JP5377616B2 - Information distribution system and its access control method - Google Patents

Description

  The present invention relates to an information distribution system for distributing an electronic file such as an official document among a plurality of users via a communication network and an access control method thereof.

  At the present time when ICT (Information and Communications Technology) is widely spread, personal information of users is stored on servers individually operated by a plurality of management entities. That is, user personal information is distributed and managed on a plurality of servers. For example, medical data such as medical treatment results and test results of individuals managed in a hospital correspond to this. In addition, account data and application data when using the service in the web service correspond to this. At present, the function separation between applications and data management is progressing, and efforts are being made to freely distribute data in which one application is distributed and managed.

  In an effort to freely distribute data that is distributed and managed (hereinafter referred to as distributed management data distribution service), it is an important problem that data access unintended by the user is performed. If data that has been managed individually until now is managed only by the management entity, there is no risk of data access unintended by the user other than being physically acquired. For this reason, the data access mechanism is always equipped with a function for controlling access to data.

  However, this access control function is an operation that depends on the exchange of control data between devices that distribute data, that is, the request / response process flow. For this reason, depending on the construction method of a system for distributing data, there are advantages, but problems may occur.

  For example, assuming that the user accesses the data managed by the service server via the network from his / her client terminal, the flow of processing between the devices at this time is as follows: A personal computer (hereinafter abbreviated as “PC”) sends a request “who accesses what data and how”, and the data server that receives the request, that is, the data providing PC, returns the corresponding result as a response. A reply is made to the data requesting PC. In performing a series of processing by this request / response (hereinafter referred to as information distribution), it is necessary for the data requesting PC and the data providing PC to mutually interpret the contents of the request / response.

  For this purpose, for example, assuming that data managed by a certain data providing side PC1 is acquired from the data requesting side PC1, a user who is assigned a common identifier in both PCs for the portion corresponding to “who” In addition to the ID, the part corresponding to “to which data” is the table name managed in the database of the data providing side PC 1, and for “how to access”, an action such as [Register / View / Delete / Update] Must be specified as a request in the order of "who", "what data", and "how to access".

  In this request / response, the order of the items “who”, “what data” and “how to access” is called the request / response grammar here. Various specification descriptions such as [view], [refer], and [get] are called terms.

  If the data requesting PC and the data providing PC have one-to-one information distribution, the request and response can be mutually interpreted by determining the grammar and terms between the two. However, in the topology in which the data requesting PC and the data providing PC distribute one-to-many, many-to-one, and many-to-many information, the methods for mutual interpretation of requests and responses can be broadly divided. Two methods are adopted.

  In the first method, on the one-to-one extension, the grammar and terminology of the request / response of the data providing side PC to which information is distributed differ, and the data requesting PC has the same number of requests / requests as the number of data providing side PCs. This is a method for managing response grammar and terminology individually. This method is hereinafter referred to as an individual management method (see, for example, Patent Document 1 or Patent Document 2).

  This method has an advantage that when a data providing PC changes a request / response grammar or terminology when operating an information distribution service, it does not affect information distribution unrelated to the data providing PC. . On the other hand, for the data requesting PC, the request / response grammar and terminology of all the data providing PCs to which information is distributed must be managed, which complicates the inquiry logic of the data requesting PC. The problem occurs.

  The second method is a method for centrally managing or interpreting the grammar and terminology of all requests and responses of the target PC for which information is to be distributed on another PC. This method is hereinafter referred to as a centralized management method. In this method, by interpreting the grammar and terms of the request / response on the central management PC, all data requesting PCs under the central management PC can distribute information without being aware of the grammar and terms. With advantages. On the other hand, since the grammar and terminology of request / response are all related to the data requesting PC, it is necessary to update to the central management server that is a shared asset in order to reflect it as information distribution. And the terminology cannot be changed easily. In addition, since the grammar and terms related to the entire information distribution are managed by the central management PC, there is a problem that the load is concentrated on the central management PC when information is distributed.

JP 2011-100361 A JP 2011-100362 A

  When the user information is distributed to a plurality of data providing side PCs, the access control function performed by the data providing side PC to protect the user data from unintended access is performed in the middle of the information distribution. This access control function is a process for determining whether the data providing PC can return a response to a request from the data requesting PC such as “who accesses what data” (hereinafter referred to as access). Called control processing). The conditional statement for access control determination set by the user necessary for this processing depends on the grammar and terminology of the request / response. For this reason, the method for realizing the access control function performed by the user in the middle of the information distribution is affected by the advantages and problems, and the following advantages and problems are newly generated.

(1) Distributed management method Advantage: Conditional statements for determining access control to data are managed for each data provider PC holding the data. In addition, the access control process performs access control determination in the data providing PC together with the data request from the data requesting PC, so that the number of communications during information distribution is reduced. For this reason, the influence on the processing speed of information distribution is small. Further, there is no influence on the information distribution between the data requesting PC and the data providing PC different from those described above.
Problem: On the other hand, the user must individually create a conditional statement for access control determination on a plurality of providing PCs in which his / her data is managed.

(2) Centralized management method Advantages: By managing conditional statements for determining access control to the data on the centralized management PC, the user can determine access control for his / her own data in a plurality of data providing side PCs. Can be managed centrally without considering the grammar and terminology of request and response.
Problem: On the other hand, since the access control process is performed via the centralized management PC, the number of communication increases and the influence on the processing speed of information distribution increases. Further, since all access control processes are concentrated on the central management PC, there is a possibility that the entire information distribution will be affected by the concentration of the load.

That is, if the central management PC is made to hold the access control settings and execute the access control process for the purpose of improving the convenience of the user access control settings, the load is concentrated on the central management PC, and the processing speed of information distribution Incurs operational efficiency for operators.
The present invention has been made paying attention to the above circumstances, and its purpose is to deal with the above-mentioned trade-off problem, without compromising the operability of the user's access control setting, and the processing speed and operational efficiency of information distribution. Is to provide an information distribution system and an access control method thereof.

In order to achieve the above object, one aspect of the present invention includes a plurality of data providing apparatuses that store data to be provided, a data requesting apparatus that generates an access request for the stored data, and a plurality of the plurality of data providing apparatuses. Access control information necessary for access control for data connected to the data providing side device and the data requesting side device via the network and stored in the plurality of data providing side devices is stored in the access control information. In an information distribution system comprising a centralized management device having an access control means for executing access control based on at least one of the data requesting device and the data providing device, the following processing is executed: Is.
That is, access control information describing conditions necessary for access control for data stored in the own apparatus is stored. Then, when the access request is generated in the data requesting device, information indicating the content of the access request is acquired, and the information indicating the content of the acquired access request is stored in the stored access control information. It is checked whether or not the access control condition is satisfied by comparing with the described condition. As a result of the determination, if the access control condition is satisfied, access control for the data to be provided is automatically performed based on the information indicating the content of the acquired access request and the stored access control information. Run in the device. On the other hand, when the access control condition is not satisfied, the access control is distributed to the central management apparatus and the access control means of the central management apparatus executes the access control.

  Therefore, since access control information to data is basically managed collectively by the central management device, the user creates and sets access control information individually in a plurality of providing side devices that manage his / her data. This eliminates the need for setting access control information, prevents setting errors, and reduces the user's workload. That is, the advantage of the centralized management method can be enjoyed as it is.

  In addition, when only the access control information related to the data stored in the data requesting device or data providing device is set in the data requesting device, the access request distribution determination is performed based on this information, and the conditions are met In this case, access control is executed in the data requesting device or the data providing device. For this reason, compared with the case where all access control is unconditionally executed by the central management apparatus, communication traffic between the central management apparatus and the data requesting side apparatus or the data providing side apparatus and the processing load of the central management apparatus are reduced. This makes it possible to improve the response to an access request.

One aspect of the present invention is characterized by comprising the following aspects.
In the first aspect, at least one of the data requesting device and the data providing device includes information indicating the contents of the acquired access request including all information elements necessary for access control in the own device. If the necessary information element is determined to be insufficient, a process is further executed for inquiring of the centralized management device and reacquiring the corresponding access control information. It is what you do.

  In this way, it is possible to prevent the access control distribution determination from being performed in a state where the content of the access request does not include all the necessary information, and thereby the access control is centrally managed due to a lack of necessary information. Therefore, the number of times of access control executed by the central management apparatus can be reduced, and as a result, the processing load of the central management apparatus can be further reduced.

In the second aspect, the shortage determination process and the reacquisition process are repeatedly executed up to a preset number of times until all the information elements necessary for access control in the device can be acquired. is there.
In this way, when the access control information managed by the centralized management apparatus is insufficient, the problem that the access control information reacquisition process is repeated semipermanently is prevented.

  That is, according to the present invention, it is possible to provide an information distribution system and an access control method thereof that improve the processing speed and operational efficiency of information distribution without impairing the operability of user access control settings.

The block diagram which shows the function structure of the information distribution system which concerns on one Embodiment of this invention. The figure which shows the process sequence and processing content of the access control process distribution function part of data provision side PC shown in FIG. The figure which shows the example of expression of the process distribution setting information used for the access control process distribution process shown in FIG. The sequence diagram which shows the flow of control data, such as a request response by the access control method which concerns on one Embodiment of this invention. The sequence diagram which shows the flow of control data, such as a request and a response by the conventional centralized management system.

Embodiments according to the present invention will be described below with reference to the drawings.
[One Embodiment]
(Constitution)
FIG. 1 is a block diagram showing a functional configuration of an information distribution system according to an embodiment of the present invention.
This information distribution system comprises a plurality of data requesting personal computers (hereinafter abbreviated as PCs) 1, a plurality of data providing PCs 2, and at least one central management PC 3, and a communication network between these PCs. 4 for communication of information distribution.

  The communication network 4 is a public telephone network, optical fiber, a cable communication network such as CATV (Cable Television) or a wired LAN (Local Area Network), a mobile phone network, a hot spot (registered trademark), and WiMAX (registered trademark). And a wireless communication network such as a wireless LAN.

  The data requesting PC 1 is composed of, for example, a client terminal or a server used by a user, and functions as a premise of the present invention include an ID linkage control function unit 11, an information distribution control function unit 12, an access control function unit 13, An information distribution application execution unit 15, an ID linkage control data storage unit 16, an information distribution control data storage unit 17, and an access control data storage unit 18 are provided.

  The data providing side PC2 is composed of, for example, a service server operated by a service provider, and functions as a premise of the present invention are the ID linkage control function unit 21, the information distribution control function unit 22, and the data requesting side PC1, as described above. An access control function unit 23, an information distribution application execution unit 25, an ID linkage control data storage unit 26, an information distribution control data storage unit 27, an access control data storage unit 28, and an information distribution data storage unit 29 I have.

  The central management PC 3 is composed of a management server operated by a telecommunications carrier or the like, and functions as a premise of the present invention are the ID linkage control function unit 31 and the information, similar to the data requesting side PC 1 and the data providing side PC 2. A distribution control function unit 32, an access control function unit 33, an information distribution application execution unit 35, an ID linkage control data storage unit 36, an information distribution control data storage unit 37, and an access control data storage unit 38 are provided. Yes.

  The ID linkage control function units 11, 21, 31 have a function of generating “who”, which is an information distribution request / response item, in accordance with grammar and terms. The ID linkage control data storage units 16, 26, and 36 are used for storing ID linkage control data that is the basis of data used in the ID linkage control function units 11, 21, 31, respectively. The ID linkage control data is uniquely managed in each of the data requesting PC 1, the data providing PC 2, and the central management PC 3.

  The information distribution control function units 12, 22, and 32 have a function of generating “what data” and “how to access”, which are information distribution request / response items, according to grammar and terms. The information distribution control data storage units 17, 27, and 37 are used for storing information distribution control data that is the basis of data used in the information distribution control function units 12, 22, and 32, respectively. Are also uniquely managed in the data requesting PC 1, the data providing PC 2, and the central management PC 3.

  The access control function units 13, 23, and 33 perform access control processing, and establish or reject information distribution between the data requesting side PC1 and the data providing side PC2. The access control data storage units 18, 28, and 38 are used for the access control function units 13, 23, and 33 to store access control data necessary for access control, respectively.

  Information distribution application execution units 15, 25, and 35 are functions for setting contents of requests and responses according to user operations on the data requesting PC 1, data providing PC 2, and centralized management PC 3, and functions related to access control, respectively. Execute the process to change the settings. Data to be distributed is stored in the information distribution data storage unit 29 of the data providing side PC 2.

  By the way, the data requesting side PC1 and the data providing side PC2 are provided with access control function distribution function units 13 and 23 as new functions necessary for carrying out the present invention. The access control function distribution function units 13 and 23 have an access information acquisition function, a process distribution setting information acquisition function, and a process distribution determination function.

The access information acquisition function has the following processing functions.
(1) Processing for acquiring the request content generated by the information distribution control function unit 12 from the data requesting PC 1. The request is created by an input operation of the user of the data requesting PC 1.
(2) When the information necessary for distribution determination is insufficient in the processing distribution determination function described later and a request for acquiring necessary information is received from the processing distribution determination function, the ID linkage control function unit 31 or information of the central management PC 3 Processing for making an inquiry to the distribution control function unit 32 and reacquiring the necessary information.
(3) When an acquisition request is transmitted by the above-mentioned access information reacquisition process, when an acquisition request is received again from the process distribution determination function, the access control process distribution process is canceled and the centralized management PC 3 is accessed. Processing for calling the control function unit 33.

  In the processing distribution setting information acquisition function, whether the data requesting PC 1 or the data providing PC 2 sets the PC that performs the access control processing to the central management PC 3 or to its own data requesting PC 1 or the data providing PC 2. A process of acquiring a conditional statement for sorting used to determine the This conditional statement is set in advance by the operation of the operation manager and stored in the PC.

The processing distribution determination function has the following processing functions.
(1) The request content generated by the information distribution control function unit 12 of the data requesting PC 1 is compared with the distribution condition acquired by the process distribution setting information acquisition function. If it is determined that the request content matches the distribution condition, the access control function units 14 and 24 of the data requesting side PC 1 or the data providing side PC 2 are called and the access control function units 14 and 24 are called. Request access control processing. On the other hand, when it is determined that the request content does not match the distribution condition, the access control function unit 33 of the central management PC 3 is called and the access control function unit 33 is requested to perform access control processing.
(2) When the necessary information acquired by the access information acquisition function does not have all the information necessary for the process allocation determination process, a process for transmitting a request for acquiring the necessary information again to the access information acquisition function .

On the other hand, the central management PC 3 has an access control setting application execution unit 34 as a new function necessary for carrying out the present invention. The access control setting application execution unit 34 has an access setting condition statement reflection function.
When the user inputs and sets an access control statement using the access control setting application execution unit 34 of the centralized management PC 3, the access control condition statement reflection function analyzes the contents of the access control statement, A process of writing the conditional statement in the access control data storage unit 28 of the data providing side PC 2 to be stored is executed.

(Operation)
Next, an access control operation by the information distribution system configured as described above will be described.
As an operating organization or person of the information distribution system, there are an operator of the central management PC 3, an operator of the data requesting PC 1 or the data providing PC 2, and a user.
The operator of the central management PC 3 belongs to the management organization of the central management PC and has the right to operate the central management PC 3. The operator of the data requesting PC 1 or the data providing PC 2 belongs to the operating organization of the own PC 1 or 2 and has the operating right of the own PC 1 or 2 and the data operating right of the own organization managed by the central management PC 3. The user belongs to a plurality of data requesting PC1 or data providing PC2 operating organizations, and has the authority to operate information distribution requests and responses, and information distribution applications that process access control functions and setting changes. However, the operator of the central management PC 3 may also serve as the operator of the data requesting PC 1 or the data providing PC 2.

(1) Operation start preparation and initial setting First, the central management PC 3 links user data managed by a plurality of data requesting side PC 1 or data providing side PC 2 operating organizations to start the information distribution service. The processing and the processing for performing maintenance on the setting of the request / response and access control for information distribution are performed as follows.

  That is, when the request / response for the information distribution target data is sent from the data requesting PC 1 or the data providing PC 2, the central management PC 3 receives the request / response under the control of the information distribution control function unit 32. It accumulates in the distribution control data storage unit 37.

  At that time, the use and permission of the access control data stored in the access control processing function unit 33 and the access control data storage unit 38 are given in advance to the operator and user of the data requesting PC 1 or the data providing PC 2. A program and access control data for executing the processes of the access control processing function units 14 and 24 and the access control processing distribution function units 13 and 23 are provided. The operator or user of the data requesting side PC1 or the data providing side PC2 installs the access control processing function units 14 and 24 and the access control processing distribution function units 13 and 23 provided on the PCs 1 and 2 and accesses them. The control data is stored in the access control data storage units 18 and 28.

  In addition, the installation of the access control processing function units 14 and 24 and the access control processing distribution function units 13 and 23 and the storage processing of the access control data are performed in advance by sending a program and control data to the data requesting side PC1 or the data providing side PC2. Prepared as an additional option, the activation key is provided from the operator of the central management PC 3 to the operator or user of the data requesting PC 1 or the data providing PC 2 at the stage of preparing to start the operation of the information distribution service. Or you may make it install by a user inputting the said key on a web. Further, the program and control data of the corresponding function may be recorded on the medium as an optional package, and the program and control data may be additionally installed when necessary.

In addition, setting of process distribution setting information used for access control process distribution determination is performed as follows, for example.
That is, when the operator of the data providing side PC 2 processes the access control processing for the information distribution data managed by the information distribution data storage unit 29 of the own PC by the own PC, the installed access control is performed. A distribution condition is described in the process distribution setting information acquired by the process distribution setting information acquisition function in the process distribution processing program. At this time, the process distribution setting information may be held as a database or as a setting file.

  FIG. 3 shows a case where the process distribution setting information is held as a setting file. In the figure, the part expressed between <ActorInfo> and </ ActorInfo> is the condition related to "who", and the part expressed between <ServiceType> and </ ServiceType> is ". The definition of “ActorInfo” and “ServiceType” is preferably the same as the information that can be acquired by the access information acquisition block, but may be different if it can be determined by the process distribution determination process.

  Further, although not illustrated here, a condition “what you want to do” may be set. It is recommended that the distribution conditions be described as OR conditions in <List> </ List>. As for the granularity of the conditions, as described in the conditions relating to “who”, the “affiliation” of the user, the “authentication method ID” managed by the information distribution infrastructure, and the “PCID” indicating which PC the request is from For example, the AND condition may be set with fine granularity. In the case where the centralized management PC 3 is used, after the installation of the access control processing distribution function unit, it may be left as it is without any setting change.

  Note that the user creates a conditional statement using the access control setting application execution unit 34 of the central management PC 3 even when the user's own data is distributed and managed in a plurality of data providing PCs. be able to. When this conditional statement creation operation is performed, the access control setting application execution unit 34 of the central management PC 3 searches for the PC that executes the access control process, and is stored in the access control data storage units 18 and 28 of the corresponding PC. The created condition part is written in the access control data.

(2) Distribution of access control processing Using the input screen displayed by the data requesting PC 1 and the information distribution application execution units 15, 25, and 35, the operator or user uses the data distribution side PC 2 for information distribution. In order to perform data operations such as registration, change, or deletion of data stored in the data storage unit 29, information for creating a request, for example, “who”, “to which data”, “how do you want to” Suppose you enter information to represent. Note that the input of information necessary for this request is performed using an input screen displayed by the information distribution application execution unit 15, 25, 35.

  When the input operation is performed, the data requesting PC 1, the data providing PC 2, or the central management PC 3 obtains the input necessary information based on the control of the information distribution application execution units 15, 25, and 35. A request is created at Then, the information distribution control data representing the created request is transferred by the information distribution control function units 13, 23, and 33 to a data operation destination PC, for example, the data providing side PC2.

When the information distribution control function unit 22 receives the request, the data providing side PC 2 executes the following access control distribution process under the control of the access control process distribution function unit 23. FIG. 2 is a flowchart showing the processing procedure and processing contents.
That is, when the request is received, the access control processing distribution function unit 23 first, in step S1, obtains necessary information from the received request, that is, information indicating “who”, “to which data”, “how to do”. get. Subsequently, in step S2, processing allocation setting information set in advance under the authority of the operator or user of the data requesting PC 1 or the data providing PC 2 is acquired. Next, in step S3, it is determined whether or not the necessary information acquired in step S1 includes all information necessary for the process distribution determination process. And when it determines with the information required for a process being insufficient, the re-acquisition of required information is requested | required with respect to said step S1.

  When the re-acquisition of the necessary information is requested, step S1 makes an inquiry to the ID cooperation control function unit 11 or the information distribution control function unit 12 of the data requesting PC 1 to re-acquire the necessary information. In step S3, it is determined again whether or not the re-acquired necessary information includes all information necessary for the process distribution determination process. And when it is still insufficient, the above-mentioned step S1 is requested to reacquire necessary information. Thereafter, the necessary information inquiry process is repeatedly executed a predetermined number of times until necessary information is obtained. As the method of setting the number of executions of the inquiry process, it may be collected and set from the central management PC 3 or the like, a database may be constructed, or it may be stored in advance as a setting file. Good.

  It is assumed that necessary information has been acquired in step S3. Then, in step S3, the access control process distribution function unit 23 compares the acquired request content with the distribution condition acquired in step S2. Then, it is determined whether or not the request content matches the distribution condition. As a result of this determination, if it matches, the access control function unit 24 of the own data providing PC 2 is called to request the access control function unit 24 for access control processing. Therefore, the access control function unit 24 of the data providing side PC 2 executes access control on the data stored in the information distribution data storage unit 29 in accordance with the contents of the request.

  On the other hand, if it is determined in step S3 that the request content does not conform to the distribution condition, the access control function unit 33 of the central management PC 3 is called to request the access control function unit 33 for access control processing. . Therefore, in this case, the access control function unit 33 of the central management PC 3 executes access control on the data stored in the information distribution data storage unit 29 according to the contents of the request.

  In addition, regarding the mechanism and configuration of the access control function units 14, 24, 33 and the access control data, if it is a mechanism for determining based on the contents of “who”, “to which data”, “what you want to do”, The contents of the process may be set in any manner including how many times the access control process is performed at what timing of information distribution. As for the information “who”, in the ID linkage control function units 11, 21, 31 and ID linkage control data constituting the information distribution platform of this embodiment, users and operators managed on the information distribution platform are individually specified. Any data structure can be used as long as it can be specified. Further, the information “to which data” may be specified as the only data existing on the information distribution base in the information distribution control function units 12, 22, 32 and the information distribution control data constituting the information distribution base. For example, the data structure does not matter.

  In addition, the information distribution infrastructure includes a centralized management PC 3 on the information distribution infrastructure in order to adopt a configuration that achieves both a distributed management type and a centralized management type, but requests and responses for specific information distribution are related to the request. The requesting PC 1 and the providing PC 2 may hold each other. When the access control process for this specific information distribution is performed, the mechanism may not be the same as that of the central management PC 3.

(Effect by embodiment)
As described above in detail, in this embodiment, the access control information for the data stored in the device is stored in the data requesting PC 1 and the data providing PC 2 and the access control function distribution function units 13 and 23 are provided. Newly prepared. Then, the access control function distribution function units 13 and 23 determine whether or not the access control condition is satisfied by comparing the content of the request with the condition described in the stored access control information. If the access control conditions are satisfied, the access control is executed in the data requesting PC 1 or the data providing PC 2, and if the access control conditions are not satisfied, the access control is distributed to the central management PC 3 and executed. I try to let them.

  Therefore, since access control information for data is basically managed collectively by the centralized management PC 3, the user individually creates access control information in the data requesting side PC1 and the data providing side PC2 in which his / her data is managed. This eliminates the time and effort required for setting access control information, prevents errors from occurring, and greatly reduces the user's workload. That is, it is possible to enjoy the advantages of the centralized management method as they are.

  In addition, only the access control information related to the data stored in the device is set in the data requesting PC 1 or the data providing PC 2, and the access request distribution determination is performed based on this information, and the conditions are met. The access control is executed in the data requesting PC 1 or the data providing PC 2. For this reason, communication traffic between the central management PC 3 and the data requesting side PC 1 or the data providing side PC 2 and the processing load on the central management PC 3 are reduced as compared with the case where all access control is unconditionally executed by the central management PC 3. This makes it possible to improve responsiveness to access requests.

  FIG. 4 shows a basic flow of control data such as request / response by the access control method according to this embodiment. Since access control is executed in the data providing side PC 2, the central management PC 3 and the data providing side are shown. Communication traffic with the PC 2 is reduced, and the processing load on the central management PC 3 is also reduced. Incidentally, according to the conventional centralized management method, for example, as shown in FIG. 5, an access control processing request is always sent from the data providing side PC2 to the centralized management PC3, and access control is executed by the centralized management PC3. Communication traffic between the central management PC 3 and the data providing side PC 2 increases, and the processing load on the central management PC 3 increases.

  Furthermore, according to this embodiment, when determining access allocation, it is determined whether the information indicating the content of the acquired access request includes or is missing all information elements necessary for access control in the own device. When it is determined that a necessary information element is insufficient, an inquiry is made to the central management PC 3 to reacquire the corresponding access control information. For this reason, it is possible to prevent the access control distribution determination from being performed in a state where the request content does not include all necessary information, whereby the access control is distributed to the centralized management PC 3 due to lack of necessary information. Opportunities are reduced, and the number of times of access control executed by the central management PC 3 can be reduced. As a result, the processing load on the central management PC 3 can be further reduced.

  In addition, the shortage determination process and the reacquisition process are repeatedly executed up to a preset number of times until all information elements necessary for access control within the own apparatus can be acquired. Therefore, when the access control information managed by the centralized management PC 3 is insufficient, it is possible to prevent a problem that the access control information reacquisition process is repeated semipermanently.

[Other Embodiments]
The present invention is not limited to the above embodiment. For example, the data requesting PC 1, the data providing PC 2, and the central management PC 3 may be configured by a server other than the PC, and other configurations and functions of the data requesting device, the data providing device, and the central management device. The configuration of the process distribution setting information can be variously modified and implemented without departing from the gist of the present invention.

  In the above embodiment, a system for distributing medical data has been described as an example. However, as data to be distributed, various data such as customer data, ordering data, sales data, etc. managed by manufacturers, trading companies, and financial institutions, Personnel data such as attendance and attendance data and student personal data managed by a school or prep school may be handled.

  In short, the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Further, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine suitably the component covering different embodiment.

  DESCRIPTION OF SYMBOLS 1 ... Data request side PC, 2 ... Data provision side PC, 3 ... Centralized management PC, 4 ... Network, 11, 21, 31 ... ID cooperation control function part, 12, 22, 32 ... Information distribution control function part, 13 , 23 ... Access control processing distribution function part, 14, 24, 33 ... Access control function part, 15, 25, 35 ... Information distribution application execution part, 16, 26, 36 ... ID linkage control data storage part, 17, 27 , 37 ... Information distribution control data storage unit, 18, 28, 38 ... Access control data storage unit, 29 ... Information distribution data storage unit, 34 ... Access control setting application execution unit.

Claims (6)

A plurality of data providing apparatuses that store data to be provided, a data requesting apparatus that generates an access request for the stored data, and the plurality of data providing apparatuses and the data requesting apparatus via a network Centralized management apparatus comprising access control means for holding access control information necessary for access control to data stored in the plurality of data providing side devices and executing access control based on the access control information In an information distribution system comprising:
At least one of the data requesting device and the data providing device is:
Means for storing access control information describing conditions necessary for access control to data stored by the own device;
Means for obtaining information representing the content of the access request when the access request is generated in the data requesting device;
Means for comparing information indicating the content of the acquired access request with a condition described in the stored access control information and determining whether the access control condition is satisfied;
When it is determined that the access control condition is satisfied, the access control for the data to be provided is performed in the local apparatus based on the information indicating the content of the acquired access request and the stored access control information. Means to perform in
Means for distributing access control to the centralized management apparatus and causing the access control means of the centralized management apparatus to execute access control when it is determined that the access control condition is not satisfied. Distribution system. At least one of the data requesting device and the data providing device is:
Shortage determination means for determining whether the information representing the content of the acquired access request includes all or shortage of information elements necessary for access control in the device itself;
The re-acquisition means for obtaining an access control information by making an inquiry to the central management apparatus when it is determined that the necessary information element is insufficient. 1. The information distribution system according to 1.   The deficiency determination unit and the reacquisition unit repeatedly execute the deficiency determination process and the reacquisition process up to a preset number of times until all the information elements necessary for access control in the device itself can be acquired. The information distribution system according to claim 2. A plurality of data providing apparatuses that store data to be provided, a data requesting apparatus that generates an access request for the stored data, and the plurality of data providing apparatuses and the data requesting apparatus via a network A centralized management device having access control means for holding access control information necessary for access control to data stored in the plurality of data providing side devices, and executing access control based on the access control information; An access control method executed in an information distribution system comprising:
A process in which at least one of the data requesting apparatus and the data providing apparatus stores in a storage means access control information in which conditions necessary for access control to data stored by the apparatus is stored;
A process in which at least one of the data requesting device and the data providing device acquires information representing the content of the access request when the access request is generated in the data requesting device;
At least one of the data requesting device and the data providing device checks the information indicating the content of the acquired access request with the condition described in the stored access control information, and satisfies the access control condition The process of determining whether or not
When at least one of the data requesting device and the data providing device is determined to satisfy the access control condition, information indicating the content of the acquired access request and the stored access control information On the basis of the process of executing access control for the data to be provided within the own device,
When at least one of the data requesting device and the data providing device is determined not to satisfy the access control condition, the access control is assigned to the central management device and the access control means of the central management device is accessed. An access control method comprising: a step of executing control. Whether at least one of the data requesting device and the data providing device includes or lacks the information indicating the content of the acquired access request including all information elements necessary for access control in the device itself A shortage determination process for determining
If it is determined that at least one of the data requesting device and the data providing device is lacking the necessary information elements, the data requesting device and the data providing device make an inquiry to the central management device to obtain the corresponding access control information. The access control method according to claim 4, further comprising a reacquisition process.   The deficiency determination process and the reacquisition process are repeatedly executed up to a preset number of times until the deficiency determination process and the reacquisition process are all acquired until all information elements necessary for access control in the device itself can be acquired. The access control method according to claim 5.

Images