JP5483986B2 - Log data transmission program, log data transmission device, log data transmission system, and log data transmission method - Google Patents

Description

  The present invention relates to a log data transmission program, a log data transmission device, a log data transmission system, and a log data transmission method for transmitting log data of a predetermined file operation to a log collection server.

  As a mechanism for sharing files such as document files in a company or the like, a file management system is used in which files are centrally managed by a server, and each client downloads a file to be used from the server. In such a file management system, an operation log for each file executed on the client is recorded on the server side so that an inappropriate operation is not performed on the shared file. (For example, refer to Patent Document 1 and Patent Document 2).

JP 2005-242557 A JP 2008-299652 A

  By the way, when recording a file operation log in such a file management system, the client monitors the file operation, and when a predetermined operation is performed, a log indicating the operation content to the management server via the network. A function of transmitting data is provided (see paragraphs 0026 to 0027 of Patent Document 1, paragraphs 0025 and 0027 of Patent Document 2, etc.).

  That is, in the program provided in the client, the address of the management server that is the transmission destination of the log data is set, and it is considered that the log data in each client is collected in the management server. When managing files in a network in an organization such as a company, there is no problem with centralized management of file operation logs on a specific management server, but this mechanism cannot be used in the following cases: .

  For example, a company A sends a document file by e-mail or the like to a company C, which is undertaking the work requested by the company A, for business communication, and a file operation log for the document file on the computer of the company C When it is desired to collect log data, a problem arises in that log data cannot be acquired by the management server of company A from the computer of company C that is not connected to the corporate network of company A.

  Further, even if the Internet is used for the network with a mechanism as shown in Patent Document 1 and Patent Document 2, the log data from Company C can be received by the management server of Company A via the Internet. Such a problem will occur. Company C, which is a company independent from Company A, usually undertakes business from Company B other than Company A, but Company B also operates operations on document files sent for business communication. When it is desired to collect logs, the transmission destinations of the management servers of the A company and the B company must be set in the program for transmitting log data of the computer of the C company. That is, when it is desired to collect a log of a file to be transmitted outside the company, the management server of the company must be set as a log data transmission destination in the programs of all the computers to which the file is transmitted.

  The present invention has been made to cope with such a problem. In a computer that has received a file transmitted from a plurality of transmission sources, log data of a predetermined file operation is designated at each transmission source. It is an object of the present invention to provide a log data transmission program, a log data transmission device, a log data transmission system, and a log data transmission method that can be transmitted to a log collection server.

  The present invention for solving such problems is a log data transmission for transmitting log data of a predetermined file operation performed on the file to a log collection server in a computer that has received a file transmitted from another computer. A program, a reception step for receiving a request for a predetermined file operation in which a file received from the other computer is designated to the computer, and a process for a file operation corresponding to the request received in the reception step A reading step for reading the address of the log collection server embedded in the file and the identification information of the file from the file that is the target of the file operation, and the reading that is read in the reading step File identification information and type of file operation And generating at least including log data and information specifying the a log data transmission program for causing to execute a transmission step of transmitting the log data to the address of the log collecting server.

  According to the present invention, the address of the log collection server that transmits log data related to each file is embedded in the file transmitted from another computer, and the log embedded in the file when a predetermined file operation is performed. Since the log data is transmitted to the address of the collection server, the log data can be transmitted to the log collection server designated at the transmission source of each file.

  Files that are the subject of the present invention can include files used in various application programs, such as document files, spreadsheet files, and presentation files. In addition to file opening operations, various file operations, such as file update, printing, deletion, policy setting, and password input errors, can be targeted for file operations to be sent log data.

  Further, the present invention causes the computer to execute a second reading step of reading at least one of identification information of the computer or identification information of a user who is logged in to the computer, and the log collection server in the transmission step The log data transmitted to the address may include at least one of the identification information of the computer or the identification information of the user read in the second reading step.

  In the present invention, such processing makes it possible to collect logs of computers or users that have performed operations.

  Furthermore, the present invention refers to a predetermined identifier embedded in the file to the computer, and determines whether the file is a file for transmitting log data to the log collection server from the identifier. And when the file for which the file operation request has been accepted is determined to be transmitted to the log collection server in the determination step, the transmission step is executed to execute the log data. May be transmitted to the address of the log collection server.

  In the present invention, when a file operation is performed on a normal file that is not a log data transmission target, the process for transmitting the log data is not started by such a process. It becomes possible to reduce the processing load concerning transmission.

  The present invention can also be specified as a log data transmission device including the log data transmission program according to the present invention.

  A log data transmission device according to the present invention is a log data transmission device that receives a file transmitted from another computer and transmits log data of a predetermined file operation performed on the file to a log collection server. A receiving unit that receives a request for a predetermined file operation in which a file received from the other computer is designated; a processing unit that executes a process for a file operation corresponding to the request received by the receiving unit; Reading means for reading the address of the log collection server embedded in the file and the identification information of the file from the file that is the target of the file operation, and the identification information of the file and the file read by the reading means Log data including at least information specifying the type of operation is generated, and the log data is generated. Characterized in that it comprises a transmitting means for transmitting the data to the address of the log collecting server, a.

  The log data transmitting apparatus according to the present invention further comprises second reading means for reading at least one of identification information of the log data transmitting apparatus or identification information of a user who has logged in to the log data transmitting apparatus. The log data transmitted by the transmission unit to the address of the log collection server includes at least one of identification information of the log data transmission device read by the second reading unit or identification information of the user. Can also be characterized.

  Furthermore, the log data transmission device according to the present invention refers to a predetermined identifier embedded in the file, and determines from the identifier whether the file is a file for transmitting log data to the log collection server. Provided with a determination unit, and when it is determined that the file for which the file operation request has been received by the determination unit is a file to which log data is to be transmitted to the log collection server, the transmission unit includes the log data May be transmitted to the address of the log collection server.

  The present invention can also be specified as a log data transmission system including the log data transmission program according to the present invention and another computer that transmits a file.

The log data transmission system according to the present invention is a process of transmitting log data of a predetermined file operation performed on a file to a log collection server in another computer that transmits the file and the computer that has received the file. a log data transmission system including a log data transmission program to be executed, the other computer, embed the address of the log collecting server files and identification information of said file, transmitting means for transmitting to said computer And the log data transmission program responds to the request received by the computer in a predetermined file operation requesting a file received from the other computer, and the request received in the reception step. Process for file operations A processing step to perform, a reading step to read the address of the log collection server embedded in the file and the identification information of the file from the file to be subjected to the file operation, and the file read in the reading step Generating log data including at least identification information and information specifying the type of file operation, and transmitting the log data to an address of the log collection server.

  Further, in the log data transmission system according to the present invention, the log data transmission program causes the computer to read at least one of identification information of the computer or identification information of a user who is logged in to the computer. The log data transmitted to the address of the log collection server in the transmitting step includes at least one of the computer identification information or the user identification information read in the second reading step. It can also be characterized.

Furthermore, in the log data transmission system according to the present invention, in the other computer, the transmission means encrypts the file and transmits the encrypted file to the computer , and the log data transmission program is embedded in the file in the computer. A determination step for determining whether the file is a file to which log data is to be transmitted to the log collection server based on the identifier, and executing a request for the file operation in the determination step. When it is determined that the received file is a file to which log data should be transmitted to the log collection server, the transmission step is executed, and the log data is transmitted to the address of the log collection server. Also good.

  The present invention can also be specified as a log data transmission method executed by a log data transmission program or a log data transmission system according to the present invention.

  According to the present invention, log data of file operations performed on files transmitted from different transmission destinations can be transmitted to the log collection server designated at each transmission source. When sending document files etc. as a business communication to a contractor, it is possible to collect log data of file operations on the contractor side, and the contractor is undertaking work from multiple clients Even if it exists, log data can be transmitted to the server designated by each client.

It is a figure which shows an example of embodiment of this invention. It is a block diagram which shows the structure of the log data transmission system concerning this invention. It is a 1st figure which shows the transmission procedure of the log data by this invention. It is a 2nd figure which shows the transmission procedure of the log data by this invention. It is a 3rd figure which shows the transmission procedure of the log data by this invention. It is a 4th figure which shows the transmission procedure of the log data by this invention. It is a flowchart which shows the processing flow of the log data transmission program concerning this invention.

  Embodiments for carrying out the present invention will be described below in detail with reference to the drawings. The following description shows an example of an embodiment of the present invention. The application of the present invention, the types of files to be collected by the present invention, the types of application programs for opening files, etc. Is not limited to such an embodiment.

  Using FIG. 1, the log data transmission program according to the present invention is applied to a computer of company C that has been contracted by company A and company B, respectively, and business communication is performed from the terminals (transmission terminals) of company A and company B. A description will be given of an embodiment in which a log of file operations on a file transmitted to a terminal of company C is collected in a log collection server of each of company A and company B.

  Company A sends a document file for business communication by electronic mail to Company C, which undertakes the business requested by Company A. Further, company C is also undertaking work requested by company B, and a document file for business communication is also transmitted from company B by electronic mail to the terminal (receiving terminal) of company C.

  Here, the document files generated to be transmitted to the company C by the terminals (transmission terminals) of the company A and the company B include the addresses of the log collection servers of the company A and the company B, respectively, A file ID that can identify each document file is embedded. These document files are encrypted, and the mailer is activated and transmitted from the terminals of A company and B (sending terminal) to the terminal of C company (receiving terminal).

  In the terminal (receiving terminal) of company C that has received the encrypted document file, when an operation for opening the document file is performed, a corresponding application program is started. Since the document file opened here is encrypted, decryption processing is performed by the add-in of the application program, but whether or not log data needs to be transmitted for the document file to be operated is determined. Is determined based on the presence or absence of a predetermined identifier in the case, and when it is determined as a transmission target, a log data transmission process is performed.

  First, an address such as the URL of the log collection server of company A or company B embedded in the document file is read, and this address is designated as the log data transmission destination. Further, the file ID is read from the document file, and the terminal ID such as the MAC address for identifying the terminal and the logged-in user ID are read from the terminal (receiving terminal) of company C. Generate log data including the read file ID, terminal ID, user ID, and processing corresponding to the executed file operation (here, the file was decrypted and opened). Send log data to the log collection server.

  As described above, in the present invention, the address of the log collection server that transmits log data is embedded in the document file received at the company C terminal (reception terminal), and this address is read by the company C terminal (reception terminal). , Specify the destination and send the log data. For this reason, the logs of document files sent outside the company are collected by sending the document file in which the address of the server for which the log is to be collected is sent from the terminals of A company and B company (sending terminal) that send the document file. It is possible to do.

  FIG. 2 shows a configuration of a log data transmission system according to the present invention. In FIG. 2, the log data transmission program according to the present invention is a program that operates in the reception terminal 20, and constitutes a log data transmission system according to the present invention including a part of functions of the transmission terminal 10.

  The transmission terminal 10 is a computer having a communication function, and includes an arithmetic processing unit 11, a file transmission program 12, an application program 13, a transmission file generation program 14, and a file storage unit 15.

  The arithmetic processing unit 11 corresponds to the CPU and main memory (including virtual memory of the hard disk) of the computer, and reads out a program from the hard disk or the like and executes arithmetic processing. The file transmission program 12, the application program 13, and the transmission file generation program 14 are programs that are stored in a hard disk or the like of a computer and read by the arithmetic processing unit 11 to execute predetermined processing. A predetermined storage area such as a hard disk of a computer is allocated to the file storage unit 15.

  Among the above programs, the file transmission program 12 is a program capable of transmitting a file by e-mail or the like, and an e-mail, a browser, or the like is used. The application program 13 is an application for creating and editing a file to be transmitted, and application programs such as document creation, spreadsheet, and presentation are used. The file transmission file generation program 14 is a program unique to the present invention, and executes processing for embedding the address of a server collecting the log, a file ID for identifying the file, and the like in the file to be transmitted.

  The reception terminal 20 is a computer having a communication function, and includes an arithmetic processing unit 21, a file reception program 22, an application program 23, a file decryption program 24, a log data transmission program 25, and a file storage unit 26.

  The arithmetic processing unit 21 corresponds to the CPU and main memory (including the virtual memory of the hard disk) of the computer, reads out a program from the hard disk or the like, and executes arithmetic processing. The file reception program 22, the application program 23, the file decryption program 24, and the log data transmission program 25 are programs that are stored in a hard disk or the like of a computer and read by the arithmetic processing unit 21 to execute predetermined processing. A predetermined storage area such as a hard disk of a computer is allocated to the file storage unit 26.

  Among the above programs, the file receiving program 22 is a program capable of receiving a file by e-mail or the like, and mail, a browser or the like is used. The application program 23 is an application for opening and editing a received file, and application programs such as document creation, spreadsheet, and presentation are used. The file decryption program 24 and the log data transmission program 25 are programs unique to the present invention that operate as add-ins for the application program 23. The file decryption program 24 and the log data transmission program 25 collect a process of decrypting a received file and opening it by the application program 23, and collecting logs. A process of reading the server address and transmitting log data is executed.

  The log collection server 30 is a server that receives log data transmitted from the receiving terminal 20 and collects a log of file operations on a file transmitted from the transmitting terminal 10 to the receiving terminal 20. The configuration and functions of the log collection server 30 are not particularly limited, and the same computer as the transmission terminal 10 may be used for the log collection server 30.

  Based on the above-described configuration shown in FIG. 2, the log data transmission procedure according to the present invention will be described with reference to the flowcharts of FIGS. 3 to 6 and FIG. FIG. 3 shows a procedure for generating a transmission file encrypted by the transmission terminal 10 and transmitting it to the reception terminal 20.

  In the transmission terminal 10, the file created and edited by starting the application program 13 is stored in the file storage unit 15. When the file stored in the file storage unit 15 is transmitted to the receiving terminal 20, the transmission file generation program 14 is activated and a file to be transmitted to the receiving terminal 20 is selected from the files stored in the file storage unit 15. .

  When a file to be transmitted to the receiving terminal 20 is selected, the transmission file generation program 14 requests the selected file to send an address of the log collection server 30, a file ID for identifying the file to be transmitted, and log data. A process for embedding the indicated identifier is executed to generate a transmission file to be transmitted to the receiving terminal 20. The method for embedding these data in a transmission file is not particularly limited. For example, a header for writing these data in the transmission file may be set.

  The method for specifying the address of the log collection server 30 is not particularly limited, and the URL, IP address, etc. of the log collection server 30 may be used. Since the file ID is used to identify a target file when collecting logs in the log collection server 30, it is necessary to assign a unique ID to each file.

  The file for transmission generated by the above procedure is received by starting the file transmission program 12 such as a mailer, attached to the email designated as the transmission destination by the email address used in the receiving terminal 20 It is transmitted to the terminal 20. Note that the method of transmitting the file is not limited to e-mail, and a file for transmission is written from the transmission terminal 10 to a predetermined server using a browser or the like, and this file is used using the browser or the like of the reception terminal 20. It is good also as reading.

  4 shows a procedure for receiving and decrypting an encrypted file at the receiving terminal 20, and FIG. 5 shows a procedure for sending log data about the opening of the file to the log collection server 30. ing. These procedures will be described with reference to the processing flow of the flowchart of FIG.

  The receiving terminal 20 activates a file receiving program 22 such as a mailer and receives an encrypted file. The received file is stored in the file storage unit 26. When an operation for opening the file is accepted, the application program 23 corresponding to the type of the file, the file decryption program 24 that is an add-in of the program, and log data are stored. The transmission program 25 is activated. This order may be reversed, and an operation for opening a file in a state where the application program 23 corresponding to the file type, the file decryption program 24 and the log data transmission program 25 which are add-ins of the program are activated. May be received (S1 in FIG. 7).

  Since the file selected here may be a file that is not a log data transmission target, such as a file created by the receiving terminal 20, the log data transmission program 25 subsequently logs the selected file into a log. It is determined whether the data is to be transmitted (S2 in FIG. 7). This determination can be confirmed by the presence or absence of this identifier, as described above, because an identifier indicating that log data transmission is requested is embedded in the file transmitted from the transmission terminal 10. is there.

  In both cases where the selected file is a transmission target of log data and a case where it is not a transmission target, a process corresponding to the accepted operation, in this case, a file encrypted by the file decryption program 24 is decrypted and decrypted. The file is opened by the application program 23 (S3 and S7 in FIG. 7; the file may be opened on the condition that the password is matched and the password is matched) When the recorded file is a log data transmission target, the log data is transmitted by the following process.

  First, as described above, the log data transmission target file is embedded with the address of the log collection server 30 and the file ID for identifying the file, as shown in FIG. Data is read from the file (S4 in FIG. 7). Further, as shown in FIG. 5, the terminal ID for identifying the receiving terminal 20 such as the MAC address written in the NIC of the receiving terminal 20 and the user ID of the user who is logged in to the receiving terminal 20 are read (FIG. 5). 7 S5). Note that only one of the terminal ID and the user ID may be read.

  Using the data read as described above, file information such as a file ID, terminal information such as a terminal ID and a user ID, and operations related to the type of processing (here, file opening processing) corresponding to the executed file operation Log data including information and the like is generated, the address of the log collection server 30 is designated as a transmission destination, and the generated log data is transmitted (S6 in FIG. 7). As described above, the log data related to the file operation is collected by the log collection server 30 specified for each file. Therefore, according to the present invention, the log is collected on a different server for each file sender. Is possible.

  The log data transmitted to the log collection server 30 can include the following information, for example. The file information may include, in addition to the file ID, the file path where the file is stored, the file name, the name of the machine that generated the file (here, the machine name of the transmission terminal 10), and the like. The terminal information may include the machine name of the receiving terminal 20 in addition to the terminal ID and the user ID. In addition to the type of operation, the operation information may include an operation result (success or failure). In addition to these information, as file information at the generation source that generated the file, data such as a file path at the time of generation (in this case, the transmission terminal 10), a file name at the time of generation, and a generation date and time are embedded in the file for transmission. However, these data may be read and included in the log data.

  FIG. 6 shows a procedure for transmitting log data to the log collection server 30 when printing is performed after the file received by the receiving terminal 20 is decrypted and opened.

  As in the case of the operation for opening the file, when the file is selected and a file operation, here, a print request is accepted (S1 in FIG. 7), the log data transmission program 25 logs the selected file. It is determined whether the data is to be transmitted (S2 in FIG. 7). When it is determined that the log data is to be transmitted, the process of transmitting the log data is executed together with the printing of the file (S3 in FIG. 7) in the same manner as when the file is opened (FIG. 7). S4 to S6), in this case, log data including file printing as operation information is transmitted.

  The file operation to which log data is to be transmitted is not particularly limited. In addition to the file opening process and the printing process, for example, the file update process, the file deletion process, and the policy setting (update) Permission, reference only, etc.), password entry failure, etc. can be targeted.

DESCRIPTION OF SYMBOLS 10 Transmission terminal 11 Operation processing part 12 File transmission program 13 Application program 14 Transmission file generation program 15 File storage part 20 Reception terminal 21 Operation processing part 22 File reception program 23 Application program 24 File decoding program 25 Log data transmission program 26 File storage Part 30 Log collection server

Claims (11)

In a computer that has received a file transmitted from another computer, a log data transmission program for transmitting log data of a predetermined file operation performed on the file to a log collection server, the computer including:
A reception step of receiving a request for a predetermined file operation in which a file received from the other computer is designated;
A processing step of executing processing for file operation corresponding to the request received in the receiving step;
A reading step of reading an address of the log collection server embedded in the file and identification information of the file from the file to be subjected to the file operation;
Generating log data including at least the identification information of the file read in the reading step and information specifying the type of the file operation, and transmitting the log data to an address of the log collection server;
A log data transmission program characterized in that In the computer,
Executing a second reading step of reading at least one of identification information of the computer or identification information of a user logged in to the computer;
The log data transmitted to the address of the log collection server in the transmission step includes at least one of the identification information of the computer or the identification information of the user read in the second reading step. The log data transmission program according to claim 1. In the computer,
With reference to a predetermined identifier embedded in the file, a determination step is performed to determine whether the file is a file for transmitting log data to the log collection server from the identifier,
When it is determined in the determination step that the file that has received the file operation request is a file to which log data is to be transmitted to the log collection server, the transmission step is executed to collect the log data in the log collection The log data transmission program according to claim 1, wherein the log data transmission program is transmitted to a server address. A log data transmission device that receives a file transmitted from another computer and transmits log data of a predetermined file operation performed on the file to a log collection server,
Receiving means for receiving a request for a predetermined file operation in which a file received from the other computer is designated;
Processing means for executing processing for file operation corresponding to the request received by the receiving means;
Reading means for reading the log collection server address embedded in the file and the identification information of the file from the file that is the target of the file operation;
Transmitting means for generating log data including at least the identification information of the file read by the reading means and information specifying the type of the file operation, and transmitting the log data to an address of the log collection server;
A log data transmitting device comprising: A second reading unit that reads at least one of identification information of the log data transmission device or identification information of a user who has logged in to the log data transmission device;
The log data transmitted by the transmission unit to the address of the log collection server includes at least one of identification information of the log data transmission device read by the second reading unit or identification information of the user. 5. The log data transmitting apparatus according to claim 4, wherein A determination unit that refers to a predetermined identifier embedded in the file and determines whether the file is a file for transmitting log data to the log collection server from the identifier;
When the determination unit determines that the file that has received the file operation request is a file to which log data is to be transmitted to the log collection server, the transmission unit transmits the log data to the address of the log collection server. 6. The log data transmitting apparatus according to claim 4, wherein the log data transmitting apparatus transmits the log data. Another computer that transmits a file and a log data transmission program that executes processing for transmitting log data of a predetermined file operation performed on the file to a log collection server in the computer that has received the file A log data transmission system,
The other computer is :
The file includes a transmission unit that embeds the address of the log collection server and the identification information of the file in a file and transmits the file to the computer.
The log data transmission program is stored in the computer.
A reception step of receiving a request for a predetermined file operation in which a file received from the other computer is designated;
A processing step of executing processing for file operation corresponding to the request received in the receiving step;
A reading step of reading an address of the log collection server embedded in the file and identification information of the file from the file to be subjected to the file operation;
Generating log data including at least the identification information of the file read in the reading step and information specifying the type of the file operation, and transmitting the log data to an address of the log collection server; A log data transmission system characterized by being executed.
The log data transmission program is stored in the computer.
Executing a second reading step of reading at least one of identification information of the computer or identification information of a user logged in to the computer;
The log data transmitted to the address of the log collection server in the transmission step includes at least one of the identification information of the computer or the identification information of the user read in the second reading step. The log data transmission system according to claim 7. In the other computer,
The transmission means encrypts the file and transmits it to the computer ,
The log data transmission program is stored in the computer.
With reference to a predetermined identifier embedded in the file, a determination step is performed to determine whether the file is a file for transmitting log data to the log collection server from the identifier,
When it is determined in the determination step that the file that has received the file operation request is a file to which log data is to be transmitted to the log collection server, the transmission step is executed to collect the log data in the log collection 9. The log data transmission system according to claim 7, wherein the log data transmission system transmits to a server address.
In a computer that has received a file transmitted from another computer, a log data transmission method for transmitting log data of a predetermined file operation performed on the file to a log collection server,
An accepting step for accepting a request for a predetermined file operation in which the computer receives a file received from the other computer;
A processing step in which the computer executes processing for file operation corresponding to the request received in the receiving step;
A reading step in which the computer reads an address of the log collection server embedded in the file and identification information of the file from the file to be subjected to the file operation;
Transmission in which the computer generates log data including at least the identification information of the file read in the reading step and information specifying the type of the file operation, and transmits the log data to the address of the log collection server Steps,
A log data transmission method comprising: Log data transmission method for transmitting log data of a predetermined file operation performed on the file to the log collection server in the computer, which is executed by another computer that transmits the file and the computer that has received the file Because
A first transmission step in which the other computer embeds an address of the log collection server and identification information of the file in a file and transmits the file to the computer;
The computer receiving the file from the other computer;
A step of accepting a request for a predetermined file operation in which the computer designates the file;
A processing step in which the computer executes processing for file operation corresponding to the request received in the receiving step;
A reading step in which the computer reads an address of the log collection server embedded in the file and identification information of the file from the file to be subjected to the file operation;
The computer generates log data including at least the identification information of the file read in the reading step and information specifying the type of file operation, and transmits the log data to the address of the log collection server. Two transmission steps;
A log data transmission method comprising:

Images