operation log information stored in the operation log information storage unit 5 is shown in FIG. When the external storage medium attachment / detachment management unit 6 detects that an external storage medium is attached to the client terminal 3, the determination unit 9 obtains the external storage medium identification information of the attached external storage medium and the detected operation log information. And is compared with the external storage medium identification information stored in the monitoring target information storage unit 8 to determine whether the external storage medium stores the file to be monitored. In the case of FIG. 10, the external storage medium identification information of the attached external storage medium is “UUU-SSS-BBB”, which matches the external storage medium identification information stored in the monitoring target information storage unit 8. Then, it is determined that the external storage medium stores the monitored file. At this time, the file identification information of the file to be monitored stored in the external storage medium is extracted from the monitoring target information storage unit 8. Here, “customer information” is extracted.

  When it is determined that the external storage medium stores the file to be monitored, the determination unit 9 determines the monitoring target stored in the external storage medium from the operation content of the extracted operation log information. It is determined whether the operation on the file “customer information” is an operation set in advance as an operation that has finished the role of the file. For example, if the operation indicating that the role of the file is finished is “save file to computer terminal”, the operation content is “save file” and the storage location is a local disk or network of the computer terminal. It is determined whether the information indicates a drive, for example, information indicating “C drive”, “D drive”, or “file server”. In the case of FIG. 10, since the operation content is “file save” and the save location is “C drive”, the determination unit 9 stores the file “customer” stored in the external storage medium “UUU-SSS-BBB”. It is determined that the role of “information” has ended. This process is schematically shown in FIG.

  As a process for determining whether or not the role of the file has been completed in the determination unit 9, in the above description, it is determined based on one operation log information whether the operation is preset as the operation that has ended the role of the file. As shown in FIG. 19, the determination may be made based on a plurality of series of operation log information.

  For example, in the operation log information, first, the operation content indicating “start”, the application information of the operation target is “Mailer.exe” (e-mail software), and the operation log information after the operation log information is “mail transmission” ”Or“ Receive Mail ”, the operation target application information is“ Mailer.exe ”, and the operation log information after that operation log information is“ End ”. If the application information of the operation target is “Mailer.exe”, it is determined that the role of the file is finished. Alternatively, the operation content indicating “Select” in the operation log information, the application information of the operation target is “Mailer.exe”, and the operation content indicating “Copy” in the operation log information after the operation log information If the application information of the operation target is “Mailer.exe” and the storage location is a local folder of the client terminal 3 such as “C drive”, it is determined that the role of the file is finished. . In other words, the purpose of use is to use the function of the application to be monitored (here, “Mailer.exe”) (email transmission / reception, etc.), and the role (purpose operation) by ending the application after executing that function It can be judged that it was finished.

  In addition, the operation content indicating “start” in the operation log information, the application information of the operation target is “Wordedit.exe” (word processing software), and “read file” in the operation log information after the operation log information , Operation contents indicating “file writing” or “file printing”, the application information of the operation target is “Wordedit.exe”, and “end” is indicated in the operation log information after the operation log information If it is the operation content and the operation target application information is “Wordedit.exe”, it is determined that the role of the file is finished.

  As yet another example, the operation log information indicates the operation content indicating “file read”, “file write”, or “file print”, the application information of the operation target is a text editor, and the file identification information Is a specific case such as “ABC.txt”, and the operation log information after the operation log information indicates the operation content indicating “end”, and the operation target application information is a text editor. Determines that the role of the file has been completed. In this way, files other than applications (text files such as “ABC.txt”) have applications associated with them, and files that are read into, edited, saved, etc. It can be determined that the role (target operation) has been executed by performing an operation corresponding to use, and then it can be determined that the role has been ended by termination of the application.

  Also, in the operation log information, the operation content indicating “file read”, the operation target application information is decompression software, and the file identification information is a specific case such as “DEF.zip”. In the operation log information after the operation log information, if the operation content indicates “end” and the operation target application information is decompression software, it is determined that the role of the file has been completed.

  Alternatively, if the operation log information is an operation content indicating “selection” and the file identification information of the operation target is a specific operation such as “DEF.zip”, the operation log information after the operation log information Is a specific folder such as “DEF.zip”, and the storage location is a local folder of the client terminal 3 such as “C drive”. In such a case, it is determined that the role of the file has been completed.

  In the operation log information, the operation content indicates file encryption such as “file encryption”, the operation target application information is encryption software, and the file identification information is “GHI.ccg”. In such a specific case, when the operation log information after the operation log information indicates an operation content indicating “end” and the operation target application information is encryption software, the role of the file Is determined to have been completed.

  As described above, as the determination processing in the determination unit 9, it may be determined whether the role of the file is finished from one operation log information, or it is determined whether the role of the file is finished from a plurality of series of operation log information. May be. This determination process is executed until the external storage medium is removed or all the monitoring target files are deleted.

  Although the case where a series of operation contents are set in advance for each file type has been shown, it is also possible to make a determination without setting operation contents in advance. For example, the operation content for the monitoring target file has file access, operation log information of any operation content from the application that has read the monitoring target is output, and the subsequent operation content includes information indicating the end of the application It may be determined that the role has been completed. That is, it is not set for each monitoring target, but can be determined as a series of operations by dynamically combining the contents of individual operations.

  When the determination unit 9 determines that the file has finished its role with respect to the file stored in the external storage medium set as the monitoring target in the determination unit 9, the control unit 10 determines that the client terminal 3 to which the external storage medium is attached is used. Then, a control instruction for performing predetermined control on the file stored in the external storage medium is transmitted. Note that examples of the control include deleting the file from the external storage medium and encrypting the file.

  The client terminal 3 that has received the control instruction from the control unit 10 executes control corresponding to the control instruction based on the control instruction. Although the control content is a control instruction, the present invention is not limited to this. The control unit 10 may execute substantial control.

  In addition, even when the determination unit 9 determines that the file has not finished its role, the control unit 10 may detect a case where a certain period of time has elapsed since the file was stored in the external storage medium or the client terminal 3 When a predetermined time has elapsed since the external storage medium was mounted, it is determined that the purpose for the file has been lost (role of roles), and a control instruction for performing predetermined control is transmitted. Here, examples of the control include deleting the file from the external storage medium and encrypting the file when a predetermined time has elapsed since the file was stored in the external storage medium. The control instruction may be transmitted together with date / time information when the file is stored in the external storage medium, date / time information for performing the control process on the file, time information until the control process is started, and the like.

  The date and time when the file is stored in the external storage medium is based on the date and time information in the operation log information specified by the monitoring target determination unit 7 stored in the monitoring target information storage unit 8 by the monitoring target determination unit 7. The date and time information may be specified from the operation log information stored in the operation log information storage unit 5 by the same process as the process in the monitoring target determination unit 7.

  Next, an example of the processing process of the file management system 1 of the present invention will be described with reference to the flowcharts of FIGS. In the following description, the terminal identification information of the client terminal 3 into which the external storage medium “UUU-SSS-BBB” is first inserted is “ABC12345”, the user identification information is “UserABC”, and the client terminal is inserted next. 3, terminal identification information “DEF67890” and user identification information “UserDEF”.

  First, the user “UserABC” activates the client terminal 3 “ABC12345” and performs an arbitrary operation. For each operation, the operation log information is transmitted from the client terminal 3 “ABC12345” to the management server 2, which is acquired by the operation log information acquisition unit 4 and stored in the operation log information storage unit 5. Then, the external storage medium attachment / detachment management unit 6 determines whether the external storage medium is attached to or removed from the client terminal 3 “ABC12345” based on the operation content of the operation log information acquired by the operation log information acquisition unit 4. By monitoring, the wearing state is managed.

  When the user “UserABC” attaches the external storage medium “UUU-SSS-BBB” to the client terminal 3 “ABC12345”, the operation log information (for example, the operation log information of FIG. 6) is transferred from the client terminal 3 to the management server 2. Sent. The operation log information is acquired by the operation log information acquisition unit 4 of the management server 2 and stored in the operation log information storage unit 5.

  In addition, since the operation content of the operation log information is information indicating that the external storage medium is attached to the client terminal 3 “ABC12345”, the external storage medium attachment / detachment management unit 6 stores the external storage medium in the client terminal 3 “ABC12345”. (S100).

  Until the external storage medium attachment / detachment management unit 6 detects that the external storage medium “UUU-SSS-BBB” is removed from the client terminal 3 “ABC12345” (S110), the monitoring target determination unit 7 monitors the operation. By doing so, it is determined whether the file is stored in the external storage medium (S120, S130).

  The monitoring target determination unit 7 includes the external storage medium identification information attached to the client terminal 3 for the operation log information acquired by the operation log information acquisition unit 4 and the operation log information stored in the operation log information storage unit 5. Whether the operation content is an operation indicating file saving in the external storage medium (S120). When the monitoring target determining unit 7 identifies operation log information whose operation content is “file pasting” for the external storage medium “UUU-SSS-BBB” (S130), the file identification information and the external storage in the operation log information are specified. The medium identification information is extracted and associated with each other and stored in the monitoring target information storage unit 8 (S140). An example of the monitoring target information storage unit 8 showing this state is shown in FIG.

  The monitoring target determining unit 7 monitors the operation until the external storage medium is removed. When the external storage medium attachment / detachment management unit 6 detects the removal of the external storage medium “UUU-SSS-BBB” from the client terminal 3 “ABC12345” (S110), the operation ends.

  Then, another user “UserDEF” different from the user “UserABC” uses the external storage medium “UUU-SSS-BBB” in the client terminal 3 “DEF67890” (the same user “UserABC” is the same client terminal) ("ABC12345" may be used) (FIG. 5).

  When the user “UserDEF” attaches the external storage medium “UUU-SSS-BBB” to the client terminal 3 “DEF67890”, the operation log information is transmitted from the client terminal 3 to the management server 2. The operation log information is acquired by the operation log information acquisition unit 4 of the management server 2 and stored in the operation log information storage unit 5.

  Further, since the operation content of the operation log information is information indicating that the external storage medium is attached to the client terminal 3 “DEF67890”, the external storage medium attachment / detachment management unit 6 stores the external storage medium in the client terminal 3 “DEF67890”. (S200).

  When it is determined that the external storage medium “UUU-SSS-BBB” is attached to the client terminal 3 “DEF67890”, the determination unit 9 determines the external storage medium identification information “UUU-SSS-BBB” of the attached external storage medium. Is extracted from the operation log information, it is determined by referring to the monitoring target information storage unit 8 whether the external storage medium is an external storage medium storing a monitoring target file. Then, since the external storage medium identification information “UUU-SSS-BBB” is stored in the monitoring target information storage unit 8 (FIG. 9), the determination unit 9 determines whether the external storage medium attached to the client terminal 3 “DEF67890” It can be determined that the external storage medium stores the monitoring target file. At this time, the file identification information “customer information” of the file to be monitored that is associated with the external storage medium identification information “UUU-SSS-BBB” stored in the monitoring target information storage unit 8 is also stored. Extract.

  Then, the determination unit 9 monitors the operation until the external storage medium attachment / detachment management unit 6 detects that the external storage medium “UUU-SSS-BBB” is removed from the client terminal 3 “DEF67890” (S210). Thus, it is determined whether the file stored in the external storage medium has finished its role (S220, S230).

  That is, the determination unit 9 includes the external storage medium identification information attached to the client terminal 3 for the operation log information acquired by the operation log information acquisition unit 4 and the operation log information stored in the operation log information storage unit 5. It is monitored whether the operation log information satisfies a condition for determining that the role of the file has been completed (S220).

  For example, the operation log information whose operation content with respect to the file “customer information” of the external storage medium “UUU-SSS-BBB” is “file storage” and whose storage location information is “C drive” ends the role of the file. Therefore, the determination unit 9 determines that the file “customer information” has finished its role (S230).

  When the determination unit 9 determines that the file “customer information” stored in the external storage medium “UUU-SSS-BBB” set as the monitoring target has finished its role, the control unit 10 A control instruction for performing predetermined control on the file stored in the external storage medium is transmitted to the client terminal 3 “DEF67890” to which the storage medium is attached (S240).

  The client terminal 3 “DEF67890” that has received this control instruction executes control corresponding to the control instruction, and the file “customer information” in the external storage medium is deleted.

  The determination unit 9 monitors the operation until the external storage medium is removed. When the external storage medium attachment / detachment management unit 6 detects the removal of the external storage medium “UUU-SSS-BBB” from the client terminal 3 “DEF67890” (S210), the operation ends.

  In the above description, the processing process of FIG. 4 and the processing process of FIG. 5 may be executed in parallel.

  Further, in the processing of FIG. 5, the determination unit 9 gives a predetermined control instruction to the client terminal 3, and the control result (for example, the external storage medium “UUU-SSS-BBB” attached to the client terminal 3 “DEF67890”). When the file “customer information” is deleted), the monitoring target information stored in the monitoring target information storage unit 8 and the external storage medium identification information “UUU-SSS-BBB” are received based on the control result information. The file identification information “customer information” is deleted.

  By repeating the above operations, the file management system 1 solves the conflicting problems of reducing the risk of information leakage of the file stored in the external storage medium and not impairing the convenience of the external storage medium. Is possible.

  In the above-described embodiment, when a file is stored in the external storage medium when the external storage medium “UUU-SSS-BBB” is attached to the client terminal 3 “ABC12345”, the file is monitored. In the present embodiment, a case has been described in which it is determined whether or not the role of the file stored in the external storage medium is finished when the external storage medium is attached to the client terminal 3 “DEF67890”. When determining the file to be monitored when the external storage medium “UUU-SSS-BBB” is attached to the client terminal 3 “DEF67890” and determining whether the role of the file stored in the external storage medium has been completed Will be explained.

  When the external storage medium attachment / detachment management unit 6 determines that the external storage medium is attached to the client terminal 3, the monitoring target determination unit 7 in this embodiment is based on the operation log information stored in the operation log information storage unit 5. Then, it is determined whether the file is stored in the external storage medium. When it is determined that the file is stored in the external storage medium, the file is determined as a monitoring target. Then, the file identification information of the file and the external storage medium identification information of the external storage medium that stores the file are stored in the monitoring target information storage unit 8.

  An example of this process will be described below. First, the user attaches the external storage medium “UUU-SSS-BBB” to the client terminal 3 “ABC12345” and executes desired operations, so that operation log information related to those operations is managed from the client terminal 3 “ABC12345”. Sent to the server 2. The operation log information is acquired by the operation log information acquisition unit 4 and stored in the operation log information storage unit 5. Then, after the user completes the desired operation, the user removes the external storage medium “UUU-SSS-BBB” from the client terminal 3 “ABC12345”. Even in the above-described wearing state, the processing described later is performed, but is omitted for the sake of simplicity. Further, assume that FIG. 7 shows an example of operation log information of operations performed at this time.

  Then, when another user “UserDEF” different from the user “UserABC” uses the external storage medium “UUU-SSS-BBB” in the client terminal 3 “DEF67890” (the same user “UserABC” is the same client Terminal "ABC12345"). An example of the processing process in this case will be described with reference to the flowchart of FIG.

  When the user “UserDEF” attaches the external storage medium “UUU-SSS-BBB” to the client terminal 3 “DEF67890”, the operation log information is transmitted from the client terminal 3 to the management server 2. The operation log information is acquired by the operation log information acquisition unit 4 of the management server 2 and stored in the operation log information storage unit 5.

  Further, since the operation content of the operation log information is information indicating that the external storage medium is attached to the client terminal 3 “DEF67890”, the external storage medium attachment / detachment management unit 6 stores the external storage medium in the client terminal 3 “DEF67890”. (S300).

  When it is determined that the external storage medium “UUU-SSS-BBB” is attached to the client terminal 3 “DEF67890”, the monitoring target determination unit 7 includes the operation log information stored in the operation log information storage unit 5. The operation log information for the external storage medium is searched and extracted (S310). Assume that the operation log information at this time is shown in FIG.

  Note that the operation log information for the external storage medium extracted by the monitoring target determination unit 7 from the operation log information storage unit 5 is the external storage at least from the time when the operation log information is attached to the time when the operation log information is attached, that is, during the attachment. Although it is preferable to extract the operation log information of the client terminal 3 on which the medium is mounted, only the operation log information including the external storage medium identification information may be used. FIG. 14 shows a case where operation log information is extracted while an external storage medium is attached.

  Then, based on the extracted operation log information of the external storage medium “UUU-SSS-BBB”, the monitoring target determination unit 7 determines whether the operation content is an operation indicating file saving to the external storage medium, or the like. Thus, the file identification information of the file stored in the external storage medium is determined as a monitoring target, and the file identification information and the external storage medium identification information are stored in the monitoring target information storage unit 8 (S320).

  For example, when the extracted operation log information is shown in FIG. 14, there is operation log information whose operation content for the external storage medium “UUU-SSS-BBB” is “file paste”. Accordingly, the monitoring target determining unit 7 determines that the operation log information is operation log information indicating that the file is stored in the external storage medium, and extracts the file identification information “customer information” of the file. Then, the extracted file identification information “customer information” and external storage medium identification information “UUU-SSS-BBB” are stored in the monitoring target information storage unit 8. FIG. 15 schematically shows this processing.

  The determination unit 9 monitors the operation until the external storage medium attachment / detachment management unit 6 detects that the external storage medium “UUU-SSS-BBB” is removed from the client terminal 3 “DEF67890” (S330). Then, it is determined whether the file stored as the monitoring target stored in the external storage medium has finished its role (S340, S350).

  That is, the determination unit 9 uses the external storage medium identification information “UUU” attached to the client terminal 3 for the operation log information acquired by the operation log information acquisition unit 4 and the operation log information stored in the operation log information storage unit 5. -SSS-BBB "is included, or it is monitored whether the operation log information satisfies a condition for determining that the role of the file has been completed (S340).

  For example, the operation log information whose operation content with respect to the file “customer information” of the external storage medium “UUU-SSS-BBB” is “file storage” and whose storage location information is “C drive” ends the role of the file. Therefore, the determination unit 9 determines that the file “customer information” has finished its role (S350). The process of determining whether the file has finished its role in the determination unit 9 is the same as in the first embodiment.

  When the determination unit 9 determines that the file “customer information” stored in the external storage medium “UUU-SSS-BBB” set as the monitoring target has finished its role, the control unit 10 A control instruction for performing predetermined control on the file stored in the external storage medium is transmitted to the client terminal 3 “DEF67890” to which the storage medium is mounted (S360).

  The client terminal 3 “DEF67890” that has received this control instruction executes control corresponding to the control instruction, and the file “customer information” in the external storage medium is deleted.

  The determination unit 9 monitors the operation until the external storage medium is removed. When the external storage medium attachment / detachment management unit 6 detects the removal of the external storage medium “UUU-SSS-BBB” from the client terminal 3 “DEF67890” (S330), the operation ends.

  Further, the determination unit 9 gives a predetermined control instruction to the client terminal 3, and the control result (for example, the file “customer information” of the external storage medium “UUU-SSS-BBB” mounted on the client terminal 3 “DEF67890”) Is received) based on the control result information, the monitoring target information stored in the monitoring target information storage unit 8, the external storage medium identification information “UUU-SSS-BBB” and the file identification information “ Delete "customer information".

  By repeating the above operations, the file management system 1 solves the conflicting problems of reducing the risk of information leakage of the file stored in the external storage medium and not impairing the convenience of the external storage medium. Is possible.

  In the second embodiment, when the external storage medium “UUU-SSS-BBB” is attached to the client terminal 3 “DEF67890”, the operation log information for the external storage medium is used to determine the file to be monitored. Although the case where it is determined whether or not the role of the file stored in the external storage medium has been described has been described, a file satisfying a predetermined condition among the files stored in the external storage medium is determined as a monitoring target, and the external storage medium A case will be described in which it is determined whether or not the role of the stored file is finished.

  When the monitoring target determining unit 7 in this embodiment first determines that the external storage medium is attached to the client terminal 3 in the external storage medium attaching / detaching managing unit 6, the monitoring target determining unit 7 stores the external storage medium in the external storage medium. Inquires about the file identification information of the existing file or information necessary to determine whether the file identification information satisfies a predetermined condition. The monitoring target determining unit 7 of the management server 2 determines a file to be monitored based on the received result.

  Five methods are shown as methods for determining whether a file stored in the external storage medium satisfies a predetermined condition.

  First, in the first method, among files stored in an external storage medium, file identification information such as the file name is file identification information of a predetermined file, or a predetermined keyword is included in the file identification information. In this case, the file is determined as a monitoring target.

  In this case, the monitoring target determining unit 7 inquires the client terminal 3 about the file identification information of the file to be stored in the external storage medium. The client terminal 3 that has received it transmits the file identification information of all the files stored in the external storage medium to the management server 2. Then, the monitoring target determining unit 7 determines whether the file identification information received from the client terminal 3 is predetermined file identification information, or whether the received file identification information includes a predetermined keyword. Then, the file identification information of the file satisfying the above condition and the external storage medium identification information of the external storage medium are stored in the monitoring target information storage unit 8. In this case, by transmitting predetermined file identification information and a predetermined keyword to the client terminal 3, the client terminal 3 performs the above determination process, and transmits the file identification information of the file satisfying the condition to the management server 2. It can also be configured.

  The second method is a case in which a file to be monitored is determined as a monitoring target when the file attribute has a predetermined attribute among files stored in the external storage medium. The file attribute includes an execution file, a document file, a type of related application, and the like, and can be determined by, for example, a file name extension.

  In this case, the monitoring target determining unit 7 inquires of the client terminal 3 about the file identification information and the file attribute of the file stored in the external storage medium. The client terminal 3 that has received it transmits the file identification information and the file attributes of all the files stored in the external storage medium to the management server 2. Then, the monitoring target determining unit 7 determines whether the file attribute of the file received from the client terminal 3 has a predetermined attribute. Then, the file identification information of the file satisfying the above condition and the external storage medium identification information of the external storage medium are stored in the monitoring target information storage unit 8. In this case, it is configured that the file attribute that is a condition is transmitted to the client terminal 3 so that the client terminal 3 performs the above determination process, and the file identification information of the file that satisfies the condition is transmitted to the management server 2. You can also.

  In the third method, a user who creates or edits a file specifies that the file is a monitoring target file at the time of file creation / editing, stores the file in a monitoring list, and saves the file in an external storage medium. This is a case where the file is determined as a monitoring target when the file is a file stored in the monitoring list. The monitoring list is stored in advance in the management server 2, the client terminal 3, or a predetermined server.

  In this case, the user who first created or edited the file selects whether the file is to be monitored at the time of file creation / editing, and if the file is to be monitored, by performing a predetermined operation, the client The file identification information of the file is transmitted from the terminal 3 to the monitoring list of the management server 2. The management server 2 that has received it stores the file identification information of the file in the monitoring list. When the external storage medium for storing the file is attached to the client terminal 3, the external storage medium attachment / detachment management unit 6 determines that, so the monitoring target determination unit 7 stores the external storage medium in the external storage medium. Queries the file identification information of the file stored on the medium. The client terminal 3 that has received it transmits the file identification information of all the files stored in the external storage medium to the management server 2, and the monitoring target determining unit 7 receives the received file identification information and the files to be stored in the monitoring list. The identification information is compared, and if there is matching file identification information, it is determined as a file to be monitored. Then, the file identification information and the external storage medium identification information of the external storage medium are stored in the monitoring target information storage unit 8. In this case, by transmitting the file identification information of the file stored in the monitoring list to the client terminal 3, the client terminal 3 performs the above determination process, and the file identification information of the file satisfying the condition is sent to the management server 2. It can also be configured to transmit.

  The fourth method is a case where, when an original file stored in an external storage medium is stored in a predetermined folder or file server, the file stored in the external storage medium is determined as a monitoring target. .

  In this case, the monitoring target determining unit 7 operates the operation log information including the operation content indicating the operation of copying the file to the external storage medium such as “file copy” and the external storage medium identification information of the external storage medium. Search and extract from the log information storage unit 5. Then, with reference to the storage location information of the extracted operation log information, it is determined whether the storage location information is a predetermined folder (preferably a confidential folder) or a file server. When the storage location information of the extracted operation log information is a predetermined folder or file server, the file identification information of the file stored in the external storage medium corresponding to the file (original file) in the operation log information The external storage medium identification information of the external storage medium is stored in the monitoring target information storage unit 8. This process is schematically shown in FIG.

  Moreover, the monitoring object determination part 7 may determine with the following methods. That is, the monitoring target determining unit 7 operates the operation log information including the operation content indicating the operation of saving the file in the external storage medium such as “file pasting” and the external storage medium identification information of the external storage medium. Search and extract from the log information storage unit 5. Then, file identification information, terminal identification information and / or user identification information are extracted from the operation log information. Then, based on the extracted file identification information, terminal identification information and / or user identification information, the operation log information of the original file of the file before the extracted operation log information is searched and extracted. When the storage location information in the operation log information extracted in this way is a predetermined folder or file server, the file stored in the external storage medium corresponding to the file (original file) in the operation log information is stored. The file identification information and the external storage medium identification information of the external storage medium are stored in the monitoring target information storage unit 8.

  The fifth method is to check the contents of a file to be saved in the external storage medium, determine whether it satisfies the conditions to be monitored, and if so, the file saved in the external storage medium Is determined as a monitoring target.

  In this case, the monitoring target determining unit 7 transmits a control instruction for confirming the contents of all files stored in the external storage medium to the client terminal 3. The control instruction may be transmitted including a keyword to be checked. Then, the client terminal 3 that has received it opens a file stored in the external storage medium, and determines whether or not a predetermined number or more of the keywords are included in the file. When it is determined that a predetermined number or more of keywords are included, the client terminal 3 transmits file identification information of the file to the management server 2. Upon receiving the file identification information from the client terminal 3, the monitoring target determining unit 7 determines the file as a monitoring target, and the received file identification information and the external storage medium identification information of the external storage medium are monitored target information. The data is stored in the storage unit 8. In the above description, the keyword is shown as being transmitted from the management server 2 to the client terminal 3, but may be stored in the client terminal 3 or a predetermined server.

  As described above, the monitoring target determination unit 7 according to the third embodiment uses any one or more of the above-described first to fifth methods, so that the external storage medium is attached to the client terminal in the external storage medium attachment / detachment management unit 6. If it is determined that the file is attached to the external storage medium 3, all files stored in the external storage medium or files satisfying a predetermined condition among the files stored in the external storage medium are determined as monitoring targets.

  Next, a processing process in this embodiment will be described. An example of the processing process in this case will be described with reference to the flowchart of FIG.

  First, the user attaches the external storage medium “UUU-SSS-BBB” to the client terminal 3 “ABC12345” and executes desired operations, so that operation log information related to those operations is managed from the client terminal 3 “ABC12345”. Sent to the server 2. The operation log information is acquired by the operation log information acquisition unit 4 and stored in the operation log information storage unit 5. Then, after the user completes the desired operation, the user removes the external storage medium “UUU-SSS-BBB” from the client terminal 3 “ABC12345”. Even in the above-described wearing state, the processing described later is performed, but is omitted for the sake of simplicity.

  Then, another user “UserDEF” different from the user “UserABC” uses the external storage medium “UUU-SSS-BBB” in the client terminal 3 “DEF67890” (the same user “UserABC” is the same client terminal) "ABC12345" may be used).

  When the user “UserDEF” attaches the external storage medium “UUU-SSS-BBB” to the client terminal 3 “DEF67890”, the operation log information is transmitted from the client terminal 3 to the management server 2. The operation log information is acquired by the operation log information acquisition unit 4 of the management server 2 and stored in the operation log information storage unit 5.

  Further, since the operation content of the operation log information is information indicating that the external storage medium is attached to the client terminal 3 “DEF67890”, the external storage medium attachment / detachment management unit 6 stores the external storage medium in the client terminal 3 “DEF67890”. (S400).

  When it is determined that the external storage medium “UUU-SSS-BBB” is attached to the client terminal 3 “DEF67890”, the monitoring target determination unit 7 becomes a monitoring target among the files stored in the external storage medium. The file is determined using any one or more of the first to fifth methods described above (S410). Then, the file identification information of the determined file and the external storage medium identification information “UUU-SSS-BBB” are stored in the monitoring target information storage unit 8. For example, the file “customer information” is determined as a file to be monitored, and is stored in the monitoring target information storage unit 8 in association with the external storage medium identification information “UUU-SSS-BBB”.

  The determination unit 9 then monitors the operation until the external storage medium attachment / detachment management unit 6 detects that the external storage medium “UUU-SSS-BBB” is removed from the client terminal 3 “DEF67890” (S420). Thus, it is determined whether the file stored as the monitoring target stored in the external storage medium has finished its role (S430, S440).

  That is, the determination unit 9 uses the external storage medium identification information “UUU” attached to the client terminal 3 for the operation log information acquired by the operation log information acquisition unit 4 and the operation log information stored in the operation log information storage unit 5. -SSS-BBB "is included, or it is monitored whether the operation log information satisfies a condition for determining that the role of the file has been completed (S430).

  For example, the operation log information whose operation content with respect to the file “customer information” of the external storage medium “UUU-SSS-BBB” is “file storage” and whose storage location information is “C drive” ends the role of the file. Therefore, the determination unit 9 determines that the file “customer information” has finished its role (S440). The process of determining whether the file has finished its role in the determination unit 9 is the same as in the first embodiment.

  When the determination unit 9 determines that the file “customer information” stored in the external storage medium “UUU-SSS-BBB” set as the monitoring target has finished its role, the control unit 10 A control instruction for performing predetermined control on the file stored in the external storage medium is transmitted to the client terminal 3 “DEF67890” to which the storage medium is attached (S450).

  The client terminal 3 “DEF67890” that has received this control instruction executes control corresponding to the control instruction, and the file “customer information” in the external storage medium is deleted.

  The determination unit 9 monitors the operation until the external storage medium is removed. When the external storage medium attachment / detachment management unit 6 detects the removal of the external storage medium “UUU-SSS-BBB” from the client terminal 3 “DEF67890” (S420), the operation ends.

  Further, the determination unit 9 gives a predetermined control instruction to the client terminal 3, and the control result (for example, the file “customer information” of the external storage medium “UUU-SSS-BBB” mounted on the client terminal 3 “DEF67890”) Is received) based on the control result information, the monitoring target information stored in the monitoring target information storage unit 8, the external storage medium identification information “UUU-SSS-BBB” and the file identification information “ Delete "customer information".

  By repeating the above operations, the file management system 1 solves the conflicting problems of reducing the risk of information leakage of the file stored in the external storage medium and not impairing the convenience of the external storage medium. Is possible.

  In the above description of the third embodiment, the case where the monitoring target determination unit 7 uses the first to fifth methods has been described, but a plurality or all of them may be used. When the file identification information of the file determined as the monitoring target and the external storage medium identification information of the external storage medium storing the file are stored in the monitoring target information storage unit 8, the method is determined as the monitoring target information. You may further memorize | store the information which shows whether it was done. An example of the monitoring target information storage unit 8 in this case is shown in FIG.

  In the above-described second and third embodiments, the monitoring target determining unit 7 includes the file identification information of the file determined as the monitoring target in the monitoring target information storage unit 8, and the external storage medium identification information of the external storage medium that stores the file identification information. However, instead of continuously storing the file identification information and the external storage medium identification information, the determination result can be temporarily used for processing in the determination unit 9. .

  That is, the monitoring target information storage unit 8 is temporarily provided in a temporary storage area such as a cache in the storage device 21 at the timing of executing the processing in the monitoring target determination unit 7 described above. After the above processing is completed, the monitoring target information storage unit 8 can be deleted from the temporary storage area, so that the file identification information of the file to be monitored and the external storage medium identification information of the external storage medium storing the file are stored. Can be expanded as necessary, and the expansion can be deleted after the processing is completed. As a result, consumption of storage capacity can be suppressed.

  In the above-described first to fourth embodiments, the monitoring target determining unit 7 retrieves the file identification information of the file saved in the external storage medium by searching the operation log information, and sets it as the monitoring target. The file identification information of the file saved when the storage medium is connected may be acquired from the external storage medium, and the acquired file identification information may be monitored.

  The monitoring target determining unit 7 inquires of the client terminal 3 connected to the external storage medium about the file identification information of the file stored in the external storage medium. The client terminal 3 that has received it transmits the file identification information of all the files stored in the external storage medium to the management server 2, and the monitoring target determining unit 7 receives the file identification information received from the client terminal 3. And the external storage medium identification information of the external storage medium are stored in the monitoring target information storage unit 8. By configuring in this way, it is possible to generate monitoring target information without going back and retrieving the operation log information.

  In the above-described first to fifth embodiments, it is preferable to determine whether the operation of the determination unit 9 is a preset operation for the file to be monitored, but as the operation, For example, it may be determined whether the operation is to change the resource of the client terminal 3 to which the external storage medium is attached.

  The operation that changes the resource of the client terminal 3 to which the external storage medium is mounted includes an operation that changes the capacity of the client terminal 3 such as a hard disk, a file execution operation, and a startup operation. , File paste, file copy, etc. Further, it may be determined that not only one operation but also a plurality of operations have been performed.

  Further, when determining whether or not the role of the file has been completed, the determination unit 9 determines using the operation log information as described above, and in addition to the operation content in the operation log information, the resource of the client terminal 3 If the above condition is also satisfied, it may be determined that the role of the file is finished.

  For example, when the operation log information is a preset operation and the hard disk usage capacity of the client terminal 3 exceeds a predetermined value, or the hard disk usage capacity increases by a predetermined value, the conditions of the operation log information When both the resource condition and the resource condition are satisfied, it can be determined that the role of the file is finished.

  This resource information can also include time information, monitoring changes in the amount of resources, and satisfying the resource conditions when the change due to the operation is more than the allowable value compared to the previous change. It is good.

  FIG. 12 schematically illustrates an example of determining whether the scene and the file have finished their roles in the determination unit 9.

  Each function of the file management system 1 of the present invention may be appropriately distributed in the client terminal 3 and the management server 2.

  For example, the client terminal 3 includes an operation log information acquisition unit 4, an operation log information storage unit 5, an external storage medium attachment / detachment management unit 6, a monitoring target determination unit 7, a monitoring target information storage unit 8, a determination unit 9, and a control unit 10. You can also.

  Alternatively, the client terminal 3 includes the operation log information acquisition unit 4, the external storage medium attachment / detachment management unit 6, the monitoring target determination unit 7, the determination unit 9, and the control unit 10, and the management server 2 includes the operation log information storage unit 5 and the monitoring target information. A storage unit 8 can also be provided. In this case, when using the information stored in each storage unit at the time of processing at the client terminal 3, the processing can be executed by accessing the management server 2 from the client terminal 3 and acquiring the information.

  Note that there are various patterns of variations in the distributed arrangement, and any arrangement form may be used. In these cases, when using functions of another computer terminal or server during processing in the client terminal 3 or the management server 2, the inquiry is made to the other computer terminal or server and the result is received. It is used for processing. Then, the processing result is executed.

According to the present invention, it is possible to realize a file management system 1 that reduces the risk of information leakage due to a file stored in an external storage medium and does not impair the convenience of the external storage medium.

It is a figure which shows typically the whole conceptual diagram of this invention. It is a figure which shows typically an example of the system configuration | structure of this invention. It is a figure which shows typically an example of the hardware constitutions of this invention. It is a flowchart which shows an example of the process of this invention typically. It is a flowchart which shows an example of the process of this invention typically. It is a figure which shows an example of operation log information typically. It is a figure which shows an example of an operation log information storage part typically. It is a figure which shows typically the process of the monitoring object determination part. It is a figure which shows typically an example of the monitoring object information storage part. It is a figure which shows typically another example of the operation log information storage part. It is a figure which shows the process of a determination part typically. An example of the correspondence between a scene and a file that has finished its role is shown schematically. It is a flowchart which shows an example of the other process of this invention typically. In Example 2, it is a figure which shows typically an example of the operation log information which the monitoring object determination part searched and extracted the operation log information with respect to an external storage medium from the operation log information storage part. It is a figure which shows typically the other process of the monitoring object determination part. It is a figure which shows typically the process of the 4th method in Example 3. FIG. It is a flowchart which shows an example of the other process of this invention typically. It is a figure which shows typically the other example of the monitoring object information storage part. It is a figure which shows typically the other process in the determination part.

Explanation of symbols

1: File management system 2: Management server 3: Client terminal 4: Operation log information acquisition unit 5: Operation log information storage unit 6: External storage medium attachment / detachment management unit 7: Monitoring target determination unit 8: Monitoring target information storage unit 9: Determination unit 10: control unit 20: arithmetic device 21: storage device 22: display device 23: input device 24: communication device

Claims (3)

A file management system for managing files on an external storage medium,
The file management system includes:
An external storage medium attachment / detachment management unit for managing the mounting state of the external storage medium to the computer terminal;
A monitoring target determining unit that identifies a file stored in the external storage medium and determines the file as a monitoring target;
A determination unit that determines whether the monitoring target file stored in the external storage medium has finished its role;
A control unit that performs predetermined control on the monitoring target of the external storage medium according to the determination result;
The determination unit
Based on the operation log information related to the monitoring target of the computer terminal equipped with the external storage medium, when the operation content in the operation log information satisfies a predetermined condition, the file stored in the external storage medium is Determine that you have finished your role,
A file management system characterized by that. The determination unit
When the operation content of the operation log information is an operation content that changes a resource of a computer terminal on which the external storage medium is mounted, it is determined that the operation log information satisfies a predetermined condition.
The file management system according to claim 1. At least one computer terminal
An external storage medium attachment / detachment management unit for managing the mounting state of the external storage medium to the computer terminal;
A monitoring target determining unit for identifying a file stored in the external storage medium and determining the file as a monitoring target;
A determination unit that determines whether the monitoring target file stored in the external storage medium has finished its role;
A file management program that functions as a control unit that gives a predetermined control instruction to the monitoring target of the external storage medium according to the determination result,
The determination unit
Based on the operation log information related to the monitoring target of the computer terminal equipped with the external storage medium, when the operation content in the operation log information satisfies a predetermined condition, the file stored in the external storage medium is Determine that you have finished your role,
A file management program characterized by that.

Images