JP5328260B2 - Individual file access management system - Google Patents

Description

  The present invention relates to an individual file access management system that performs electronic file access management in a client terminal using a server.

  Conventionally, electronic files (hereinafter simply referred to as “files”) are exchanged using a network such as sending a file attached to an e-mail, or using a storage medium such as a network or USB memory. Has been done. Among the files that are exchanged, there are files that contain important information that cannot be leaked to the outside, such as confidential information and personal information, and it is not possible to prevent leakage of information from the files even after these files are exchanged is important.

  However, the access right that was set when the file was saved on a personal computer or the like cannot be inherited after the file is exchanged and moved to another personal computer or the like. Therefore, in order to prevent information leakage from the file after the file is exchanged, a method has been proposed in which the exchanged file is encrypted so that only a user having a legitimate access right can decrypt the file (for example, Patent Document 1).

In Patent Document 1, a file attached to an e-mail is encrypted using an encryption key managed by a server, and a user who receives an e-mail attached with an encrypted file receives a file at the server. A system that can receive a decryption key from a server and decrypt an encrypted file only when it is determined that the user has a legitimate access right is disclosed.
JP 2006-344000 A

  In the system of Patent Document 1, the file exchanged attached to the e-mail is encrypted, and only the user who has the right access right to the file can decrypt the file, so that the access originally set in the file The effect is the same as if the rights were transferred to the new file. However, the encrypted file is decrypted and saved in the recipient's terminal. The same effect as when the access right originally set in the file before transmission is transferred to the file after saving is as follows. I can't get it. Therefore, the file sender cannot manage the access right of the file stored in the receiver's terminal, and there is a problem that the file information may be leaked outside against the sender's will. .

  In view of the above-mentioned problems, the present invention prevents individual file information from leaking to the outside by taking over the access right originally set in the file before the exchange between the client terminals. The object is to provide a file access management system.

(1) An individual file access management system in which a client terminal and an access management server that manages access right information for each of a plurality of electronic files created by a user of the client terminal are connected via a network,
The access management server is
A payout key creating means for creating a unique payout key for the combination of the attribute information and the access right information of each of the plurality of electronic files received from the client terminal;
Access right information storage means for storing a combination of the attribute information and the access right information in association with a payout key;
With
The client terminal is
Of the plurality of electronic files, access right information setting means for setting access right information for an electronic file for which the user of the client terminal has instructed saving;
File information acquisition means for acquiring attribute information of the electronic file for which the storage instruction has been issued;
Access right information transmitting means for transmitting a combination of the attribute information acquired by the file information acquiring means and the access right information set by the access right information setting means to an access management server;
A payout key acquisition means for acquiring a payout key created in the access management server from the access management server;
A payout key adding means for adding the payout key acquired by the payout key acquiring means to the attribute information of the electronic file and creating an electronic file with a payout key;
An individual file access management system comprising:

  According to the configuration of (1), by managing the access right information by the access management server, the file access right information can be taken over even when the file is exchanged and stored in another client terminal. In other words, a new file is created by associating the access right information managed by the access management server with the file stored in the client terminal using the payout key and adding the payout key to the file attribute information. Even if the file is exchanged and stored in another client terminal without changing the file, the file can take over the access right information. As a result, access management after file exchange can be easily performed.

(2) The access management server is
Determination information acquisition means for receiving a payout key acquired from the electronic file with the payout key and user information of the client terminal from the client terminal, and acquiring access right information corresponding to the payout key from an access right information storage means When,
Based on the user information of the client terminal received together with the payout key from the client terminal and the access right information acquired by the determination information acquisition means, the user of the client terminal can access the electronic file. A determination means for determining availability;
Further comprising
The client terminal is
User information acquisition means for acquiring attribute information of a user of the client terminal;
Information transmitting means for transmitting the payout key acquired from the electronic file with the payout key by the file information acquiring means and the user attribute information acquired by the user information acquiring means to the access management server as determination information; ,
A result acquisition unit for acquiring a determination result by the determination unit;
Control means for controlling access to the electronic file based on the result obtained by the result obtaining means;
The individual file access management system according to (1).

  According to the configuration of (2), the access authority to the electronic file can be confirmed by the access management server based on the payout key added to the attribute information of the electronic file. As a result, it is possible to confirm whether the user who has accessed the electronic file is an appropriate user.

  (3) The individual file access management system according to (1) or (2), wherein each unit included in the individual file access management system is provided by agent software.

  According to the configuration of (3), the user can make his / her terminal a client terminal of the individual file access management system by installing the agent software. Further, the user of the client terminal can manage access to the file used by the user with the same operation as before. The agent software is proxy software that processes a request from a client terminal, and is intended to operate on the back end.

  To provide an individual file access management system that prevents file information from leaking to the outside by taking over the access rights that were originally set for the file before the exchange between the client terminals Can do.

  Hereinafter, the best mode for carrying out the present invention will be described with reference to the drawings. This is merely an example, and the technical scope of the present invention is not limited to this.

[Overall configuration of individual file access management system]
FIG. 1 is a diagram showing an overall configuration and functional configuration of an individual file access management system 10 according to an embodiment of the present invention (hereinafter referred to as the present embodiment). The individual file access management system 10 includes a client terminal 100 and an access management server 200, which are connected via a network. Note that the client terminal 100 and the access management server 200 may each be composed of a plurality of units.

  1 represents the flow of processing for saving a file in the client terminal 100, and the broken line arrow represents the flow of processing for browsing a file saved in the client terminal 100. However, the white arrow represents the flow of data. Below, each means with which the client terminal 100 and the access management server 200 are provided is demonstrated.

[Functional configuration of client terminal]
The client terminal 100 is a terminal that sets access right information for a file stored in the client terminal 100 and browses a file in which the access right information stored in the client terminal is set. The client terminal 100 includes an access control unit 110 and a file storage unit 130. The access control unit 110 includes an operation reception unit 111, a file information acquisition unit 112, an access right information setting unit 113, an access right information transmission unit 114, a payout key acquisition unit 115, a payout key addition unit 116, a user information acquisition unit 117, and determination information. A transmission unit 118, a result acquisition unit 119, and a display control unit 120 are provided.

  The operation accepting unit 111 has a function of accepting operation information input by an input unit (not shown) such as a keyboard and a mouse for a file to be operated by the user of the client terminal 100, and the received operation information as file information. A function of outputting to the acquisition means 112. Specifically, an operation for instructing to save the file in the file storage unit 130 and an operation for instructing browsing of the file stored in the file storage unit 130 are accepted. Here, browsing means opening a file. The operation information includes identification information of a file to be operated by the user of the file receiving terminal 100.

  The file information acquisition unit 112 is specified by the file specifying information included in the received operation information among the files stored in the file storage unit 130 in response to receiving the operation information transmitted by the operation receiving unit 111. It has a function to acquire file information related to files. The file information acquisition unit 112 also has a function of outputting the acquired file information to the access right information setting unit 113 or the user information acquisition unit 117.

  Specifically, in the case of operation information indicating an operation for instructing to save a file in the file storage unit 130, a file relating to a file (hereinafter referred to as a save target file) for which the user of the client terminal 100 has given a save instruction Information is acquired, and the acquired file information is output to the access right information setting means 113. In the case of an operation for instructing browsing of a file stored in the file storage unit 130, file information on a file (hereinafter referred to as a browsing target file) for which the user of the client terminal 100 has instructed browsing is acquired, The acquired file information is output to the user information acquisition means 117. Here, the file information is file attribute information such as a file name, a file creation user name and user ID, a file creation date and time, and file version information. By including the file creation date and time and file version information, it is possible to set different access right information for each file with the same name for each creation date and version.

  The access right information setting unit 113 has a function for setting access right information for the save target file in response to reception of the file information of the save target file from the file information acquisition unit 112, and is set for the save target file. A function of outputting the access right information and the received file information to the access right information transmitting unit 114; A specific access right information setting method will be described later.

  The access right information transmitting unit 114 accesses the access right information for the storage target file set by the access right information setting unit 113 in association with the file information about the storage target file acquired by the file information acquisition unit 112. It has a function of transmitting to the payout key creation means 211 of the management server 200.

  The payout key acquiring unit 115 has a function of acquiring the payout key created by the payout key generating unit 211 from the access management server 200 and a function of outputting the acquired payable key to the payout key adding unit 116. The payout key adding means 116 has a function of adding the payout key acquired from the payout key acquiring means 115 to the attribute information of the save target file, and a function of storing the save file in which the payout key is added to the attribute information in the file storage means 130. And have.

  The user information acquisition unit 117 has a function of acquiring user information related to the user of the client terminal 100 in response to receiving the file information of the browsing target file from the file information acquisition unit 112, and the acquired user information is a determination information transmission unit. 118. Here, the external device connected to the client terminal 100, specifically, the external device is an IC card reader connected to the client terminal 100, and the user information read from the IC card in which user information is set in advance. Read and transmit to user information acquisition means. The user information acquisition unit 117 acquires user information from an external device. Here, the user information is, for example, a user ID that uniquely identifies a user, a group ID that uniquely identifies a group to which the user belongs, a user name, and the like. Since the user may belong to a plurality of groups such as a sales group and a managerial group, the user can have a plurality of group IDs.

  The determination information transmission unit 118 uses the file information of the browsing target file acquired by the file information acquisition unit 112 and the user information acquired by the user information acquisition unit 117 as determination information, and the determination information acquisition unit of the access management server 200 The function to transmit to 212 is provided. The determination information is used to determine whether or not the user of the client terminal 100 can browse the browsing target file.

  The result acquisition unit 119 has a function of acquiring a determination result as to whether or not the user of the client terminal 100 can browse the browsing target file from the determination unit 213 of the access management server 200, and the acquired determination result to the display control unit 120. Output function. The display control unit 120 has a response function of responding to a browsing instruction made by the user of the client terminal 100 according to the determination result acquired from the result acquisition unit 119. The response function is a function for displaying a file on an output means (not shown) such as a display in the case where the user of the client terminal 100 can browse, and a message to that effect in the case where the result cannot be viewed. And a function of displaying on output means (not shown) such as a display.

[Functional configuration of the access management server]
The access management server 200 manages access right information of files stored in the client terminal 100, and determines whether or not the user of the client terminal 100 can browse the browsing target file stored in the client terminal 100. Do. The access management server 200 includes a payout key creation unit 211, a determination information acquisition unit 212, a determination unit 213, and an access right information storage unit 230.

  The payout key creating unit 211 has a function of creating a payout key that uniquely specifies a combination of access right information and file information acquired from the access right information transmitting unit 114 of the client terminal 100. The payout key creation unit 211 can associate a file stored in the client terminal 100 with access right information stored in the access right information storage unit 230 by a function of creating a uniquely specified payout key. The payout key is a character string made up of arbitrary alphanumeric characters and the payout key creating means 211 automatically creates it. The payout key creation unit 211 has a function of storing the created payout key in the access right information storage unit 230.

  The determination information acquisition unit 212 has a function of acquiring determination information, that is, file information related to the browsing target file and user information of the client terminal 100 from the determination information transmission unit 118 of the client terminal 100. In addition, based on the acquired file information, the access right information storage unit 230 obtains the access right information set in the browsing target file, and outputs the acquired user information and access right information to the determination unit 213. With functions.

  Whether the user of the client terminal 100 can browse the browsing target file based on the user information of the client terminal 100 acquired by the determination information acquiring unit 212 and the access right information set in the browsing target file. A function of determining whether or not, and a function of outputting the determination result to the result acquisition means 119 of the client terminal 100.

[Access right information storage means]
FIG. 2 is a diagram showing an example of an access right information table stored in the access right information storage unit 230 according to the present embodiment. The access right information storage unit 230 may be constructed of a database including such a table associating information related to files stored in the client terminal 100 and access right information using the payout key as key information. The access right information storage unit 230 includes a payout key column 300a, a file name column 300b, an access right column 300c, a creation user column 300d, and an affiliation column 300e.

  In the payout key column 300a, as described above, a specific symbol is uniquely stored for the combination of the access right information and the file information of the file stored in the client terminal 100. The file name column 300b stores file names stored in the client terminal 100.

  The access right column 300c stores the access right for the file stored in the client terminal 100. As shown in the figure, the access right may store a user who can access the file stored in the client terminal 100, and stores the authority granted to the user accessing the file, for example, the viewing right and the deletion right. May be. The access right = “person” shown in the figure means that the user who created the file has the viewing right, and “11111” means that the user with the user ID “11111” has the viewing right. In the creation user column 300d, a creation user ID of a file stored in the client terminal 100 is stored. In the affiliation column 300e, an ID uniquely indicating the affiliation group of the creation user of the file stored in the creation user column 300d is stored.

  The access control unit 110 provided in the client terminal 100 is configured to operate in the background of processing performed in response to a user instruction, and can be provided by agent software. As a result, the user can easily manage access to the file used by the user with the same operation as before.

  The file storage means 130 and the access right information storage means 230 are not limited to a database (DB) on a hard disk, but are external storage such as a nonvolatile memory such as a USB memory or an SD card, an optical disk, a magnetic tape cartridge, a flexible disk, etc. It may be a device. The hardware configurations of the client terminal 100 and the access management server 200 will be described later.

[File save processing]
FIG. 3 is a flowchart of the file saving process according to the present embodiment. In this figure, processing on the client terminal 100 is indicated by a solid line, and processing on the access management server 200 is indicated by a broken line. When the user of the client terminal 100 inputs an operation for saving a file to the client terminal 100 using an input unit (not shown) such as a keyboard or a mouse, the operation receiving unit 111 receives the input and starts processing.

  S110: The file information acquisition unit 112 acquires file information related to the save target file. Note that step S110 may be performed after step S120, which will be described later, but if the file information acquired by the file information acquisition unit 112 is used in step S120, it must be performed first.

  S120: The access right information setting unit 113 sets access right information for the file to be saved. The access right information may be arbitrarily set by the user, or may be automatically set by the access right information setting unit 113. As a case where the user arbitrarily sets, for example, the client terminal 100 has a function of providing a window for setting the access right information, and the access right information input means 113 receives the access right information input to the window by the user. Is obtained and set for the file to be saved. In addition, when the access right information setting unit 113 automatically sets, for example, several types of access right information are prepared in advance in the client terminal 100, and these are set according to the file information acquired in step S110. May be selected by the access right information setting means 113 and automatically set for the file to be saved.

S130: The access right information transmitting unit 114 transmits to the access management server 200 the file information related to the storage target file acquired in step S110 and the access right information for the storage target file set in step S120.
S140: The payout key creation unit 211 receives the file information of the save target file and the access right information for the save target file transmitted to the access management server 200 in step S130, and creates a payout key for them. The created payout key is stored in the access right information storage unit in association with the combination of the file information of the save target file and the access right information for the save target file.

S150: The payout key acquisition means 115 acquires the payout key created by the payout key creation means 211 of the access management server 200.
S160: The payout key adding means 116 adds the payout key acquired in step S150 to the attribute information of the save target file, and saves the save target file with the payout key added to the attribute information in the file storage means 130.

  As described above, the file stored in the file storage unit 130 and the access right managed by the access management server 200 by the payout key added to the attribute information of the file stored in the file storage unit 130. Information can be associated. Thereby, even when the file is exchanged and stored in another client terminal without creating a new file, the file can take over the access right information.

[File browsing process]
FIG. 4 is a flowchart of the file browsing process according to the present embodiment. Also in this figure, processing on the client terminal 100 is indicated by a solid line, and processing on the access management server 200 is indicated by a broken line. When the user of the client terminal 100 inputs an operation for browsing a file to the client terminal 100 using an input unit (not shown) such as a keyboard or a mouse, the operation reception unit 111 receives the input and starts processing.

S210: The file information acquisition unit 112 acquires a payout key set in the file attribute information.
S220: The user information acquisition unit 117 acquires user information of the client terminal 100.
S230: The determination information transmission unit 118 transmits the payout key acquired in step S210 and the user information acquired in step S220 to the access management server 200 as determination information.

S240: The determination information acquisition unit 212 of the access management server 200 acquires determination information including the payout key and user information transmitted from the client terminal 100 in step S230. Further, the determination information acquisition unit 212 acquires access right information corresponding to the acquired payout key from the access right information storage unit 230.
S250: The determination unit 213 of the access management server 200 determines whether or not the user of the client terminal 100 can browse the file to be browsed based on the user information acquired in step S240 and the access right information corresponding to the payout key. Make a decision.

  For example, the case where the user of the client terminal 100 browses the browsing target file “XX.txt” in which the payout key is added to the attribute information will be described. Assume that the access right information is set as shown in FIG. Further, it is assumed that user ID = 123456 and payout key = Dsfdsfsfa are received as determination information from the determination information transmission unit 118 as user information of the client terminal 100. Since the access right of the access right information acquired based on the payout key is the principal, the user ID stored in the created user column 300d is compared with the user ID of the determination information to determine whether they match. To do. Since the user ID stored in the created user column 300d is 123456 and matches with the user ID of the determination information = 123456, it is determined that the user of the client terminal 100 can view the browsing target file.

S260: The determination unit 213 of the access management server 200 transmits the determination result to the result acquisition unit 119 of the client terminal 100.
S270: The display control unit 120 of the client terminal 100 controls the display result to the user of the client terminal 100 based on the determination result acquired by the result acquisition unit 119 in step S260. If the user of the client terminal 100 can browse the file to be browsed, the process proceeds to step S280, and if not, the process proceeds to step S290.

S280: The display control unit 120 opens the browsing target file and displays the contents of the browsing target file on a display or the like which is an output unit.
S290: The display control unit 120 displays a message indicating that the browsing target file cannot be browsed on a display or the like as an output unit.

[Hardware configuration of client terminal and access management server]
FIG. 5 is a diagram illustrating a hardware configuration of the client terminal 100 and the access management server 200 according to the present embodiment. An apparatus in which the present invention is implemented may be a standard one, and an example of the configuration is shown below. The general configuration of the client terminal 100 and the access management server 200 as an information processing apparatus 1000 typified by a computer will be described.

  The information processing apparatus 1000 includes a CPU (Central Processing Unit) 1310 (a plurality of CPUs such as a CPU 1320 may be added in a multiprocessor configuration), a bus line 1200, a communication I / F (I / F: Interface) 1330, main memory 1340, BIOS (Basic Input Output System) 1350, display device 1360, I / O controller 1370, input device 1380 such as keyboard and mouse, hard disk 1390, optical disk drive 1400, and semiconductor memory 1420 Is provided. The hard disk 1390, the optical disk drive 1400, and the semiconductor memory 1420 are collectively referred to as a storage device 1430.

  The control unit 1300 is a part that controls the information processing apparatus 1000 in an integrated manner. By appropriately reading and executing various programs stored in a hard disk 1390 (described later), the control unit 1300 cooperates with the hardware described above. Various functions according to the present invention are realized.

  The communication I / F 1330 is a network adapter when the information processing apparatus 1000 transmits / receives information to / from a mail server via a network. The communication I / F 1330 may include a modem, a cable modem, and an Ethernet (registered trademark) adapter.

  The BIOS 1350 records a boot program executed by the CPU 1310 when the information processing apparatus 1000 is activated, a program depending on the hardware of the information processing apparatus 1000, and the like.

  Display device 1360 includes a display device such as a cathode ray tube display device (CRT) or a liquid crystal display device (LCD).

  A storage device 1430 such as a hard disk 1390, an optical disk drive 1400, and a semiconductor memory 1420 can be connected to the I / O controller 1370.

  The input device 1380 accepts input by the user of the information processing apparatus 1000.

  The hard disk 1390 stores various programs for causing the hardware to function as the information processing apparatus 1000, programs for executing the functions of the present invention, and tables and records to be described later. Note that the information processing apparatus 1000 can also use a hard disk (not shown) separately provided as an external storage device.

  As the optical disk drive 1400, for example, a DVD-ROM drive, a CD-ROM drive, a DVD-RAM drive, or a CD-RAM drive can be used. In this case, the optical disk 1410 corresponding to each drive is used. A program or data may be read from the optical disk 1410 by the optical disk drive 1400 and provided to the main memory 1340 or the hard disk 1390 via the I / O controller 1370.

  Note that the computer referred to in the present invention includes one or a plurality of information processing apparatuses 1000 including a storage device 1430, a control unit 1300, and the like. Each unit of the client terminal 100 is realized by a computer program being executed by the control unit 1300. Further, the file storage unit 130 and the access right information storage unit 230 are mainly mounted on the hard disk 1390, but other storage devices may be used as described above.

It is a figure which shows the whole structure and functional structure of the separate file access management system 10 which concern on one Embodiment of this invention. It is a figure which shows an example of the access right information table which concerns on this embodiment. It is a flowchart of the file preservation | save process which concerns on this embodiment. It is a flowchart of the file browsing process which concerns on this embodiment. It is a figure which shows the hardware constitutions of the client terminal 100 which concerns on this embodiment, and the access management server 200.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Individual file access management system 100 Client terminal 110 Access control means 112 File information acquisition means 113 Access right information setting means 114 Access right information transmission means 115 Delivery key acquisition means 116 Delivery key addition means 117 User information acquisition means 118 Determination information transmission means 119 Result acquisition means 120 Display control means 200 Access management server 211 Delivery key creation means 212 Determination information acquisition means 213 Determination means 230 Access right information storage means

Claims (3)

An individual file access management system in which a client terminal and an access management server for managing access right information for each of a plurality of electronic files created in the file storage means of the client terminal by a user of the client terminal are connected via a network There,
A payout key creating means for creating a unique payout key for the combination of file information and access right information of each of the plurality of electronic files received by the access management server from the client terminal;
Access right information storage means for storing a combination of the file information and the access right information in association with a payout key;
With
The client terminal is
Of the plurality of electronic files, an access right information setting unit that sets access right information for an electronic file that the user of the client terminal has instructed to store in the file storage unit of the client terminal ;
File information acquisition means for acquiring file information of the electronic file for which the storage instruction has been issued from attribute information of the electronic file ;
Access right information transmitting means for transmitting a combination of the file information acquired by the file information acquiring means and the access right information set by the access right information setting means to an access management server;
A payout key acquisition means for acquiring a payout key created in the access management server from the access management server;
By adding the payout key acquired by the payout key acquisition means to the attribute information of the electronic file , the payout key is added to the attribute information of the electronic file without creating a new file. A pay key addition means for creating a file;
The individual file access management system, wherein the access right information setting means of the client terminal sets access right information for the electronic file in accordance with the file information of the electronic file for which the save instruction has been issued. The access management server is
Determination information acquisition means for receiving a payout key acquired from the electronic file with the payout key and user information of the client terminal from the client terminal, and acquiring access right information corresponding to the payout key from an access right information storage means When,
Based on the user information of the client terminal received together with the payout key from the client terminal and the access right information acquired by the determination information acquisition means, the user of the client terminal can access the electronic file. A determination means for determining availability;
Further comprising
The client terminal is
User information acquisition means for acquiring user information of the client terminal;
A payout key obtained from the payout keyed electronic file by the file information acquisition means, and judgment information transmitting means for transmitting the user information acquired by the user information acquiring unit to the access management server as the determination information,
A result acquisition unit for acquiring a determination result by the determination unit;
Control means for controlling access to the electronic file based on the result obtained by the result obtaining means;
The individual file access management system according to claim 1. The individual file access management system according to claim 1 or 2, wherein each means included in the individual file access management system is provided by agent software.

Images