JP5172647B2 - Information management device, terminal device, and information management system - Google Patents

Description

  The present invention relates to an information management device, a terminal device, and an information management system for managing file data and transmitting file data to a terminal device having a certain condition.

In recent years, usage statements, etc. issued monthly or for a fixed period from various financial organizations such as banks and insurance companies, telecommunication carriers such as telephones, or public utilities such as gas and water to each customer Are required to be stored for a certain period of time and managed as confidential information. In addition, although the usage statement is delivered to each customer by mail, there is an increasing demand for information management technology that converts the information on the usage statement into data and distributes and stores it to each customer. ing.
For example, there is a management system that includes a management device that is connected to a plurality of customer terminals via a network and manages usage statements and the like with data. When this management device receives a distribution request for a usage statement or the like from a customer terminal via a network, the authentication means uses a combination of the ID and password of the customer terminal registered in advance and the ID input from the customer terminal. Is compared with the password combination to determine whether or not the access is legitimate. A customer terminal whose authentication is established by this authentication determination can use the transmitted usage statement or the like (see Patent Document 1).
JP 2002-82951 A

  However, each time the user makes a distribution request to the management device, the user must input an ID and password to the terminal device, and the work for authentication determination is complicated, and the operability for the user is poor. There was a problem.

  The present invention has been made in consideration of such circumstances, and has been made to solve the above-described problem, and its object is to provide a terminal device when data is transmitted from an information management device to a plurality of terminal devices. It is to provide an information management device, a terminal device, and an information management system that improve the operability of the user on the side.

  In order to solve the above problem, according to the present invention, in an information management device that transmits file data to a plurality of terminal devices, a terminal identifier that identifies the terminal device is associated with a file identifier that identifies the file data. A management storage unit that stores first information, the terminal identifier, and second information associated with password information unique to the terminal identifier, and encryption information for encrypting the file data Generated for each file data, encrypts the file data based on the encryption information, and associates the encryption information with the file identifier and the terminal identifier of the encrypted file data as the first information Along with the encryption unit to be stored in the management storage unit and the encrypted file data, at least the above A first management transmission / reception unit that transmits the file identifier and the terminal identifier associated with the encryption information to the terminal device as one information; the terminal identifier from the terminal device; the password information; and the file A combination of the second management transmission / reception unit that receives the identifier and the terminal identifier and the password information received by the second transmission / reception unit is associated as the second information stored in the management storage unit. It is determined whether or not the combination of the terminal identifier and the password information matches, and if it matches, a management authentication unit that establishes authentication of the terminal device that has transmitted the terminal identifier, and the terminal device by the management authentication unit If the authentication is established, the terminal identifier of the terminal device for which the authentication is established, and the second management Based on the file identifier received by the reception unit, the terminal identifier and the encryption information associated with the file identifier are read from the management storage unit with reference to the first information, and transmitted to the terminal device. 3 management transmission / reception units.

  Further, according to the present invention, in a terminal device that receives file data transmitted from an information management device having a plurality of transmission destinations, a terminal identifier for identifying the terminal device and password information unique to the terminal identifier are registered. A file storage identifier for identifying the file data together with the file data encrypted by the information management device based on the encryption information unique to the file data from the information storage device, The first terminal transmission / reception unit that receives the terminal identifier that identifies the transmission destination of the file data, and the program that is operated by a user and expands the file data received by the first terminal transmission / reception unit An operation unit that outputs a start signal for starting the power supply, and receiving the start signal from the operation unit When the program is started, it is determined whether the terminal identifier registered in the program and stored in the terminal storage unit matches the terminal identifier received by the first terminal transmission / reception unit. If they match, a terminal authentication unit that establishes authentication of the file data received by the first terminal transmitting / receiving unit, and a file authentication that is established by the terminal authentication unit are registered in the program A second terminal transmission / reception unit for transmitting the terminal identifier, the password information, and the file identifier received by the first terminal transmission / reception unit to the information management device; and the terminal transmitted by the second terminal transmission / reception unit. When authentication of the terminal device is established by the information management device based on the identifier and the password information, the information management device A third terminal transmitting / receiving unit that receives encrypted information obtained by encrypting file data from the information management device; and the encrypted file data based on the encrypted information received by the third terminal transmitting / receiving unit. And a decoding unit for decoding.

The present invention also includes an information management device including a plurality of terminal devices and an information management device connected via a network, and the information management device transmits the file data from the information management device to the terminal device. First information in which a terminal identifier for identifying a terminal device is associated with a file identifier for identifying the file data, and second information in which the terminal identifier is associated with password information unique to the terminal identifier. A management storage unit for storing the file data, encryption information for encrypting the file data is generated for each file data, the file data is encrypted based on the encryption information, and the encryption information is encrypted The management is performed as the first information in association with the file identifier and the terminal identifier of the file data obtained. Along with the encryption unit to be stored in the storage unit and the encrypted file data, at least the file identifier and the terminal identifier associated with the encryption information are transmitted to the terminal device as the first information. A first management transmission / reception unit; a second management transmission / reception unit that receives the terminal identifier, the password information, and the file identifier from the terminal device; and the terminal identifier and the password received by the second transmission / reception unit. It is determined whether or not the combination of information matches the combination of the terminal identifier and the password information associated as the second information stored in the management storage unit. A management authentication unit for establishing authentication of the transmitted terminal device, and the terminal device by the management authentication unit. If the authentication is established, the terminal identifier and the encryption information associated with the file identifier based on the terminal identifier of the terminal device for which the authentication is established and the file identifier received by the second management transmission / reception unit A third management transmission / reception unit that reads out from the management storage unit with reference to the first information and transmits the information to the terminal device. The terminal device registers the terminal identifier and the password information. A first terminal for receiving the file identifier and the terminal identifier for identifying the transmission destination of the file data, together with the encrypted file data, from a terminal storage unit that stores the program being stored A terminal transmission / reception unit and the file data received by the first terminal transmission / reception unit operated by a user An operation unit that outputs an activation signal that activates the program, and the terminal that is registered in the program and stored in the terminal storage unit when the program is activated in response to the activation signal from the operation unit A terminal that determines whether or not the identifier and the terminal identifier received by the first terminal transmission / reception unit match, and if they match, the terminal that establishes authentication of the file data received by the first terminal transmission / reception unit When authentication of the file data is established by the authentication unit and the terminal authentication unit, the terminal identifier registered in the program, the password information, and the file identifier received by the first terminal transmission / reception unit are A second terminal transmission / reception unit to be transmitted to the information management device; and the terminal identifier and the password information transmitted by the second terminal transmission / reception unit. And when the authentication of the terminal device is established by the information management device, a third terminal transmitting / receiving unit that receives from the information management device encrypted information obtained by encrypting the file data by the information management device; A decryption unit for decrypting the encrypted file data based on the encryption information received by the third terminal transceiver unit;
It is characterized by providing.

  According to the information management device according to the embodiment of the present invention, when the user ID information and the login password are input by the user at the time of registration and the user terminal device is registered by the information management device, the user terminal device is a registered user. ID information and a login password are memorize | stored in a terminal memory | storage part. With this configuration, the file data transmitted from the information management device is managed by the user terminal device by managing the user ID information and the login password registered in the management storage unit when the distribution file icon is double-clicked. Send to device. Therefore, the user only needs to input the user ID information and the login password once at the time of initial registration, and it is necessary to input the user ID information and the login password each time the file data of the distribution file is expanded. The operability is improved.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram illustrating an example of an information management system according to an embodiment of the present invention. 2 to 4 are schematic diagrams for explaining the tables A to C stored in the management storage unit of the information management apparatus shown in FIG. FIG. 5 is a conceptual diagram illustrating an example of file data transmitted from the information management device to the terminal device.

  As shown in FIG. 1, the information management system 100 is connected to a source information management apparatus 1 that transmits file data, and a plurality of transmission destinations that are connected to the information management apparatus 1 via a network NW and to which file data is transmitted. User terminal devices 21, 22, 23... 2n. Hereinafter, for convenience of explanation, a plurality of user apparatuses 2N are referred to.

  The information management device 1 includes a management control unit 11, a management storage unit 12, an encryption unit 13, a management transmission / reception unit 14, and a management authentication unit 15. The information management device 1 transmits file data to the user terminal device 2N. A security file reception tool that manages transmission and deployment (viewing by users) is provided. The security file receiving tool is a program that is activated in the user terminal device 2N when the user instructs the expansion of the file data transmitted to the user terminal device 2N. For example, when registering the user terminal device 2N as a user of the security file receiving tool, the information management device 1 may cause the user terminal device 2N to download the program and provide the security file receiving tool via the network NW. it can. In the present embodiment, the security file receiving tool program is stored in the terminal storage unit 202 of the user terminal device 2N, and the operation unit 204 double-clicks the distribution file icon having the tool activation extension. The security file receiving tool can be activated in accordance with the distribution file activation tool extension.

  The management control unit 11 controls the information management apparatus 1 in an integrated manner. Although details will be described later, for example, when registering the user terminal device 2N as a user of the security file receiving tool, the management control unit 11 gives registration information to the user ID information of the table C. In addition, the management control unit 11 refers to the table A and searches whether the management storage unit 12 has a file name associated with the user ID information of the user terminal device 2N registered as a user of the security file receiving tool. To do. When the corresponding file name is detected as a result of searching for the corresponding file name, the management control unit 11 generates file ID information (file identifier) for identifying the file data. Furthermore, the management control unit 11 stores the generated file ID information in the management storage unit 12 as a table B in association with the user ID information associated with the file name as the table A.

The management storage unit 12 includes a plurality of file data transmitted to a plurality of user terminal devices 2N, a table A shown in FIG. 2, a table B (first information) shown in FIG. 3, and a table C shown in FIG. (Second information) and the security file receiving tool program are stored.
The plurality of file data are, for example, information transmitted from the information management device 1 to the user terminal device 2N possessed by each user, such as various financial organizations such as banks and insurance companies, communication carriers such as telephones, gas, This is data such as a usage statement issued from a public company such as water service to the user of each user terminal device 2N in units of months or fixed periods. The plurality of file data are temporarily stored in the management storage unit 12 and are deleted by the management control unit 11 when transmitted to the user terminal device 2N.

As shown in FIG. 2, the table A includes user ID information (terminal identifier) for identifying a plurality of user terminal devices 2N and file names of file data transmitted to the user terminal device 2N. It is associated with the user ID information of the previous user terminal device 2N. By referring to this table A, the management control unit 11 identifies the user terminal device 2N that is the transmission destination and the file data transmitted to the user terminal device 2N.
As illustrated in FIG. 2, the table A includes, for example, “abc@def.co.jp”, “ghi@jkl.co.jp”, “mno @” which are user ID information of the user terminal devices 21, 22, and 23. pwr.co.jp "is included. In the user terminal device 21 having the user ID information “abc@def.co.jp”, the transmission file data having the file name “0001.pdf” is stored in the user terminal device 22 having the user ID information “ghi@jkl.co.jp”. The transmission file data with the file name “0002.doc” is stored in the user terminal device 23 with the user ID information “mno@pwr.co.jp” with the file names “0003.xls” and “0004.doc”. The transmission file data is associated with each other.

As shown in FIG. 3, the table B includes a plurality of user ID information, a file encryption password (encryption information) generated when the encryption unit 13 encrypts the file data, and a file for identifying the file data. Including ID information (file identifier) and associated with each other.
As illustrated in FIG. 3, in the table B, for example, the file ID information “P0001” given by the management control unit 11 to identify the file data “0001.pdf” by the management control unit 11 and the file data “ User ID information “abc@def.co.jp”, which is the transmission destination of “0001.pdf”, is associated.
Similarly, the file ID information “W0002” given by the management control unit 11 to identify the file data “0002.doc” and the user ID information “ghi@jkl.co.jp” as the transmission destination And the file ID information “X0003” or “W0004” given by the management control unit 11 to identify the file data “0003.xls” or “0004.doc”, and the user ID information that is the transmission destination “Mno@pwr.co.jp” is associated.
Further, the file encryption passwords “123”, “456”, “789”, and “159” are assigned to the file ID information “P001”, “W0002”, “X0003”, and “W0004” by the encryption unit 13, respectively. Are associated with each other as Table B.

The table C includes a plurality of user ID information and a login password (password information) as shown in FIG. Here, the user ID information is information for specifying the user terminal device 2N that has applied for registration in advance in order for the user terminal device 2N to use the security file receiving tool provided by the information management device 1. The login password is information unique to each user ID information issued to the user terminal device 2N that has applied for registration in advance. The user ID information and the login password are associated with each other and stored in the management storage unit 12 as a table C. Here, the login password is notified to the user by mail, for example, as the confidential information of the user of the user terminal device 2N of the user ID information associated as the table C.
In the present embodiment, the case where the user ID information is a mail address of each user terminal device 2N will be described. However, the user terminal device 2N is arbitrarily issued by the information management device 1 or the user terminal device 2N. Any information that can identify the user terminal device 2N, such as a number that is input from and registered by the information management device 1, may be used.

  The encryption unit 13 generates a unique file encryption password for encrypting the file data for each file data, and encrypts the file data based on the file encryption password. In addition, the encryption unit 13 searches whether the same file ID information as the file ID information of the file data for which the file encryption password is generated is stored in the management storage unit 12 as the table B. If the corresponding combination is detected as a result of the search, the file ID information and the generated file encryption password are associated with each other and stored in the management storage unit 12.

The management transmission / reception unit 14 is connected to the plurality of user terminal devices 2N via the network NW, and transmits / receives data to / from the user terminal device 2N.
For example, the management transmission / reception unit (first management transmission / reception unit) 14 generates a distribution file as shown in FIG. 5 and transmits the distribution file to the user terminal device 2N that is the transmission destination. As shown in FIG. 5, this distribution file includes file ID information for identifying the file data and file ID information for identifying the file data and the user terminal device 2N that is the transmission destination of the file data. This is data in which user ID information and file data extension information are added. The management transmission / reception unit 14 can specify the file ID information and the user ID information corresponding to the encrypted file data by referring to the table B, for example.

  Further, the management transmission / reception unit (second management transmission / reception unit) 14 receives the user ID information, the login password, and the file ID information of the user terminal device 2N from the user terminal device 2N that has received the distribution file. Although details will be described later, the received user ID information and login password are registered in the terminal storage unit 202 in the security file reception tool in the user terminal device 2N, and the file ID information is distributed. The file is transmitted from the management transmission / reception unit 14 to the user terminal device 2N.

  Further, the management transmission / reception unit (third management transmission / reception unit) 14 refers to the table B, and the user ID information of the user terminal device 2N that has been authenticated by the management authentication unit 15 and the file ID information that has already been received. The file encryption password associated with these is read from the management storage unit 12 and transmitted to the user terminal device 2N.

  The management authentication unit 15 refers to the table C, and the user ID information and the login password received by the management transmission / reception unit 14 from the user terminal device 2N are stored in association with the management storage unit 12, and the login password is stored. To determine whether or not. If they match, the management authentication unit 15 determines that authentication of the user terminal device 2N that transmitted the user ID information and the login password has been established.

Next, returning to FIG. 1, the configuration of the user terminal device 2N will be described.
The user terminal device 2N includes a terminal control unit 201, a terminal storage unit 202, a terminal transmission / reception unit 203, an operation unit 204, a terminal authentication unit 205, a decryption unit 206, and a file expansion unit 207.

  The terminal control unit 201 comprehensively controls the user terminal device 2N. Although details will be described later, for example, when the terminal control unit 201 is registered as a user of the security file reception tool in the information management apparatus 1, the terminal control unit 201 loads a program for the security file reception tool from the management storage unit 12 of the information management apparatus 1. The program is downloaded and stored in the terminal storage unit 202 together with user ID information and a login password input by the user via the operation unit 204 at the time of registration. In addition, when an activation signal for activating the security file reception tool is input from the operation unit 204, the terminal control unit 201 activates the security file reception tool stored in the terminal storage unit 202, and the security file reception tool program Each component is controlled according to In the present embodiment, when the activation signal is input from the operation unit 204, the terminal control unit 201 activates the security file receiving tool according to the activation tool extension of the distribution file.

  When registering as a user of the security file receiving tool, the terminal storage unit 202 associates the user ID information and the login password input by the user via the operation unit 204 with the user ID information and the login password, Stores the receiving tool program. The security file reception tool program in the terminal storage unit 202 is stored in the terminal storage unit 201 from the management storage unit 12 of the information management apparatus 1 when the user instructs registration of the security file reception tool via the operation unit 204. By downloading the program of the security file receiving tool, it is provided from the information management apparatus 1 via the network.

The terminal transmission / reception unit 203 transmits / receives data to / from the information management apparatus 1 connected via the network NW.
For example, the terminal transmission / reception unit (first terminal transmission / reception unit) 203 adds a distribution file in which the file ID information, the user ID information, and the extension of the file data are added to the encrypted file data from the information management apparatus 1. Receive.
Further, the terminal transmission / reception unit (second terminal transmission / reception unit) 203 is stored in the terminal storage unit 22 in association with the program of the security file reception tool when the terminal authentication unit 205 authenticates the user terminal device 2N. The user ID and login password, and the file ID information included in the received distribution file (decryption target distribution file) are transmitted to the information management apparatus 1.
Further, the terminal transmission / reception unit (third terminal transmission / reception unit) 203 authenticates the user terminal device 2N by the management authentication unit 15 of the information management device 1 based on the transmitted user ID, login password, and file ID information. If established, the file encryption password transmitted from the management transmission / reception unit 14, that is, the encryption information unique to the file data stored in the table B of the management storage unit 12 and encrypted by the encryption unit 13 is received.

  The operation unit 204 is operated by the user and outputs a request instruction from the user to the terminal control unit 201. For example, when the terminal transmission / reception unit 203 receives a distribution file, the operation unit 204 is stored in the terminal storage unit 202 when receiving a request instruction from the user to expand the file data included in the distribution file. An activation signal for activating the security file receiving tool is output to the terminal control unit 201. Further, the operation unit 204 accepts input of user ID information and a login password by the user when registering the security file receiving tool. The operation unit 204 is, for example, a keyboard, a mouse, or the like, and outputs an activation signal when the mouse is double-clicked with the distribution file icon specified.

  When the security file reception tool is activated by the terminal control unit 201, the terminal authentication unit 205 adds the user ID information stored in the terminal storage unit 203 in association with the program of the security file reception tool and the distribution file. It is determined whether or not the existing user ID information matches. If they match, the terminal authentication unit 205 determines that the user terminal device 2N is the delivery destination of the distribution file and the registration subject of the security file reception tool, and the authentication of the user terminal device 2N is established. To do.

The decryption unit 206 decrypts the encrypted file data included in the distribution file based on the file encryption password received by the terminal transmission / reception unit 205.
The file expansion unit 207 expands the file data decrypted by the decryption unit 206. Further, when the file data is expanded, the file expansion unit 207 notifies the information management apparatus 1 to that effect via the terminal transmission / reception unit 203.

Next, the information management method of the information management system 100 according to the present embodiment will be described below using the user terminal device 21 that can be registered in the security file reception tool as an example with reference to FIGS.
FIG. 6 is a flowchart illustrating an example of a processing flow when file data is distributed from the information management device 1 to the user terminal device 21.

First, as preparation, when the user ID information “abc@def.co.jp” and the login password “ABCD” are input from the user terminal device 21, the information management device 1 refers to the table C of the management storage unit 12. The combination of the user ID information “abc@def.co.jp” received from the user terminal device 21 and the login password “ABCD” is stored in the management storage unit 12 and the user ID information “abc” of the user terminal device 21 is stored. @ def.co.jp ”and whether or not the combination of the login password“ ABCD ”issued in advance to the user terminal device 20 is matched.
If they match, the information management device 1 registers the user terminal device 21 as a user of the security file receiving tool, and transmits that fact to the user terminal device 21. When the registration of the user terminal device 21 is completed, the information management device 1 can transmit file data to the user terminal device 21, and file data “0001.pdf” to be transmitted to the user terminal device 21. Is stored in the management storage unit 12 via the input unit (not shown), the management control unit 11 sends the file name “0001.pdf” of the file data and the user ID of the user terminal device 21 that is the transmission destination. The information “abc@def.co.jp” is associated and stored in the management storage unit 12 as the table A.
On the other hand, the user terminal device 21 registered as a user of the security file receiving tool downloads the security file receiving tool program from the information management device 1 and logs the program into the user ID information “abc@def.co.jp” and login. It is stored in the terminal storage unit 202 in association with the password “ABCD”.
In addition, the user registration process to the security file reception tool by the information management apparatus 1 and the user terminal apparatus 21 so far is hereinafter referred to as a registration process in advance preparation.

As illustrated in FIG. 6, the management control unit 11 refers to the table A of the management storage unit 12, and the file name associated with the registered user ID information “abc@def.co.jp” of the user terminal device 20 is Search for it. When the corresponding file name “0001.pdf” is searched, the management control unit 11 generates file ID information “P0001” corresponding to the file data “0001.pdf”. In addition, when the file ID information “P0001” is created by the management control unit 11, the encryption unit 13 generates a file encryption password “123” unique to the file data “0001.pdf” (step ST1). .
The encryption unit 13 encrypts the file data “0001.pdf” based on the generated file encryption password “123” (step ST2).

The management transmission / reception unit 14 adds the user ID information “abc@def.co.jp” of the user terminal device 21 that is the transmission destination to the file data “0001.pdf” encrypted by the encryption unit 13 in step ST1. The generated file ID information “P0001” and the extension information “pdf” of the file data “0001.pdf” are additionally written to generate a distribution file (step ST3). At this time, the extension of the distribution file is the extension “pdf” of the file data “0001.pdf”.
Further, the management control unit 11 stores the file ID information “P0001” generated in step ST1 in the management storage unit 12 as the table B in association with the user ID information “abc@def.co.jp”, and the encryption unit 13 Stores the file encryption password “123” generated in step ST2 in the management storage unit 12 as the table B in association with the file ID information “P0001” and the user ID information “abc@def.co.jp” (step ST4). ).
The management transmission / reception unit 14 changes the extension “pdf” of the distribution file generated in step ST3 to a tool activation extension such as “abc” for the user terminal apparatus 2N that has received the distribution file to activate the security file reception tool. The distribution file changed (step ST5) and changed to the tool activation extension “abc” is transmitted to the user terminal device 21 with the user ID information included in the distribution file as a destination (step ST6).

Next, an example of a method for expanding the file data “0001.pdf” of the distribution file distributed to the user terminal device 21 in the user terminal device 21 will be described with reference to FIGS.
7 and 8 are flowcharts illustrating an example of a processing flow when the user terminal device 21 expands the file data transmitted from the information management device 1.
As shown in FIG. 7, in the user terminal device 21, the registration process in the above-mentioned advance preparation is performed. That is, a document previously mailed by the user of the user terminal device 21 is referred to, and user ID information “abc@def.co.jp” and a login password “ABCD” are input via the operation unit 204. When the user ID information “abc@def.co.jp” and the login password “ABCD” are transmitted from the user terminal device 21 to the information management device 1, and the authentication of the user terminal device 21 is established by the management authentication unit 15, for example, Then, the registration information is given to the user ID information in the table C by the management control unit 11, so that the user terminal device 21 is registered in the information management device 1 as a user of the security file receiving tool (step ST11). Then, the user terminal device 21 downloads the security file receiving tool program from the information management device 1 and associates the user ID information “abc@def.co.jp” with the login password “ABCD” in association with the security file receiving tool program. Is stored in the terminal storage unit 203.
In this way, the user terminal device 21 registered as a user of the security file receiving tool receives the distribution file transmitted from the information management device 1 as described above with reference to FIG. 7 (step ST12).

The operation unit 204 is operated by the user of the user terminal device 21, and, for example, the icon of the distribution file is double-clicked so as to expand the file data “0001.pdf” included in the distribution file (step ST13).
Then, the operation unit 204 receives a file expansion request instruction from the user and outputs an activation signal for activating the security file reception tool stored in the terminal storage unit 202 to the terminal control unit 201. Thereby, the terminal control unit 201 activates the security file receiving tool according to the extension “abc” of the distribution file (step ST14).
When the security file receiving tool is activated, the terminal authentication unit 205 adds the user ID information “abc@def.co.jp” stored in the terminal storage unit 203 in step ST11 and the user added to the distribution file. It is determined whether or not the ID information “abc@def.co.jp” matches (step ST15).

When the user ID information matches (step ST16—YES), the terminal transmitting / receiving unit 203 matches the matched user ID information “abc@def.co.jp” and the login password stored in the terminal storage unit 202 in step ST11. “ABCD” and the file ID information “P0001” added to the distribution file are transmitted to the information management apparatus 1 (step ST17).
On the other hand, if the user ID information does not match (NO in step ST16), a distribution file is erroneously transmitted from the information management device 1 to the user terminal device 21, or pre-registration as described in step ST11 is performed. Even if a misdelivery occurs, such as when a delivery file is transmitted to a user terminal device 21 that is not, the user terminal device 21 determines an error in this delivery file, and the terminal transmission / reception unit 203 manages the error signal as information management It transmits to the apparatus 1 (step ST18).

Next, as shown in FIG. 8, the management transmission / reception unit 14 of the information management device 1 uses the user ID information “abc@def.co.jp”, the login password “ABCD”, and the file ID information transmitted from the user terminal device 21. Upon receiving “P0001”, the management authentication unit 15 refers to the table B and stores the received combination of the user ID information “abc@def.co.jp” and the login password “ABCD” in the management storage unit 12. It is determined whether or not it matches the combination of the user ID information “abc@def.co.jp” and the login password “ABCD” (step ST19).
When the combination of the user ID information and the login password matches (step ST20—YES), the management authentication unit 15 transmits the user ID information “abc@def.co.jp” and the login password “ABCD”. The management control unit 11 determines that the file ID information associated with the user ID information “abc@def.co.jp” of the user terminal device 21 that has been authenticated is stored in the management storage unit 12. Whether it is stored or not is searched with reference to table B (step ST21).
On the other hand, if the combination of the user ID information and the login password does not match in step ST20 (step ST20-NO), the management authentication unit 15 determines that the authentication of the user terminal device 21 has not been established and sends an error signal to the user. It transmits to the terminal device 21 (step ST22).

If the file ID information “P0001” associated with the user ID information “abc@def.co.jp” is searched with reference to the table B and the corresponding information exists (step ST23—YES), the management transmission / reception unit 14 reads the file encryption password “123” associated with the user ID information “abc@def.co.jp” and the file ID information “P0001” from the management storage unit 12 with reference to the table B, and the user terminal It transmits to the apparatus 21 (step ST24).
On the other hand, if there is no corresponding file encryption password as a result of searching for the associated file encryption password, it is determined that an error has occurred, and the process ends (step ST22).

When the terminal transmission / reception unit 203 receives the file encryption password “123” transmitted from the information management apparatus 1, the user terminal device 21 encrypts the distribution file based on the file encryption password “123”. The file data “0001.pdf” being decrypted is decrypted (step ST25).
The file expansion unit 207 changes the tool activation extension “abc” of the decrypted file data “0001.pdf” to the extension information “pdf” added to the distribution file (step ST26), and the distribution file Information added to the file data “0001.pdf”, that is, user ID information “abc@def.co.jp”, file ID information “P0001”, and extension information “pdf” are deleted (step ST27). ).
Next, the file expansion unit 207 expands the file data “0001.pdf” according to the changed extension information “pdf” (step ST28), and notifies the terminal transmission / reception unit that the file data “0001.pdf” has been expanded. It outputs to 203.
Then, the terminal transmission / reception unit 203 notifies the management transmission / reception unit 15 of the information management apparatus 1 that the file data “0001.pdf” has been expanded (step 29).

  As described above, according to the information management device 1 according to the present embodiment, when the user ID information and the login password are input by the user at the time of registration and the user terminal device 2N is registered by the information management device 1, the user terminal device 2N The registered user ID information and login password are stored in the terminal storage unit 202. As a result, the file data transmitted from the information management device 1 can be obtained by double-clicking the distribution file icon so that the user terminal device 2N receives the user ID information and the login password registered in the management storage unit 202. It transmits to the information management device 1. Therefore, the user only needs to input the user ID information and the login password once at the time of initial registration, and it is necessary to input the user ID information and the login password each time the file data of the distribution file is expanded. The operability is improved.

  In addition, the information management apparatus 1 collectively manages information such as usage statements issued by a plurality of business operators, so that the user needs to input user ID information, a login password, etc. for each business operator. Disappear. Thus, conventionally, the burden on the user due to the authentication work for each business operator is reduced, and effective use as information of file data collectively managed in the information management apparatus can be achieved.

  Furthermore, since the extension of the distribution file is rewritten to the tool activation extension “abc”, the security stored in the terminal storage unit 202 can be simply double-clicked (instruction to expand the file data) by the user. The file reception tool is started. This eliminates the need for the user to activate the security file receiving tool in advance, saving the user's trouble. Also, even if the delivery file has been sent by mistake, the file data extension of the delivery file is not an extension for developing the file data, so the file data is not expanded, Information leakage due to erroneous delivery can be prevented. Furthermore, when the distribution file is double-clicked, the security file receiving tool is activated, and when an error due to erroneous distribution is detected, an error signal is transmitted to the information management apparatus 1, so that the information management apparatus 1 Can recognize misdelivery.

  The file data transmitted to the user terminal device 2N as a distribution file is encrypted with a file encryption password assigned to each file data, and a different file encryption password is generated for each file data. Thereby, the security performance of the encrypted file data can be improved.

  Further, the user terminal device 2N transmits an error signal when the distribution file is double-clicked by the user, or when the authentication of the user terminal device 2N is not established by the information management device 1 due to erroneous distribution or the like, and the file data Is executed, the information management apparatus 1 is notified to that effect. Thereby, the information management apparatus 1 can grasp | ascertain the presence or absence of expansion | deployment (opening) of the delivery file in each user terminal device 2N. Note that the information management device 1 may be configured to store the presence / absence of expansion of the transmitted file data in the management storage unit 12 and create an opening history for each user terminal device 2N.

  Further, since the file data transmitted from the information management device 1 to the user terminal device 2N is deleted from the management storage unit 12 after transmission, it is possible to avoid an increase in data capacity in the information management device 1, and to manage the file data. The storage area of the storage unit 12 can be used efficiently.

  In the present embodiment, the security file receiving tool is configured such that when the distribution file icon is double-clicked by the operation unit 204, the terminal control unit 201 executes the security file in accordance with the distribution file activation tool extension “abc”. An example of starting the reception tool has been described. However, the present invention is not limited to this. For example, when the operation unit 204 is instructed to expand the distribution file, the terminal control unit 201 may output a signal or the like for starting the security file receiving tool. .

The above-described operation process in the information management device 1 and the user terminal device 2N can be used as a program to be executed by a computer or a computer-readable recording medium as the program, and is read and executed by a computer system. Thus, the above process is performed. The “computer system” here includes a CPU, various memories, an OS, and hardware such as peripheral devices.
The “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
“Computer-readable recording medium” means a flexible disk, a magneto-optical disk, a ROM, a writable non-volatile memory such as a flash memory, a portable medium such as a CD-ROM, and a storage such as a hard disk built in a computer system. Refers to the device.

Further, the “computer-readable recording medium” refers to a volatile memory (for example, DRAM (Dynamic) in a computer system serving as a server or a client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line. Random Access Memory)) that holds a program for a certain period of time is also included.
The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.
The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

It is a block diagram showing an example of an information management system concerning this embodiment. It is the schematic which shows an example of the table A memorize | stored in the information management apparatus shown in FIG. It is the schematic which shows an example of the table B memorize | stored in the information management apparatus shown in FIG. It is the schematic which shows an example of the table C memorize | stored in the information management apparatus shown in FIG. It is a conceptual diagram which shows an example of the file data transmitted from the information management apparatus shown in FIG. It is a flowchart which shows an example of the information management method which concerns on this embodiment. It is a flowchart which shows an example of the information management method which concerns on this embodiment. It is a flowchart which shows the continuation of the information management method shown in FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Information management apparatus 11 Management control part 12 Management storage part 13 Encryption part 14 Management transmission / reception part 15 Management authentication part 21 User terminal device 201 Terminal control part 202 Terminal storage part 203 Terminal transmission / reception part 204 Operation part 205 Terminal authentication part 206 Decryption Section 207 File Expansion Section

Claims (3)

In an information management device that transmits file data to a plurality of terminal devices,
A first information in which a terminal identifier for identifying the terminal device is associated with a file identifier for identifying the file data, a second information in which the terminal identifier is associated with password information unique to the terminal identifier. A management storage unit for storing information;
Generating encryption information for encrypting the file data for each file data; encrypting the file data based on the encryption information; and encrypting the encryption information with the file identifier of the encrypted file data and An encryption unit to be stored in the management storage unit as the first information in association with the terminal identifier;
Along with the encrypted file data, at least a first management transmission / reception unit that transmits the file identifier and the terminal identifier associated with the encryption information as the first information to the terminal device;
A second management transmission / reception unit that receives the terminal identifier, the password information, and the file identifier from the terminal device;
The combination of the terminal identifier and the password information received by the second transmitting / receiving unit matches the combination of the terminal identifier and the password information associated as the second information stored in the management storage unit. A management authentication unit that establishes authentication of the terminal device that has transmitted the terminal identifier; and
When authentication of the terminal device is established by the management authentication unit, the terminal identifier and the file based on the terminal identifier of the terminal device for which authentication is established and the file identifier received by the second management transmission / reception unit A third management transmission / reception unit that reads the encryption information associated with an identifier with reference to the first information from the management storage unit and transmits the information to the terminal device;
An information management device comprising: In a terminal device that receives file data transmitted from an information management device having a plurality of transmission destinations,
A terminal storage unit for storing a program in which a terminal identifier for identifying the terminal device and password information unique to the terminal identifier are registered;
From the information management device, together with the file data encrypted by the information management device based on the cryptographic information unique to the file data, a file identifier for identifying the file data, and the transmission destination of the file data A first terminal transceiver for receiving a terminal identifier;
An operation unit that is operated by a user and outputs an activation signal that activates the program for expanding the file data received by the first terminal transmission / reception unit;
When the program is activated in response to the activation signal from the operation unit, the terminal identifier registered in the program and stored in the terminal storage unit, and the terminal received by the first terminal transmission / reception unit It is determined whether or not the identifier matches, and if they match, a terminal authentication unit that establishes authentication of the file data received by the first terminal transmission / reception unit;
When authentication of the file data is established by the terminal authentication unit, the terminal identifier registered in the program, the password information, and the file identifier received by the first terminal transmission / reception unit are stored in the information management device. A second terminal transceiver for transmitting;
When authentication of the terminal device is established by the information management device based on the terminal identifier and the password information transmitted by the second terminal transmission / reception unit, the information management device stores the encryption information obtained by encrypting the file data. A third terminal transmitting / receiving unit receiving from the information management device;
A decryption unit for decrypting the encrypted file data based on the encryption information received by the third terminal transceiver unit;
A terminal device comprising: In an information management system comprising a plurality of terminal devices and an information management device connected via a network, and transmitting file data from the information management device to the terminal device,
The information management device includes:
A first information in which a terminal identifier for identifying the terminal device is associated with a file identifier for identifying the file data, a second information in which the terminal identifier is associated with password information unique to the terminal identifier. A management storage unit for storing information;
Generating encryption information for encrypting the file data for each file data; encrypting the file data based on the encryption information; and encrypting the encryption information with the file identifier of the encrypted file data and An encryption unit to be stored in the management storage unit as the first information in association with the terminal identifier;
Along with the encrypted file data, at least a first management transmission / reception unit that transmits the file identifier and the terminal identifier associated with the encryption information as the first information to the terminal device;
A second management transmission / reception unit that receives the terminal identifier, the password information, and the file identifier from the terminal device;
The combination of the terminal identifier and the password information received by the second transmitting / receiving unit matches the combination of the terminal identifier and the password information associated as the second information stored in the management storage unit. A management authentication unit that establishes authentication of the terminal device that has transmitted the terminal identifier; and
When authentication of the terminal device is established by the management authentication unit, the terminal identifier and the file based on the terminal identifier of the terminal device for which authentication is established and the file identifier received by the second management transmission / reception unit A third management transmission / reception unit that reads the encryption information associated with an identifier from the management storage unit with reference to the first information and transmits the information to the terminal device;
The terminal device
A terminal storage unit for storing a program in which the terminal identifier and the password information are registered;
A first terminal transmission / reception unit that receives the file identifier and the terminal identifier for identifying the transmission destination of the file data together with the encrypted file data from the information management device;
An operation unit that is operated by a user and outputs an activation signal that activates the program for expanding the file data received by the first terminal transmission / reception unit;
When the program is activated in response to the activation signal from the operation unit, the terminal identifier registered in the program and stored in the terminal storage unit, and the terminal received by the first terminal transmission / reception unit It is determined whether or not the identifier matches, and if they match, a terminal authentication unit that establishes authentication of the file data received by the first terminal transmission / reception unit;
When authentication of the file data is established by the terminal authentication unit, the terminal identifier registered in the program, the password information, and the file identifier received by the first terminal transmission / reception unit are stored in the information management device. A second terminal transceiver for transmitting;
When authentication of the terminal device is established by the information management device based on the terminal identifier and the password information transmitted by the second terminal transmission / reception unit, the information management device stores the encryption information obtained by encrypting the file data. A third terminal transmitting / receiving unit receiving from the information management device;
A decryption unit for decrypting the encrypted file data based on the encryption information received by the third terminal transceiver unit;
An information management system comprising:

Images