JP5208793B2 - File management system and file management program - Google Patents

Description

  The present invention relates to a technique for managing files stored in an external storage medium used in a computer.

  A large number of computers are used in companies and the like, but in recent years, thorough information management is required, and information data export is often severely restricted. In particular, an external storage medium such as a semiconductor memory (USB memory) that can easily carry information to the outside is often convenient and used for information data transfer. However, with the increase in the capacity of external storage media, it becomes possible to save many files, and inappropriate operation management such as forgetting to delete information data that became unnecessary after using information data has become a problem. Yes.

  For this reason, many companies have taken measures such as prohibiting the use of external storage media in order to prevent information leakage. However, the external storage medium itself is a highly convenient storage device, and if it is prohibited to use it uniformly, business operations will be hindered. Therefore, as a countermeasure against this, measures are taken such that it can be used only by some users. For example, using the system of patent document 1 is considered. In this system, when a user tries to save a confidential file in an external storage medium, the user attribute is acquired. Then, there is a technique for determining whether or not the user's attribute is authorized to handle a confidential file (such as saving to an external storage medium), and to stop the operation when it is determined that the user is not authorized.

  Further, as in Patent Document 2, there is a technique in which a file stored in an external storage medium is automatically deleted after a certain period of time by storing the file in a folder in which file deletion conditions are set.

JP2003-316619A JP-A-6-259293

  By using the system of Patent Document 1 described above, the risk of information leakage can be reduced by limiting the use of the external storage medium to some authorized users. However, it is impossible to improve the risk that the user who has the authority to save the confidential file forgets to delete the confidential file that is unnecessary after use and keeps it. Moreover, since it can be used only by some users, a problem also remains with respect to convenience.

  Further, by using the system of Patent Document 2, it is possible to automatically delete a file that has been forgotten to be deleted included in the external storage medium. However, it is impossible to solve information leakage that occurs during a certain period until it is automatically deleted. Furthermore, in order to automatically delete a file included in the external storage medium, there is a problem that it is necessary to be connected to a system environment including the technique of Patent Document 2.

  An object of the present invention is to solve the above-mentioned problems of the prior art. That is, reducing the risk of information leakage of files stored in the external storage medium. Specifically, it is an object to provide a technique for preventing forgetting to delete after a user has finished using a file stored in an external storage medium (end of use of the file).

  Generally, storing a file on an external storage medium is used for the purpose of using the file on another computer terminal (for example, copying a file to another computer terminal), and its use is temporary. There are often. Therefore, the present inventor paid attention to the point that the file stored in the external storage medium has a purpose of use and is temporarily used, and whether or not the purpose of use of the file stored in the external storage medium has ended. Determine. Then, a system has been invented that solves the problem by reducing the risk of information leakage by automatically deleting a file that has been used or notifying the user to delete the file.

  The present invention is a file management system that performs file management of an external storage medium, wherein an operation log information acquisition unit that acquires operation log information representing an operation in a terminal, and the terminal is configured based on the acquired operation log information. A monitoring target information generating unit that generates monitoring target information including information related to a file stored in the accessed external storage medium, and a condition for ending the purpose of use of the operation log information and the file included in the monitoring target information A file management system includes an end condition comparison unit that compares end conditions and a control unit that performs control according to a result of the comparison.

  By configuring as in the present invention, it is possible to determine that the file stored in the external storage medium at the terminal has finished its purpose of use, and control such as deletion notification of the file can be performed. As a result, the risk of information leakage can be reduced. Further, since there is no need to restrict the use of the external storage medium, the convenience of the external storage medium is not impaired.

  The external storage medium in the present invention is a medium for storing and using files and data, and includes an optical disk, a magneto-optical disk, a magnetic disk, etc. in addition to the semiconductor memory such as the USB memory described above. The present invention is not limited to the above, and any storage medium or storage device that is connected to a computer terminal and stores files and data may be used.

  The monitoring target information in the present invention is information relating to a target (file) stored in the external storage medium, and is information used for monitoring whether the purpose of use has ended.

  In addition, the file management system can also compare the end of use of files using the operation order. That is, the end condition includes a series of operation orders, and the end condition comparison unit is configured as a file management system that compares operation log information related to a file included in the monitoring target information with a predetermined operation order. You can also.

  By configuring as in the present invention, the operation and its operation order are used in the comparison with the end condition. Therefore, it can be used when it is determined that the purpose of use is ended when the determined operation order is performed. Therefore, it is possible to determine the end of the purpose of use of the file more accurately. The operation order used here is information including two or more operations and the operation order of the operations.

  In addition, the file management system can also execute using the operation date and time for comparison as to whether the purpose of use of the file is ended. That is, the operation log information acquired by the operation log information acquisition unit of the present invention includes the operation date and time when the operation was performed, and the end condition comparison unit further includes an operation date and time included in the operation log information related to the file, The operation elapsed time may be calculated from the current date and time, and the operation elapsed time may be used.

By configuring as in the present invention, by using the elapsed time of the operation on the file at the end of the purpose of use of the file, the user's operation status is reflected, such as the user has already done other work. Comparisons can be made. That is, when an operation unrelated to the monitoring target file is performed for a long time, it is possible to determine that the purpose of use of the monitoring target file has ended.

  The above-described invention can also be realized by reading and executing the program of the present invention on a computer terminal. That is, a program used for a file management system for managing files on an external storage medium, the operation log information acquisition function for acquiring operation log information representing an operation on the terminal, and the terminal based on the acquired operation log information Monitoring target information generation function for generating monitoring target information including information related to the file stored in the accessed external storage medium, and conditions for ending the purpose of use of the file included in the acquired operation log information and the monitoring target information An end condition comparison function for comparing the end condition indicating the above and a control function for performing control according to the result of the comparison may be configured as a file management program that causes a computer to execute.

  This file management program also has the same operation and effect as the above-described file management system, and can also have the various feature configurations described above.

  According to the present invention configured as described above, by determining that the purpose of use of a file stored in an external storage medium has been completed, the effect of eliminating the omission of file deletion and reducing the risk of information leakage is obtained. be able to.

The figure which shows typically the concept of the system configuration | structure of this invention. The figure which shows typically the concept of the hardware constitutions of this invention. The figure which shows typically the functional block of the system configuration | structure of this invention. The flowchart which shows the processing process of this invention typically. The figure which shows an example of operation log information typically. The figure which shows an example of an operation log information storage part typically. The figure which shows an example of monitoring object information typically. The figure which shows an example of the information of the file preserve | saved in the external storage medium typically. The figure which shows typically the completion | finish conditions concerning a file. The figure which shows typically the completion | finish conditions concerning operation content. The figure which shows typically the completion | finish conditions concerning a time slot | zone. The figure which shows typically the image displayed with the display device of a terminal. The figure which shows typically the image displayed with the display device of a terminal. The figure which shows typically the image displayed with the display device of a terminal. The figure which shows an example of monitoring object information typically. The figure which shows typically the monitoring object conditions which concern on a file. The figure which shows typically the monitoring object condition which concerns on a keyword. The figure which shows typically the monitoring object condition which concerns on a time slot | zone. The figure which shows typically the functional block diagram of the system configuration at the time of making it comprise only with a terminal.

Example 1 Configuration
Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 shows an overall configuration diagram of a file management system of the present invention. In the present invention, as shown in FIG. 1, a management server A is connected to a plurality of terminals B (hereinafter referred to as “terminal B”) via a communication network N (hereinafter referred to as “network N”). And the external storage medium C are connected directly or via a network N.

  Network N is a CSMA / CD (Carrier Sense Multiple Access with Collision Detection) system with a cable that physically transmits information in a limited facility such as a company or school, and a relay device such as a LAN switch or hub. Although it is configured as an Ethernet (trademark) type LAN, the network N is constructed by an intranet using Internet technology in addition to the Ethernet type LAN, or a WAN (Wide Area Network). It may be constructed by the technology.

  FIG. 2 schematically shows an example of the hardware configuration of the management server A. The management server A includes an arithmetic device 1 such as a CPU that executes arithmetic processing of a program, a storage device 2 such as a RAM and a hard disk for storing information, processing results of the arithmetic device 1 and information stored in the storage device 2 on the Internet. And at least a communication device 5 that transmits and receives via a network such as a LAN. Each function realized on the terminal is executed when a means (program, module, etc.) for executing the process is read into the arithmetic unit 1. When using the information stored in the storage device 2 in the processing, each function reads the corresponding information from the storage device 2 and uses the read information in the processing in the arithmetic device 1 as appropriate.

The management server A may be configured to include a display device 3 such as a display (screen) and an input device 4 such as a keyboard, a mouse, and a numeric keypad as necessary. Further, the management server A may have its functions distributed to a plurality of terminals or servers.

  The hardware configuration of the terminal B is almost the same as that of the management server A. As shown in FIG. 2, the terminal B includes the arithmetic device 1, the storage device 2, the display device 3, the input device 4, and the communication device 5. Yes.

  Although the hardware configuration of the external storage medium C is not particularly illustrated, the arithmetic device 1, the storage device 2, and the communication device 5 are configured to have at least.

  FIG. 3 schematically shows a functional block diagram of the management server A and the terminal B constituting the file management system of the present invention. Each component and each means in the present invention are logically distinguished from each other in function, and may be physically or practically the same area.

  Inside the management server A, a network I / F 10 for transmitting / receiving various information to / from the terminal B via the network N, an operation log information acquisition unit 11 for acquiring operation log information indicating an operation performed by the terminal B, An operation log information storage unit 12 that stores the acquired operation log information, a monitoring target generation unit 13 that generates monitoring target information using the operation log information, and an end condition storage that stores an end condition that is a condition for ending the purpose of use of the file 15 includes an end condition comparison unit 14 that compares operation log information with an end condition, and a control unit 16 that executes control for file management based on the comparison result.

  Inside the terminal B, there are a network I / F 20 for transmitting / receiving various information to / from the management server A via the network N, a terminal control unit 21 for executing various operations / controls in the terminal B, and operations executed in the terminal An operation log information generation unit 22 that generates operation log information for control, an operation log information transmission unit 23 that transmits the generated operation log information to the management server A, and a terminal instruction reception unit that receives various control instructions for the terminal B 24. An external storage medium transmission / reception unit 25 for transmitting / receiving data and control information to / from the external storage medium is provided.

  Normally, each component in the management server A and terminal B executes the processing by reading the hardware (program, module, etc.) that executes the processing into hardware. It may be configured by a combination of the above, or may be configured only by hardware combining logic and the like.

  The operation of each component will be described below based on the functional block diagram constituting the present invention shown in FIG.

  The terminal control unit 21 controls various hardware and software in the terminal B. In the present embodiment, terminal control refers to all operations executed by an application, OS, middleware, firmware, and the like.

  The operation log information generation unit 22 generates operation log information (described later) representing an operation performed on the terminal B. The operation log information is generated based on the control performed by the terminal control unit 21.

  The operation log information transmission unit 23 transmits the operation log information generated by the operation log information generation unit 22 to the management server A. That is, the operation log information is transmitted to the management server A via the network I / F 20. Normally, the operation log information transmission unit 23 transmits operation log information generated every time operation or control is executed in the terminal control unit 21 to the management server A. In addition to the above-described method, transmission to the management server may be performed at a predetermined timing or at a constant cycle, and generation of operation log information and transmission to the management server A may not be performed at the same timing. .

  Here, the operation log information is, for example, information indicating the content operated by the user using the input device 4 of the terminal B, or information indicating the content executed or executed in the terminal B. Specifically, it includes information including terminal identification information, user identification information, operation date / time, operation content, operation target information, additional information, external storage medium identification information, and the like. The information included in the operation log information is an example and is not limited, and only a part of the information may be used as long as the object of the present invention is achieved. Examples of operation log information are schematically shown in FIGS.

  In the present embodiment, the operation date / time includes the date / time when the operation / execution was performed. However, the operation date / time may be the date / time when the operation log information was generated, or may be the date / time transmitted to the management server A.

  The operation content is the content executed in the terminal B, which means the content of operation / control for the application, hardware, etc. executed in the middleware or OS, etc. included. More specifically, key input, pointing device operation (button press, movement, etc.), external storage medium attachment / detachment (detection / deletion or connection / disconnection, etc.), connection with external output device (printer, etc.), file operation, etc. (Create, delete, copy, move, rename file, read file, write file, etc.), folder operation (create, delete, copy, move, rename folder, etc.), application operation (start, end, etc.), add drive There is information indicating deletion / detection, network connection / disconnection, IP address change, computer name change, storage medium writing, printing, clipboard copy, and the like. In addition, these are examples and are not limited.

  Furthermore, the operation target information indicates a processing target to be executed according to the operation content. In this embodiment, identification information (file identification information) of a file operated or controlled by the terminal B is included. More specifically, the file identification information includes a file name, a folder name, and the like. In addition, these are examples and are not limited. The file identification information is information that can uniquely identify a file, and may be any information other than the above example as long as the purpose is achieved.

  The additional information refers to information that is additionally acquired according to the operation content, and the content of the information acquired as additional information varies depending on the operation content. For example, when the operation content is activation of an application, the identification information of the application is acquired as additional information. In addition, these are examples and are not limited.

  Next, in the present embodiment, the external storage medium identification information represents the identification information of the external storage medium accessed by the operation or the control related to the operation, and is information that can uniquely identify the external storage medium. is there. For example, a manufacturing number, a serial number, or an arbitrary fixed number assigned exclusively can be used. In addition, when the external storage medium is connected via a network, information such as an IP address and a MAC address can be used.

  The external storage medium transmission / reception unit 25 transmits / receives data and control information to / from the external storage medium C connected to the terminal B. In general, transmission / reception with an external storage medium is executed by an OS device driver or middleware. Data transmission / reception is performed together with control such as reading or writing of data to / from the external storage medium C. On the other hand, the control information includes, for example, file deletion and data deletion. Detection / deletion of the external storage medium C (connection / disconnection between the terminal B and the external storage medium), power control and use of the external storage medium C It may be information for performing restriction or the like.

  The control instruction receiving unit 24 receives the control instruction determined by the control unit 16 of the management server A via the network I / F 20. The received control instruction is notified to the terminal control unit 21.

  The operation log information acquisition unit 11 acquires operation log information sent from the terminal B via the network I / F 10.

  The operation log information storage unit 12 stores the operation log information acquired by the operation log information acquisition unit 11. The operation log information may be stored for each terminal identification information or each user identification information, or may be stored using a database or the like.

  The monitoring target information generation unit 13 determines whether the operation log information acquired by the operation log information acquisition unit 11 is an access to a file in the external storage medium. Then, when it is determined that the access is to the file in the external storage medium, the monitoring target information is generated based on the contents of the operation log information. That is, the monitoring target information for generating the monitoring target file in the external storage medium included in the operation log information is generated.

  The monitoring target information is information relating to a file in the external storage medium, and is information used for monitoring whether the purpose of use of the file has ended. Specifically, operation date / time, operation content, file management information, additional information, external storage medium identification information, and the like are included. FIG. 7 schematically shows an example of the monitoring target information. As long as the object of the present invention is achieved, only a part of the information may be used, or other information may be used.

  The procedure for generating the monitoring target information will be described in detail. The monitoring target information generation unit 13 acquires operation log information from the operation log information acquisition unit 11. Then, using the external storage medium identification information included in the operation log information, it is determined whether or not the operation log information is for the external storage medium. Next, when the operation log information is for an external storage medium, it is determined whether or not the operation content included in the operation log information is an operation for a file. As a result of the determination, if the operation is for a file in the external storage medium, monitoring target information is generated using information included in the operation log information. The generated monitoring target information may be stored in a monitoring target information storage unit (not shown).

  In addition, when the monitoring target information for the same file has already been generated, the monitoring target information generation unit 13 preferably does not generate the monitoring target information again. That is, it is determined whether the monitoring target information of the same file is stored in the monitoring target information storage unit, and if the monitoring target information of the same file is already stored, it is not created. Alternatively, when there is already monitoring target information of the same file, each information of the monitoring target information may be updated. For example, the operation content and the operation date and time are updated.

  The end condition comparison unit 14 acquires the monitoring target information generated by the monitoring target information generation unit 13 and acquires operation log information from the operation log information acquisition unit 11. Then, the end condition is extracted from the end condition storage unit 15 (described later) according to the file identification information included in the monitoring target information. Thereafter, a series of operation log information relating to the monitored file is compared with the extracted end condition to obtain a comparison result. Then, the comparison result is transmitted to the control unit 16.

  It is preferable that the end condition comparison unit 14 determines the end condition according to the contents of the monitoring target information. The end condition is determined by (1) determining a fixed end condition, (2) determining an end condition for each application, (3) determining an end condition for each operation content, and (4) ending each operation time period. There are conditions, etc.

[End condition determination method 1]
As the end condition, a fixed end condition is used regardless of the contents of the monitoring target information. For example, the operation contents “open” and “close” with respect to the file in the external storage medium are set as end conditions.

[End condition determination method 2]
A method for determining an end condition using application identification information included in the monitoring target information will be described. In this method, the end condition is stored in the end condition storage unit 15 in association with the application identification information, and the end condition associated with the application identification information is extracted according to the application identification information of the monitoring target information. An example of the end condition storage unit 15 is schematically shown in FIG. Specifically, when the application identification information of the monitoring target information is “word processor A”, the end condition is the operation content “open” / “print” or “save” or “edit” / “close”.

[Ending condition determination method 3]
A method for determining the end condition using the operation content included in the monitoring target information will be described. In this method, the end condition is stored in the end condition storage unit 15 in association with the operation content, and the end condition associated with the operation content is extracted according to the operation content of the monitoring target information. An example of the end condition storage unit 15 is schematically shown in FIG. Specifically, when the operation content of the monitoring target information is “open (copy)”, the end condition is the operation content “open (copy)” / “save (copy)”.

[End condition determination method 4]
A method for determining the end condition using the operation date and time included in the monitoring target information will be described. In this method, the end condition is stored in the end condition storage unit 15 in association with the operation time zone, the operation time zone is determined from the operation date and time of the monitoring target information, and the end condition associated with the operation time zone is determined. To extract. An example of the end condition storage unit 15 is schematically shown in FIG. Specifically, when the operation date / time of the monitoring target information is 12:12, the end conditions are the operation contents “open” and “close”.

  Although the method for determining the end condition has been described above, the present invention is not limited to this, and any method may be used as long as the object of the present invention is achieved. Further, the end condition determined by any one method may be used, or a plurality of end conditions may be used in combination.

  Then, the end condition comparison unit 14 compares the end condition determined as described above with the acquired operation log information, and obtains a matching rate as the comparison result. The comparison may be performed using the operation content of the operation log information and the operation content of the end condition. For example, a case where a method for determining an end condition from operation contents is used (end condition determining method 3) will be described. The operation log information (see FIG. 6 (6)) from 17:15 on November 5, 2008 to 17:20 on November 5, 2008 in FIG. 6 is acquired. The operation contents of the acquired operation log information are “start”, “save”, and “end”. Next, the end conditions determined by the operation content “startup” are “startup”, “save”, and “end” as shown in FIG. Then, the operation log information is compared with the operation content of the end condition. As a result of this comparison (match rate), all match (100% match).

  Moreover, the coincidence rate using the important points can be obtained as a comparison result. For example, it is assumed that the operation contents of the acquired operation log information are “startup” and “end”. As described above, the operation contents included in the end condition determined by the operation content “activation” are “activation”, “save”, and “end”. When the operation log information and the end condition are compared, the operation contents that match are “startup” and “end”. Then, the result of the comparison is 8 points, which is a sum of the 4 important points of “activation” and 4 important points of “end”. Since the total value of the important points in the end condition is 12 points, the comparison result (match rate using the important points) is 8 points / 12 points (66.7%).

  As a method for obtaining the coincidence rate as a comparison result, in the above description, the method for obtaining the coincidence rate from the number of coincidences of the operation contents included in the operation log information, and the method for obtaining the coincidence rate from the total value of the important points of the matching operation contents However, the present invention is not limited to this, and the number of matches or the total value itself may be used as the comparison result without obtaining the match rate as the comparison result. Furthermore, for the purpose of comparing the operation contents and determining a match, the calculation formula or value using any method may be used.

  Moreover, although only the operation content was used for the comparison of end conditions, the present invention is not limited to this, and terminal identification information, operation target information, additional information, and the like can also be used. By using information other than the operation content, the accuracy of the comparison result can be increased. For example, when the determination is made using two or more operation log information, it is possible to use a correlation determination unit that determines whether the operation log information is related to each other. In other words, the interrelation determining means determines whether or not two or more operation log information items are related to each other, and it is difficult to determine whether or not the operation log information alone is related to the application identification information included in the additional information or the file identification included in the operation target information. By determining that the information has the same or related content, it can be determined that the information is a series of operation log information indicating a series of operations, and a series of operation log information indicating the series of operations and an end condition. By comparing the two, more accurate comparison results can be obtained.

  The above-described series of operations refers to operations that are related to each other and are related to each other by two or more operations for executing an arbitrary function. The series of operation log information refers to information related to operation / control performed in a series of operations.

  The end condition storage unit 15 stores an end condition for determining the end of use purpose of the file used by the end condition comparison unit 14. More specifically, the end condition stored in the end condition storage unit 15 includes fixed operation contents, a series of operation contents for each application identification information (see FIG. 9), and a series of operation contents for each operation content (see FIG. 10), or a series of operation contents for each operation time zone (see FIG. 11). Furthermore, the end condition may include not only the operation content but also the operation order, additional information, important points, or allowable operation time.

  The control unit 16 acquires the comparison result from the end condition comparison unit 14, and determines the content of the control according to the comparison result. The determined control content is transmitted to terminal B as a control instruction. Specifically, information instructing control such as automatically deleting a file whose use purpose has ended or displaying it on the display device of terminal B is transmitted to the terminal B via the network I / F 10. To do. The terminal B as the notification destination may be determined based on the terminal identification information included in the operation log information, or may be determined based on the terminal identification information of the monitoring target information by including the terminal identification information in the monitoring target information. .

  Further, not only the control instruction for the terminal B but also the administrator terminal (predetermined terminal B) is notified, the result information is stored on the display device of the management server A, and the comparison result is stored as the status of the monitoring target information file. Control such as storing in a storage unit (not shown) may be executed. Furthermore, by storing the monitoring target information file in the result information storage unit, it can be used for determining whether there is a file that has been used while the external storage medium is not connected. It is also possible to notify a warning.

Example 1 Treatment Process
Next, an example of the processing process of the file management system of the present invention will be described with reference to the functional block diagram of FIG. 3, the flowchart of FIG. In the following description, the external storage medium “UU-SS-BB-001” is connected to the terminal B “ABC12345”, and the file in the external storage medium accessed during the connection is referred to as “customer information 001122.doc”. To do.

  The operation log information transmission unit 23 of the terminal B generates operation log information indicating the operation executed on the terminal B (generated by the operation log information generation unit 22), and transmits the operation log information to the management server A.

  The management server A acquires the operation log information transmitted from the terminal B by the operation log information acquisition unit 11 (S101). An example of the operation log information is schematically shown in FIGS. The operation log information in FIG. 6 collectively shows an example of the operation log information acquired by the management server A. In this embodiment, every time an operation by the terminal B is performed, the operation log information acquisition unit 11 transmits the operation to the management server A from the terminal B. Further, the operation log information acquisition unit 11 stores the acquired operation log information in the operation log information storage unit 12.

  The acquired operation log information is notified to the monitoring target information generation unit 13, and it is determined whether the access is to a file stored in the external storage medium “UU-SS-BB-001” (S102). For example, if the files stored in the external storage medium “UU-SS-BB-001” are as shown in FIG. 8, it is determined whether the access is to these files.

  This will be described using the list of operation log information in FIG. First, the operation log information acquisition unit 11 acquires operation log information whose operation date and time is 12:05 on November 5, 2008 (see FIG. 6A) from the terminal “ABC12345”. The acquired operation log information is notified to the monitoring target information generation unit 13. In the monitoring target information generation unit 13, since the operation content of the received operation log information is detection (connection) of the external storage medium “UU-SS-BB-001”, the external storage medium “UU-SS-BB— It is determined that the operation is not for the file stored in “001”. Therefore, since the access is not to a file stored in the external storage medium, the subsequent processing is not executed.

  Subsequently, the operation log information acquired by the operation log information acquisition unit 11 has an operation date and time of 12:12 on November 5, 2008, and the operation content is “open (read)” (see FIG. 6B). . The acquired operation log information is notified to the monitoring target information generation unit 13. Then, the monitoring target information generation unit 13 determines that the operation content of the received operation log information is an operation of “opening (reading)” a file stored in the external storage medium “UU-SS-BB-001”. Therefore, it is determined that the operation is for the file stored in the external storage medium “UU-SS-BB-001”. Therefore, monitoring target information is generated based on the operation log information and notified to the end condition comparison unit (S103). The generated monitoring target information is schematically shown in FIG.

  The above-described monitoring target information will be specifically described. “Customer information 00122.doc”, which is the operation target information of the operation log information, is included in the file identification information of the monitoring target information, and “UU-SS-BB-” is the external storage medium identification information. “001”, the operation date is “November 5, 2008, 12:12”, the operation content is “open (read)”, and the application identification information includes “application (word processor A)” included in the additional information of the operation log information. Is set. Further, it is preferable that the date and time when the file “customer information 00122.doc” is stored in the external storage medium identification information “UU-SS-BB-001” is included in the file storage date and time of the monitoring target information as necessary. is there. This storage date and time may be one of the additional information of the operation log information, or the monitoring target information generation unit 13 makes an inquiry to the terminal “ABC12345” and the terminal control unit 21 of the terminal “ABC12345” When the inquiry is acquired, the storage date and time of the file in the external storage medium may be collected, and the management server A may be notified of the storage date and time of the inquired file.

  The operation log information acquisition unit 11 acquires the next operation log information from the terminal “ABC12345”. Then, the acquired operation log information is notified to the end condition comparison unit 14 (S104). At this time, the operation log information acquisition unit 11 stores the acquired operation log information in the operation log information storage unit 12.

  When the operation log information notified from the operation log information acquisition unit 11 is acquired, the end condition comparison unit 14 extracts an end condition from the end condition storage unit according to the monitoring target information generated by the monitoring target information generation unit 13. Then, the extracted end condition is compared with the acquired operation log information, and the comparison result is notified to the control unit 16 (S105).

  The above operation will be specifically described using operation log information (see FIG. 6B) acquired from 12:12 on November 5, 2008 to 12:32 on November 5, 2008. First, the monitoring target information is generated as shown in FIG. 7 based on the operation log information acquired at 12:12 on November 5, 2008. The end condition comparison unit 14 extracts the end condition from the end condition storage unit 15 according to the application identification information (word processor A). The extracted end conditions are “open (read)” / “print” or “save” or “edit” / “close”.

  Next, comparison is made with the end condition extracted at the time when the operation log information of 12:26 on November 5, 2008 is acquired. The comparison result (match rate) is 2/3 (66.7% match) because the two operations match. Furthermore, when the operation log information at 12:32 on November 5, 2008 is acquired, the end condition is compared. The comparison result (match rate) is 3/3 (100% match) because the three operations match. The comparison result is preferably notified to the control unit 16 each time the comparison is made.

  Then, the comparison result is compared with a predetermined threshold value (S105, S106), and control is executed when the comparison result exceeds the predetermined threshold value (S107).

  First, the control unit 16 determines whether or not to execute the control by comparing the comparison result acquired from the end condition comparison unit with a predetermined threshold value. More specifically, if the predetermined threshold is 70%, if the acquired comparison result (coincidence rate) is 66.7%, the predetermined threshold is not exceeded. It is determined that there is no, and control is not executed. Next, if the acquired comparison result (coincidence rate) is 100%, control is executed because the predetermined threshold value 70% is exceeded. In this way, it is determined whether or not to execute control.

  When it is determined that the control is to be executed, a control instruction for displaying a confirmation screen regarding the file identification information “customer information 00122.doc” is transmitted to the terminal “ABC12345”. When the control instruction receiving unit 24 receives a control instruction from the management server A in the terminal “ABC12345”, the terminal “ABC12345” notifies the terminal control unit 21 and the terminal control unit 21 displays it on the display device 3 as shown in FIG. Then, the user using the terminal “ABC12345” determines a treatment method for the file “customer information 00122.doc”, and designates a button for the corresponding treatment from the input device 4 such as a pointing device. And the terminal control part 21 receives the input instruction | indication, and performs control with respect to file "customer information 00122.doc" according to the instruction | indication. For example, when the “delete” button is selected with a pointing device or the like while the screen of FIG. 12 is displayed, the terminal control unit 21 of the terminal “ABC12345” stores the internal storage medium “UU-SS-BB-001”. File “customer information 00122.doc” is deleted.

  Further, the control to be executed is not limited to the above. For example, the file identification information “customer information 001122.doc” may be automatically deleted in the terminal “ABC12345”. In this case, it is preferable to display the screen of FIG. 13 on the terminal “ABC12345”. Also, these controls may be displayed on a preset administrator's terminal (administrator terminal) instead of being performed on the terminal “ABC12345”. For example, the screen of FIG. 12 is displayed on the screen of the administrator terminal, the administrator determines the action of the file “customer information 00122.doc”, and the determined action method is transferred to the terminal “ABC12345” via the management server A. Be notified. Then, the control instruction receiving unit 24 of the terminal “ABC12345” receives it, and the terminal control unit 21 can control the file “customer information 00122.doc”.

  In the above-described embodiment, the end condition comparison unit 14 is described to compare the operation content included in the end condition with the operation content included in the acquired operation log information. A case where the allowable operation time is included and the allowable operation time is compared with the time actually taken for operation will be described.

  Here, the allowable operation time refers to a time limit for executing a series of operations.

  Hereinafter, each component and the processing process will be described. Note that the description of the same components or operations as those in the first embodiment will be omitted.

Example 2 Configuration
The end condition storage unit 15 has an allowable operation time as the end condition, and the end condition comparison unit 14 determines the allowable operation time and the time actually taken for the operation when comparing the end condition with the operation log information. To determine whether the operation is performed within the time limit.

  The end condition storage unit 15 stores the allowable operation time in association with the end condition (see FIGS. 9, 10, and 11). Further, instead of defining each end condition, an allowable operation time may be provided uniformly.

  The end condition comparison unit 14 extracts the determined end condition from the end condition storage unit 15. At this time, the allowable operation time of the acquired end condition is also extracted. For example, when the application (mail) in FIG. 9 is the end condition, the allowable operation time is 20 minutes, and when the application (decompression software C) is the end condition, the allowable operation time is 10 minutes.

  The end condition comparison unit 14 compares the extracted end condition with the acquired operation log information. Based on the date and time information included in the operation log information acquired together with the operation comparison, the operation elapsed time actually applied to the operation is calculated. Then, the operation elapsed time and the allowable operation time are compared, and the date and time information is notified to the control unit as the comparison result together with the operation comparison result.

  The above-mentioned operation elapsed time refers to the time actually taken for the operation calculated based on the operation log information. The operation elapsed time includes the date and time information included in the acquired operation log information and the operation date and time of the monitoring target information (in this embodiment, the operation date and time of the monitoring target information includes date and time information at the start of the operation) Can be obtained by calculating the time difference between

  In this embodiment, a case where both operation comparison and operation elapsed time comparison are used will be described. However, it is also possible to make a comparison / determination regarding the end of use of a file using only the operation elapsed time.

Example 2 Treatment Process
Next, an example of the processing process of the present embodiment will be described with reference to the functional block diagram of FIG. 3, the flowchart of FIG. In the following description, the external storage medium “UU-SS-BB-001” is connected to the terminal B “ABC12345”, and the file in the external storage medium accessed during the connection is referred to as “customer information 001122.doc”. To do.

  Since the processing processes (S101) to (S103) are the same as those in the first embodiment, description thereof is omitted here.

  When the operation log information notified from the operation log information acquisition unit 11 is acquired, the end condition comparison unit 14 extracts an end condition from the end condition storage unit according to the monitoring target information generated by the monitoring target information generation unit 13. The extracted end condition includes an allowable operation time. Then, the extracted end condition is compared with the acquired operation log information, and the comparison result is notified to the control unit 16 (S105).

  The above operation will be specifically described. The monitoring target information generation unit 13 generates monitoring target information shown in FIG. The end condition comparison unit 14 extracts the end condition from the end condition storage unit 15 according to the application identification information (word processor A). The extracted end conditions are “open (read)” / “print” or “save” or “edit” / “close” and an allowable operation time of 10 minutes.

  Next, when the operation log information is acquired at 12:26 on November 5, 2008, it is compared with the end condition. The comparison result (match rate) is 2/3 (66.7% match) because the two operations match. The operation elapsed time is 14 minutes because it is 12:12 on November 5, 2008 in the monitoring target information, and the result is that it does not exceed the allowable operation time. The control result is notified to the control unit 16.

  The control unit 16 performs control according to whether or not the allowable operation time exceeds the comparison result acquired from the end condition comparison unit. According to the comparison result when the operation log information was acquired at 12:26 on November 5, 2008, the operation coincidence rate is 66.7% and the use purpose of the file is not ended, but the operation elapsed time is allowed. Because the operation time has been exceeded, the purpose of using the file has ended. In other words, regardless of the comparison of the operation content of the end condition and the operation content of the operation log information, it is determined that the purpose of use of the file has ended because the allowable operation time has been exceeded, and control corresponding to the determination result is performed. Run. The contents of the control are the same as in the first embodiment, and are omitted here.

  In the above description, the operation elapsed time is calculated and compared every time the operation log information is received. However, the present invention is not limited to this, and the operation elapsed time is calculated periodically (for example, every minute). It is preferable that the condition comparison unit 14 performs comparison. By using this method, the end of use of the file can be determined at a timing when the operation elapsed time exceeds the allowable operation time.

  In the above description, the operation date and time included in the monitoring target information is the date and time when the operation was started. However, the present invention is not limited to this, and each time an operation related to the file included in the monitoring target information is performed (operation log information is acquired. Every time, the operation date / time included in the monitoring target information may be updated to the date / time information of the acquired operation log information. As a result, an allowable operation time can be set as an interval (operation time interval) between an operation performed on the file and an operation performed next. That is, the comparison / determination can be made based on the operation elapsed time from the previous operation on the monitored file.

  In the above-described embodiment, the end condition comparison unit 14 has been described to compare the operation included in the end condition with the acquired operation log information. However, in the present embodiment, the end condition includes the operation order, and the operation order. A case where the order of the acquired operation log information is compared will be described.

  Here, the operation order refers to the order in which a series of operations are executed.

  Hereinafter, each component and the processing process will be described. Detailed descriptions of the same components or operations as those in the first embodiment will be omitted.

Example 3 Configuration
In the present embodiment, the end condition stored in the end condition storage unit 15 includes the operation order, and the end condition comparison unit 14 determines an end condition for comparison, and compares the determined end condition with the operation log information. By comparing the operation order of the end condition with the order of the acquired operation log information, it is determined whether the operation is performed in the operation order.

  By comparing with the operation order of the end conditions, it is possible to reduce errors in determining whether or not a series of operations is completed, and to determine more accurately.

  The end condition storage unit 15 stores an operation order in association with a series of end conditions (see FIGS. 9, 10, and 11).

  The end condition comparison unit 14 extracts the determined end condition from the end condition storage unit 15. At that time, the operation order of the acquired end condition is also extracted. For example, when the application (mail) in FIG. 9 is determined as the end condition, the first operation is “create new mail”, the second operation is “open (read)”, and the third operation is “mail transmission”. When the application (decompression software C) is determined as the termination condition, the first operation: “start”, the second operation: “open (read)”, the third operation: “decompression”, and the fourth operation: “ “Save”, fifth operation: “End”.

  The end condition comparison unit 14 compares the extracted end condition with the acquired operation log information. When comparing the operation contents, the operation order of the end condition and the order of the acquired operation log information are further compared, and a comparison result such as “in order” or “out of order” is notified to the control unit 16.

Example 3 Treatment Process
Next, an example of the processing process of the present embodiment will be described with reference to the functional block diagram of FIG. 3, the flowchart of FIG. In the following description, the external storage medium “UU-SS-BB-001” is connected to the terminal B “ABC12345”, and the file in the external storage medium accessed during the connection is referred to as “customer information 001122.doc”. To do.

  Since the processing processes (S101) to (S103) are the same as those in the first embodiment, description thereof is omitted here.

  When the operation log information notified from the operation log information acquisition unit 11 is acquired, the end condition comparison unit 14 extracts an end condition from the end condition storage unit 15 according to the monitoring target information generated by the monitoring target information generation unit 13. The extracted end condition includes the operation order. Then, the extracted end condition is compared with the acquired operation log information, and the comparison result is notified to the control unit 16 (S105).

  The above operation will be specifically described. The monitoring target information generation unit 13 generates monitoring target information shown in FIG. The end condition comparison unit 14 extracts end conditions from the end condition storage unit 15 according to the application identification information (word processor A). The extracted end conditions are the first operation: “open (read)”, the second operation: “print” or “save” or “edit”, and the third operation: “close”.

  Next, when the operation log information at 12:26 on November 5, 2008 (see FIG. 6 (2)) is acquired, it is compared with the end condition. The comparison result (match rate) is 2/3 (66.7% match) because the two operations match. The operation order of the operation log information is the first operation: “open (read)” and the second operation: “print”, resulting in “in order”. The control result is notified to the control unit 16.

  Furthermore, when the operation log information is acquired at 12:32 on November 5, 2008, and compared with the end condition, the comparison result (match rate) indicates that the three operations match. / 3 (100% match). Then, the operation order of the operation log information is as follows: first operation: “open (read)”, second operation: “print”, and third operation: “close”. The control result is notified to the control unit 16.

  The control unit 16 acquires the comparison result from the end condition comparison unit 15 and performs control. November 5, 2008 12:26 The operation log information when the operation log information was acquired is “in order”, but since all the operations have not been executed, the operation is not considered to be completed and control is performed. Do not do. Next, the comparison result when the operation log information was acquired at 12:32 on November 5, 2008 is “in order”, and it is determined that the purpose of use of the file has ended because all operations have been executed. Perform the corresponding control. That is, the control unit 16 performs control using information regarding the operation order (“in order” and “not in order”) as a comparison result. Therefore, for example, even when all the operations included in the end condition match, if the operation order is “not in order”, the usage purpose of the file can be regarded as not ended.

  In the above description, the comparison result of the end condition comparison unit 14 is “in order” or “out of order”, but the present invention is not limited to this, and the number of operations and the number of operations in the order may be used. In other words, a flexible determination can be made by setting an allowable range even when some operations are missing or only some operations are not in order with respect to the operation and operation order of the end condition. You may do it.

  In the above-described embodiment, it has been described that the file stored in the external storage medium accessed in the terminal B is a monitoring target. However, in this embodiment, a predetermined condition among the files in the accessed external storage medium A method for monitoring only files that satisfy the following conditions will be described. Furthermore, the case where the end condition comparison unit 14 compares the end condition with the operation log information stored in the operation log information storage unit 12 every time a file is accessed will be described.

  In other words, by monitoring only files that satisfy certain conditions, there is no need to monitor files that do not need to be monitored (such as files that are not confidential information), and the processing of this system can be reduced. It becomes like this.

  Hereinafter, each component and the processing process will be described. Note that the description of the same components or operations as those in the first embodiment will be omitted.

Example 4 Configuration
In the present embodiment, in addition to the configuration of the first embodiment, a monitoring target condition storage unit (not shown) is provided, and the monitoring target information generation unit 13 reads the monitoring target condition information included in the monitoring target condition storage unit, and the external The operation log information indicating access to the file in the storage medium is compared with the monitoring target condition information. Then, when it is determined that the condition of the monitoring target is satisfied, the monitoring target information is generated and transmitted to the end condition comparison unit 14.

  The monitoring target condition storage unit stores, as monitoring target condition information, a condition as to whether a file in the accessed external storage medium is a monitoring target. The monitoring target condition information includes a condition for determining whether the monitoring target is a monitoring target, necessity of monitoring, and the like. The monitoring target condition information is schematically shown in FIG. 16, FIG. 17, and FIG.

  The monitoring target information generation unit 13 includes an access monitoring unit that determines whether the operation log information acquired by the operation log information acquisition unit 11 is an access to a file in the external storage medium, and the monitoring target condition information from the monitoring target condition storage unit And monitoring target determination means for determining whether a file included in the operation log information is a monitoring target by comparing the monitoring target condition information and the operation log information, and monitoring target information when determining that the file is a monitoring target Monitoring object information generating means for generating.

  The access monitoring unit determines whether the file is in the external storage medium based on the contents of the operation log information acquired by the operation log information acquisition unit 11. If it is determined that the operation is for a file in the external storage medium, the operation log information is notified to the monitoring target determining means.

  When the monitoring target determination unit acquires the operation log information, the monitoring target determination unit acquires the monitoring target condition information from the monitoring target condition storage unit. Then, the monitoring target condition information and the operation log information are compared, and if it is determined as a monitoring target as a result of the comparison, the operation log information is notified to the monitoring target information generating means.

  As a monitoring target determination method in the monitoring target determination means, (1) a method of determining based on file identification information in the operation log information (referred to as a file name in this embodiment), and (2) file identification information in the operation log information There are a method of comparing and determining the keyword of the monitoring target condition, and (3) a method of determining by comparing the operation time in the operation log information with the time zone of the monitoring target condition.

(Monitoring target judgment method 1)
As a monitoring target determination method, a method for determining whether a monitoring target is used by using file identification information (file name) in the operation log information will be described. The monitoring target determination unit extracts the file name in the operation log information. Next, the necessity of monitoring related to the file name extracted in the monitoring target condition (see FIG. 16) in the monitoring target condition storage unit is extracted. When the necessity of monitoring is “necessary”, the operation log information is notified to the monitoring target information generating means. In addition, when the extracted file name is not included in the monitoring target condition or when the extracted monitoring necessity is “unnecessary”, it is not necessary to set the monitoring target, so the monitoring target information generating unit It is better not to notify the operation log information.

  In the above description, the monitoring target condition is stored in association with the necessity of monitoring. However, the present invention is not limited to this, and a list of file names that need to be monitored or unnecessary to monitor is stored as monitoring target condition information. Of course, it is possible to perform the above-described processing.

(Monitoring target judgment method 2)
As a method for determining a monitoring target, a method for determining whether a monitoring target is determined by comparing file identification information (file name) in the operation log information with a keyword that is a monitoring target condition will be described. The monitoring target determination unit extracts the file name in the operation log information. Next, the keyword of the monitoring target condition (see FIG. 17A) in the monitoring target condition storage unit is extracted. It is determined whether the extracted keyword is included in the file name in the operation log information. If included, the file is determined as a monitoring target. Then, the monitoring target information generating means is notified of the operation log.

  A file extension (see FIG. 17B) may be used instead of the keyword as the monitoring target condition information.

(Monitoring target judgment method 3)
As a method for determining a monitoring target, a method for determining whether a monitoring target is determined by comparing the operation date and time in the operation log information with a time zone that is a monitoring target condition will be described. The monitoring target determination unit extracts the operation date and time from the operation log information. Next, the necessity of monitoring related to the time zone of the operation date and time is extracted by comparing the time zone of the monitoring subject condition (FIG. 18) in the monitoring subject condition storage unit with the extracted operation date and time. When the necessity of monitoring is “necessary”, the operation log information is notified to the monitoring target information generating means. In addition, when the extracted necessity of monitoring is “unnecessary”, it is not necessary to be a monitoring target, and therefore it is preferable not to notify the monitoring target information generation unit of operation log information.

  In the foregoing, an example of a method for determining whether or not the object is a monitoring target has been described, but any other method may be used as the determination method. In addition, in any one of the above three determination methods, when it is determined that monitoring is necessary, it may be a monitoring target, or when it is determined that monitoring is necessary in two or more or all methods. You may make it make it the monitoring object.

  The monitoring target information generation unit 13 generates monitoring target information based on the operation log information sent from the monitoring target determination unit. For example, it is generated as shown in FIG. The generated monitoring target information is stored in a monitoring target information storage unit (not shown).

  Next, the end condition comparison unit 14 acquires the operation log information from the operation log information acquisition unit 11, and compares the operation log information with the monitoring target information. When it is determined that the operation log information is related to the monitoring target file, the operation log information related to the monitoring target information is extracted from the operation log information storage unit 12. The extracted operation log information and the acquired operation log information are compared with the end condition extracted from the end condition storage unit according to the monitoring target information, and the comparison result is notified to the control unit 16.

  By using the operation log information stored in this way and the acquired operation log information, it becomes possible to compare with a highly accurate end condition.

Example 4 Treatment Process
Next, an example of the processing process of the present embodiment will be described with reference to the functional block diagram of FIG. 3, the flowchart of FIG. In the following description, the external storage medium “UU-SS-BB-001” is connected to the terminal B “ABC12345”, and the file in the external storage medium accessed during the connection is “compressed data 9999.zip”. The monitoring target determination method is a method of determining a monitoring target condition using a file name (monitoring target determination method 1).

    The management server A acquires the operation log information transmitted from the terminal B by the operation log information acquisition unit 11 (S101). An example of the operation log information is schematically shown in FIGS. In this embodiment, every time an operation is performed by the terminal B, it is transmitted from the terminal B to the management server A and received by the operation log information acquisition unit 11. Further, the operation log information acquisition unit 11 stores the acquired operation log information in the operation log information storage unit 12.

  The acquired operation log information is notified to the monitoring target information generation unit 13 and is an access to a file stored in the external storage medium “UU-SS-BB-001”, and is stored in the monitoring target condition storage unit. It is determined whether the monitoring target condition (file name) is satisfied (S102).

  This will be described using the list of operation log information in FIG. For example, the operation log information acquisition unit 11 acquires operation log information whose operation date and time is 16:21 on November 5, 2008 (see FIG. 6 (5)) from the terminal “ABC12345”. The acquired operation log information is notified to the monitoring target information generation unit 13. In the monitoring target information generation unit 13, since the operation content of the received operation log information is “activation” of an application (decompression software C) not related to the external storage medium “UU-SS-BB-001”, It is determined that the operation is not for the file included in the storage medium “UU-SS-BB-001”. Therefore, since it is not an access to the file in the external storage medium, the subsequent processing is not executed.

  Subsequently, the operation log information acquired by the operation log information acquisition unit 11 has an operation date and time of 16:23 on November 5, 2008, and the operation content is “open (read)”. The monitoring target information generating unit 13 can determine that the operation content of the received operation log information is an operation of “opening (reading)” a file stored in the external storage medium “UU-SS-BB-001”. Therefore, it is determined that the operation is for a file included in the external storage medium “UU-SS-BB-001”. Next, when the file name “compressed data 9999.zip” of the received operation log information is extracted and compared with the monitoring target condition (see FIG. 16) in the monitoring target condition storage unit, the file name “compressed data 9999.zip” is obtained. Since it is included in the monitoring target condition and the necessity of monitoring is “necessary”, it is determined that this file “compressed data 9999.zip” is the monitoring target. Therefore, monitoring target information is generated based on the operation log information and stored in a monitoring target information storage unit (not shown) (S103). The generated monitoring target information is shown in FIG.

  The operation log information acquisition unit 11 acquires the next operation log information from the terminal “ABC12345”. Then, the acquired operation log information is notified to the end condition comparison unit 14 (S104).

  When the operation log information notified from the operation log information acquisition unit 11 is acquired, the end condition comparison unit 14 extracts an end condition from the end condition storage unit according to the monitoring target information included in the monitoring target information storage unit. Next, operation log information related to the monitoring target information is extracted from the operation log information storage unit 12, and the extracted operation log information and the operation log information acquired from the operation log information acquisition unit 11 are compared with the extracted end condition. (S105).

  Specifically, description will be made using the acquired operation log information (see FIG. 6 (5)). Following the acquisition of the operation log information described above, at 16:24 on November 5, 2008, the operation content: “decompression”, operation target: “compressed data 9999.zip”, additional information: “application (decompression software C) ”, External storage medium identification information:“ UU-SS-BB-001 ”operation log information is acquired. The end condition comparison unit 14 determines that the operation log information is related because the file identification information, application identification information, and external storage medium identification information of the monitoring target information (see FIG. 15) match. Then, the end condition comparison unit 14 extracts the related operation log information from the operation log information storage unit 12 based on the monitoring target information. In this embodiment, application identification information is extracted as an extraction target. Then, November 5, 2008, 16:21 Operation content: “Startup”, November 5, 2008, 16:23 Operation content: “Open (read)” is extracted. In this embodiment, application identification information is used, but other information may be used or combined.

  As a result of this extraction, the operation log information acquired at this time becomes three, and the operations are executed in the order of “start-up”, “open (read)”, and “decompress”. Here, the end condition is extracted from the end condition storage unit 15. Here, assuming that the end condition based on the application identification information of the monitoring target information is extracted, the operation of the application (decompression software C) from the end condition of FIG. 9 is “start”, “open (read)”, “decompression”. ”,“ Save ”, and“ End ”are extracted.

  Then, the end condition comparison unit 14 compares the operation of the terminal B at this time with the extracted end condition, but the three operations (“activation”, “open (read)”, “decompression”) match. Therefore, it is determined that the remaining two operations ("save" and "end") have not been executed, and the comparison result (match rate) is 3/5 (60%). The end condition comparison unit 14 notifies the control unit 16 of the comparison result (match rate).

  Thereafter, the operation log information of November 5, 2008, 16:25 Operation content: “Save” is acquired, and the same processing as described above is executed. That is, the operation log information acquired at this point is 4 items (“start”, “open (read)”, “decompress”, “save”), and the comparison result (match rate) is 4 / compared with the end condition. 5 (80%). Further, after that, the operation log information “November 5, 2008, 16:31” Operation content: “End” is acquired, and the same processing as described above is executed. In other words, the operation log information that has been acquired at this point is 5 items (“startup”, “open (read)”, “thaw”, “save”, “end”), and the comparison result (match rate) ) Is 5/5 (100%). The comparison result is notified to the control unit 16 every time the process is executed.

  And the control part 16 performs control, when a comparison result exceeds a predetermined threshold value (S107). Since the specific processing contents of the control unit 16 are the same as those in the first embodiment, description thereof will be omitted.

  Further, when using the monitoring target information storage unit as in this embodiment, an external storage medium attachment / detachment control unit (not shown) is provided, and monitoring in the monitoring target storage unit is performed when detecting or deleting the external storage medium. It is preferable to delete the target information (monitoring target information related to the external storage medium).

  In the above-described fourth embodiment, it has been described that the monitoring target information storage unit should be erased when the external storage medium is attached / detached. However, the external storage medium is not erased when the external storage medium is attached / detached. Also good. As a result, it becomes possible to use the operation log information when the external storage medium has been used before, and it is possible to determine the end of the purpose of use of the file that cannot be determined by two or more terminals B or once. it can.

  In the above-described third embodiment, it has been described that the external storage medium attachment / detachment control unit deletes the monitoring target information in the monitoring target information storage unit. However, in this embodiment, the external storage medium attachment / detachment control unit When the monitoring target information remains in the monitoring target information storage unit at the time of deletion, the user may be notified that the file used in the external storage medium remains without being deleted.

  Specifically, when the external storage medium attachment / detachment control unit acquires operation log information related to the deletion of the external storage medium from the operation log information acquisition unit 11, the external storage medium attachment / detachment control unit relates to the external storage medium deleted in the monitoring target information storage unit. Search whether monitoring target information is stored. If the monitoring target information related to the deleted external storage medium is stored as a result of the search, the control unit 16 is notified of the searched monitoring target information and the information from which the external storage medium has been deleted. Here, the information from which the external storage medium has been deleted is information indicating that the external storage medium has been removed from the terminal B (information indicating that the connection with the terminal B has been completed), the external storage medium identification information, This information includes terminal identification information of the connected terminal.

  When the control unit 16 acquires the information from which the external storage medium has been deleted and the searched monitoring target information from the external storage medium attachment / detachment control unit, the control unit 16 has connected (attached) the external storage medium until then according to the information. The terminal B is notified of a control instruction such as displaying on the display device that the external storage medium has been deleted in a situation where the used file is not erased. Upon receiving this notification, the terminal B displays a warning on the display device connected to the terminal B.

  The functions and configurations of the file management system of the present invention may be appropriately distributed in the management server A and terminal B.

  Alternatively, the configuration unit necessary for the terminal B may be provided without providing the management server A. FIG. 19 schematically shows a functional block diagram in the case where only terminal B is configured. Specifically, the terminal B includes a terminal control unit 21, an operation log information generation unit 22, an operation log information acquisition unit 11, an operation log information storage unit 12, a monitoring target information generation unit 13, an end condition comparison unit 14, and an end condition. By providing the storage unit 15, the control unit 16, and the external storage medium transmission / reception unit 23, file management can be performed only by the terminal B. As a result, there is no need to make an inquiry to the management server A, and processing can be performed at high speed.

  There are various patterns of dispersion arrangement, and any arrangement form may be used. As described above, in the processes in the management server A and the terminal B, when using functions of other terminals and servers, an information transmission / reception unit for transmitting / receiving information is appropriately provided to transmit an inquiry and receive an inquiry result. It is better to realize by doing so.

  In the above-described embodiment, the method for determining the end condition has been described. However, it is also possible to determine the end condition using information on the file in the external storage medium. That is, the end condition may be determined using file management information such as a file name (file identification information) and a file save date. This file management information is information relating to a file in the external storage medium, and includes a file name (file identification information), a file save date and time, and the like.

  As a method for determining the end condition based on the file-related information, (1) associating the file name (file identification information) with the end condition and determining the end condition according to the file name, (2) associating the keyword with the end condition The end condition is determined according to the keyword included in the file name (file identification information). (3) The time zone (or time) and the end condition are stored, and the end condition is determined using the file save date and time. And so on. That is, for the method for determining the end condition, information about a file, information about an operation, and the like can be used.

A file management program may be included in the external storage medium, and the terminal B may be made to read and execute the file management program from the external storage medium in order to use the external storage medium.
Moreover, the file management program and an arbitrary file are converted into one packaged execution format file, and the execution format file is executed on the terminal B, whereby the file management program is automatically read into the terminal B and packaged. It is also possible to allow access to any file.

  In this embodiment, it is necessary to store a file management program in an external storage medium in advance. The storage timing may be arbitrary timing, or may be stored at the same time when an arbitrary file is stored in the external storage medium.

  Specifically, when the external storage medium is attached to or connected to the terminal B, the file management program contained in the external storage medium is read into the terminal B and execution is started. At this time, the configuration of the read file management program includes an operation log information generation unit 22, an operation log information acquisition unit 11, an operation log information storage unit 12, a monitoring target information generation unit 13, an end condition comparison unit 14, and an end condition storage unit. 15, a control unit 16, and an external storage medium transmission / reception unit 23, and each process starts an operation within the terminal B.

  Since the operation of each component is the same as that of the above-described embodiment, description thereof is omitted.

  Thereafter, when the external storage medium is deleted or disconnected from the terminal B, the operation of the file management program is preferably terminated.

  By adopting such a configuration, it is not necessary to store and execute the file management program in the terminal B in advance, and the effect of this system can be exhibited even in the terminal B that does not include the file management system in advance. .

A: Management server B: Terminal C: Peripheral device 1: Computing device 2: Storage device 3: Display device 4: Input device 5: Communication device 11: Operation log information acquisition unit 12: Operation log information storage unit 13: Monitoring target information Generation unit 14: End condition comparison unit 15: End condition storage unit 16 Control unit 21: Terminal control unit 22: Operation log information generation unit 23: Operation log information transmission unit 24: Control instruction reception unit 25: External storage medium transmission / reception unit

Claims (4)

A file management system for managing files on an external storage medium,
An operation log information acquisition unit for acquiring operation log information representing an operation on the terminal;
Based on the acquired operation log information, a monitoring target information generating unit that generates monitoring target information including information on a file stored in the external storage medium accessed by the terminal;
A file comprising: an end condition comparison unit that compares the acquired operation log information with an end condition indicating a use end condition of a file included in the monitoring target information; and a control unit that performs control according to the result of the comparison Management system The termination condition includes a sequence of operations,
The end condition comparison unit
2. The file management system according to claim 1, wherein operation log information relating to a file included in the monitoring target information is compared with an operation order of the end condition. The operation log information to be acquired includes the operation date and time when the operation was performed,
The end condition comparison unit further includes:
3. The file management system according to claim 1, wherein an operation elapsed time is calculated from an operation date and time and a current date and time included in the operation log information relating to the file, and the operation elapsed time is used. A program used in a file management system for managing files on an external storage medium,
An operation log information acquisition function for acquiring operation log information representing an operation on the terminal;
Based on the acquired operation log information, a monitoring target information generation function for generating monitoring target information including information on a file stored in the external storage medium accessed by the terminal;
An end condition comparison function for comparing the acquired operation log information with an end condition indicating a use end condition of a file included in the monitoring target information;
A control function for performing control according to the result of the comparison;
File management program that causes a computer to execute