JP5400654B2 - Email hold system - Google Patents

Description

  The present invention relates to an e-mail hold system that sends an e-mail after being held for a predetermined time.

In recent years, files storing trade secrets and personal information are transmitted as attachments to e-mails. As a result, there are frequent incidents of information leakage outside the organization, which has become a social problem.
Such information leakage often occurs due to a computer virus, but on the other hand, it often occurs due to an erroneous operation such that the sender of an e-mail incorrectly designates a destination or a file to be attached.
In order to prevent information leakage due to erroneous operations related to e-mail, an e-mail sent by a client PC (Personal Computer) or the like is received on the network, sent to the sender of the e-mail, and held for a predetermined time. A technique of transmitting to a transmission destination designated by a sender after a predetermined time has elapsed is known (Patent Document 1). According to this technique, by sending an e-mail to the sender of the e-mail, the sender can be given an opportunity to confirm the destination and the like again. In addition, if the sender of an email notices an error such as an error in the address within the time when the email is held, information leakage can be prevented by instructing to stop sending the email that is held. Can do.

JP 2005-277976 A

  However, depending on the technique disclosed in Patent Document 1, an e-mail is transmitted after the elapse of the holding time unless the sender himself / herself performs the erroneous operation. That is, the sender himself usually thinks that the destination is correct, and even if an electronic mail sent by himself / herself is transmitted, it is rare to objectively confirm the destination again. In addition, when an e-mail sender tries to leak information maliciously, the technology disclosed in Patent Document 1 cannot prevent information leakage.

  In view of the above situation, the present invention holds an e-mail for a predetermined time before transmission, and transmits the e-mail to the transmission destination that does not cause information leakage, such as in an organization, without holding the e-mail. An e-mail hold system that prevents information leakage due to misoperation or malicious intent is provided.

In order to solve the above problems, the present invention provides the following configurations.
An e-mail hold system in which an internal client is communicatively connected to a mail server via a mail hold server that can hold mail for a predetermined time,
The mail on hold server,
When an email is received from the internal client, an email envelope is added to the received email to add an email envelope in which the destination set in the email is converted to an actual destination and the sender is set. Means,
A mail hold propriety judging means for judging whether the destination is a destination to hold the mail based on the actual destination domain included in the mail envelope added by the mail envelope adding means;
If the destination is not the destination that should be held, the destination that is not the destination that should be held is deleted from the mail envelope, and only the destination that is not the destination that should be put on hold is sent as the mail destination. Non-holding destination transmission means to
When the transmission destination is a transmission destination to be held, a hold mail storage unit that stores a hold mail record in which a hold start time is added to a hold mail having a transmission destination to be held in a hold mail database;
When activated, a hold time elapsed determination means that sequentially refers to all the hold mail records stored in the hold mail database, and determines whether the hold mail record has passed a predetermined hold time;
If the predetermined hold time has elapsed, the transmission means after the time for transmitting the hold mail to the mail server,
A hold mail record deleting means for deleting the transmitted hold mail record from the hold mail database when the mail transmission processing by the transmission means is normally completed after the elapse of time;
Is provided.

Furthermore, the mail hold server
A deletion instruction determination means for determining whether the received mail is a deletion instruction mail requesting deletion of the held mail;
If the deletion instruction determination unit determines that the deletion instruction mail is a deletion instruction mail, the deletion instruction determination unit determines whether or not deletion is possible by checking the presence of the hold mail record specified in the hold mail database;
When the deletion possibility determination means determines that the designated hold mail record exists and can be deleted, the hold mail record is deleted from the hold mail database, and a delete notification mail is sent to the sender of the delete instruction mail. Delete execution means to
When it is determined that the designated pending mail record does not exist and cannot be deleted, a deletion failure notification means for transmitting a deletion failure mail can be provided at the transmission source of the deletion instruction mail.

Furthermore, the mail hold server is
A hold release instruction determination means for determining whether the received mail is a release instruction mail requesting release of the held mail;
If the hold release instruction determining means determines that the received mail is a release instruction mail, the hold release enable / disable determining means for checking the presence of the hold mail record specified in the hold mail database and determining whether the hold mail record can be released; ,
When the hold release possibility determination means determines that the specified hold mail record exists and can be released, the hold mail is sent to the mail server with the destination of the mail envelope of the hold mail record as the final destination. , A hold release mail sending means for deleting the hold mail record from the hold mail database;
When the hold release possibility determination means determines that the hold mail record specified in the hold mail database does not exist and cannot be released, the hold that sends the release failure mail to the sender of the mail envelope of the release instruction mail A release failure notification means.

The mail hold server
A browsing request processing means for searching all pending email records in the pending email database and outputting a list of pending emails when receiving an HTTP request that requests browsing of the pending emails from the internal client;
A list output result transmitting means for setting the output result output by the browsing request processing means in an HTTP response and transmitting the result to the internal client;
When an HTTP request for requesting deletion or release of hold mail is received from the internal client, the hold mail is deleted by deleting or releasing the hold target record from the hold mail record of the hold mail database. DB correction means,
The post-correction browsing processing means for searching the hold mail database and outputting a list of hold mail after the hold mail DB correction means deletes or deletes the hold and deletes,
A modified list output result transmission unit configured to set an output result by the modified browsing processing unit in an HTTP response and transmit the HTTP response to the internal client;
The internal client
A browsing request transmission means for transmitting the HTTP request for requesting browsing of the pending mail to the mail hold server;
A list output result display means for displaying the acquired suspended mail list when acquiring the suspended mail list as an HTTP response from the mail hold server;
A hold mail DB correction request transmission means for sending a hold mail deletion or hold release request to the mail hold server when a hold mail to be deleted or released from the hold mail list is designated;
When a list of suspended emails after deletion is performed by deleting or canceling the suspension is acquired from the email suspension server, a corrected list output result display means for displaying the acquired suspended email list can be provided.

The mail hold server
When a mail is received from the internal client and the destination of the received mail is a destination to be held, a hold time acquisition unit that acquires a preset hold time from a hold time database;
A hold mail record adding means for setting the hold time acquired by the hold time acquiring means and adding a hold mail record to the hold mail database;
When the holding time cannot be obtained from the holding time database, a holding time setting means for setting a predetermined value can be provided.

The mail hold server
A high mistransmission degree / additional hold time calculating means for calculating a high mistransmission degree indicating a high possibility of erroneous transmission from the received mail and calculating an additional hold time;
When the hold mail record is stored in the hold mail database, the hold time acquired from the hold time database and the additional hold time may be added to set an additional hold time adding means for setting the hold time.

The mail hold server
With reference to the destination of the mail envelope of the mail received from the internal client, if it is determined that the destination is a hold target destination, it is determined whether or not the destination is a destination to be approved. Approval request target decision means,
A destination deletion unit that deletes the destination from the mail envelope of the pending email when the approval request target determination unit determines that the request is an approval request;
A destination adding means for adding the destination to the destination of the mail waiting for approval stored in the approval request mail record of the approval request mail database;
If the approval request email record for the email has not been created, create an approval request email record corresponding to the email, assign a unique approval request email ID, set the current time as the approval request start time, After storing the mail body as an email waiting for approval, a destination replacement means for replacing the destination of the email waiting for approval with the destination,
When the approval request target determination unit determines that the request is an approval request target and there is a destination that needs to be approved by email, a notification email is sent to the internal client of the email transmission source to request an approval for the specified destination. An approval request execution notification email transmission means to perform,
When the approval request target determination unit determines that the request is an approval request target, refer to the record corresponding to the user ID of the user of the mail set in the approval request definition database in advance, and the system approver list and user-defined approver Approver list setting means for listing all the email addresses corresponding to the approver's user ID set in the list and setting the list in the approver list of the record corresponding to the approval request email ID in the approval request email database ,
If an approval authority agent list is defined in the record corresponding to the user ID of the user in the approval request definition database, all the email addresses corresponding to the user ID of the agent are also added to the approver list. Approval authority agent addition means,
An approval request mail sending means for sending an approval request mail with a unique approval request mail ID as a character string to the original sent mail to the mail address of the approver client set in the approver list, and ,
If the approval / rejection result reply is not made for a long time after the approval request is sent by the approval request mail sending means, an approval reminder mail that periodically sends a notification mail indicating that the approval has not been processed to the internal client A transmission means;
An approval / rejection result notification e-mail sending unit for sending a notification e-mail of approval / rejection result to the internal client of the original transmission source when an approval or rejection reply is made from the approver client; Can do.

The mail hold server
When receiving an approval or rejection reply email from the approver client, an audit log recording means for acquiring the approval / rejection result, the approver, the reception time, etc. as an audit log and recording it in an audit log database;
The title of the reply mail contains any approval request mail ID existing in the approval request mail database as a character string, and a predetermined keyword indicating approval or rejection is included. An approval / rejection reply recognition means for recognizing an approval / rejection reply email if both are satisfied,
The approval / rejection reply email is a reply email from a legitimate approver depending on whether the email address of the replyer is included in the approver list corresponding to the approval request email ID shown in the subject of the email. A replyer determination unit for determining whether or not
Approval right and wrong determination means for determining whether the reply is approved or rejected for the reply mail determined to be a reply mail from a legitimate approver by the replyer determination unit;
An approval waiting e-mail transmitting unit that transmits an approval waiting e-mail corresponding to the approval request e-mail ID to the external client when the approval right / no-y determining unit determines “approval”;
Approval request record deletion means for deleting a record corresponding to the approval request mail ID from the approval request mail database.

The mail hold server
Acquires the specific domain name, the specific keyword, and the attached file type from the mail envelope or the mail header, title / text, etc., and corresponds to the domain name, keyword, and attached file type set in the priority policy DB in advance. Means for determining the priority ID and priority policy of the record corresponding to the domain name, keyword, and attached file type,
When there are a plurality of the specific domain name, the specific keyword, and the specific attachment, a unit that determines the most important one as the priority ID and priority policy of the mail;
Means for determining an approver conforming to the determined priority policy definition as a priority approver;
Attendance confirmation means that obtains the office time, leaving time, logon status, schedule from the user terminal, and stores it in the presence status database;
Means for referring to the presence status database and determining whether a priority approval candidate is present;
If present, means to add a priority approver to the notification email,
Can further be provided.

  According to the present invention, an e-mail is held for a predetermined time before being sent, and sent to a destination that does not cause information leakage, such as within an organization, without being put on hold first. It is possible to provide an e-mail hold system that prevents information leakage due to.

  According to the invention that performs the deletion instruction determination, the deletion permission determination, the deletion execution, and the deletion failure notification, in addition to the above effects, it is possible to delete the suspended mail from the internal client side.

  According to the invention that performs hold release instruction determination, hold release enable / disable determination, hold release mail transmission, and hold release failure notification, in addition to the above effects, the internal mail can release the hold of the hold mail.

  Mail hold server performs browsing request processing, list output result transmission, pending mail DB correction, post-correction browsing processing, post-correction list output result transmission, internal client transmits browsing request, list output result display, pending mail DB correction request, According to the invention for displaying the list output result after correction, in addition to the above effects, the internal client can browse the list of pending emails and can delete or cancel the pending emails via the pending email list.

  According to the invention in which the mail hold server executes the process of obtaining the hold time, adding the hold mail record, and setting the hold time, in addition to the above effects, it becomes easy to set the hold time more finely.

  According to the invention in which the mail hold server executes the processing of calculating the high error transmission rate / additional hold time and adding the additional hold time, in addition to the above effects, the error send degree is calculated from the mail body of the received mail, and the error is transmitted. It can be set by adding an additional hold time based on the degree.

  Mail hold server determines approval request target decision, transmission destination deletion, transmission destination addition, transmission destination replacement, approval request execution notification email transmission, approver list setting, approval authority agent addition, approval request email transmission, approval reminder email transmission According to the invention for executing approval / rejection result notification e-mail transmission, in addition to the above effect, by providing a third party approval function for e-mail sent to the outside, erroneous transmission or malicious transmission to the outside party is achieved. , Can be more reliably prevented.

  According to the invention that executes audit log recording, recognition of approval / rejection reply, determination of whether or not to respond, approval right / fail determination, approval waiting e-mail transmission, approval request record deletion processing, in addition to the above effects, approval by a regular approver is made. Can be sent to external clients.

  According to the invention for executing the priority determination and presence confirmation processing, in addition to the above effect, when there are a plurality of approvers, it is possible to determine the priority and notify the approver's priority.

FIG. 1 is a system configuration diagram of an electronic mail holding system according to the first embodiment. FIG. 2 is a data configuration diagram of the pending mail DB in the first embodiment. FIG. 3 is a data configuration diagram of mail according to the first embodiment. FIG. 4 is a flowchart showing an operation example 1 of the mail hold determination unit in the first embodiment. FIG. 5 is a flowchart showing the operation of the pending mail transmission unit in the first embodiment. FIG. 6 is a data configuration diagram of the deletion instruction mail in the first embodiment. FIG. 7 is a flowchart showing an operation example 2 of the mail hold determination unit in the first embodiment. FIG. 8 is a data configuration diagram of a release instruction mail according to the first embodiment. FIG. 9 is a flowchart showing an operation example 3 of the mail hold determination unit in the first embodiment. FIG. 10 is a system configuration diagram of an electronic mail holding system according to the second embodiment. FIG. 11 is a flowchart showing the operation of the pending mail browsing unit in the second embodiment. FIG. 12 is a flowchart showing the operation of the pending mail search unit in the second embodiment. FIG. 13 is a flowchart showing the operation of the suspended mail deletion unit in the second embodiment. FIG. 14 is a display example of the pending mail list screen in the second embodiment. FIG. 15 is a system configuration diagram of an e-mail holding system according to the third embodiment. FIG. 16 is a data configuration diagram of the pending mail DB in the third embodiment. FIG. 17 is a data configuration diagram of the holding time DB in the third embodiment. FIG. 18 is a flowchart illustrating a first example of the operation of the mail hold determination unit according to the third embodiment. FIG. 19 is a flowchart showing a second example of the operation of the mail hold determination unit in the third embodiment. FIG. 20 is a system configuration diagram of an e-mail holding system according to the fourth embodiment. FIG. 21 is a data configuration diagram of the approval request mail DB in the fourth embodiment. FIG. 22 is a data configuration diagram of the approval request definition DB in the fourth embodiment. FIG. 23 is a data configuration diagram of an approval policy definition DB in the fourth embodiment. FIG. 24 is a sequence diagram illustrating the flow of the third-party approval function for outgoing mail in the fourth embodiment. FIG. 25 is a flowchart of mail hold / approval necessity determination processing in the fourth embodiment. FIG. 26 is a flowchart of mail approval / rejection result processing in the fourth embodiment. FIG. 27 is a data configuration diagram of an approval request definition DB in the fifth embodiment. FIG. 28 is a sequence diagram illustrating the flow of the third-party approval function for outgoing mail in the fifth embodiment. FIG. 29 is a flowchart showing the operation of the pending mail search means in the fifth embodiment. FIG. 30 is a flowchart showing the operation of the pending mail deletion unit in the fifth embodiment. FIG. 31 is a system configuration diagram of an electronic mail holding system according to the sixth embodiment. FIG. 32 is a data configuration diagram of the priority policy DB according to the sixth embodiment. FIG. 33 is a data configuration diagram of a presence status DB according to the sixth embodiment. FIG. 34 is a sequence diagram illustrating the flow of the third-party approval function in the sixth embodiment. FIG. 35 is a flowchart illustrating priority determination processing according to the sixth embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
The server and the client are computers equipped with a CPU, and each of the means is a means realized by reading and executing a computer program required by the CPU. It is the same.

FIG. 1 is a system configuration diagram of an electronic mail holding system according to the first embodiment.
In the following description and drawings, electronic mail is abbreviated as “mail”.

<Overall configuration and function of e-mail hold system>
The e-mail hold system enables the internal client 1 (internal client 1a and internal client 1b), the mail hold server 2, the mail server 4, the router 6, and the external client 5 to communicate with each other via a wired or wireless communication line. It is a connected system. Each device is illustrated one by one, but there may be two or more each. For example, in FIG. 1, two devices, the internal client 1a and the internal client 1b, are clearly shown as the internal client 1, but three or more internal clients 1 may exist. Note that the internal client 1a and the internal client 1b are devices having the same configuration and function, and hereinafter referred to as “internal client 1” unless it is necessary to distinguish between them.
Each device does not need to exist one by one. For example, one device may be configured to have both functions of the mail holding server 2 and the mail server 4.

  In FIG. 1, an internal client 1, a mail holding server 2, a mail server 4, and a router 6 are connected to each other by a LAN (Local Area Network) 7 so as to communicate with each other. The connection method is not limited to the LAN, and it is only necessary that the connection methods are communicable with each other. In FIG. 1, the external client 5 is connected to the LAN 7 by the Internet 8. For example, the external client 5 is connected to a LAN different from the LAN 7, and the router 6 connects these LANs. It does not matter.

As a result of the above-described configuration and the functions provided by each device, the entire electronic mail holding system has the following functions.
A mail sent from the internal client 1 to the external client 5 is first received by the mail holding server 2. The mail hold server 2 determines whether the received mail is to be sent immediately or held for a predetermined time according to a predetermined condition. Then, the mail hold server 2 sends the mail to be sent immediately and the mail that has passed a predetermined hold time to the mail server 4. The mail server 4 transmits the received mail to the external client 5 via the router 6. Note that “send immediately” only means that the transmission process is performed without deferring, and it is not necessary for the mail to be transmitted literally in a short time.
Similarly, first, the mail holding server 2 receives a mail sent from the internal client 1 (for example, the internal client 1b) to the internal client 1 (for example, the internal client 1a). The mail hold server 2 immediately transmits the received mail to the mail server 4. The mail received by the mail server 4 is stored in a storage device of the mail server 4 (not shown). As will be described later, the operator of the internal client 1a stores the mail stored by operating the internal client 1a. Can be viewed.

As described above, by providing the mail holding server 2, only the mail transmitted from the internal client 1 to the external client 5 can be selectively performed according to a predetermined condition without providing the internal client 1 with a special configuration / function. It can be sent after holding for a predetermined time.
On the contrary, the mail sent by the external client 5 to the internal client 1 (for example, to the internal client 1a) is received by the router 6 via the Internet 8, and the router 6 receives the received mail via the LAN 7 as a mail server. 4 to send. The mail received by the mail server 4 is stored in a storage device of the mail server 4 (not shown). As will be described later, the operator of the internal client 1a stores the mail stored by operating the internal client 1a. Can be viewed.
In each process of the mail transmission / reception processing described above, the internal client 1, the external client 5, the mail holding server 2, the mail server 4 and the router 6 are not shown in the drawing, but are shown in their respective main storage devices. Store emails to be sent and received.

<Configuration and function of each device of the email hold system>
Focusing on the mail sent from the internal client 1 to the external client 5, the configuration and function of each device will be described in the order in which the mail is sent and received.
The internal client 1 is a device such as a PC, and is communicably connected to the input device 18 and the display device 19.
In FIG. 1, the input device 18 and the display device 19 are described as the input device 18a and the display device 19a for the internal client 1a, and the input device 18b and the display device 19b for the internal client 1b, respectively. Yes. In the following description, when there is no need to distinguish between them, the input device 18a and the input device 18b are described as “input device 18”, and the display device 19a and the display device 19b are described as “display device 19”.

The input device 18 is a device such as a keyboard and a mouse, and the operator of the internal client 1 can instruct a process to be executed by the internal client 1 by operating the input device 18. The display device 19 is a liquid crystal display, a printer, or the like, and displays a result of processing executed by the internal client 1. That is, the input device 18 and the display device 19 function as an input unit and a display unit of the internal client 1, respectively.
Although not shown, the internal client 1 includes a CPU (Central Processing Unit), a main storage device, and a storage device such as a magnetic disk. The main storage device of the internal client 1 functions as a storage unit of the internal client 1.
The CPU executes various processes by loading various programs (for example, mail transmission / reception program) stored in the storage device onto the main storage device and executing the instruction codes.
Since the technology related to the program execution as described above is well known, in the following description and drawings, in order to avoid complicated description of the program execution, the mail transmission / reception program is referred to as a mail transmission / reception means 11 such as various types. The program is described as if hardware is present, and is described as if each unit executes processing. It should be noted that each means (for example, the mail transmission / reception means 11) can actually be configured by hardware (electronic device or the like) or a combination of hardware and firmware.

The mail transmission / reception means 11 (mail transmission / reception means 11a and mail transmission / reception means 11b) is a mail transmission / reception program as described above, and is so-called mailer software such as OUTLOOK (OUTLOOK is a registered trademark). In the following description, the mail transmission / reception means 11a and the mail transmission / reception means 11b are described as “mail transmission / reception means 11” when it is not necessary to distinguish between them.
The mail transmission / reception means 11 is set to transmit a transmission mail to the mail hold server 2 first. Such a setting can be made, for example, by setting the IP (Internet Protocol) address of the mail holding server 2 as the transmission server when setting the environment of the mail transmission / reception program.

The mail holding server 2 is a device such as a PC and is connected to the storage device 3 so as to be communicable. The storage device 3 is a device such as a magnetic disk, and is built in the mail holding server 2 or connected externally. The storage device 3 and the main storage device or the like of the mail holding server 2 that are not shown in the figure function as storage means of the mail holding server 2.
The storage device 3 includes a hold mail DB (Data Base) 31. The hold mail DB 31 stores mail to be sent after holding for a predetermined time.

An input device 28 and a display device 29 are also communicably connected to the mail holding server 2. The input device 28 is a device such as a keyboard and a mouse, and the operator of the mail holding server 2 can instruct the processing to be executed by the mail holding server 2 by operating the input device 28. The display device 29 is a liquid crystal display, a printer, or the like, and displays a result of processing executed by the mail holding server 2. That is, the input device 28 and the display device 29 function as an input unit and a display unit of the mail holding server 2, respectively.
The mail hold server 2 includes a mail transmission / reception means 21 (mail transmission / reception program), a mail hold determination means 22 (mail hold determination program), and a hold mail transmission means 23 (hold mail transmission program).

The mail transmission / reception means 21 is so-called SMTP (Simple Mail Transfer Protocol) server software such as Sendmail (SENDMAIL is a registered trademark), and has a function of transmitting and receiving mail.
The mail hold determination unit 22 is activated by the mail transmission / reception unit 21 when the mail transmission / reception unit 21 receives a mail, determines whether the received mail needs to be held for a predetermined time, and holds the mail that needs to be held. Mail that is stored in the mail DB 31 and does not need to be suspended is immediately sent to the mail server 4. In other words, the mail hold determination unit 22 substitutes a part of the function of the mail transmission / reception unit 21.
Since the mail hold determination unit 22 may behave differently in each of the various embodiments of the present invention, in the section of the solution unit, the mail hold determination unit, the hold time elapsed determination unit, the deletion instruction Different naming is performed for each content to be determined, such as determination means, deleteability determination means, hold release instruction determination means, hold release enable / disable determination means.

  The hold mail transmission means 23 is a so-called daemon (software), and is continuously activated at predetermined time intervals by the mail hold server 2 (more precisely, by the OS (Operating System) of the mail hold server 2). The hold mail transmission unit 23 determines whether or not the hold time has passed for each mail stored in the hold mail DB 31, and sends the mail for which the hold time has passed to the mail server 4. Then, the mail transmitted to the mail server 4 (that is, the mail whose hold time has elapsed) is deleted from the hold mail DB 31.

As described above, the mail meeting the predetermined condition is mainly transmitted by the mail hold determination unit 22 and the hold mail transmission unit 23 after being held for a predetermined time. That is, the mail hold determination unit 22 and the hold mail transmission unit 23 function as a mail hold / transmission unit.
The mail server 4 is a device such as a PC, and includes a mail transmission / reception means 41 (mail transmission / reception program). The mail transmission / reception means 41 is SMTP server software, similar to the mail transmission / reception means 21, and when the destination of the mail received from the mail hold server 2 is a device connected to the LAN 7 (for example, when addressed to the internal client 1a), Although not shown, it is stored in the storage device of the mail server 4. On the other hand, when the destination of the mail received from the mail hold server 2 is not a device connected to the LAN 7 (for example, when addressed to the external client 5), the received mail is transmitted to the router 6.
The router 6 transmits a mail transmitted to a destination other than a device connected to the LAN 7 to the Internet 8. On the contrary, any device having such a function may be used, and it is not necessarily a router.
The mail transmitted to the Internet 8 is received by a transmission destination (for example, the external client 5) via various communication devices (not shown).

Similar to the internal client 1, the external client 5 is a device such as a PC, and is connected to the input device 58 and the display device 59 so as to be communicable. The input device 58 is a device such as a keyboard and a mouse, and an operator of the external client 5 can instruct a process to be executed by the external client 5 by operating the input device 58. The display device 59 is a liquid crystal display, a printer, or the like, and displays a result of processing executed by the external client 5 and the like. That is, the input device 58 and the display device 59 function as an input unit and a display unit of the external client 5, respectively.
The external client 5 includes mail transmission / reception means 51 (mail transmission / reception program). The mail transmission / reception means 51 is so-called mailer software, and receives mail whose destination is the external client 5.

Next, the case where a mail is transmitted to the internal client 1a will be described as an example, and the configuration and function of each device will be supplemented.
The mail server 4 can further include a POP (Post Office Protocol) server (program).
The mail transmitted from the internal client 1b to the internal client 1a is transmitted to the mail server 4 via the mail hold server 2. Although the mail received by the mail server 4 is not shown, it is stored in the storage device of the mail server 4. Then, the operator of the internal client 1a operates the input device 18a to instruct the mail transmitting / receiving means 11a to acquire mail addressed to the internal client 1a. The mail transmission / reception means 11a requests the POP server of the mail server 4 to transmit mail addressed to the internal client 1a. Then, a list of mails transmitted by the POP server of the mail server 4 is displayed on the display device 19a.

In addition, mail transmitted from the external client 5 to the internal client 1 a is transmitted to the mail server 4 via the Internet 8 and the router 6. Although the mail received by the mail server 4 is not shown, it is stored in the storage device of the mail server 4, so that the operator of the internal client 1 a operates the input device 18 a so that the POP server of the mail server 4 is operated. A list of e-mails transmitted by can be displayed on the display device 19a.
As described above, the operator of the internal client 1a can browse the mail list and contents by operating the internal client 1a.

<Effects of system configuration and functions as described above>
As described above, by providing the mail holding server 2 and the mail server 4, the following effects can be obtained.
First, when a mail transmission / reception system using the mail server 4 or the like has already been constructed, the external client 5 or the like transmits to the internal client 1 by connecting the mail holding server 2 to the LAN 7 separately from the mail server 4. An e-mail hold system can be constructed without affecting the flow of mail transmission / reception. That is, it is possible to improve the reliability of the system at the time of constructing the electronic mail holding system.
When there is an operator of the internal client 1 who has a privileged position to always send mail quickly, the internal client 1 is permitted to log in to the mail server 4 and pass through the mail hold server 2. By making it possible to send mail without sending it, it becomes easy to send mail without putting it on hold.
However, when a new mail transmission / reception system is constructed, the mail hold server 2 and the mail server 4 are not separated, and for example, only the mail hold server 2 may be configured. In this way, the e-mail holding system can be constructed with a minimum number of devices. However, in this case, as described above, for a privileged operator who should always send mail quickly, for example, the mail hold determination means 22 authenticates the operator's ID and the like to hold the mail. It is necessary to provide a function such as transmission without transmission.

FIG. 2 is a data configuration diagram of the pending mail DB 31 in the first embodiment.
The hold mail DB 31 is composed of zero or more hold mail records 310 (if there is no mail to be held, the hold mail record 310 does not exist).
The hold mail record 310 includes three data items, a hold mail ID 311, a hold start time 312, and a hold mail 314. Although not shown in the figure, addition, update, deletion, etc. of the hold mail record 310 are performed by database management means (program) such as MySQL (MySQL is a registered trademark) provided in the mail hold server 2. For example, the mail hold determination unit 22 instructs the database management unit to add the hold mail record 310 by SQL or the like. Similarly, the hold mail transmission means 23 instructs the database management means to delete the hold mail record 310.

The hold mail ID 311 is an ID (Identifier) for uniquely identifying the hold mail record 310. For example, although not shown, a counter having an initial value of 1 is stored in the storage device 3, and every time the pending mail record 310 is added, "0001", "0002", "0003", etc. A serial number with 1 as an initial value is set, and a counter is incremented by one at the same time.
The hold start time 312 is set with a time when the hold mail record 310 is added, such as “20080281131504” (April 28, 2008, 13: 15: 4). The hold mail transmission means 23 determines whether the hold time has elapsed by comparing the hold start time 312 with the system time.
In the hold mail 314, the content of the hold mail is set. Specifically, this will be described with reference to FIG.

FIG. 3 is a data configuration diagram of the hold mail 314 according to the first embodiment.
The hold mail 314 includes a mail envelope 315, a mail header 316, and a body 317.
The body 317 is composed of the body of a mail input by the operator of the internal client 1 and a file attached to the mail. The mail header 316 is composed of result data obtained by editing the mail destination / title and the like of the mail input by the operator of the internal client 1 by the mail transmitting / receiving means 21. That is, the mail header 316 and the body 317 are the contents of the mail transmitted from the internal client 1 to the mail holding server 2.
The mail envelope 315 is composed of a mail sender (mail from) and one or more destinations (rcpt to). As will be described later, the mail hold determination means 22 creates the received mail from the received mail. An operator of the internal client 1 may input a destination different from the actual destination, such as a mailing list address, as a destination. Therefore, when the mail hold determination unit 22 receives the mail, the mail hold determination unit 22 converts the transmission destination set in the mail (input by the operator) into an actual transmission destination and creates a transmission destination (rcpt to). Then, the transmission source (mail from) and the transmission destination (rcpt to) are added to the mail as a mail envelope 315.

FIG. 4 is a first example of a flowchart showing the operation of the mail hold determination unit 22 in the first embodiment.
When the mail transmission / reception means 21 detects the reception of the mail, it activates the mail hold determination means 22.
The mail hold determination means 22 receives the mail and adds a mail envelope 315 (S401).
Next, the mail hold determination unit 22 sequentially refers to all the transmission destinations (rcpt to) of the mail envelope 315 and performs the following processing (S402 to S406).
The mail hold determination unit 22 determines whether or not the transmission destination (rcpt to) is a transmission destination (hold target transmission destination) that should hold the mail (S403). Specifically, the domain of the transmission source (mail from) and the domain of the transmission destination (rcpt to) are compared, and if they do not match, it is determined as the hold target transmission destination. In the example of FIG. 3, since the domain of the transmission source (mail from) is “hitachisoft.jp”, a transmission destination including the “example.com” domain that does not match this is determined as the hold target transmission destination.

The mail hold determination means 22 determines the next transmission destination (rcpt to) when the transmission destination (rcpt to) is the holding target transmission destination (YES in S403).
On the other hand, when the transmission destination (rcpt to) is not the hold target transmission destination (NO in S403), the transmission destination (rcpt to) is deleted from the mail envelope 315 (S404), and only the transmission destination (rcpt to) is deleted. A mail is transmitted to the mail server 4 as the (final) transmission destination of the mail (S405).
The mail header 316 and the body 317 of the mail received by the mail hold determination unit 22 are set as the mail header 316 and the body 317 of the mail to be transmitted. Since the transmission destination (To) of the mail header 316 is not changed by the above processing, the mail recipient can know all the transmission destinations inputted by the sender, and the mail is also externally (holding destination transmission destination). You can know that it will be sent. When sending an e-mail addressed to the inside (S405), it is determined whether or not a hold target transmission destination is included in the transmission destination (rcpt to). May also be sent ". By doing so, it can be expected that the internal mail recipient carefully checks the content and destination of the received mail.

  Upon completion of the above processing (S402 to S406) for all transmission destinations (rcpt to), the mail hold determination unit 22 adds a hold mail record 310 to the hold mail DB 31 (S413). At this time, the hold mail ID 311 is set with an ID (for example, a serial number with 1 as an initial value) that can uniquely identify the hold mail record 310. In the hold start time 312, the system date and time when adding the hold mail record 310 is set. In addition, the mail envelope 315 in which a destination (rcpt to) other than the destination (rcpt to) to which the mail is transmitted by the processing of S405 is set in the pending mail 314 (that is, the mail envelope 315 after the processing of S402 to S406). ), A mail header 316, and a body 317. Note that if all the transmission destinations (rcpt to) have already been sent by the process of S405, the pending mail record 310 is not added.

With the above processing, emails that match the specified conditions (mails that specify a destination (rcpt to) whose sender and destination domains do not match) are suspended, while emails that do not match the specified conditions Immediately sent to the destination. If some of the destinations (rcpt to) meet the predetermined conditions, the mail is suspended for the part of the destinations (rcpt to), while the destination (rcpt to) does not meet the predetermined conditions ( For rcpt to), an email is immediately sent to the destination.
Note that the determination of the suspension target transmission destination (determination of whether or not a predetermined condition is met) may be performed by a method other than comparing the source and destination domains.
For example, only a part of the domain may be compared. Further, one or more destination domains that may be transmitted immediately may be stored in the storage device 3 and may be suspended if the destination (rcpt to) domain does not match any of these domains. By doing this, even if there are multiple domains in an organization such as a company, mail that is destined for inside (inside) the organization is not put on hold, and mail that is sent to outside the organization (outside) is put on hold can do.
The mail hold determination unit 22 ends the process when the hold mail record 310 is added.

FIG. 5 is a flowchart showing the operation of the pending mail transmission unit 23 in the first embodiment.
As described above, the hold mail transmission means 23 is continuously activated at predetermined time intervals by the OS of the mail hold server 2.
When activated, the on-hold mail transmission means 23 sequentially refers to all the on-hold mail records 310 stored in the on-hold mail DB 31 and performs the following processing (S501 to S505).
The hold mail transmitting unit 23 determines whether the hold mail record 310 has passed the hold time (S502). Specifically, the system date / time at the time of determination is compared with the hold start time 312 to determine whether a predetermined time (for example, 15 minutes) has elapsed at the time of determination.
If the hold time has elapsed (YES in S502), the hold mail (hold mail 314) is transmitted to the mail server 4 (S503). At this time, all the transmission destinations (rcpt to) set in the mail envelope 315 of the hold mail record 310 are set as the (final) transmission destinations of the mail.
When the mail transmission process (S503) is normally completed, the hold mail transmission unit 23 deletes the hold mail record 310 from the hold mail DB 31.
The hold mail transmission unit 23 ends the process when the above processes (S501 to S505) are completed.
With the above processing, the suspended mail is automatically transmitted without performing any special operation after a predetermined time.

Note that the hold mail transmission unit 23 may not be continuously activated at a predetermined time interval, but may be activated, for example, by an operator of the mail hold server 2 operating the input device 28. In addition, the operator of the mail hold server 2 operates the input device 28, instructs the database management means (program) by SQL or the like, and causes the display device 29 to display a list of the hold mail records 310 and the contents of the hold mail. It is good to do so. In this way, when the operator of the mail hold server 2 periodically confirms the content of the hold mail and determines that it can be sent, the hold mail can be sent.
In addition, the operator of the mail hold server 2 can rewrite the hold start time 312 of the hold mail record 310 before starting the hold mail transmission unit 23 so that a predetermined time has passed. In this way, every time the on-hold mail transmission means 23 is activated, the on-hold mail 314 is transmitted for all the on-hold mail records 310 and the on-hold mail record 310 is deleted. It is possible to avoid duplication such as checking repeatedly.

Further, when the operator of the mail hold server 2 confirms that a mail that should not be transmitted (for example, a mail in which the trade secret information is described in the text) is held, the hold mail record 310 is deleted. Thus, it can be prevented from being transmitted.
As described above, for example, it is easy for an operator of the mail hold server 2 to forcibly release the hold state of the hold mail record 310 or to delete the hold mail record 310, and a dedicated program for that purpose is provided. There is also a merit that it is unnecessary.

However, the method in which the operator of the mail holding server 2 confirms the contents of all mails transmitted in the organization is often not realistic. Therefore, it is desirable that as many people as possible perform manual confirmation of the contents of a suspended mail.
Specifically, a person who immediately received a suspended email (for example, a recipient whose domain is the same as the sender) should check the content of the email and not send it to the outside (mail to be discarded). If the determination is made, the hold mail record 310 of the hold mail may be deleted. In other words, the recipient of the mail is interested in the content of the mail and can confirm the content of the mail calmly and objectively, so there is a high possibility that the mail recipient will notice that the mail should be discarded.
In this regard, since it is generally not possible to reconfirm the mail sent by the user later, it is unlikely that the sender of the mail notices that the mail should be discarded. However, since the possibility is not zero, the sender of the mail may be allowed to delete the held mail record 310 of the held mail.
As one method for realizing this, each internal client 1 can request to delete the hold mail record 310 corresponding to the mail hold server 2 when the sent mail is noticed to be discarded. You can do it. For example, the mail transmission / reception means 11 may transmit a special mail (deletion instruction mail) instructing deletion of the hold mail record 310.

FIG. 6 is a data configuration diagram of the deletion instruction mail in the first embodiment.
The deletion instruction mail transmitted by the internal client 1 is received by the mail hold determination means 22 and the mail envelope 315 is added, as in the case of normal mail.
FIG. 6 is a data configuration diagram of the deletion instruction mail after the mail envelope 315 is added. Here, a special destination “mail-control@hitachisoft.jp” is set as the destination (To) of the mail header 316. The operator of the internal client 1 designates this special transmission destination as the transmission destination when creating the deletion instruction mail by the mail transmission / reception means 11. Then, the mail hold determination means 22 performs a process different from the process for a normal mail because the transmission destination is designated.

In addition, the character [DELETE] is input at the top of the body 317. When the operator of the internal client 1 creates a deletion instruction mail by the mail transmitting / receiving means 11, he / she inputs the characters “DELETE” in the text. Then, the mail hold determination unit 22 performs a process of deleting the hold mail record 310 when the first character of the text 317 is [DELETE].
In addition, the operator of the internal client 1 needs to specify which pending mail record 310 should be deleted. This is possible, for example, by inputting the title of the hold mail 314 set in the hold mail record 310 to be deleted (that is, the character set as the subject of the mail header 316) as the mail title. .

Next, processing contents of the mail hold determination unit 22 when a deletion instruction mail is received will be described.
FIG. 7 is a second example of a flowchart illustrating the operation of the mail hold determination unit 22 according to the first embodiment.
In the second example, the mail hold determination unit 22 performs different processing for the deletion instruction mail in addition to the processing for the normal mail described with reference to FIG. Here, the processing contents of S401, S402 to S406, and S413 in FIG. 7 are the same as those in FIG.
The mail hold determination unit 22 determines whether the received mail is a mail requesting deletion of the held mail (deletion instruction mail) (S421). Specifically, when the destination (rcpt to) of the mail envelope 315 is a special destination (for example, “mail-control@hitachisoft.jp”), and the first character of the text 317 is [DELETE], It is determined as a deletion instruction mail.
When it is determined that the received mail is a deletion instruction mail (YES in S421), the mail hold determination unit 22 determines whether the specified hold mail record 310 can be deleted from the hold mail DB 31 (S422). For example, it is determined whether or not the designated hold mail record 310 exists. Specifically, for example, when all the pending mail records 310 are referenced and there is a record in which the deletion instruction mail matches the sender (mail from) of the mail envelope 315 and the title (Subject) of the mail header 316, What is necessary is just to determine with the designated hold mail record 310 existing.

When it is determined that the designated hold mail record 310 exists and can be deleted (YES in S422), the mail hold determination unit 22 deletes the hold mail record 310 from the hold mail DB 31 (S423). Then, a deletion notification mail is transmitted to the transmission source of the deletion instruction mail (transmission source (mail from) of the mail envelope 315) (S424).
In the body of the deletion notification mail, it is preferable to set the mail header 316, the body 317, etc. of the deleted mail together with the message “The following mail has been deleted”. By doing so, the operator of the internal client 1 that has transmitted the deletion instruction mail can confirm whether or not the hold mail designated for deletion has been deleted correctly.
On the other hand, if the mail hold determination unit 22 determines that the deletion cannot be performed because the designated hold mail record 310 does not exist (NO in S422), a deletion failure mail is sent to the sender of the delete instruction mail. Transmit (S425).
In the body of the deletion failure mail, it is preferable to set the mail header 316, the body 317, etc. of the deletion instruction mail together with a message such as “The following mail cannot be deleted”. By doing so, the operator of the internal client 1 that has transmitted the deletion instruction mail can confirm which deletion instruction mail has failed.

In S423, for example, when there are a plurality of pending mail records 310 (deletion target records) having the same sender (mail from) and the same title (Subject), the mail suspension determining means 22 may delete all of them. Good. In this case, when the same mail is mistakenly transmitted many times, it can be deleted collectively by a single deletion instruction mail.
Alternatively, only the hold mail record 310 having the latest hold start time 312 may be deleted. In general, since the mail sent more recently should be confirmed more recently, there is a high possibility that the mail is to be deleted. Therefore, in this case, the risk of deleting the pending mail record 310 that should not be deleted is reduced.
Further, for example, the pending mail ID 311 may be designated at the top of the body 317 of the deletion instruction mail in addition to the characters [DELETE]. In this case, the mail hold determination unit 22 determines whether or not there is a record to be deleted based on the specified hold mail ID 311 in S422.

On the other hand, when the hold mail ID 311 is not specified in the deletion instruction mail, as described above, depending on whether or not the hold mail record 310 having the same sender (mail from) and the same title (Subject) exists, Determine whether there is a record to be deleted. If there are a plurality of records to be deleted, without specifying the pending mail record 310 (S423 is not performed), “Please specify the ID of the mail to be deleted” in the body of the deletion notification mail. Along with the message, the pending mail ID 311, the mail header 316, the body 317, etc. of the plurality of records to be deleted are set.
As described above, the operator of the internal client 1 can specify the hold mail record 310 that needs to be deleted by the hold mail ID 311. Therefore, in this case, the risk of deleting the pending mail record 310 that should not be deleted can be minimized.

  By the way, it is inconvenient if the sent mail is always held for a predetermined time when it meets a predetermined condition, or in a hurry. Therefore, it is desirable to cancel the mail hold state so that it can be sent immediately. For example, like the deletion instruction mail, the mail hold state can be canceled by the cancellation instruction mail.

FIG. 8 is a data configuration diagram of a release instruction mail according to the first embodiment.
The release instruction mail transmitted by the internal client 1 is received by the mail hold determination means 22 and the mail envelope 315 is added, as in the case of normal mail.
FIG. 8 is a data configuration diagram of the release instruction mail after the mail envelope 315 is added. Here, a special transmission destination “mail-control@hitachisoft.jp” is set in the transmission destination (To) of the mail header 316 as in the case of the deletion instruction mail. The operator of the internal client 1 designates this special transmission destination as the transmission destination when creating the release instruction mail by the mail transmission / reception means 11. Then, the mail hold determination means 22 performs a process different from the process for a normal mail because the transmission destination is designated.
In addition, a character “RELEASE” is input at the top of the body 317. When the operator of the internal client 1 creates a release instruction mail by the mail transmitting / receiving means 11, he / she inputs the characters “RELEASE” in the text. Then, the mail hold determination unit 22 performs a process of releasing the hold mail record 310 from the hold state when the first character of the text 317 is [RELEASE].
In addition, in order to specify the hold mail record 310 to be released from the hold state, the title of the hold mail 314 set in the hold mail record 310 to be released is input as the mail title, as in the case of the deletion instruction mail. That's fine.
Next, processing contents of the mail hold determination unit 22 when a cancellation instruction mail is received will be described.

FIG. 9 is a third example of a flowchart illustrating the operation of the mail hold determination unit 22 according to the first embodiment.
In the third example, the mail hold determination unit 22 performs different processes for the release instruction mail in addition to the processes for the normal mail described with reference to FIG. Here, the processing contents of S401, S402 to S406, and S413 in FIG. 7 are the same as those in FIG. In FIG. 9, the processing for the deletion instruction mail is not clearly shown, but the processing for the deletion instruction mail and the processing for the cancellation instruction mail are not contradictory, and both can be performed. . Specifically, the determination process of S421 of FIG. 7 is added between the processes of S401 and S431 of FIG. 9, the processes of S421 to S425 are performed if YES in S421, and the determination of S431 is determined if NO. By doing so, it is possible to process both the deletion instruction mail and the release instruction mail.

The mail hold determination unit 22 determines whether the received mail is a mail requesting to cancel the held mail (release instruction mail) (S431). Specifically, when the destination (rcpt to) of the mail envelope 315 is a special destination (for example, “mail-control@hitachisoft.jp”) and the first character of the text 317 is [RELEASE] Judge as a release instruction mail.
When it is determined that the received mail is a release instruction mail (YES in S431), the mail hold determination unit 22 determines whether the specified hold mail record 310 can be released from the hold mail DB 31 (S432). For example, it is determined whether or not the designated hold mail record 310 exists. Specifically, for example, when all the pending mail records 310 are referenced and there is a record in which the release instruction mail matches the sender (mail from) of the mail envelope 315 and the title (Subject) of the mail header 316, What is necessary is just to determine with the designated hold mail record 310 existing.

If the mail hold determination unit 22 determines that the designated hold mail record 310 exists and can be released (YES in S432), the mail hold 315 uses the mail envelope 315 destination (rcpt to) as the (final) destination. The hold mail 314 is transmitted to the server 4 (S433). Then, the mail hold determination unit 22 deletes the hold mail record 310 from the hold mail DB 31 (S434).
On the other hand, if the mail hold determination unit 22 determines that the release is impossible due to the fact that the designated hold mail record 310 does not exist (NO in S432), the mail hold determination unit 22 sets the sender (mail from) of the mail envelope 315 as A cancellation failure mail is transmitted (S435).
In the body of the cancellation failure mail, it is preferable to set the mail header 316, the body 317, etc. of the cancellation instruction mail together with a message such as “The following mail cannot be released from hold”. By doing so, the operator of the internal client 1 that has transmitted the release instruction mail can check which release instruction mail has failed.

In S433 to S434, for example, when there are a plurality of pending mail records 310 (release target records) having the same transmission source (mail from) and title (Subject), various processes are performed as in the case of the deletion instruction mail. Processing is possible.
As described above, by providing the mail hold server 2, the internal client 1 is not provided with a dedicated program, so that the mail is held under a predetermined condition, the held mail is not transmitted, or conversely, is transmitted immediately. You can make it.

In the following, embodiments that further improve convenience will be described.
FIG. 10 is a system configuration diagram of an e-mail holding system according to the second embodiment of the present invention.
The difference between the first embodiment and the second embodiment is the configuration / function of the internal client 1 and the mail hold server 2. Hereinafter, this point will be described.
In the second embodiment, the internal client 1 further includes a hold mail browsing means (hold mail browsing program) 12.
The hold mail browsing means 12 (the hold mail browsing means 12a and the hold mail browsing means 12b) is a program for browsing the stored contents of the hold mail DB 31, and is, for example, a WEB browser. By realizing the hold mail browsing means 12 by a general WEB browser, the list and contents of the hold mail stored in the storage device 3 can be stored as will be described later without providing the internal client 1 with a dedicated program or the like. It can be displayed on the display device 19. On the other hand, if the hold mail browsing means 12 is realized by a dedicated program or the like specialized for the hold mail browsing function, it is possible to realize the hold mail browsing means 12 with more excellent functions and operability.

In the following description, when there is no need to distinguish between the reserved mail browsing means 12a and the reserved mail browsing means 12b, it will be described as “held mail browsing means 12”.
In the second embodiment, the mail hold server 2 further includes an HTTP processing means (HTTP processing program) 24, a hold mail search means (hold mail search program) 25, and a hold mail deletion means (hold mail deletion program) 26. .
The HTTP processing means 24 is so-called WEB server software such as Apache, for example, and has a function of receiving an HTTP request transmitted by a WEB browser, performing a requested process, and transmitting a processing result as an HTTP response. Yes.

  The hold mail search means 25 is activated by the HTTP processing means 24 when the HTTP processing means 24 receives an HTTP request for browsing the hold mail, and stores the hold mail record 310 that matches a predetermined condition from the hold mail DB 31. Search and edit the search result on the WEB page. The WEB page output from the pending mail search unit 25 is set to an HTTP response by the HTTP processing unit 24 and is transmitted to a WEB browser or the like that has requested browsing of the pending mail. The on-hold mail search means 25 can be realized using, for example, CGI (Common Gateway Interface).

  The pending mail deletion means 26 is activated by the HTTP processing means 24 when the HTTP processing means 24 receives an HTTP request that requests deletion of the pending mail, and stores the pending mail record 310 that matches a predetermined condition from the pending mail DB 31. delete. Similarly to the hold mail search means 25, the hold mail deletion means 26 can be realized by using, for example, a CGI (Common Gateway Interface).

  With the configuration and functions as described above, the operator of the internal client 1 uses the WEB browser or a dedicated program to display the list / contents of the pending mail on the display device 19 and confirm the display contents. It becomes possible to select a hold mail to be deleted or a hold mail to be released from the hold state.

Hereinafter, detailed operations of the hold mail browsing means 12, the hold mail searching means 25, and the hold mail deleting means 26 will be described using a flowchart.
FIG. 11 is a flowchart showing the operation of the pending mail browsing unit 12 in the second embodiment.
In FIG. 11, the description will be made on the assumption that the pending mail browsing means 12 is realized by a WEB browser. However, as described above, the pending mail browsing means 12 is a dedicated program for viewing the pending mail. May be.
First, the operator of the internal client 1 operates the input device 18 to start a WEB browser, and the WEB browser displays a WEB browser screen (WEB screen) on the display device 19.
The operator of the internal client 1 inputs a predetermined URL (for example, “http://horyu.hitachisoft.jp/cgi=horyusearch”) for searching for a suspended mail in the URL (Uniform Resource Locator) input field of the WEB screen. When the user inputs and instructs to operate the input device 18 to transmit the screen, the hold mail browsing means 12 sets the input predetermined URL or the like in the HTTP request and transmits it to the mail hold server 2. Thereby, a pending mail search request is made (S1101).
When the hold mail browsing unit 12 acquires the hold mail list as an HTTP response (S1102), the acquired hold mail list is displayed on the WEB screen (S1103).

FIG. 14 is a display example of the pending mail list screen. As shown in FIG. 14, there is a URL input field (D1401) in the upper part of the entire WEB screen (D1400), and a predetermined URL for searching for a pending mail input by the operator of the internal client 1 is displayed. Yes. Further, a pending mail list area (D1402) and a “delete” button (D1406) are arranged below the URL input field (D1401).
The pending mail list area (D1402) is divided into a heading field (D1403) and a data area (D1404), and the entire pending mail list area (D1402) can be scrolled up and down.

  In the header field (D1403), the header of each data item in the list of pending mails displayed in the data area (D1404) is displayed. In the example of FIG. 14, the hold mail ID, the sender (the mail address of the hold mail transmission source), the subject (the title of the hold mail), the transmission destination (the mail address of the hold mail transmission destination), and the date (the hold start date of the hold mail). ) And the remaining time (remaining hours, minutes, and seconds until the hold mail is transmitted by the hold mail transmission means 23), the data items to be displayed are not limited to these, and the e-mail hold system is displayed. What is necessary is just to determine suitably according to the operational convenience and the operator's request of the internal client 1. Similarly, the configuration of the pending mail list screen may be appropriately determined as necessary.

  In the data area (D1404), the data item of the pending mail is displayed corresponding to the heading field (D1403). In the example of FIG. 14, the data item content is illustrated for one hold mail, but in reality, all searched hold mails are displayed. In addition, in the example of FIG. 14, a check box (D1405) is displayed at the left end of the data area (D1404) corresponding to each pending mail. The operator of the internal client 1 can designate a pending mail to be deleted by operating the input device 18 (for example, a mouse) and clicking a check box (D1405).

That is, when the operator of the internal client 1 presses the “delete” button (D1406), the hold mail browsing means 12 determines that deletion has been instructed (in the case of YES in S1104), and any hold mail is instructed to be deleted. Information indicating whether or not has been made is set in the HTTP request and transmitted to the mail holding server 2. As a result, a pending mail deletion request is made (S1105). More specifically, the pending mail browsing means 12 is, for example, an HTTP in which data “cgi = horyudelete? Id = 0001” (deleting the pending mail record 310 in which “0001” is set in the pending mail ID 311) is set. The request is transmitted to the mail hold server 2.
When the reserved mail list is acquired as the HTTP response after the instructed deletion is performed (S1106), the acquired reserved mail list is displayed on the WEB screen (S1103).
The above processing is repeated as long as the operator of the internal client 1 continues browsing the hold mail.

In addition to the above operations, the pending mail browsing means 12 can perform the following operations. For example, when a hold mail ID (“0001” in FIG. 14) is clicked on the hold mail list screen, the header of the hold mail, the content of the text, etc. can be displayed on a separate screen, for example. Thereby, confirmation of the pending mail to be deleted becomes easier. In this case, change input of the transmission destination may be enabled on the separate screen.
Further, for example, a search condition field may be provided between the URL input field (D1401) and the pending mail list area (D1402) so that search conditions such as a sender and a destination to be searched can be designated. . As a result, it is possible to display the suspended mail in a targeted manner. In addition, the display order of the hold mails in the hold mail list area (D1402) may be the order in which the remaining time is short. Thereby, it becomes easy to preferentially confirm the pending mail that needs to be confirmed more quickly.

FIG. 12 is a flowchart showing the operation of the pending mail search unit 25 in the second embodiment.
When the HTTP processing unit 24 receives an HTTP request (for example, an HTTP request in which “cgi = horyusearch” is set) that requests browsing of the pending email from the pending email browsing unit 12, the pending email search unit 25 receives HTTP. It is activated by the processing means 24.
When activated, the on-hold mail search unit 25 searches all the on-hold mail records 310 in the on-hold mail DB 31 and creates a list of on-hold mail (S1201).

  When displaying the hold mail list screen of FIG. 14, the hold mail ID 311 of the hold mail record 310, the sender (From) setting contents of the mail header 316, the title (Subject) setting contents of the mail header 316, the mail header 316 Destination (To, Cc, Bcc) setting contents, the date set in the hold start time 312, and the remaining hours, minutes, and seconds until the hold mail is sent by the hold mail sending means 23 (after the hold start time 312 The suspended mail list is created by editing the elapsed time of the above in a HTML (HyperText Markup Language) format that can be displayed by a WEB browser, for example, by subtracting a predetermined time (for example, 15 minutes) from a predetermined time.

  Here, the remaining hour / minute / second may be less than zero. In this case, since the hold mail is transmitted when the hold mail transmission means 23 is activated next time, it is necessary to quickly confirm whether or not deletion is necessary. Therefore, when the remaining hour / minute / second is less than 0, it is preferable to display in a manner different from other display items such as red, bold, and italic. Further, in addition to the case where the remaining time / minute / second is less than 0, for example, when the remaining time / minute / second is less than 3 minutes or the like, when the transmission by the pending mail transmission means 23 is imminent, it is different from the other display items It may be displayed.

  Of the contents set in the transmission destination (To, Cc, Bcc) of the mail header 316, it is often undesirable for Bcc to be seen by other than the transmission source. In order to prevent Bcc from being seen by anyone other than the sender, the Bcc itself is not edited in the HTML format. For example, when Bcc contains a mail address of a domain different from the sender, You can edit characters such as “Send”. In addition, as will be described later, when the access restriction by the user ID is applied to the viewing / deletion of the pending mail, the user ID that requested the pending mail search is compared with the user ID of the sender of the pending mail, In the case of a pending mail search request from the transmission source, the Bcc itself may be edited in the HTML format.

As described above, on the WEB screen (FIG. 14), it is possible to specify search conditions such as a transmission source and a transmission destination to be searched. For example, when specifying the sender, search conditions like “cgi = horyusearch? Sender = aaa.hitachisoft.jp” (search for pending mail whose sender is “aaa.hitachisoft.jp”) in the HTTP request. Can be shown. In this case, the hold mail search means 25 searches for the hold mail record 310 in which the sender (mail from) of the mail envelope 315 matches aaa.hitachisoft.jp. Similarly, for example, by setting “cgi = horyusearch? Sender = aaa.hitachisoft.jp? Order = time” or the like, it is possible to specify that the pending mail list is created in ascending order of the remaining time.
The hold mail search means 25 outputs the created hold mail list (S1202). The output result is set by the HTTP processing unit 24 as an HTTP response and transmitted to the pending mail browsing unit 12.

FIG. 13 is a flowchart showing the operation of the suspended mail deleting unit 26 in the second embodiment.
The pending mail deletion unit 26 receives the HTTP request (for example, an HTTP request in which “cgi = horyudelete? Id = 0001” is set) requesting the deletion of the pending email from the pending mail browsing unit 12 by the HTTP processing unit 24. In this case, the HTTP processing means 24 is activated.
When activated, the suspended mail deleting unit 26 deletes a record to be deleted (for example, a record whose set value of the suspended mail ID 311 is “0001”) from the suspended mail record 310 of the suspended mail DB 31 (S1301). The delete record does not need to be one record. For example, when “cgi = horyudelete? Id = 0001,0003” is set in the HTTP request, the record with the set value of the hold mail ID 311 “0001” and “0003” It is possible to delete two records of a record that is “”.

The hold mail deleting means 26 deletes the designated hold mail record 310, searches the hold mail DB to create a hold mail list (S1302), and outputs the created hold mail list (S1303). The processing contents of S1302 and S1303 are the same as the processing of S1201 and S1202 of the pending mail search unit 25, respectively. The output result (holding mail list) is set in the HTTP response by the HTTP processing unit 24 and transmitted to the holding mail browsing unit 12.
Release of the hold status of the hold mail can be performed in the same manner as the deletion of the hold mail. For example, when an HTTP request (for example, an HTTP request in which “cgi = horyurelease? Id = 0001” is set) requesting release of the hold mail is received from the hold mail browsing means 12, the HTTP processing means 24 is illustrated. However, it is sufficient to activate the hold mail canceling means.

  In the electronic mail hold system according to the second embodiment, the configuration / function as described above allows the operator of the internal client 1 to display the list / contents of the hold mail on the display device 19 and display the display contents. While confirming, it becomes possible to select a hold mail to be deleted or a hold mail to be released from the hold state. That is, all the internal client 1 operators can display and delete the list and contents of the pending mail. Therefore, any operator who realizes that the mail should not be sent (for example, the mail whose trade secret information is described in the text) can be deleted, and the mail that should not be sent is mistakenly sent to the outside. Risk can be reduced.

However, conversely, there is an email (for example, an email in which personal information is described in the text) that the operator who is not related to the email knows the contents of the hold email, that is, it must not be known by some operators There is an increased risk of being browsed or deleted due to erroneous operation or malicious intent. In order to reduce this risk, it is only necessary to restrict access to the viewing / deletion of pending mail.
For example, the hold mails that can be displayed and deleted by the operator of the internal client 1 may be limited to mails for which the operator is a transmission source or a transmission destination.

In order to do this, for example, when a predetermined URL (for example, “http://horyu.hitachisoft.jp”) for searching for a pending mail is specified, the HTTP processing means 24 causes the internal client 1 to The WEB browser of the internal client 1 displays the authentication request screen on the display device 19. Then, the operator of the internal client 1 may perform authentication by inputting a predetermined user ID and password.
For example, the user ID of the operator of the internal client 1 and a mail address may be stored in the storage device 3 in association with each other.
The pending mail browsing unit 12 and the HTTP processing unit 24 hold the authenticated user ID by HTTP cookie or the like. Then, the pending mail search means 25 obtains the actual transmission destination (rcpt to) from (To, Cc, Bcc) of the mail header 316, and the actual transmission destination (rcpt to) or the transmission source of the mail envelope 315 ( If mail from) includes a mail address corresponding to the user ID, the pending mail list is to be created. Similarly, the hold mail deletion means 26 also corresponds to the user ID of the operator who has instructed deletion to the actual transmission destination (rcpt to) or the transmission source (mail from) of the mail envelope 315 for the hold mail record 310 designated to be deleted. If an email address to be included is included, it may be deleted.

Next, a method for making it possible to change the hold time of the hold mail depending on the contents of the mail will be described.
FIG. 15 is a system configuration diagram of an electronic mail holding system according to the third embodiment of the present invention.
The difference between the second embodiment and the third embodiment is the configuration / function of the mail holding server 2 and the storage device 3. Hereinafter, this point will be described.
In the third embodiment, the storage device 3 further includes a holding time DB 32. Further, as will be described later, the data structure of the pending mail DB 31 is different from that of the second embodiment (and the first embodiment). Further, unlike the second embodiment (and the first embodiment), the mail hold determination unit 22 changes the hold time depending on the content of the mail. Furthermore, the operation of the pending mail transmission unit 23 is different from that of the second embodiment (and the first embodiment).
With the configuration and function as described above, when a mail transmitted from the internal client 1 is a mail with a high risk of information leakage, the mail is held for a longer time, while a mail with a low risk is held for a short time. It becomes possible.

Hereinafter, the data contents of the hold mail DB 31 and the hold time DB 32 will be described in detail using a data structure diagram, and detailed operations of the mail hold determination means 22 and the hold mail transmission means 23 will be described using a flowchart.
FIG. 16 is a data configuration diagram of the pending mail DB 31 in the third embodiment.
The hold mail DB 31 includes zero or more hold mail records 310 as in the second embodiment (and the first embodiment).
The hold mail record 310 includes four data items of a hold mail ID 311, a hold start time 312, a hold time 313, and a hold mail 314.
The setting contents of the hold mail ID 311, the hold start time 312 and the hold mail 314 are as described with reference to FIG. 2.
In the hold time 313, for example, “001500” (0 hour 15 minutes 0 seconds) is set, the time for holding the hold mail record 310 is set. The hold mail transmission unit 23 compares the hold start time 312 with the system time, and sends the hold mail 314 when the hold time 313 has elapsed.

FIG. 17 is a data configuration diagram of the holding time DB 32 in the third embodiment.
The holding time DB 32 includes zero or more holding time records 320 (the holding time record 320 does not exist when it is not necessary to determine the holding time by an e-mail address or the like).
The hold time record 320 is composed of two data items of an email address 321 and a hold time 322. Although addition, update, deletion, etc. of the hold time record 320 are not shown, they are performed by the database management means (program) provided in the mail hold server 2 as with the hold mail record 310. For example, the operator of the mail hold server 2 uses the database management unit to add a hold time record 320 in which a predetermined value is set, or to change the set value of the hold time record 320 and hold the hold time record 320. Can be deleted.
The mail address 321 is set with a mail address such as “aaa.hitachisoft.jp”. In the hold time 322, the hold time corresponding to the mail address 321 is set to, for example, “012000” (1 hour 20 minutes 0 seconds).
As will be described later, the mail address 321 and the hold time 322 are referred to when the mail hold determination unit 22 sets the mail hold time.

FIG. 18 is a first example of a flowchart showing the operation of the mail hold determination unit 22 in the third embodiment.
As in the first embodiment, the mail transmitting / receiving unit 21 activates the mail hold determination unit 22 when detecting the reception of the mail.
The mail hold determination means 22 receives the mail and adds a mail envelope 315 (S401).
Next, the mail hold determination unit 22 refers to all the transmission destinations (rcpt to) of the mail envelope 315 in order, and performs the processes of S402 to S406. The processing contents of S402 to S406 are the same as those described in the first embodiment.
When the mail hold determination unit 22 finishes the processes of S402 to S406 for all the transmission destinations (rcpt to), it acquires the hold time from the hold time DB 32 (S411). Specifically, in the hold time record 320, the mail address 321 searches for the same record as the sender (mail from) of the mail envelope 315, and the hold time 322 of the record is set as the hold time.

Next, the mail hold determination unit 22 adds the hold mail record 310 to the hold mail DB 31 (S413). At this time, values are set in the hold mail ID 311, the hold start time 312, and the hold mail 314 as in the first embodiment. In the hold time 313, the hold time acquired from the hold time DB 32 is set. Here, in S411, when there is no holding time record 320 that satisfies the condition, that is, when the holding time cannot be acquired from the holding time DB 32, a predetermined value (a value equal to or greater than 0) is set.
Note that if all the transmission destinations (rcpt to) have already been sent by the process of S405, the pending mail record 310 is not added.

  By the above processing, emails that match the specified conditions (such as emails that specify a destination (rcpt to) whose sender and destination domains do not match) are suspended, while mail that does not meet the specified conditions Is immediately sent to the destination. If some of the destinations (rcpt to) meet the predetermined conditions, the mail is suspended for the part of the destinations (rcpt to), while the destination (rcpt to) does not meet the predetermined conditions ( For rcpt to), an email is immediately sent to the destination. Also, by changing the set value of the hold time 313 depending on the transmission source, the time until transmission after the hold can be changed depending on the transmission source, as will be described later. Therefore, it is possible to lengthen the holding time for the operator of the internal client 1 who has many erroneous transmissions.

  Conversely, for an operator who should not hold the mail, “0” (0 hour 0 minute 0) is set in the hold time 322 of the hold time record 320 for the mail address (sender (mail from)) of the operator. Second), or if no hold time record 320 is created and no hold time record 320 exists for the sender (mail from), the hold time 313 is set to "0" in S413. By this method, it is possible to transmit a message with a minimum holding time. If “0” is set for the hold time 313, it is sent when the hold mail transmission means 23 is activated next time. On the contrary, the hold mail can be deleted until then. If the sender or the internal receiver notices an erroneous operation after transmission, it can be deleted before being transmitted to the outside.

In addition, as described above, when access restriction is applied with reference to a user ID for viewing / deleting a pending email, the pending time record 320 is not stored with the email address 321 and the pending time 322 paired, The user ID and the hold time 322 may be stored in pairs, and the hold time record 320 may be searched with reference to the user ID in S411.
In this way, for example, when an operator with the same user ID uses a plurality of mail addresses, there is no need to set a holding time for each mail address. Conversely, when storing the mail address 321 and the hold time 322 as a pair, the operator with the same user ID can change the send source and change the hold time. When it is necessary to send the message quickly, it is possible to use a mail address with a short hold time (for example, a mail address with a hold time of 0), which improves convenience.

In S411, the mail address 321 is not searched for the same record as the mail envelope 315 source (mail from), but is searched for the same record as the mail envelope 315 destination (rcpt to). Also good. In this way, the mail hold time 313 can be changed depending on the transmission destination. Therefore, if there is a high possibility that a trouble will occur when the transmission destination is a customer, etc., the holding time will be lengthened. For example, a subsidiary may cause trouble even if the transmission is wrong. When it is low, it becomes possible to shorten the holding time. In this case, the hold time 322 may be set not for the transmission destination (rcpt to) itself but for the domain of the transmission destination (rcpt to) (for example, “example.com”). In this way, in S411, by referring to the destination (rcpt to) domain and searching the hold time record 320, the enormous work of setting the hold time 322 for each destination mail address is avoided. be able to.
In addition, a hold time 322 can be set for a combination of a transmission source (mail from) and a transmission destination (rcpt to). By doing in this way, it becomes possible to determine the holding time more finely.

  When determining the hold time by referring to the destination (rcpt to) or destination (rcpt to) domain, there may be multiple destinations (rcpt to) with different hold times in one email. is there. In this case, in S413, the mail (the mail envelope 315, the mail header 316, and the body 317) is duplicated for each hold time, and the hold mail record 310 is copied for each destination (rcpt to) with the same hold time. Add it.

Next, with respect to the operation of the pending mail transmission unit 23 in the third embodiment, differences from the first embodiment will be described using FIG. 5 again.
In S502, the hold mail transmission unit 23 compares the system date / time at the determination time with the hold start time 312, and determines whether the hold time 313 has elapsed at the determination time. Therefore, as described above, the time until transmission after holding can be changed depending on the transmission source or the like.

FIG. 19 is a second example of a flowchart showing the operation of the mail hold determination unit 22 in the third embodiment.
In the second example, the mail hold determination unit 22 calculates the error transmission degree from the mail text and calculates the additional hold time (S412) in addition to the hold time acquisition process from the hold time DB 31 (S411). Note that the processing contents of S401 to S406 and S411 in FIG. 19 are the same as those described so far, and thus description thereof is omitted.
In S412, the mail hold determination unit 22 determines that the transmission destination is, for example, if there is a description suggesting transmission to the outside, such as “corporation”, “like”, or the like near the head of the mail text (for example, within three lines from the head). It is determined that there is a high possibility of an error. Further, for example, when there is a description such as “transmission” or “attachment” in the mail text, and no file is attached, it is determined that there is a high possibility of file attachment omission.

  Then, the erroneous transmission degree is calculated from these determination results. For example, in the above example, when the transmission destination is likely to be in error and the possibility of file attachment omission is high, the error transmission degree is set to 2, and the possibility that the transmission destination is in error is low. When the possibility of omission of file attachment is low, the erroneous transmission degree is set to zero. In addition, in the case where there is a high possibility that the transmission destination is an error or there is a high possibility that a file attachment is omitted, the erroneous transmission degree is set to 1. As described above, not only the erroneous transmission degree is calculated from the mail body, but also the erroneous transmission degree can be calculated from the mail header, for example, an external mail address having a different domain is specified as the transmission destination. .

The mail hold determination unit 22 calculates the additional hold time from the erroneous transmission degree calculated as described above. For example, 0 (0 hours, 0 minutes, 0 seconds) when the erroneous transmission degree is 0, 10 (0 hours, 10 minutes, 0 seconds) when the erroneous transmission degree is 1, and 20 when the erroneous transmission degree is 2. (0 hours 20 minutes 0 seconds) and the like, the additional hold time may be calculated by a monotone increasing function using the erroneous transmission degree as a variable. Here, the “monotonically increasing function” is a monotonically increasing function in a broad sense, that is, a function satisfying f (x) ≧ f (y) when x> y.
When storing the hold mail record 310 in S413, the mail hold determination unit 22 adds the hold time acquired from the hold time DB 32 and the additional hold time calculated in S412 and sets the hold time 313.
With the above processing, it is possible to set a longer holding time for a mail with a high risk of erroneous transmission.

In addition to the above processing, when it is determined in S412 that there is a possibility of erroneous transmission (when the degree of erroneous transmission> 0), a notification mail indicating that there is a possibility of erroneous transmission to the sender of the mail May be sent. In this case, the mail header 316 and the body 317 of the pending mail may be set in the body of the notification mail together with a message for calling attention.
In this way, the content of the email text, the email header, etc., promptly confirm the sender of the email about the risk of erroneous transmission that was mechanically judged, but it cannot be mechanically judged. It is possible to provide an opportunity to confirm the risk of erroneous transmission by a recipient in the same domain as the sender.

Next, a description will be given of a method of adding an approval function by a third party to the hold mail, and continuing to hold the hold mail while it cannot be approved or rejected by the third party.
FIG. 20 is a system configuration diagram of an electronic mail holding system according to the fourth embodiment of the present invention.
The difference from the third embodiment is that the approver client 9 is provided in addition to the normal internal client 1 and the configuration / function of the mail holding server 2 and the storage device 3. Hereinafter, this point will be described.
In the present embodiment, in addition to the internal client 1 as a mail transmission source, an approver client 9 (an internal client 9a and an internal client 9b) that determines approval / disapproval for transmission of the mail to the external client 5 is provided inside the organization. is set up. The configuration of the approver client 9 is the same as that of the normal internal client 1.
In the mail hold server 2, a mail approval request unit 27 is added, and an approval request mail DB 33, an approval request mail management DB 34, and an audit log DB 35 are added to the storage device 3. These contents will be described later.

FIG. 21 is a data configuration diagram of the approval request mail DB 33.
The approval request mail DB 33 is composed of zero or more approval request mail records 330 (there is no approval request mail record 330 when there is no mail to be approved).
The approval request mail record 330 is composed of data items of an approval request mail ID 331, an approval request start time 332, an approver list 333, and an approval wait mail 334, and is shown in FIG. 2 except that an approver list 333 is added. The hold mail record 310 has the same configuration. The approver list 333 is a list of approver IDs or approver mail addresses that make approval requests for the mail. In addition, in the mail envelope transmission destination (rcpt to) of the mail waiting for approval, only the address requiring approval for transmission is described.
Although not shown, the approval request mail record 330 is added, updated, deleted, and the like, as with the hold mail record 310, is performed by a database management means (program) such as MySQL (registered trademark) provided in the mail hold server 2. . For example, the mail approval request unit 27 instructs the database management unit to add the approval request mail record 330 by SQL or the like. Similarly, the database management unit is instructed to delete the approval request mail record 330.

FIG. 22 is a configuration diagram of the approval request definition DB 340. The approval request definition DB 340 is included in the approval request mail management DB 34.
The approval request definition DB 340 includes records defined for each user ID. Each record includes a user ID 341, an email address 342 of the user, an approval exemption flag 343, a position flag 344, an approval policy ID 345, and a job approver list 346. , User defined approver list 347, approval authority agent list 348, and the like. The approval exemption flag 343 is a flag set for a user who does not require an approval request from a third party (for example, a president, an officer, a system administrator, etc.) in this system. “0” is set for other users. The position flag 344 indicates the position of the user, and is set, for example, as general person in charge “1”, chief “2”, section manager “3”, department manager “4”,. The approval policy ID 345 designates an approval policy applied to the group to which the user belongs, and the same approval policy is set according to the department, position, etc. to which the user belongs. Details of the approval policy will be described later.

The job system approver list 346 is a list of user IDs of approvers (superior) of the user's job system. In some cases, the approver may need to include an upper superior (for example, a general manager) or the like in addition to the direct superior (for example, a section manager) of the user, and a plurality of names can be defined. The approver in the organization system is set in advance by the system administrator or the like with reference to the organization table data or the like defined separately, and cannot be set or changed by the user himself / herself.
The user-defined approver list 347 is a list of user IDs of approvers that can be defined by the user. Depending on the form of work of the user, the work may not necessarily be under the manager of the system, but must be working in a project, team, etc. with a person other than the manager in charge. Therefore, approvers can be added on a case-by-case basis according to the type of business. Although not shown, the approver definition by the user may be added or changed on the browser of the internal client 1 held by the user using the HTTP processing unit 24 or the like. However, in order to prevent the user from defining an irrelevant approver, it is only possible to define an approver unless the person has a certain job title or higher (for example, if the job is a manager or higher). It is desirable to keep it. Further, it may be possible to define only a person who is higher in rank than the user's own position (the position flag of the approver> the position flag of the user).
The authorization authority agent list 348 is a proxy that delegates approval authority when a person with a certain position or higher (for example, a person with a position flag 344 of 3 or higher when authority can be transferred only to a section manager or higher) is absent. It is a list of a user ID of a person. The approval authority agent may be set using the HTTP processing unit 24 or the like on the browser of the internal client 1 held by the user.
Note that each item in the approval request definition DB 340 shown in FIG. 22 is merely an example, and only some of these items may be defined, and other items may be added as necessary.

FIG. 23 is a diagram illustrating an example of the configuration of the approval policy definition DB 350. The approval policy definition DB 350 is included in the approval request mail management DB 34.
The approval policy definition DB 350 includes records defined for each approval policy ID. In this example, each record includes an approval policy ID 351, an approval request required department flag 352, an attached file consideration flag 353, and a specific domain name list 354. Are composed of items such as a specific keyword list 355. The approval policy defines a series of judgment criteria for determining whether or not an approval request is required, and is defined for each group to which a different approval policy is to be applied depending on the department, position, and the like.
The approval request required department flag 352 is a flag for setting whether or not an approval request is unconditionally required for an email addressed to an external client of a department to which the approval policy is applied (for example, sales department). “1” is set for the request-required department, and “0” is set for the other departments.
The attached file consideration flag 353 is a flag as to whether or not an approval request is required depending on the presence or absence of an attached file. If “1”, an email addressed to an external client to which an attached file is attached requires an approval request. If “0”, the attached file is not considered, and whether or not the approval request is required is determined based on other conditions. The specific domain name list 354 is a list of destination domain names (such as customer domain names) requiring an approval request. The specific keyword list 355 is for requesting an approval if a specific keyword (for example, a specific customer name, product name, etc.) is included in the title / text of the mail addressed to the external client.
Note that these determination criteria items are merely examples, and the determination criteria may be appropriately set as necessary.

Next, processing contents of the third party approval function will be described.
FIG. 24 is a sequence diagram showing the flow of the third-party approval function for outgoing mail.
First, when the internal client 1 transmits a mail, the mail transmitting / receiving means 21 of the mail holding server 2 receives the mail (S501).
Next, the mail hold determination unit 21 and the mail approval request unit 27 of the mail hold server 2 perform a mail hold / approval necessity determination process (S502). Details of this processing will be described later.
In the mail hold / approval necessity determination process (S502), it is determined that hold / approval is necessary, and if there is a destination that requires mail approval, the mail approval request means 27 makes an approval request for a predetermined destination. A notification mail is transmitted to the internal client 1 of the mail transmission source (S503).
In this case, the approval request mail address is extracted with reference to the approval request mail management DB 34 (S504). Specifically, in the approval request definition DB 340, a mail corresponding to the approver user ID set in the job system approver list 346 and the user-defined approver list 347 is referenced with reference to the record corresponding to the user ID of the user. All addresses 342 are listed and set in the approver list 333 of the record corresponding to the approval request mail ID in the approval request mail DB 33. If the authorization authority agent list 348 is defined in the record corresponding to the user ID of the user, all the email addresses 342 corresponding to the user ID of the agent are also added to the approver list 333.

Next, the mail approval request unit 27 sends an approval request mail with a unique approval request mail ID as a character string to the original mail to be sent to the mail address set in the approver list 333. That is, it transmits to the approver client 9 (S505).
Note that the approval request mail remains stored in the approval request mail DB 34 while no approval or rejection reply is made from the approver client 9, so that the approval request mail is approved / sent for a long time after the mail approval request (S505). If the rejection result is not returned, the mail approval request unit 27 periodically sends a notification mail indicating that the approval has not been processed to the internal client 1 to alert the original mail sender. (S506). The notification mail is transmitted every time a predetermined time (for example, 12 hours, 1 day, 2 days, etc.) has passed since the approval request start time 332.
When a reply of approval or rejection is made from the approver client 9 (S507), the mail approval request means 27 performs processing according to the result of approval or rejection (S508). Details of this processing will be described later.
Next, the mail approval request unit 27 transmits an approval / rejection result notification mail to the internal client 1 of the original transmission source (S509), and sends an approved approval waiting mail 334 to the external client 5. (S510).

FIG. 25 is a flowchart of the mail hold / approval necessity determination process shown in S502 of FIG.
The operation of the mail hold determination unit 22 in S401, S402, S403, S404, S405, S406, and S413 is the same as the flowchart of FIG. Hereinafter, differences from the flowchart of FIG. 4 will be described.
In S403, when it is determined that the transmission destination (rcpt to) is a hold target transmission destination, the mail approval request unit 27 determines whether the transmission destination is a transmission destination to be approved (S441). ). This determination is made by referring to the record corresponding to the transmission source user ID in the approval request definition DB 340.
First, when the approval exemption flag 343 is “1”, since the user is an approval exempt person, it is immediately determined “NO”.
In other cases, each determination criterion item is determined with reference to the record of the approval policy definition DB 350 indicated by the approval policy ID 345.

  In the example of FIG. 23, first, when the approval request required department flag 352 is “1”, it is determined “YES” because all the suspension target mails are the approval request target mails. In other cases, if the attached file consideration flag 353 is “1”, it is determined “YES” if an attached file is attached to the mail. In other cases, the specific domain name list 354 and the specific keyword list 355 are sequentially referred to, and when the destination of the mail matches any of the specific domain name list 354, or the specific keyword list 355 is included in the title / text. If it matches any of the set keywords, “YES” is determined. If none of the above applies, “NO” is determined.

If “NO” is determined in S441, the mail approval request unit 27 does nothing and returns to S406. If “YES” is determined in S441, the transmission destination must be moved from the normal hold mail to the approval request mail, so the mail approval request means 27 sends the transmission destination (rcpt) from the mail envelope of the hold mail. to) is deleted (S442).
Next, the mail approval request unit 27 adds the transmission destination to the destination of the approval waiting mail 334 stored in the approval request mail record 330 (S443). If the approval request mail record 330 for the mail has not been created, the approval request mail record 330 corresponding to the mail is first created, and a unique approval request mail ID is assigned (for example, “0001” as a specific character). ”, The current time is set as the approval request start time 332, the mail body is stored as the approval waiting mail 334, and only the destination of the approval waiting mail 334 is replaced with the transmission destination. . Thereafter, the process returns to S406.

FIG. 26 is a flowchart showing the operation of the mail approval request means 27 in the mail approval / rejection result process shown in S508 of FIG.
When an approval or rejection reply mail is received from the approver client 9 (S601), first, the approval / rejection result, the approver, the reception time, etc. are acquired as an audit log and recorded in the audit log DB 35 (S602). The audit log can be used as a material for the auditor to determine the validity of the approver's approval / rejection later. Note that the mail approval requesting means 27 determines in advance that the subject of the reply mail contains any approval request mail ID existing in the approval request mail DB 33 as a character string, and indicates approval or rejection. When both keywords are included (for example, “approved” or “rejected”), it is recognized as an approval / rejection reply mail.
Next, it is determined whether the approval / rejection reply mail is a reply mail from a legitimate approver (S603). Whether or not the approver is a regular approver is determined depending on whether or not the email address of the responder is included in the approver list 333 corresponding to the approval request email ID indicated in the subject of the email.
If “NO” is determined in S603, the mail approval request unit 27 completes without doing anything, and if “YES” is determined, it is next determined whether the reply is approved or rejected (S604).
If the reply is “approved”, the mail approval requesting means 27 sends an approval waiting mail 334 corresponding to the approval request mail ID to the external client 5 (S605), and if the reply is “rejected”, the mail The process proceeds to the next process without transmitting.
Finally, the mail approval request unit 27 deletes the record corresponding to the approval request mail ID from the approval request mail DB 33 (S606) and ends the process.
In this embodiment, the mail approval / rejection result processing is completed at the stage where the approval / rejection reply mail is first received from any approver. However, if the approver is superior or inferior, If it is desired to obtain the approval of a plurality of persons, the approval / rejection result may be temporarily stored, and the reply results of the plurality of persons may be combined for determination.

As described above, in the fourth embodiment, by providing a third party approval function for outgoing mail, it is possible to more reliably prevent erroneous transmission or malicious transmission to an external party. .
However, according to the fourth embodiment, when an email that needs to be approved is transmitted to the outside, the sender of the email is notified that an approval request has been made, and that the approval has not yet been made. Mail and mail notifying the approval / rejection result are sent one after another. In particular, when it is necessary to frequently send e-mails to the outside, if a large amount of e-mails as described above are sent, business operations may be hindered.
In addition, for example, if an approval request mail is sent each time a subordinate sends a mail to the outside, the approver may be killed every time attention is paid to the work being executed.
Therefore, it is desirable that a mail sender or approver can confirm that an approval request has been made at a timing selected by himself / herself, instead of receiving a mail notification or the like. Furthermore, it is further desirable to be able to select whether to receive notification by e-mail or the like, or to confirm by itself.

Hereinafter, a fifth embodiment according to the present invention, which is an embodiment having such a function, will be described.
First, the system configuration of the electronic mail holding system in the fifth embodiment is the same as that of the fourth embodiment, and is as shown in FIG. However, the data structure of the approval request definition DB 340 is different from that of the fourth embodiment, and the operation of each unit is different from the operation already described. Hereinafter, these differences will be mainly described.

FIG. 27 is a data configuration diagram of the approval request definition DB according to the fifth embodiment of the present invention.
As in the fourth embodiment, the approval request definition DB 340 includes records defined for each user ID. Each record includes a notification necessity flag 349 in addition to the items illustrated in FIG. The notification necessity flag 349 is a flag indicating whether or not it is necessary to send a notification or approval request by email to the sender or approver of the email, and is “1” (performs notification or approval request by email). Necessary) or “0” (no notification by e-mail or request for approval) is set. The notification necessity flag 349 may be set by a system administrator or the like at the time of creating each record and cannot be changed by each user. Although not shown by each user, the notification necessity flag changing means is operated. Thus, the setting value of its own record may be freely changed. Either one can be selected according to the security policy of the system.
The purpose and setting contents of the data items other than the notification necessity flag 349 are the same as those in the fourth embodiment.

Next, processing contents of the third-party approval function in the fifth embodiment will be described.
FIG. 28 is a sequence diagram showing the flow of the third-party approval function for outgoing mail. The difference from the fourth embodiment (FIG. 24) is that the mail approval requesting means 27 transmits a notification mail for requesting approval for a predetermined destination to the internal client 1 of the mail transmission source (S503). When the approval request mail is transmitted to the approver client 9 (S505), when the notification mail indicating that the approval is not processed is periodically transmitted to the internal client 1 (S506), and the internal client 1 In this case, when an approval / rejection result notification mail is transmitted (S509), it is determined whether or not the notification is necessary, and the notification or the like is performed only when necessary. Specifically, the processes of S520, S521, S522, and S523 are added to the flow of the third-party approval function for outgoing mail in the fourth embodiment.

Specifically, in S520, the mail approval request unit 27 refers to the record corresponding to the user ID of the mail transmission source user in the approval request definition DB 340, and “1” is set in the notification necessity flag 349. If YES (YES in S520), a notification mail for requesting approval for a predetermined destination is transmitted to the internal client 1 of the mail transmission source (S503), but “0” is set. In the case (NO in S520), the notification mail is not transmitted. The mail approval request unit 27 performs the same processing in S522 and S523.
In S521, the mail approval request unit 27 refers to the record corresponding to the user ID of each approver of the approval request mail in the approval request definition DB 340, and “1” is set in the notification necessity flag 349. If YES (S521: YES), an approval request mail is transmitted to the approver client 9 (S505). If “0” is set (NO in S521), the approval request mail is sent. The approval request mail is not transmitted to the client client 9.

In the fifth embodiment, as described above, when a notification mail or an approval request mail is transmitted, it is determined whether or not notification related to the user of the transmission destination of the notification mail or the like is necessary, and only when notification is necessary Etc. Therefore, the user is not bothered by a large amount of notification mails or the like by making a setting that notification is not necessary.
However, the fact that the notification mail is not transmitted means that the user loses the timing to know that the mail transmission to the outside has not yet been performed because the approval request has been made. Further, the fact that the approval request mail is not transmitted means that the user loses the timing to know that the approval request has been made to himself / herself.
Therefore, when a setting is made that notification is not required, it is necessary to know that an approval request has been made by another means. For that purpose, the hold mail browsing means 12 may be used. That is, in addition to the items such as the subject, destination, date, and remaining time shown in FIG. 14 on the pending mail list screen, whether or not an approval request has been made for the mail, approval request destination user ID, approval result, etc. May be displayed.

  Specifically, the operations of the suspended mail search unit 25 (described in the second embodiment using FIG. 12) and the suspended mail deletion unit 26 (described in the second embodiment using FIG. 13) are performed. It should be changed as follows.

  FIG. 29 is a flowchart showing the operation of the pending mail search unit 25 according to the fifth embodiment of the present invention. The difference from the second embodiment is that not only all the pending mail records 310 in the pending mail DB 31 but also the approval request mail records 330 corresponding to each pending mail record 310 are referred to in the creation of the pending mail list (S1201a). It is.

  Specifically, the hold mail search means 25 refers to the approval request mail record 330 in which the same value as the hold mail ID 311 is set in the approval request mail ID 331 for each hold mail record 310, and the approver list 333 and the like are referred to. Edit the pending mail list. If the approval request mail record 330 exists, the pending mail search means 25 determines that an approval request has been made for the mail, and if the approval request mail record 330 does not exist, an approval request for the mail is received. What is necessary is just to determine that it is not performed.

FIG. 30 is a flowchart showing the operation of the pending mail deleting unit 26 in Embodiment 5 according to the present invention. The difference from the second embodiment is that, similar to the pending mail search means 25, in the creation of the pending mail list (S1302a), not only all the pending mail records 310 in the pending mail DB 31 but also the approvals corresponding to each pending mail record 310. The request mail record 330 is referred to.
Needless to say, when the pending email browsing means 12 acquires the pending email list as an HTTP response (S1102), whether or not an approval request has been made for the email included in the obtained pending email list is approved. The requested user ID, the approval result, etc. are also displayed on the WEB screen (S1103).

The user who sent the email to the outside by performing the above-described operation of the pending email search means 25 or the like can send the email to the outside because the approval request is made even if the notification email is not sent. You can know that the transmission has not been done yet. In addition, the user who has requested approval can know that an approval request has been made to himself / herself even if an approval request mail is not transmitted.
However, if it is necessary to urgently send an email to the outside, it may not be possible to wait for the user who has been requested for approval to notice that. Therefore, even when the notification necessity flag 349 is set to “0” (no need to send a notification or approval request by email), an emergency email request for approval is sent to the email sender. Also, it may be notified by e-mail that an approval request has been made.

  Specifically, the mail approval requesting means 27 determines whether or not notification is necessary (the processes of S520, S521, S522, and S523 in FIG. 28), and the mail header 316 and body text of the suspended mail 314. Whether or not it is an emergency mail is determined with reference to the contents of 317, and in the case of an emergency mail, notification by mail or the like may be performed regardless of the setting contents of the notification necessity flag 349. Here, for example, when characters such as “emergency” and “urgent” exist in a part of the mail header 316 or the text 317, it can be determined that the mail is an emergency mail. It should be noted that the emergency mail is determined only in the determination as to whether or not the approval request mail is transmitted (S521), and the emergency mail is determined as to whether or not the notification mail is transmitted (the processes of S520, S522, and S523). Various methods can be taken such as not making the determination.

Furthermore, even if it is not an emergency mail, a notification mail or the like may be transmitted in order to call attention if the mail sender or the user who requested the approval has not browsed the hold mail for a long time.
Specifically, for example, the pending email viewing date / time is provided as a data item in the approval request definition DB 340, and the pending email search means 25 sets the processing date / time to the pending email viewing date / time, so The latest date and time when the user lists the held mail is set. When the mail approval request unit 27 determines whether it is necessary to periodically send a notification mail indicating that the approval is unprocessed to the internal client 1 (S522), an approval request for the target hold mail is started. The time 332 is compared with the pending mail viewing date and time of each approval request destination user (the user set in the approver list 333 for each user of the internal client 1), and the approval request start time for any approval request destination user If 332 is after the hold mail viewing date and time, an email requesting that each of the approval request destination users read the hold mail and approve or reject it quickly may be transmitted.

  It should be noted that the configurations and functions of the electronic mail holding system shown in the first to fourth embodiments can be variously combined. For example, if the approver is absent due to a business trip or year-end leave, the approver is judged to be absent in cooperation with the schedule management software or intra-work leave management table, and the absence is notified to the email sender (authorization requester). If the sender sends a keyword “post-approval” when the approver is absent, the system that detects the keyword sends an email without waiting for the approval of the approver. It is also possible to provide additional functions. By doing so, it becomes possible to construct a more suitable system for each electronic mail holding system.

As described above, in the fourth embodiment, by providing a third party approval function for outgoing mail, it is possible to more reliably prevent erroneous transmission or malicious transmission to an external party. .
Further, in the fifth embodiment, it is possible to confirm that an approval request has been made at a timing selected by the user by providing a function for setting whether notification is necessary and a function for browsing a pending mail in a browser.
However, according to the fourth and fifth embodiments, when there are a plurality of approvers, the priority order of the approver such as which approver's approval is given priority or whether the reply results of a plurality of people are combined, not one person, is set. I couldn't judge.
Therefore, when there are a plurality of approvers, it is desirable to determine the priority order, notify the priority order for each approver, and encourage the priority approver to approve.

Hereinafter, a sixth embodiment according to the present invention, which is an embodiment having such a function, will be described. FIG. 31 is a system configuration diagram of an electronic mail holding system according to Embodiment 6 of the present invention.
The difference from the fifth embodiment is the configuration / function of the mail holding server 2 and the storage device 3. Hereinafter, this point will be described.
In the mail hold server 2 of this embodiment, a priority determination unit 28 and a presence confirmation unit 29 are added, and a priority DB 36 and a presence DB 37 are added to the storage device 3. Hereinafter, the added means and processing related to the DB will be mainly described.

FIG. 32 is a data configuration diagram of the priority DB 36 according to the sixth embodiment of the present invention. The priority DB 36 includes a priority policy DB 360 defined for each priority ID. In this example, the priority policy DB 360 includes a priority ID 361, a keyword 362, a domain name 363, an attached file type 364, and a priority policy 365.
The priority ID 361 is a value indicating importance. This importance defines the position and number of approvers.
The keyword 362 is a specific keyword that requires an approval request. For example, keywords such as “confidential, budget meeting...”, “Catalog, release.
The domain name 363 is a domain name that requires an approval request. For example, “example.com”, “hitachi.xxx.com”, etc. are set as domain names for each priority ID 361 (importance).
The attached file type 364 indicates the type of attached file that requires an approval request. For example, “encrypted document”, “text document”,... Are set for each priority ID 361 (importance).
The priority policy 365 defines a standard for determining the position and number of priority approvers. For example, when the value of the priority 361 is “A”, the priority policy 365 defines “everyone above the general manager” that requires the approval of all the managers with the position of the approver or higher. Is “C”, the priority policy 365 defines “first person” that requires only the approval of the earliest approver.

FIG. 33 is a data configuration diagram of the presence DB 37. The presence DB 37 is composed of an attendance status DB 370 defined for each approver ID. In this example, the presence status DB 370 includes an authorizer ID 371, an IP address 372, a departure time 373, a leaving time 374, a logon status 375, and a schedule 376.
The approver ID 371 is an ID for identifying the approver. For example, an employee number is set.
The IP address 372 is set with the IP address of the terminal used by the approver. Based on this, the terminal of the approver is referred to and the presence status is acquired.
The company entry time 373 is the company entry time acquired from the approver's terminal, and is set for each approver ID 371.
The leaving time 374 is the time of leaving the company acquired from the approver's terminal, and is set for each approver ID 371.
The logon status 375 indicates whether or not the approver's terminal is being used. For example, “logon” or the like is set for each approver ID 371.
The schedule 376 shows the latest schedule of the approver. For example, “1300-1500 / meeting” or the like indicating that the meeting is scheduled to be attended from 13:00 to 15:00 and that the time zone is absent is set.

Next, priority determination processing in the sixth embodiment will be described.
FIG. 34 is a sequence diagram showing the flow of the third party approval function. The difference from the fifth embodiment (FIG. 28) is that the priority determination unit 28 performs a process of determining a person who preferentially approves when there are a plurality of approvers. Specifically, the process of S524 is added to the flow of the third-party approval function for outgoing mail in the fifth embodiment.

FIG. 35 is a flowchart showing the priority determination process shown in S524 of FIG.
In the process of S502, the specific domain name, specific keyword, and type of attached file are acquired from the mail envelope or mail header of the mail addressed to the external client, the title / text, and the like.
In S1401 of FIG. 34, the priority determination unit 28 extracts, from the priority policy DB 360, records in which the specific domain name, the specific keyword, and the type of attached file acquired in S502 match. The value of the priority ID 361 is acquired from the record, and this is determined as the importance of the mail. When there are a plurality of acquired domain names, keywords, and attached files, the one with the highest priority ID (importance) is determined as the importance of the mail. Further, the priority policy 365 corresponding to the record is obtained from the record of the determined priority ID 361, and the approver of the position that meets the definition is determined as the priority approval candidate.

In the example of FIG. 32, a case where the specific keyword extracted in the process of S504 is “confidential” will be described.
The priority determination unit 28 extracts records in which the keyword 362 of the priority policy DB 360 is “confidential”. The priority ID 361 corresponding to the record is “A”, and the value is determined as the importance. The priority policy corresponding to the record is “all directors and above”, and the approver who meets the definition is determined as the priority approval candidate.

  However, it is assumed that the priority approval candidate is absent. In the absence, the approval is put on hold for a long time, which causes inconvenience when it is desired to send the mail quickly. For this reason, it is necessary to determine whether or not a priority approval candidate is present (S1402). Hereinafter, the presence determination processing 29 for determining whether or not the priority approval candidate is present will be described.

The presence confirmation means 29 is a so-called daemon (software), and is continuously activated at predetermined time intervals by the mail hold server 2 (more accurately, by the OS (Operating System) of the mail hold server 2).
Based on the IP address of the approver, the presence determination unit 29 refers to the terminal of a person who can be an approver, and enters and leaves the office on the intra-work leave management table at regular intervals, and Windows (registration) The log-in / log-off state of the login script of the trademark) and the scheduled work / time of the schedule management software are acquired, and the results are stored in the attendance time 373, the leaving time 374, the logon status 374, and the schedule 375 of the presence status DB 370. Record and update.
The priority determination process 28 acquires a record of the approver ID 371 that matches the ID of the priority approval candidate from the presence status DB 370. Check the record time 373, leave time 374, logon status 374, schedule 375 of the record, and if you are not scheduled for a holiday such as annual leave, a meeting is scheduled, or if you are logged on The priority approval candidate is determined to be a priority approver. If it is determined that the person is absent, the process returns to the priority person determination process.

  In the example of FIG. 33, the record of the approver ID 371 “189xxx” determined as the priority approval candidate is acquired, and the start time is input with reference to the start time 373 and the leave time 374 corresponding to the record. If the leave time has not been entered, it is determined that the employee has gone to work. Further, referring to the logon status 375 and the schedule 376, it is in the “logon” state, and if the current time is not 13:00 to 15:00 which is the time zone of the scheduled conference, to decide.

  In S1403, by adding a description indicating that it is a priority person to an email notifying of an approval request corresponding to the priority person definition, and transmitting this to the approver and notifying that it is necessary to approve Let

  The present invention can be used in a system that prevents e-mails, especially e-mails transmitted to the outside by members of an organization such as a company, leakage of business secrets, leakage of personal information, and the like.

1a, 1b Internal client 2 Mail hold server 4 Mail server 31 Hold mail database 310 Hold mail record 312 Hold start time 314 Hold mail 315 Mail envelope 32 Hold time database 321 Mail address 322 Hold time 33 Approval request mail database 330 Approval request mail record 331 Approval request email ID
332 Approval request start time 333 Approver list 334 Approval waiting mail 34 Approval request mail management database 340 Approval request definition database 341 User ID
342 Email address 346 Job approval approver list 347 User-defined approver list 348 Approval authority agent list 35 Audit log database 5 External client,
9a, 9b Approver client

Claims (10)

An e-mail hold system in which an internal client is communicatively connected to a mail server via a mail hold server that can hold mail for a predetermined time,
The mail hold server
When an email is received from the internal client, an email envelope is added to the received email to add an email envelope in which the destination set in the email is converted to an actual destination and the sender is set. Means,
A mail hold propriety judging means for judging whether the destination is a destination to hold the mail based on the actual destination domain included in the mail envelope added by the mail envelope adding means;
If the destination is not the destination that should be held, the destination that is not the destination that should be held is deleted from the mail envelope, and only the destination that is not the destination that should be put on hold is sent as the mail destination. Non-holding destination transmission means to
When the transmission destination is a transmission destination to be held, a hold mail storage unit that stores a hold mail record in which a hold start time is added to a hold mail having a transmission destination to be held in a hold mail database;
When activated, a hold time elapsed determination means that sequentially refers to all the hold mail records stored in the hold mail database, and determines whether the hold mail record has passed a predetermined hold time;
If the predetermined hold time has elapsed, the transmission means after the time for transmitting the hold mail to the mail server,
An e-mail hold system comprising: a hold mail record deleting unit that deletes the sent hold mail record from the hold mail database when the mail sending process by the sending unit is completed normally after the elapse of time. The e-mail hold system according to claim 1,
The mail hold server
A deletion instruction determination means for determining whether the received mail is a deletion instruction mail requesting deletion of the held mail;
If the deletion instruction determination unit determines that the deletion instruction mail is a deletion instruction mail, the deletion instruction determination unit determines whether or not deletion is possible by checking the presence of the hold mail record specified in the hold mail database;
When the deletion possibility determination means determines that the designated hold mail record exists and can be deleted, the hold mail record is deleted from the hold mail database, and a delete notification mail is sent to the sender of the delete instruction mail. Delete execution means to
A deletion failure notification unit configured to transmit a deletion failure mail to the transmission source of the deletion instruction mail when the deletion permission determination unit determines that the designated hold mail record does not exist and cannot be deleted; And email hold system. The e-mail hold system according to claim 1 or 2 ,
The mail hold server is a hold release instruction determination unit that determines whether the received mail is a release instruction mail that requests release of the held mail;
If the hold release instruction determining means determines that the received mail is a release instruction mail, the hold release enable / disable determining means for checking the presence of the hold mail record specified in the hold mail database and determining whether the hold mail record can be released; ,
When the hold release possibility determination means determines that the specified hold mail record exists and can be released, the hold mail is sent to the mail server with the destination of the mail envelope of the hold mail record as the final destination. , A hold release mail sending means for deleting the hold mail record from the hold mail database;
When the hold release possibility determination means determines that the hold mail record specified in the hold mail database does not exist and cannot be released, the hold that sends the release failure mail to the sender of the mail envelope of the release instruction mail An e-mail hold system, further comprising: a release failure notification means. The electronic mail holding system according to any one of claims 1 to 3,
The mail hold server
A browsing request processing means for searching all pending email records in the pending email database and outputting a list of pending emails when receiving an HTTP request that requests browsing of the pending emails from the internal client;
A list output result transmitting means for setting the output result output by the browsing request processing means in an HTTP response and transmitting the result to the internal client;
When an HTTP request for requesting deletion or release of hold mail is received from the internal client, the hold mail is deleted by deleting or releasing the hold target record from the hold mail record of the hold mail database. DB correction means,
The post-correction browsing processing means for searching the hold mail database and outputting a list of hold mail after the hold mail DB correction means deletes or deletes the hold and deletes,
A modified list output result transmission unit configured to set an output result by the modified browsing processing unit in an HTTP response and transmit to the internal client;
The internal client
A browsing request transmission means for transmitting the HTTP request for requesting browsing of the pending mail to the mail hold server;
A list output result display means for displaying the acquired suspended mail list when acquiring the suspended mail list as an HTTP response from the mail hold server;
A hold mail DB correction request means for sending a hold mail deletion or hold release request to the mail hold server when a hold mail to be deleted or held is specified in the hold mail list;
A list output result display unit after correction for displaying the acquired list of held mails when the list of held mails after deletion or cancellation is acquired from the mail holding server is further provided. Email hold system. The electronic mail holding system according to any one of claims 1 to 4,
The mail hold server
When a mail is received from the internal client and the destination of the received mail is a destination to be held, a hold time acquisition unit that acquires a preset hold time from a hold time database;
A hold mail record adding means for setting the hold time acquired by the hold time acquiring means and adding a hold mail record to the hold mail database;
An e-mail hold system comprising: a hold time setting unit that sets a predetermined hold time when a hold time cannot be obtained from the hold time database. The e-mail hold system according to claim 5,
The mail hold server
A high mistransmission degree / additional hold time calculating means for calculating a high mistransmission degree indicating a high possibility of erroneous transmission from the received mail and calculating an additional hold time;
An e-mail hold further comprising: a hold time acquired from the hold time database when adding a hold mail record to the hold mail database; and an additional hold time adding means for setting the hold time by adding the additional hold time system. The electronic mail holding system according to any one of claims 1 to 6,
The mail hold server
With reference to the destination of the mail envelope of the mail received from the internal client, if it is determined that the destination is a hold target destination, it is determined whether or not the destination is a destination to be approved. Approval request target success / failure determination means,
A destination deletion unit that deletes the destination from the mail envelope of the pending email when the approval request target determination unit determines that the request is an approval request;
A destination adding means for adding the destination to the destination of the mail waiting for approval stored in the approval request mail record of the approval request mail database;
If the approval request email record for the email has not been created, create an approval request email record corresponding to the email, assign a unique approval request email ID, set the current time as the approval request start time, After storing the mail body as an email waiting for approval, a destination replacement means for replacing the destination of the email waiting for approval with the destination,
When the approval request target determination unit determines that the request is an approval request target and there is a destination that needs to be approved by email, a notification email is sent to the internal client of the email transmission source to request an approval for the specified destination. An approval request execution notification email transmission means to perform,
When the approval request target determination unit determines that the request is an approval request target, refer to the record corresponding to the user ID of the user of the mail set in the approval request definition database in advance, and the system approver list and user-defined approver Approver list setting means for listing all the email addresses corresponding to the approver's user ID set in the list and setting the list in the approver list of the record corresponding to the approval request email ID in the approval request email database ,
If an approval authority agent list is defined in the record corresponding to the user ID of the user in the approval request definition database, all the email addresses corresponding to the user ID of the agent are also added to the approver list. Approval authority agent addition means,
An approval request mail sending means for sending an approval request mail with a unique approval request mail ID as a character string to the original sent mail to the mail address of the approver client set in the approver list, and ,
If the approval / rejection result reply is not made for a long time after the approval request is sent by the approval request mail sending means, an approval reminder mail that periodically sends a notification mail indicating that the approval has not been processed to the internal client A transmission means;
An electronic device further comprising: an approval / rejection result notification mail sending means for sending a notification mail of the approval / rejection result to the internal client of the original transmission source when a reply of approval or rejection is made from the approver client. Mail hold system. An e-mail hold system according to claim 7,
The mail hold server
When receiving an approval or rejection reply email from the approver client, an audit log recording means for acquiring the approval / rejection result, the approver, the reception time, etc. as an audit log and recording it in an audit log database;
The title of the reply mail contains any approval request mail ID existing in the approval request mail database as a character string, and a predetermined keyword indicating approval or rejection is included. An approval / rejection reply recognition means for recognizing an approval / rejection reply email if both are satisfied,
The approval / rejection reply email is a reply email from a legitimate approver depending on whether the email address of the replyer is included in the approver list corresponding to the approval request email ID shown in the subject of the email. A replyer determination unit for determining whether or not
Approval right and wrong determination means for determining whether the reply is approved or rejected for the reply mail determined to be a reply mail from a legitimate approver by the replyer determination unit;
An approval waiting e-mail transmitting unit that transmits an approval waiting e-mail corresponding to the approval request e-mail ID to the external client when the approval right / no-y determining unit determines “approval”;
An e-mail hold system comprising: an approval request record deleting unit that deletes a record corresponding to the approval request mail ID from the approval request mail database. The e-mail hold system according to claim 7 or 8 ,
The mail on hold server, the mail envelope or main Ruhedda, title, text or whether we specific domain name, a specific keyword, to get a different file types with specific Annex, domain name, which is set in advance in the priority policy DB, Means for referring to a record corresponding to a keyword and an attachment file type, and determining a priority ID and a priority policy of the record corresponding to the specific domain name, the specific keyword, and the specific attachment file type;
When there are a plurality of the specific domain name, the specific keyword, and the specific attachment, a unit that determines the most important one as the priority ID and priority policy of the mail;
Means for determining an approver conforming to the determined priority policy definition as a priority approver;
An e-mail holding system comprising: An e-mail hold system according to claim 9,
The mail hold server
Attendance confirmation means that obtains the office time, leaving time, logon status, schedule from the user terminal, and stores it in the presence status database;
The reference to a presence status database, means for determining whether or not the priority authorization candidates Luke have presence,
If present, means to add a priority approver to the notification email,
An e-mail holding system, further comprising:

Images