JP5870684B2 - Information processing apparatus, information processing method, and computer program - Google Patents

Description

  The present invention relates to a technique for creating a transmission control rule used for e-mail transmission control.

  In recent years, leakage of personal information and confidential information has been affecting corporate trust. Information leakage may occur due to unauthorized access from the outside, but most are caused by carelessness of people inside the company, and information leakage is caused by inadvertent transmission of files using e-mail, etc. It has become urgent to take measures against information leakage as a company.

  Therefore, when an e-mail is sent from an internal network to an external network, an e-mail audit system that determines whether to transmit or prohibit transmission according to the content of the e-mail is introduced. Take measures to prevent information leakage.

  In addition, e-mails sent from corporate mail servers are saved as log data, and if the leak occurs, we will investigate afterwards what kind of situation has occurred. I can do it.

In such a system, a keyword or the like is set, and an e-mail in which the keyword is used is made undeliverable, or delivery is permitted to the superior (administrator) of the employee who sent the e-mail. In general, a notification is issued so as to select e-mail, and transmission control of electronic mail is performed according to the selection by the administrator.

As such prior art, Patent Document 1 discloses a mechanism for checking in advance the content of a mail to be transmitted and preventing an undesired mail from being transmitted in advance.

JP 2007-272607 A

  In a company, an employee may belong to multiple organizations (concurrent). For example, it is assumed that employee A belongs to organization X and organization Y. At this time, the email sent by this employee A is suspended, and either the administrator of organization X or the administrator of organization Y is audited when deciding whether or not to send the email according to the instructions of the auditor. The problem of whether or not it should be made occurs.

  If it is related to the business of organization X, the content may not be viewed by the administrator of organization Y, and vice versa. If the e-mail auditor is not set appropriately, it causes the problem that the auditor touches information that is not supposed to be touched, which leads to the spread of information.

  In view of the above-described problems, the present invention has an object of appropriately determining an inspector when an e-mail transmitted by the user is put on hold when the user belongs to a plurality of organizations. .

  In order to achieve the above object, an information processing apparatus of the present invention is an information processing apparatus that creates a transmission control rule for use in e-mail transmission control, and includes an e-mail condition that is subject to transmission control. Using the first receiving means for receiving the first information, the second receiving means for receiving the second information including the condition for determining the e-mail auditor, the first information and the second information. And creating means for creating the transmission control rule.

  In order to achieve the above object, an information processing method of the present invention is an information processing method performed by an information processing apparatus that creates a transmission control rule used for transmission control of an electronic mail, A first receiving step for receiving first information including a mail condition; a second receiving step for receiving second information including a condition for determining an e-mail auditor; the first information and the first information And a creation step of creating the transmission control rule using the information of No. 2.

  In order to achieve the above-described object, the computer program of the present invention provides first information including an e-mail condition for which an information processing apparatus for creating a transmission control rule used for e-mail transmission control is subject to transmission control. First transmission means for receiving the second information, second reception means for receiving second information including a condition for determining an e-mail inspector, and the transmission using the first information and the second information. It functions as a creation means for creating a control rule.

  According to the present invention, by creating an e-mail transmission control rule using a rule for determining an inspector, an electronic device that is suspended as a result of a transmission control process for an e-mail that is performed using the transmission control rule. The effect is that it is possible to appropriately determine the e-mail auditor.

It is a block diagram which shows an example of the system configuration | structure of the information processing system of this invention. It is a figure which shows an example of the hardware constitutions of the information processing apparatus applicable to the server apparatus 101 of FIG. It is a figure which shows an example of a function structure of the server apparatus 101 of FIG. It is a flowchart which shows the outline | summary of the process performed by the server apparatus 101 of FIG. It is a flowchart which shows the detailed process of the transmission control rule update process of step S402 of FIG. It is a flowchart which shows the detailed process of the transmission control process of FIG.4 S404. It is a flowchart which shows the detailed process of the audit process of step S406 of FIG. It is a figure which shows an example of the data structure of user information DB800, group information DB810, and user affiliation group DB820 which comprise the personnel information 301-1 memorize | stored in the external memory 211 of the server apparatus 101. 6 is a diagram illustrating an example of a data configuration of an auditor determination rule 301-2 stored in an external memory 211 of the server apparatus 101. FIG. It is a figure which shows an example of a data structure of the transmission control rule creation information 301-3 memorize | stored in the external memory 211 of the server apparatus 101. 4 is a diagram illustrating an example of a data configuration of a transmission control rule 301-4 stored in an external memory 211 of the server apparatus 101. FIG. It is a figure which shows an example of a data structure of transmission control result log DB301-5 memorize | stored in the external memory 211 of the server apparatus 101 and pending | holding email DB301-6.

  Hereinafter, an example of an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing an example of a system configuration of an information processing system according to the present invention. As shown in FIG. 1, an information processing system according to the present invention includes a server device 101, client PCs 102-1 to 102-3 (hereinafter collectively referred to as client PCs 102), and a LAN 103 for connecting them so that they can communicate with each other. And so on. The server apparatus 101 is communicably connected to external mail servers 105-1 to 105-3 (hereinafter collectively referred to as the external mail server 105) via a wide area network 104 such as the Internet.

  The server apparatus 101 stores a transmission control rule used to determine whether to permit or not allow relaying of an e-mail transmitted from the client PC 102 to an external mail server, and from the client PC 102 using the transmission control rule. When it is determined whether or not to relay (reject) e-mail transmitted to the external mail server 105 is permitted and it is determined that relay is permitted, the e-mail is relayed to the external mail server 105.

  When the server apparatus 101 receives a transmission control rule change instruction from the client PC 102, the server apparatus 101 performs a transmission control rule change process. Furthermore, when it is determined by the administrator of the sender of the e-mail that the e-mail is relayed as a result of the e-mail transmission control process using the transmission control rule, a preliminary audit from the administrator is accepted. A post-audit that audits whether the e-mail transmission control rule using the transmission control rule is valid is also accepted from the administrator of the e-mail sender.

  The client PC 102 is a terminal device used by a user who transmits and receives electronic mail. Further, the client PC 102 is used for inputting a pre-audit and a post-audit for the e-mail from the administrator of the e-mail sender to the server apparatus 101.

  The above is an example of the system configuration of the information processing system of the present invention.

  Next, an example of the hardware configuration of the information processing apparatus applicable to the server apparatus 101 in FIG. 1 will be described with reference to FIG.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls each device and controller connected to the system bus 204. The ROM 203 or the external memory 211 has a BIOS (Basic Input / Output System), an operating system program (hereinafter referred to as OS), which is a control program for the CPU 201, and a function that is executed by the server device 101 to be described later. Various programs to be stored are stored.

  A RAM 202 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program necessary for execution of processing from the ROM 203 or the external memory 211 into the RAM 202 and executing the loaded program.

  An input controller 205 controls input from an input device 209 such as a keyboard and a pointing device. A video controller 206 controls display on a display device such as the display device 210. These are used by the operator as needed.

  A memory controller 207 is connected to the hard disk (HD), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, etc. via an adapter. The access to the external memory 211 such as a compact flash (registered trademark) memory is controlled.

  A communication I / F (interface) controller 208 is connected to and communicates with an external device via a network (for example, the LAN 103 or the wide area network 104 shown in FIG. 1), and executes communication control processing in the network. . For example, communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the display device 210 by executing outline font rasterization processing on a display information area in the RAM 202, for example. Further, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the display device 210.

  The processing of each step shown in the flowchart to be described later for realizing the present invention is executed by a program that can be read and executed by a computer, and the program is recorded in the external memory 211. Then, it is executed by the CPU 201 by being loaded into the RAM 202 as necessary. Furthermore, definition files and various information tables used when executing the program are also stored in the external memory 211, and a detailed description thereof will be described later. Note that an information processing apparatus having a similar hardware configuration can be applied to the client PC 102 of FIG. The above is an example of the hardware configuration of the information processing apparatus applicable to the server apparatus 101 in FIG.

  Next, the functional configuration of the server apparatus 101 in FIG. 1 will be described with reference to FIG. As illustrated in FIG. 3, the server apparatus 101 includes a storage unit 301, a transmission control rule creation unit 302, an email acquisition unit 303, a transmission control unit 304, and an audit processing unit 305.

  The storage unit 301 includes group information 301-1 received from the client PC 102, an auditor determination rule 301-2, transmission control rule creation information 301-3, a transmission control rule 301-4 created by the transmission control rule creation unit 304, This is a functional unit that stores the pending email 301-5 and the transmission control result log 301-6. The data configuration of each data stored in the storage unit 301 will be described later with reference to FIGS.

  The transmission control rule creation unit 302 performs e-mail transmission control using the personnel information 301-1, the auditor determination rule 301-2, and the transmission control rule creation information 301-3 stored in the storage unit 301. It is a functional unit that creates a transmission control rule 301-4 used at this time.

  The e-mail acquisition unit 303 is a functional unit that acquires an e-mail addressed to the external mail server 105 transmitted from the client PC 102.

  The transmission control unit 304 uses the transmission control rule 301-4 stored in the storage unit 301 to determine whether or not the email acquired by the email acquisition unit 303 can be transmitted to the external mail server 105. It is a functional part that performs.

  The audit processing unit 305 is a functional unit for causing an e-mail inspector to perform an audit input for prohibiting transmission / transmission of an e-mail whose transmission has been suspended by the transmission control process by the transmission control unit 304. The functional configuration of the server apparatus 101 has been described above.

  Next, an overview of processing performed by the server apparatus 101 will be described with reference to FIG. When performing this processing, the CPU 201 of the server apparatus 101 loads a program for causing the CPU 201 to execute the main processing stored in the external memory 211 to the RAM 202, and executes the main processing according to control by the loaded program.

  The CPU 201 of the server apparatus 101 can update group information, receive an e-mail from a client PC, and accept an audit request at any time.

  If the personnel information used to create the e-mail transmission control rule 301-4 has changed due to a change in organizational information in the company, a personnel change, or the like (update personnel information ?: step CPU201 advances a process to step S402 and performs a transmission control rule update process. Details of this processing will be described later with reference to FIG.

  If it is determined that the e-mail transmitted from the client PC 102 has been received (YES in step S403), the e-mail transmission control process is performed. Details of this processing will be described later with reference to FIG.

  Furthermore, when an audit request is received from the client PC 102 for an e-mail that is determined to be suspended as a result of the transmission control process in step S404 (YES in step S405), the process proceeds to step S406 to perform the audit process. Details of this processing will be described with reference to FIG. The outline of the processing performed by the CPU 201 of the server apparatus 101 has been described above.

  Here, with reference to FIG. 5, the details of the transmission control rule update processing in step S402 of FIG. 4 will be described. Before performing this process, the CPU 201 of the server apparatus 101 deletes the transmission control rule 301-4 currently in use. Instead of deleting, you can move to a backup folder.

  First, the CPU 201 of the server apparatus 101 acquires personnel information 301-1 shown in FIG. 8 (step S501).

  Here, with reference to FIG. 8, the data configuration of the personnel information 301-1 stored in the external memory 211 of the server apparatus 101 will be described. The personnel information 301-1 includes a user information DB 800, a group information DB 810, and a user affiliation group DB 820.

  The user information DB 800 is a database for registering user information, and includes data items such as a user ID 801, a user name 802, and a mail address 803 as data items.

  The user ID 801 is a data item in which identification information for uniquely identifying a user managed in the user information DB 800 is registered. A user name 802 is a data item in which a user name and the like are registered. A mail address 803 is a data item in which a mail address used by the user is registered. The above is the description of the data configuration of the user information DB 800.

  The group information DB 810 is a database that manages organizations such as “departments” and “sections”, and groups such as projects, and includes a group ID 811, a group name 812, a length / reader 813, and the like as data items. .

  The group ID 811 is a data item in which identification information for uniquely identifying a group managed in the database is registered. The group name 812 is a data item in which the group name is registered. The length / reader 813 is a data item in which the length of the organization and the user ID 801 of the reader are registered. The above is the description of the data configuration of the group information DB 810.

  The user affiliation group DB 820 is a database that manages to which group a user managed in the user information DB 800 belongs, among the groups managed in the group information DB 810, and includes a group ID 821, a user ID 822, and the like. The data item is configured.

  The group ID 821 is a data item in which a group ID (corresponding to the group ID 811 in the group information DB 810) for identifying the group to which the user registered in the user ID 822 belongs is registered.

  The user ID 822 is a data item in which a user ID (corresponding to the user ID 801 in the user information DB 800) for identifying a user belonging to the group registered in the group ID 821 is registered. The above is the description of the data configuration of the user affiliation group ID 820.

  In the present invention, which user belongs to which group is managed using the personnel information 301-1 as described above. Note that a user can belong to a plurality of groups. The above is the description of the data configuration of the personnel information 301-1 in FIG.

  Returning to the description of FIG. After acquiring the personnel information 301-1 in step S501 of the server apparatus 101, the auditor determination rule 301-2 shown in FIG. 9 is acquired (step S502). Thereafter, the transmission control rule creation information 301-3 shown in FIG. 10 is acquired (step S503).

  Here, an example of the data configuration of the auditor determination rule 301-2 will be described with reference to FIG. This auditor determination rule 301-2 is to determine which group's email is transmitted when an electronic mail transmitted by a user belonging to a plurality of groups is determined to be suspended by the transmission control processing in step S404 in FIG. The rules for deciding whether the head or leader audits the pending email.

As shown in FIG. 9, the auditor determination rule 301-2 includes an auditor determination rule ID 901, a priority 902, a group ID 903, a transmission source condition 904, a transmission destination condition 905, a subject / text condition 906, an attached file condition 907, and the like. Configured with data items.

  The auditor determination rule ID 901 is a data item in which identification information for uniquely identifying each of a plurality of auditor determination rules is registered. The priority 902 is a data item in which information indicating the priority of the auditor determination rule among a plurality of auditor determination rules is registered.

  The group ID 903 is a data item in which the group ID of the group to which this auditor determination rule is applied is registered. It should be noted that in the processing to be described later, the group head / leader registered in the group ID 903 is set for the auditor (auditor of the pending email) created using this auditor determination rule. Become.

  In the transmission source condition 904, there is registered a condition as to whether the group head / leader registered in the group ID 903 of the auditor determination rule is to be the auditor of the pending email under any condition of the transmission source. Data item to be processed. For example, registration can be made under conditions such as “the user who uses the mail address of the sender belongs to a certain group”, “the mail address of the user who uses the mail address of the sender”, and the like.

  In the transmission destination condition 905, the group head / leader registered in the group ID 903 of this auditor determination rule is set as the auditor of the pending email under any condition of the transmission destination (TO, CC, BCC). This is a data item in which the condition of whether or not is registered. For example, it is possible to set conditions such as “a specific mail address is included in the transmission destination”, “the number of transmission destinations is XX or more”, and the like.

  The subject / body condition 906 is a condition regarding the condition of the subject and the body as to whether the head / leader of the group registered in the group ID 903 of the auditor determination rule is the auditor of the pending email. Is a data item to be registered. For example, “subject contains a specific character string (not included)”, “subject contains a specific character string (does not include)”, “subject starts with a specific character string (ends)”, etc. Can be set as a condition.

  In the attached file condition 907, a condition as to whether or not a group head / leader registered in the group ID 903 of this auditor determination rule is set as an inspector of the pending email under any condition of the attached file is registered. Data item to be processed. For example, it can be set on the condition that “there is an attached file (not present)”, “the size of the attached file is greater than or equal to OOMB”, “the attached file is a JPEG format file (not)”, and the like.

  The above is the description of the data configuration of the auditor determination rule 301-2.

  Next, the data configuration of the transmission control rule creation information 301-3 will be described with reference to FIG. The transmission control rule creation information 301-3 is information used when creating a transmission control rule 301-4 used in a transmission control process to be described later with reference to FIG. Data items such as an ID 1001, a priority 1002, a transmission source condition 1003, a transmission destination condition 1004, a subject / text condition 1005, an attached file condition 1006, and an operation 1007 are configured.

  The transmission control rule creation information ID 1001 is a data item in which identification information for uniquely identifying each of a plurality of transmission control rule creation information is registered. The priority 1002 is a data item in which information indicating the priority of the transmission control rule creation information among a plurality of transmission control rule creation information is registered. Based on this information, the application priority of the transmission control rule 301-4 when performing e-mail transmission control is determined.

  The transmission source condition 1003 is a data item in which a condition set in the transmission source condition of the transmission control rule created based on the transmission control rule creation information is registered. For example, registration can be made under conditions such as “the user who uses the mail address of the sender belongs to a certain group”, “the mail address of the user who uses the mail address of the sender”, and the like.

  The transmission destination condition 1004 is a data item in which a condition set in the transmission destination condition of the transmission control rule created based on the transmission control rule creation information is registered. For example, it is possible to set conditions such as “a specific mail address is included in the transmission destination”, “the number of transmission destinations is XX or more”, and the like.

  The subject / text condition 1005 is a data item in which a condition set in the text / subject condition of the transmission control rule created based on the transmission control rule creation information is registered. For example, “subject contains a specific character string (not included)”, “subject contains a specific character string (does not include)”, “subject starts with a specific character string (ends)”, etc. Can be set as a condition. It is possible to set conditions such as.

  The attached file condition 1006 is a data item in which a condition set in the attached file condition of the transmission control rule created based on the transmission control rule creation information is registered. For example, it can be set on the condition that “there is an attached file (not present)”, “the size of the attached file is greater than or equal to OOMB”, “the attached file is a JPEG format file (not)”, and the like.

  An operation 1007 is a data item in which processing to be performed on an e-mail that matches various conditions set in the transmission control rule created based on the transmission control rule creation information is registered. Processes that can be set include “send” to send the email immediately, “send prohibited” to prohibit sending the email, and temporarily stop sending the email, and audit input by the auditor (“send” or In accordance with “transmission prohibited”), there is “pending” or the like that determines a process to be executed for an e-mail.

  The above is an example of the data configuration of the transmission control rule creation information 301-3.

  Returning to the description of FIG. After acquiring the auditor determination rule and transmission control rule creation information in step S502 and step S503 in FIG. 5, respectively, the CPU 201 of the server apparatus 101 performs step S504 to step S519 in order of priority for all the acquired transmission control rule creation information. Perform the process.

  First, the CPU 201 of the server apparatus 101 selects unprocessed transmission control rule creation information 1000 in order of priority (step S504).

  Then, for all the auditor determination rules, the processing from step S505 to step S512 is performed in order of priority.

  The CPU 201 of the server apparatus acquires, as a process for the transmission control rule acquired in step S504, inspector determination rules that have not been processed in order of priority (step S505). Thereafter, a new blank record is created in the transmission control rule (step S506), and unique identification information is set in the transmission control rule ID.

  Thereafter, the group specified by the group ID 903 of the auditor determination rule acquired in step S505 is added as a condition to the sender condition of the record created in step S506 (step S507). Further, the user ID of the long / leader of the group specified by the group ID 903 is set for the auditor.

  Thereafter, the various conditions (transmission source condition, transmission destination condition, subject / text condition, attached file condition) of the transmission control rule acquired in step S504 are added to the transmission control rule record created in step S506 (step S508). . At this time, if any condition is already set in these conditions, the condition is added as a logical product (AND) condition. In addition, the operation set in the transmission control rule is set in the operation.

  Thereafter, the CPU 201 of the server apparatus 101 similarly transmits the various conditions (transmission source condition, transmission destination condition, subject / text condition, attached file condition) of the auditor determination rule acquired in step S505 created in step S506. It adds to the record of the control rule (step S509).

  Thereafter, it is determined whether or not a reservation variable is included in the transmission control rule creation information (step S510). The reserved variable is a variable indicating information that changes an individual to be identified depending on which group is focused on, such as a group length or leader.

  If it is determined YES in the determination process of step S510, the CPU 201 of the server apparatus 101 proceeds with the process to step S511, and changes the reserved variable to a specific value (step S511). For example, when the condition that “the CC contains the long / reader's mail address” is set in the transmission destination condition of the transmission control rule creation information, “AAA@example.com is stored in the CC based on the information. (AAA@example.com is the mail address used by the head / leader of the group registered in the group ID 903 of the auditor judgment rule).

  When it is determined NO in the determination process of step S510, after the process of step S511 is completed, the CPU 201 of the server apparatus 101 proceeds with the process to step S512, and sets the priority of the transmission control rule being created. At this time, a priority lower than the priority of the most recently created transmission control rule is set.

  In the present invention, in this way, a plurality of transmission control rules having different priorities are created from one piece of transmission control rule creation information. As a result, when a user belongs to a plurality of groups, it is possible to create a transmission control rule in consideration of which group's auditor is audited.

  After the processing from step S505 to step S512 is completed for all the auditor determination rules, the same processing is performed for all the groups included in the group information DB 810.

  First, group information that has not been processed in step S514 and subsequent steps is acquired (step S513). Thereafter, a new blank record is created in the transmission control rule (step S514), and unique identification information is set in the transmission control rule ID.

  Thereafter, the group indicated by the group information acquired in step S513 is added as a condition to the sender condition of the record created in step S514 (step S515). In addition, the user ID of the group leader / leader is set for the auditor.

  Thereafter, the various conditions (transmission source condition, transmission destination condition, subject / text condition, attached file condition) of the transmission control rule acquired in step S504 are added to the transmission control rule record created in step S514 (step S516). . At this time, if any condition is already set in these conditions, the condition is added as a logical product (AND) condition. In addition, the operation set in the transmission control rule is set in the operation.

  Thereafter, it is determined whether or not a reservation variable is included in the transmission control rule creation information (step S517).

  When it is determined YES in the determination process of step S517, the CPU 201 of the server apparatus 101 proceeds with the process to step S511 and changes the reserved variable to a specific value (step S518).

  If it is determined NO in the determination process of step S517, after the process of step S518 is completed, the CPU 201 of the server apparatus 101 proceeds with the process to step S519, and sets the priority of the transmission control rule being created. At this time, a priority that is not higher than the priority of the most recently created transmission control rule is set.

  Then, the CPU 201 of the server apparatus 101 creates a transmission control rule by executing the processing from step S504 onward for all transmission control rule creation information. The above is the detailed description of the transmission control rule update process in step S402 of FIG.

  Here, an example of the data configuration of the transmission control rule 301-4 created by performing the transmission control rule update process shown in FIG. 5 will be described with reference to FIG.

  As shown in FIG. 11, the transmission control rule 301-4 includes a transmission control rule ID 1101, a priority level 1102, a transmission source condition 1103, a transmission destination condition 1104, a subject / body condition 1105, an attachment file condition 1106, an operation 1107, and an auditor 1108. Etc., and data items such as

  The transmission control rule ID 1101 is a data item in which identification information for uniquely identifying each of the plurality of transmission control rules is registered. The priority level 1102 is a data item for registering the priority level for applying the transmission control rule to the e-mail subject to transmission control.

  The transmission source condition 1103 is a data item in which a condition related to the transmission source setting of an e-mail that performs transmission control based on this transmission control rule is registered. For example, conditions such as “the sender is a mail address of a user in a specific group” and “the sender information (FROM) in the mail header and the sender information (FROM) in the envelope are not unique” can be set. is there.

  The transmission destination condition 1104 is a data item in which a condition relating to the transmission destination setting of an e-mail that performs transmission control based on the transmission control rule is registered. For example, it is possible to set conditions such as “a specific mail address is included in the transmission destination”, “the number of transmission destinations is XX or more”, and the like.

  The subject / text condition 1105 is a data item in which a condition regarding the subject and text of an e-mail that performs transmission control based on the transmission control rule is registered. This is a data item for registering conditions relating to the destination setting of an e-mail for which transmission control is performed based on this transmission control rule.

  The attached file condition 1106 is a data item in which a condition related to an attached file of an e-mail that performs transmission control based on this transmission control rule is registered. For example, it can be set on the condition that “there is an attached file (not present)”, “the size of the attached file is greater than or equal to OOMB”, “the attached file is a JPEG format file (not)”, and the like.

  An operation 1107 is a data item in which processing to be executed for an e-mail that meets the above-described conditions is registered. Processes such as “transmission”, “transmission prohibited”, and “hold” are registered.

  The inspector 1108 is a data item in which the user ID of an inspector who performs transmission, transmission prohibition audit input, and the like when the operation is “pending” is registered. The above is an example of the data configuration of the transmission control rule 1100 in FIG.

  Next, details of the e-mail transmission control process in step S404 of FIG. 4 will be described with reference to FIG.

  First, when the CPU 201 of the server apparatus 101 acquires an electronic mail transmitted from the client PC 102, the CPU 201 stores the electronic mail in the RAM 202 or the like (step S601). Thereafter, the transmission control rule is applied.

  The CPU 201 determines whether there is a transmission control rule that has not yet been saved in step S601 and applied to the email (step S602). If it is determined that the determination process is (YES), the process proceeds to step S603, and transmission control rules are acquired in order of priority. Then, it is determined whether or not the e-mail matches the conditions set in the transmission control rule acquired in step S603 (step S604).

  If it is determined NO in this determination process, the CPU 201 advances the process to step S602 and applies another transmission control rule.

  On the other hand, if YES is determined in the determination process of step S604, the process proceeds to step S605, and a process for performing the process set in the operation of the transmission control rule on the e-mail is determined. If it is determined that the e-mail subject to transmission control does not meet the conditions of all transmission control rules (in this case, NO is determined in step S602), the process proceeds to step S606, and the default e-mail is sent. It is determined that the processing set as the operation is to be performed.

  In step S607, the CPU 201 of the server apparatus 101 determines whether the process determined in step S605 or step S606 is “transmission”, “hold”, or “transmission prohibited”.

  If it is determined in step S607 that it is “transmission”, the process proceeds to step S608, and the e-mail is transmitted to the designated transmission destination. If it is determined that the status is “pending”, the process proceeds to step S609, and the user set in the auditor 1108 of the transmission control rule is determined as the auditor of the e-mail. Then, the electronic mail and the information of the inspector are associated with each other and registered in the hold electronic mail DB 1220 described later (step S610). Then, the auditor is notified that there is a pending email to be audited using an email or the like (step S611).

  If it is determined in the determination process in step S607 that “transmission prohibited”, the process advances to step S612 to notify the sender of the e-mail that e-mail transmission is prohibited. An e-mail whose transmission is prohibited is never transmitted to the destination.

  After the processing of step S608, step S611, and step S612 ends, the CPU 201 advances the processing to step S613, and stores the transmission control log of the current e-mail in the transmission control result log DB. The above is the detailed description of the e-mail transmission control process in step S404 of FIG.

  Next, an example of the data configuration of the transmission control result log DB 301-5 and the pending email DB 301-6 will be described with reference to FIG.

  The transmission control result log DB 301-5 is a database for registering the result of the e-mail transmission control process using the transmission control rule by the CPU 201 of the server apparatus 101, and includes e-mail ID 1201, transmission source (FROM) as data items. 1202, transmission destination (TO) 1203, transmission destination (CC) 1204, transmission destination (BCC) 1205, subject 1206, text 1207, attached file 1208, and transmission control result 1209.

  The e-mail ID 1201 is a data item in which identification information for uniquely identifying an e-mail that has been subjected to transmission control using a transmission control rule is registered. As the identification information, for example, a message ID in the e-mail header is registered.

  A transmission source (FROM) 1202 is a data item in which a transmission source of an electronic mail is registered. A transmission destination (TO) 1203, a transmission destination (CC) 1204, and a transmission destination (BCC) 1205 are data items in which transmission destinations set as transmission destinations (TO, CC, BCC) of electronic mail are registered.

  A subject 1206 is a data item in which the subject of an electronic mail is registered. A text 1207 is a data item in which an electronic mail text is registered, and an attached file 1208 is a data item in which an electronic mail attached file is registered.

  A transmission control result 1209 is a data item in which a transmission control result for the electronic mail is registered. The following is a description of the data configuration of the transmission control result log DB 301-5.

  The hold e-mail DB 301-6 is a database for managing e-mails whose transmission is held, and includes a mail ID 1221 and an inspector 1222 as data items.

  The mail ID 1221 is a data item in which information for uniquely identifying the pending electronic mail is registered, and is associated with the electronic mail ID 1201 of the transmission control result DB 301-5. The inspector 1222 is a data item in which the user ID of the inspector who audits the electronic mail is registered. The above is an explanation of an example of the data configuration of the pending email DB 301-6.

  Finally, with reference to FIG. 7, the details of the audit processing in step S406 of FIG. 4 will be described. In this process, the CPU 201 of the server apparatus 101 performs the process of step S404 in FIG. 4 and, as a result of the transmission of the hold e-mail determined to hold the transmission from the auditor and the audit input for prohibiting the transmission, the hold e-mail Perform transmission control.

  The CPU 201 of the server apparatus 101 acquires information on the pending email that should be audited by the inspector identified by the user authentication process in a step (not shown) using the pending email DB 1220 and the transmission history result log DB 301-6. (Step S701). Thereafter, based on the information acquired in step S701, screen information for displaying a not-shown pending email list display screen is created, and the created screen information is transmitted to the client PC 102 used by the inspector. (Step S702).

  Then, an audit target mail designation and an audit result input to the CPU of the client PC 102 via the pending email list display screen (not shown) are received from the client PC 102 (steps S703 and S704).

  If the CPU 201 of the server apparatus 101 determines that the result of the audit input is transmission (“transmission” in step S705), the process proceeds to step S706, and the transmission instruction of the pending email that has received the transmission instruction I do. Then, the record of the said pending | holding electronic mail in transmission control result DB301-5 is updated. Specifically, when a transmission audit result is input to the hold email (when it is determined to send in step S705), the transmission control result 1209 of the record of the hold email in the transmission control result DB 301-5. Is changed from “hold” to “transmission after hold”, and an audit result indicating that transmission is prohibited is input to the hold email (when it is determined that transmission is prohibited in step S705), it is updated to “transmission prohibited after hold”.

  Then, after updating the transmission control result DB 301-5, the record for managing the hold email is deleted from the hold email DB 301-6 (step S708).

  Thereafter, the process is performed until an instruction to end the audit process is received (until determined as YES in step S709). The above is the detailed description of the audit processing in step S406 in FIG.

  In the present invention, for users belonging to a plurality of groups, a transmission control rule is created using an inspector decision rule for deciding which group head / leader audits the email sent by the user. To do. Priorities are set in the inspector determination rule, and the information is reflected in the transmission control rule to be created. Therefore, as a result of the CPU 201 of the server apparatus 101 performing transmission control of the e-mail using the transmission control rule, transmission is performed. It is possible to appropriately determine the e-mail auditor who is suspended.

  In addition, not only the priority but also the contents of the e-mail can be set in the auditor decision rule, and the information is reflected in the created transmission control rule. It is also possible to create a transmission control rule for making an auditor's decision with higher flexibility.

  An object of the present invention is to supply a recording medium (or storage medium) that records software program codes for realizing the functions of the above-described embodiments to a system or apparatus, and the computer of the system or apparatus (or CPU or MPU). Needless to say, this can also be achieved by reading and executing the program code stored in the recording medium. In this case, the program code itself read from the recording medium realizes the functions of the above-described embodiment, and the recording medium on which the program code is recorded constitutes the present invention.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an operating system (OS) running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Furthermore, after the program code read from the recording medium is written into a memory provided in a function expansion card inserted into the computer or a function expansion unit connected to the computer, the function is based on the instruction of the program code. It goes without saying that the CPU or the like provided in the expansion card or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  When the present invention is applied to the recording medium, program code corresponding to the flowchart described above is stored in the recording medium.

101 Server apparatus 102-1, 102-2, 102-3 Client PC
103 LAN
104 Wide area network 105-1, 105-2, 105-3 External mail server 201 CPU
202 RAM
203 ROM
204 System Bus 205 Input Controller 206 Video Controller 207 Memory Controller 208 Communication I / F (Interface) Controller 209 Input Device 210 Display Device 211 External Memory

Claims (4)

An information processing apparatus for creating a transmission control rule used for e-mail transmission control,
First receiving means for receiving first information in which an e-mail condition to be subjected to transmission control and transmission control content for the e-mail satisfying the condition are associated ;
Second receiving means for receiving second information in which a condition for determining an e-mail auditor and an auditor who audits the e-mail satisfying the condition are associated ;
By combining the first information and the second information, it is determined whether or not an electronic mail needs to be audited by an auditor, and transmission for determining an auditor who audits the electronic mail Creating means for creating control rules;
By applying the transmission control rule created by the creation means to an email, it is determined whether an audit needs to be performed based on the conditions of the email subject to the transmission control, and an auditor of the email is determined. An auditor determination means for determining an auditor of the email based on the conditions to be determined;
An information processing apparatus comprising: It further includes a receiving means for receiving changes in information about the organization,
The information processing apparatus according to claim 1, wherein the creating unit creates the transmission control rule when the accepting unit accepts a change of information related to an organization. An information processing method in an information processing apparatus for creating a transmission control rule used for e-mail transmission control,
The first reception unit that receives the first information in which the first reception unit of the information processing apparatus associates the condition of the electronic mail that is the object of transmission control with the transmission control content for the electronic mail that satisfies the condition. Process,
The second reception unit that receives the second information in which the second receiving unit of the information processing apparatus associates the condition for determining the e-mail auditor and the auditor who audits the e-mail satisfying the condition. Process,
The creation unit of the information processing apparatus determines whether or not the email needs to be audited by an auditor by combining the first information and the second information, and audits the email A creation process for creating a transmission control rule for determining an auditor to perform ,
Whether the auditor determination unit of the information processing apparatus needs to perform auditing based on the condition of the e-mail targeted for the transmission control by applying the transmission control rule created in the creating process to the e-mail. An auditor determination step for determining an email auditor based on conditions for determining the email auditor; and
An information processing method comprising: A program that can be executed in an information processing apparatus that creates a transmission control rule used for transmission control of an email,
The information processing apparatus;
First receiving means for receiving first information in which an e-mail condition to be subjected to transmission control and transmission control content for the e-mail satisfying the condition are associated ;
Second receiving means for receiving second information in which a condition for determining an e-mail auditor and an auditor who audits the e-mail satisfying the condition are associated ;
By combining the first information and the second information, it is determined whether or not an electronic mail needs to be audited by an auditor, and transmission for determining an auditor who audits the electronic mail Creating means for creating control rules;
By applying the transmission control rule created by the creation means to an email, it is determined whether an audit needs to be performed based on the conditions of the email subject to the transmission control, and an auditor of the email is determined. A program that functions as an auditor determination unit that determines an auditor of an e-mail based on a condition to be determined .

Images