JP6304850B1 - Data management system, program, and computer-readable storage medium - Google Patents

Abstract

A data management system, a program, a computer-readable storage medium, and a card-like object that can reduce the number of files stored in a cloud server and reduce costs. A data management system includes a data file creation unit that creates a data file, a first storage unit that stores the data file created by the data file creation unit, and is set in the cloud server. The data file selection / transfer unit 120 for selecting and transferring a data file from the first storage unit 80, and the data file selected and transferred from the first storage unit 80 by the data file selection / transfer unit 120 are stored in the archive server 3. And a second storage unit 90 to be set. [Selection] Figure 1

Description

The present invention relates to a data management system, a program, a computer-readable storage medium, a purchase system, and an intermediary, and in particular, data is set in an archive serve from a first storage unit set in a cloud server based on a usage history. The present invention also relates to a data management system, a program, a computer-readable storage medium, a purchase system, and an intermediary that can be transferred to a second storage unit.

  In recent years, various systems have been proposed in which a client terminal (cloud use terminal) and a cloud server (storage cloud) are connected through a network communication line, and a data file created by the client terminal is stored in the cloud server. For such a system, for example, the technology disclosed in Patent Document 1 is referred to.

JP 2014-10465

  In recent years, the number of data files handled on a system of a company or the like has become enormous, and the number of data files stored in a cloud server has become enormous.

However, in the provider who provides the cloud server described above, there are many cases of adopting a system that charges according to the capacity of the stored data file. It has become enormous.

For this reason, it is an important issue for each company to optimize the number of data files stored in the cloud server and reduce its management cost, but simply reducing the number of data files stored in the cloud server; As a result, there was an urgent need to solve the problem because it deviated from the original purpose of sharing data files to improve the efficiency of business.

The present invention has been made in view of such circumstances, a data management system, a program, a computer-readable storage medium, and a purchase system capable of reducing the number of data stored in a cloud server and reducing the cost. , And to provide mediators.

In order to achieve the above object, the invention of claim 1 according to the data management system is configured to connect a cloud server, a client terminal, and an archive server so that they can communicate with each other through a communication line, and store and manage a plurality of data. A management system for creating the data, a first storage unit that stores data created by the data creation unit and is set in the cloud server, and data from the first storage unit A data selection transfer unit for selecting and transferring data, a second storage unit for storing data selected and transferred from the first storage unit by the data selection transfer unit and set in the archive server, and storing data And the third storage unit set in the client terminal, the access permission data input by the data input unit, and the preset An access permission unit that determines whether or not access permission data matches, and the third storage unit when it is determined that there is a mismatch between the input permission data and preset access permission data. A data deletion unit for deleting data stored in the data storage unit, and a data name of data deleted by the data deletion unit, and access permission data identical to the changed access permission data is input by the data input unit The data having the same data name as the deleted data is copied from the first storage unit and / or the second storage unit and transferred to the third storage unit for storage. And a portion .

According to the present invention, a data creation unit that creates the data, a first storage unit that stores data created by the data creation unit and is set in the cloud server, and data from the first storage unit A data selection transfer unit for selecting and transferring data, a second storage unit for storing data selected and transferred from the first storage unit by the data selection transfer unit and set in the archive server, and storing data And the third storage unit set in the client terminal , the data is transferred from the first storage unit set in the cloud server to the second storage unit set in the archive server. And the cost can be reduced by reducing the number of data stored in the cloud server.

An access history management unit that manages an access history of data stored in the first storage unit, and the data selection transfer unit is configured to perform the access history of each data managed by the access history management unit. If data is selected and transferred from the first storage unit, data can be transferred based on the access history (claim 2).

The access history managed by the access history management unit includes an access date / time and / or access frequency of the data, and the data selection / transition unit determines that the data access date / time has passed a predetermined time from the current date / time. If the access frequency of the data within a predetermined period and / or a predetermined period is less than or equal to a predetermined number of times, data is selected from the first storage unit and transferred to the second storage unit for a long period of time. Data that has not been used for a long time or data with low access frequency can be migrated from the cloud server to the archive server, and the number of data stored in the cloud server can be reduced to reduce costs.

If the second storage unit is an optical disk device including an optical disk, the cost can be prevented from increasing even when the number of data transferred from the cloud server to the client server becomes enormous. (Claim 4).

First storage unit before SL, if the store data stored in the third storage unit, certainly possible to store the data stored in the third storage unit in the first storage unit (Claim 5).

If the first storage unit stores both the data before overwriting and the data after overwriting every time the data is overwritten and stored in the third storage unit, the third storage Even if the data is overwritten by an erroneous operation in the unit, the data before overwriting can be reliably backed up in the first storage unit, and the trouble of data loss due to an erroneous operation can be prevented beforehand. 6).

A storage destination selection unit that preferentially reads data stored in the first storage unit and the third storage unit from the third storage unit may be provided (claim 7). .

An encryption processing unit configured to encrypt data stored in the first storage unit to the third storage unit, wherein the first storage unit to the third storage unit include the encryption process; If the stored data is stored, the confidentiality of the data is maintained even when the data is leaked, and a reliable countermeasure against information leakage can be achieved (claim 8).

An access permission unit that determines whether or not the access permission data input by the data input unit matches the preset access permission data; and the input access permission data and the preset access permission data when a mismatch is determined that, since it was decided to have the data deleting unit that deletes the third data stored in the storage unit, it is possible to perform the information leakage countermeasure more reliably (claim 1 ).

The stores the data name of the deleted data by the data deletion section, when changed to the permission data and the same access permission data is input by the data input unit, the deleted data identical to the Since it has a data restoration unit that transfers data to the third storage unit while replicating data of the data name from the first storage unit and / or the second storage unit, backup of the data file Can also be performed reliably (Claim 1 ).

In addition, information leakage countermeasures can be taken even more reliably (claim 1 ).

A keyword selection unit for selecting a keyword indicating the content of data stored in the first storage unit and the second storage unit from among a plurality of keywords; the keyword selected by the keyword selection unit; and the data If a tagging unit for performing tagging is provided, data can be searched efficiently (claim 9 ).

By having a status display data generation unit that generates display data indicating the usage status of the data based on the access history managed by the access history management unit, the usage status of the data can be easily grasped. (Claim 10 ).

If the display data indicating the usage status is color-coded for each usage status, the usage status of the data can be grasped more easily (claim 11 ).

The client terminal includes a desktop personal computer and may include a notebook personal computer, a mobile phone, a smartphone, and a tablet terminal. That is, notebook personal computers, portable terminals, and tablet terminals are easy to take out and can improve convenience, but have a problem of information leakage due to loss. By having the encryption processing unit as described above, the problem of information leakage can be solved in advance, and the advantages of using a notebook personal computer, a portable terminal, and a tablet terminal can be enjoyed (claim 12 ). .

In order to achieve the above object, the invention according to claim 13 relating to a program is a data management system for storing and managing a plurality of data by connecting a cloud server, a client terminal, and an archive server so that they can communicate with each other through a communication line. A data creation unit that creates the data, a first storage unit that stores data created by the data creation unit and is set in the cloud server, and selects data from the first storage unit A data selection transfer unit to be transferred, a second storage unit that stores data selected and transferred from the first storage unit by the data selection transfer unit and is set in the archive server, and stores data. The third storage unit set in the client terminal and the access permission data input by the data input unit are set in advance. An access permission unit that determines whether or not access permission data matches, and the third storage unit when it is determined that there is a mismatch between the input access permission data and preset access permission data A data deletion unit for deleting data stored in the data storage unit, and a data name of data deleted by the data deletion unit, and access permission data identical to the changed access permission data is input by the data input unit The data having the same data name as the deleted data is copied from the first storage unit and / or the second storage unit and transferred to the third storage unit for storage. characterized in that to function as a part.

In order to achieve the above object, the invention according to claim 14 relating to a computer-readable storage medium stores the program according to claim 13 .

  According to the present invention, it is possible to reduce the cost by reducing the number of data stored in the cloud server.

It is a figure which shows the outline | summary of the whole structure of the data management system which concerns on embodiment of this invention. It is a block diagram which shows the structure of the data management system. It is a figure which shows the structure of the 2nd memory | storage part of the data management system. It is a figure for demonstrating the storage method by the 1st memory | storage part of the same data management system thru | or a 3rd memory | storage part. It is a block diagram which shows the structure of the purchase system which concerns on embodiment of this invention. It is a flowchart for demonstrating the processing flow in the data management system. It is a flowchart following FIG. 6 for demonstrating the processing flow in the data management system. It is a flowchart following FIG. 7 for demonstrating the processing flow in the data management system.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. 1 is a diagram showing an overview of the overall configuration of a data management system according to an embodiment of the present invention, FIG. 2 is a block diagram showing the configuration of the data management system, and FIG. 3 is a diagram of a storage unit of the data management system It is a figure for demonstrating a structure.

The outline of the data management system 1 will be described with reference to these drawings. The data management system 1 connects a plurality of client terminals 2 and an archive server 3 and a cloud server 4 through a communication line 5 so that they can communicate with each other. More specifically, the system stores and manages a plurality of data files.

The client terminal 2 includes various terminal devices, and includes a desktop personal computer, a notebook personal computer, a mobile phone, a smartphone, a tablet terminal, and the like.

The archive server 3 is a physical server provided on the client side, is connected to a plurality of client terminals 2, functions as a client server that manages these client terminals 2, and archives data files stored in the cloud third 4. It has a function.

The cloud server 4 is a virtual server provided on the cloud (on the Web), and is a pay server with a monthly charge system.

The client terminal 2, the archive server 3, and the cloud server 4 have a general configuration as a computer, an input device having a keyboard, a mouse, etc., a storage device having a memory, a hard disk, etc., CPU, DSP, MPU, GPU Etc., and a display device having a display or the like. The storage device functions as a computer-readable storage medium.

The communication line 5 includes various network communication lines, and communication between the client side and the cloud server 4 is performed through an Internet communication line, a cellular phone communication network, or the like. The client terminal 2 and the archive server 3 are connected to an Internet communication line or a LAN. And so on.

Here, the data management system 1 includes a data input unit 10, an access permission unit 20, a data deletion unit 21, a data file restoration unit 22, a permitted data change unit 30, and a data creation unit. Unit 50, tagging unit 60, additional information setting unit 65, encryption processing unit 70, first storage unit 80, second storage unit 90, third storage unit 100, access history management unit 110, data selection migration More specifically, the data file selection / transfer unit 120, the storage destination selection unit 130, and the data decompression unit more specifically include a data file decompression unit 140, a status display data generation unit 150, and a display unit 160.

  The data input unit 10 inputs various data necessary for creating a data file. Further, the data input unit 10 inputs access permission data (ID and password) for accessing the first storage unit 80, the second storage unit 90, and the third storage unit 100 in more detail than the data management system 1. To do. Data input by the data input unit 10 is performed by a user via an input device such as a keyboard, a mouse, a touch panel, or a display device.

  The access permission unit 20 accesses the data files stored in the first storage unit 80, the second storage unit 90, and the third storage unit 100 based on the access permission data input by the data input unit 10. Judge whether to allow or not. The access permission data is stored in advance in the storage units 80 to 100, and the access permission unit 20 determines whether or not the input access permission data matches the access permission data stored and set in advance.

  If the data deletion unit 21 erroneously inputs the access permission data a predetermined number of times, more specifically, the access permission unit 20 performs a connection between the access permission data input by the data input unit 10 and the access permission data stored and set in advance. When it is determined that the disagreement has continued for a predetermined number of times or more, it is considered that an unauthorized third party has entered the data management system 1, and the access permission data stored in the storage units 80 to 100 is deleted. (By deleting the access permission data from the storage units 80 to 100, the first storage unit 80, the second storage unit 80, the second storage unit 80, the second storage unit 80, the second storage unit 80, the second storage unit 80, the second storage unit 80, the second storage unit 80, the second storage unit Access to the storage unit 90 and the third storage unit 100 is not permitted) All of the data files stored in the third storage unit 100 of the terminal 2 are deleted (even if all of the data files stored in the third storage unit 100 are deleted). In this embodiment, as will be described later, the data file is backed up in either the first storage unit 80 or the second storage unit 90).

  More specifically than the data restoration unit 22, the data file restoration unit 22 has a function of restoring the data file deleted by the data deletion unit 21 to the third storage unit 100.

More specifically, the data file restoration unit 22 stores the file name in more detail than the data name of the data file deleted by the data deletion unit 21. Then, the data file restoration unit 22 accesses after the access permission data stored in the storage unit 80 to the storage unit 100 is changed by the permission data change unit 30 described later, and is changed by the permission data change unit 30. When access permission data identical to the permission data is input by the data input unit 10, more specifically, the access permission data is deleted when it is determined that it matches the stored access permission data after the change. The data file having the same data file name as the data file is copied from the first storage unit 80 and / or the second storage unit 90 while being transferred to the third storage unit 100 and stored therein.

  The permission data changing unit 30 has a function of changing access permission data. The access permission data is changed by the permission data changing unit 30 by inputting necessary change data from the data input unit 10 and overwriting the access permission data stored in the storage units 80 to 100 in advance. The access permission data is changed by the permission data changing unit 30 as described above, for example, when the data file deleting unit 21 determines that the input access permission data does not match the preset access permission data a predetermined number of times. It is determined that the access permission data is deleted from the storage units 80 to 100 and the data file is deleted from the third storage unit 100, for example, when it is determined that they are continuous.

  The data file creation unit 40 has determined that the access permission unit 20 matches the input permission data with the access permission data stored in advance (or changed access permission data when the access permission data is changed). Sometimes, it has a function of creating a data file based on various data input from the data input unit 10. The data file is, for example, a word file or an Excel file.

  The keyword selection unit 50 selects a keyword indicating the contents of the data file from a plurality of keywords. There may be a plurality of selections of the keywords. The keywords are stored in advance in the storage units 80 to 100 and can be selected by the user while being displayed on the display unit 160.

The tagging unit 60 performs tagging for associating the keyword selected by the keyword selection unit 50 with each data file. Thereby, individual data files can be directly refined and searched using keywords.

The additional information setting unit 65 has a function of setting additional information other than keywords stored in advance in each data file. This additional information is set by adding information such as “who received it”, “when it was received”, “why it was received”, “when it was created” to each data file. be able to.

The encryption processing unit 70 performs data encryption processing on the data files stored in the first storage unit 80 to the third storage unit 100. The data encryption processing by the encryption processing unit 70 is performed when the data is stored in the first storage unit 80 to the third storage unit 100.

  The first storage unit 80 to the third storage unit 100 have a function of storing the data file created by the data file creation unit 40, and constitute a storage device. That is, the first storage unit 80 is a storage device set in the cloud server 4, the second storage unit 90 is a storage device set in the archive server 3, and the third storage unit 100 is This is a storage device set in the client terminal 2. The second storage unit 90 and the third storage unit 100 are external storage devices, and the third storage unit 100 is a hard disk device. The second storage unit 90 is an optical disc 200a shown in FIG. The optical disc device 200 is included.

The optical disk device 200 used in the third storage unit 100 has an optical disk 200a that reads and writes data by irradiating a laser beam, and a plurality of optical disks 200a are loaded in an optical disk cartridge 200b as shown in FIG. The optical disc 200a has a laser beam irradiation unit that irradiates the optical disc 200a with laser beam. The optical disk device 200 has a plurality of optical disk cartridges 200b.

  Here, as shown in FIG. 4, the data file based on the data input by the data input unit 10 is stored in the third storage unit 100 set in the client terminal 2 and set in the cloud server 4. The first storage unit 80 is also stored in synchronization.

In the third storage unit 100, when the data file is overwritten and stored (overwriting the data file and storing means overwriting and saving the data with the same file name), In the third storage unit 100, the data file with the same name before overwriting is overwritten and disappears, and only the data file after overwriting is stored. In this embodiment, the first storage Each time the unit 80 overwrites and stores the data file in the third storage unit 100, the unit 80 stores both the data file before overwriting and the data file after overwriting (that is, during the overwriting operation of the data file, The first storage unit 80 and the third storage unit 90 are not synchronized). Data files based on the encrypted data are stored in the first storage unit 80 to the third storage unit 100.

  The access history management unit 110 manages and records access histories of data files stored in the first storage unit 80 to the third storage unit 100.

  The data file selection migration unit 120 is a functional unit that performs data file archive control processing, and is a first storage set in the cloud server 4 based on the access history of each data file managed by the access history management unit 110. A data file is selected from the section 80 and transferred. The selected and migrated data file is stored in the second storage unit 90 set in the archive server 3.

  Here, the access history managed by the access history management unit 110 includes the access date and / or access frequency of the data file. Then, the data file selection transfer unit 120 performs the first operation when the access time of the data file has passed a predetermined time with respect to the current date and / or when the access frequency of the data file within the predetermined period is equal to or less than the predetermined number of times. A data file is selected from the storage unit 80 and transferred to the second storage unit 90.

  The storage destination selection unit 130 has a function of preferentially reading from the third storage unit 100 the data files stored in the first storage unit 80 and the third storage unit 100 in an overlapping manner.

  The data file decompressing unit 140 decompresses the encrypted data file into the data file before being encrypted. The data file decompression unit 140 decompresses the data file when the data file is read out to the memory.

  The status display data generation unit 150 generates status display data indicating the usage status of the data file. This status display data includes, for example, “To Do”, “Frequently used”, “Working / waiting for answer”, “Pending / later”, “Completed”, “To be deleted”, “Old”, “Private”, There are “official and final versions”. The generation of the status display data by the status display data generation unit 150 may be generated in association with the access history managed by the access history management unit 110. The status display data indicating the usage status may be color-coded for each usage status.

  The display unit 160 has a function of causing the display device of the client terminal 2 to perform various displays. For example, the display unit 160 displays the data of the data file read from each of the storage units 80 to 100. Further, the display unit 160 displays information indicating the contents of the data files stored in the first storage unit 80 to the third storage unit 100. Specifically, a keyword indicating the attribute contents of the data file and a keyword tagged in each data file are displayed. Further, the display unit 160 displays the status display data generated by the status display data generation unit 150 for each data file.

Here, each function part in said data management system 1 can implement | achieve the function by running a program.

More specifically, the program is a computer of the data management system 1 that stores and manages a plurality of data files by connecting the client terminal 2 and the archive server 3 and the cloud server 4 through the communication line 5 in detail, from the client side. In the data file creation unit 40 for creating the data file, the first storage unit 80 that stores the data file created by the data file creation unit 40 and is set in the cloud server 4, and the first storage unit 80 The access history management unit 110 that manages the access history of the stored data file, and the data file is selected from the first storage unit 80 based on the access history of each data file managed by the access history management unit 110 and transferred. Data file selection transfer unit 120 and data file selection Can function as a transition 120 is selected from the first storage unit 80 stores the migrated data file a second storage unit 90 is set in the client side.

More specifically, the program is executed by the computer of the data management system 1, the data input unit 10, the access permission unit 20, the data deletion unit 21, the data file restoration unit 22, the permission data change unit 30, the file creation unit 40, and the keyword selection unit. 50, tagging unit 60, additional information setting unit 65, encryption processing unit 70, first storage unit 80, second storage unit 90, third storage unit 100, access history management unit 110, data file selection migration Unit 120, storage destination selection unit 130, data file decompression unit 140, status display data generation unit 150, and display unit 160.

By executing this program, the data input unit 10, the data file creation unit 40, the keyword selection unit 50, the tagging unit 60, the additional information setting unit 65, the third storage unit 100, the storage destination selection unit 130, And the display unit 160 are set in the client terminal 2, and the data deletion unit 21, the data file restoration unit 22, the permitted data change unit 30, the encryption processing unit 70, the second storage unit 90, the access history management unit 110, the data The file selection migration unit 120, the data file decompression unit 140, and the status display data generation unit 150 are set in the archive server 3, and the access permission unit 20 and the first storage unit 80 are set in the cloud server 4.

Note that the program in the present embodiment can be purchased by the purchase system 300 configured to be able to purchase the right to use the program, whereby the right to use the program can be easily purchased. it can.

Here, the purchase can be made through an intermediary that displays or stores use permission data (e.g., a PIN code) for authorizing the use of the program and mediates the use of the program. be able to. In other words, by using a lump-sum purchase through an intermediary, the payment of the system usage fee that is generally charged monthly according to the usage time can be made as a lump sum payment at the time of initial purchase. It can be used with confidence without worrying, and it will also lead to a reduction in running costs. Also, in the monthly billing system, the rental image is strong and may give the user an image that they do not have the right to use the system. However, if the usage right is purchased in a lump sum, the user has the right to use the system. It can also be clarified. Furthermore, it is easy to purchase at a physical store, and the convenience of purchase is improved.

As shown in FIG. 5, the purchase system 300 includes a purchase information input unit 310 for inputting program purchase information, and a use for permitting the use of the program based on the purchase information input by the purchase information input unit 310. It has a use permission data generation unit 320 that generates permission data, and a medium generation unit 330 that generates a medium that displays or stores the use permission data.

The mediator can be a card or a storage medium. The card-like object can be a prepaid card, for example, and the prepaid card can be a POSA card or a scratch card. The storage medium may be a memory card, SD card, USB card, flash memory, or the like. When the storage medium is used, the program may be stored. In this embodiment, the medium can be executed without being installed in the client terminal 2 regardless of whether the medium is a card-like object or a storage medium. As a result, it is possible to reduce a mental disorder of the user who is unaware of installing the client application.

Next, the processing flow by the data management system 1 will be described in detail based on the flowcharts of FIGS.

That is, as shown in FIG. 6, first, in step S10, use permission data is input by purchasing a medium, that is, a card-like material or a storage medium by the purchase system 300. Next, in step S20, it is determined whether the use permission data input in step S10 is correct. In step S30, the program is downloaded. Thereby, the data management system 1 becomes operable.

Subsequently, as shown in FIG. 7, in step S <b> 100, the user inputs access permission data via the input device and the data input unit 10.

In step S110, the access permission unit 20 determines whether or not the access permission data matches the access permission data stored in advance. If the access permission data matches, the access permission unit 20 permits access to the data management system 1.

If the access permission data does not match in step S110 and the mismatch continues for a predetermined number of times or more in step S111, the data deletion unit 21 deletes the access permission data from the storage units 80 to 100 in step S112. All of the data files stored in the third storage unit 100 are deleted.

Next, in step S113, the data file restoring unit 22 stores the file name of the data file deleted in step S112, and the permission data changing unit 30 changes the access permission data. Next, in step S114, when the access permission unit 20 determines that the input access permission data matches the stored access permission data after the change, the data file restoration unit 22 has the same file name as the deleted file name. The data file of the name is transferred from the first storage unit 80 and the second storage unit 90 to the third storage unit 100 while being copied and stored.

Subsequently, in step S130, the required unit determines whether or not the data file to be created is a new creation. If it is a new creation, the data file creation unit 40 creates a data file in step S140.

Next, in step S150, the keyword selection unit 50 selects a keyword indicating the attribute contents of the data file, and the tagging unit 60 performs tagging for associating the selected keyword with each data file. .

In step S155, the additional information setting unit 65 sets additional information other than keywords stored in advance in each data file.

Subsequently, in step S160, the encryption processing unit 70 performs encryption processing of the data file created in step S140.

Next, in step S170, the data file encrypted in step S165 is stored in the first storage unit 80 and the third storage unit 100.

On the other hand, if the creation of the data file is not a new creation but a modification of the existing data file in step S130, the existing data file is read from the storage units 80 to 100 in step S180. Here, in the case where the data file stored redundantly in the first storage unit 80 and the third storage unit 100 is read, the storage destination selection unit 130 reads the data file preferentially from the third storage unit 100. .

Next, in step S190, the data file decompression unit 140 decompresses the encrypted data file into the data file before the encryption processing, and the flow continues from step 140 to step 170 below.

Subsequently, as shown in FIG. 8, a data file migration processing flow is performed.
That is, in step S200, the access history management unit 110 manages and records the access history of the data files stored in the first storage unit 80 to the third storage unit 100.

  Next, in steps S210 and 220, the data file selection / transfer unit 120 selects and transfers the data file from the first storage unit 80 that is archived based on the access history managed in step S200 and set in the cloud server 4 Let In other words, when the data file access date and time has passed a predetermined time with respect to the current date and time and / or when the data file access frequency within a predetermined period is equal to or less than a predetermined number of times, In step S230, the data file selection transfer unit 120 further selects a data file from the first storage unit 80 and transfers it to the second storage unit 90.

  As described above, according to the present invention, the data file creation unit 40 that creates a data file, and the first storage unit that stores the data file created by the data file creation unit 40 and is set in the cloud server 4 80, a data file selection / transfer unit 120 for selecting and transferring a data file from the first storage unit 80, and a data file selected and transferred from the first storage unit 80 by the data file selection / transfer unit 120. 2 storage units 90, the data file can be transferred from the first storage unit 80 set in the cloud server 4 to the second storage unit 90 set in the archive server 3. The cost can be reduced by reducing the number of data files stored in the cloud server 4.

In addition, the access history management unit 110 that manages the access history of the data files stored in the first storage unit 80 is included, and the data file selection migration unit 120 includes a data file management unit 110 that manages each data file managed by the access history management unit 110. Since the data file is selected and migrated from the first storage unit 80 based on the access history, the data file can be migrated based on the access history.

The access history managed by the access history management unit 110 includes the access date and / or access frequency of the data file, and the data file selection / transfer unit 120 determines that the access date and time of the data file is predetermined with respect to the current date and time. The data file is selected from the first storage unit 80 and transferred to the second storage unit 90 when time elapses and / or when the frequency of accessing the data file within a predetermined period is equal to or less than a predetermined number of times. Therefore, data files that have not been used for a long period of time or data files that are not frequently accessed can be migrated from the cloud server 4 to the archive server 3, and the number of data files stored in the cloud server 4 can be reduced to reduce costs. You can plan.

In addition, since the second storage unit 90 is set in the archive server 3 and is an optical disk device including an optical disk, the number of data files transferred from the cloud server 4 to the archive server 3 is enormous. Even if it exists, it can prevent that it becomes a cost increase.

  In other words, the optical disk device 200 is cheaper, has a longer life, and is more durable than a hard disk device. Further, in the present embodiment, by having a plurality of optical disk cartridges 200a, a part of the optical disk device 200 can be easily and continuously used. Can be replaced, which greatly reduces the cost. On the other hand, the optical disk apparatus 200 is inferior in access speed and data processing speed to the hard disk apparatus, but in this embodiment, the optical file apparatus stores data files with a low access frequency in the optical disk apparatus. Processing speed is rarely a problem.

In addition, the client terminal 2 includes a data input unit 10 for inputting data, a third storage unit 100 for storing a data file based on the data input by the data input unit 10, and a first storage unit 80 stores the data file stored in the third storage unit 100, so that the data file stored in the third storage unit 100 can be reliably stored in the first storage unit 80. .

In addition, the first storage unit 80 stores both the data file before overwriting and the data file after overwriting every time the third storage unit 100 overwrites and stores the data file. Even when a data file is overwritten by an erroneous operation in the storage unit 100, the data file before being overwritten can be surely backed up in the first storage unit 80, and a problem of data loss due to an erroneous operation can be prevented in advance. be able to.

Note that storing the data file before overwriting in the first storage unit 80 may increase the number of data files in the first storage unit 80, but the data file before overwriting is backup data. Therefore, there is a high possibility that the data is not accessed for a certain period of time or the access frequency is low, and the data file is migrated from the first storage unit 80 to the second storage unit 90 based on the access history as described above. It is also possible to appropriately prevent the number of data files in the first storage unit 80 from becoming enormous.

In addition, there is a possibility that the data file before being overwritten is transferred to the second storage unit 90 enormously. However, since the second storage unit 90 is used as the optical disc apparatus 200 as described above, the data to be transferred Even when the number of files becomes enormous, it is possible to appropriately prevent the second storage unit 90 from increasing in cost.

In addition, since it has the storage destination selection unit 130 that preferentially reads the data file stored in the first storage unit 80 and the third storage unit 100 from the third storage unit 100, it is duplicated. When the data file is read, the number of accesses to the first storage unit 80 set in the cloud server 4 can be reduced by preferentially selecting the third storage unit 100 by the storage destination selection unit 130. Communication costs can be reduced.

The first storage unit 80 to the third storage unit 100 include an encryption processing unit 70 that performs encryption processing on the data of the data files stored in the first storage unit 80 to the third storage unit 100, and the first storage unit 80 to the third storage unit 100. Since the data file based on the encrypted data is stored, the confidentiality of the data file is maintained even when the data file is leaked, and a reliable information leakage countermeasure can be taken.

Also, when the access permission unit 20 determines that the mismatch between the input access permission data and the preset access permission data has continued for a predetermined number of times, the data file stored in the third storage unit 100 Since the data deletion unit 21 that deletes all of them is provided, it is possible to more reliably take measures against information leakage.

In addition, the data file name of the data file deleted by the data deleting unit 21 is stored, and when the same access permission data as the access permission data changed by the permission data changing unit 30 is input by the data input unit 10 A data restoration unit for copying and storing the data file having the same data file name as the deleted data file from the first storage unit 80 and / or the second storage unit 90 to the third storage unit 100 Therefore, the data file can also be backed up reliably.

The access permission unit 20 has a permission data changing unit 30 for changing the access permission data when it is determined that the mismatch between the input access permission data and the preset access permission data is continued a predetermined number of times or more by the access permission unit 20; The data restoration unit 22 is a data file having the same data file name as the deleted data file when the access permission data same as the access permission data changed by the permission data changing unit 30 is input by the data input unit 10 Is copied from the first storage unit 80 and / or the second storage unit 90 and transferred to the third storage unit 100 for storage, so that information leakage countermeasures can be taken even more reliably.

Also, a keyword selection unit 50 for selecting a keyword indicating the contents of the data file stored in the first storage unit 80 and the second storage unit 90 from the plurality of keywords, and the keyword selected by the keyword selection unit 50 Since the tagging unit 60 for tagging the data file is included, the data file can be searched efficiently.

That is, for example, in conventional hierarchical management with folders, searching while opening folders in lower layers while predicting in which folder the target data file is stored, the folder name is It is often set with a name common to a plurality of data files, and there are many cases where the contents of each data file do not correspond to the folder name. Further, there are cases where the number of hierarchies increases in the hierarchy management using folders. For this reason, in the past, a lot of time was spent searching for a data file, such as searching for a target data file while opening a plurality of folders. By tagging with a data file, the contents of each data file can be clearly associated with a keyword, and the data file can be searched efficiently.

In addition, since the status display data generation unit 150 generates display data indicating the usage status of the data file based on the access history managed by the access history management unit 110, the usage status of the data file can be easily grasped. can do.

Further, since the display data indicating the usage status is color-coded for each usage status, the usage status of the data file can be grasped more easily.

As described above, the client terminal 2 includes a desktop personal computer, and can also include a notebook personal computer, a mobile phone, a smartphone, and a tablet terminal. That is, notebook personal computers, portable terminals, and tablet terminals are easy to take out and can improve convenience, but have a problem of information leakage due to loss. By having the encryption processing unit 70 as described above, the problem of information leakage can be solved in advance, and the advantages of using a notebook personal computer, portable terminal, and tablet terminal can be enjoyed.

That is, by adopting the data management system 1, the IoT is promoted as a whole, which leads to efficient management of data files in a company. As a result, even those who are not good at data management can efficiently manage the data, and this leads to work style reforms (the difference in work efficiency is reduced due to poor data management. ). In addition, by promoting IoT, it is possible to reduce costs and ensure the durability of data while the amount of data stored online increases. Furthermore, it can also be a measure for reducing the risk associated with the digitization and mobility of confidential information that requires countermeasures against information leakage.

Of course, the present invention is not limited to the above-described embodiment, and various modifications and applications can be made.

That is, for example, in the above-described embodiment, the second storage unit 90 is the optical disk device 200, but a desired effect can be obtained even when the hard disk device is used. However, in the hard disk device, the second storage unit 90 has a failure due to having a drive part and a light bulb part, the necessity of data backup by using a magnetic tape, and the life of the magnetic tape itself. The advantage of adopting the optical disk device 200 is great.

Further, in the above-described embodiment, the data file selection / transfer unit 120 performs an archive process, whereby the data file is archived from the first storage unit 80 set in the cloud server 4 based on the access history. However, the data file may be simply transferred from the first storage unit 80 to the second storage unit 90 without being based on the access history. .

The present invention can transfer a data file from a first storage unit set in a cloud server to a second storage unit set in an archive server based on a usage history, and various industries that require data management Contribute greatly to the development of

1: Data management system 2: Client terminal 3: Archive server 4: Cloud server 10: Data input unit 20: Access permission unit 21: Data deletion unit 22: Data file restoration unit 30: Permitted data change unit 40: Data file creation unit 50: Keyword selection unit 60: Tagging unit 65: Additional information setting unit 70: Encryption processing unit 80: First storage unit 90: Second storage unit 100: Third storage unit 110: Access history management unit 120 : Data file selection transfer unit 130: storage destination selection unit 140: data file decompression unit 150: status display data generation unit 160: display unit 200: optical disc device 200 a: optical disc 200 b: optical disc cartridge 300: purchase system 310: purchase information input unit 320: Use permission data generation unit 330: Mediator generation unit

Claims (14)

A data management system that connects a cloud server, a client terminal, and an archive server so that they can communicate with each other through a communication line, and stores and manages a plurality of data.
A data creation unit for creating the data;
A first storage unit that stores data created by the data creation unit and is set in the cloud server;
A data selection transfer unit for selecting and transferring data from the first storage unit;
A second storage unit configured to store the data selected and transferred from the first storage unit by the data selection transfer unit and set in the archive server;
A third storage unit that stores data and is set in the client terminal;
An access permission unit that determines whether or not the access permission data input by the data input unit matches preset access permission data;
A data deletion unit for deleting data stored in the third storage unit when it is determined that there is a mismatch between the input access permission data and preset access permission data;
Stores the data name of the data deleted by the data deletion unit, and the same data as the deleted data when the same access permission data as the changed access permission data is input by the data input unit A data management system comprising: a data restoration unit that stores data by transferring data to the third storage unit while replicating name data from the first storage unit and / or the second storage unit . An access history management unit for managing an access history of data stored in the first storage unit;
2. The data management according to claim 1, wherein the data selection migration unit selects and migrates data from the first storage unit based on an access history of each data managed by the access history management unit. system. The access history managed by the access history management unit includes the access date and / or access frequency of the data,
The data selection transfer unit is configured to store the first storage unit when a predetermined time elapses with respect to the current date and time and / or when the access frequency of the data within a predetermined period is a predetermined number of times or less. The data management system according to claim 2, wherein data is selected from and transferred to the second storage unit. The data management system according to any one of claims 1 to 3, wherein the second storage unit is an optical disk device including an optical disk. Before SL first storage unit, the third data management system as claimed in any one of claims 1 to 4, wherein the storing the data stored in the storage unit of the. The first storage unit, 1 to claim, characterized in said overwrite the previous data to any storage of the data after the overwritten each time overwriting and storing the data in the third storage unit data management system according to any one of claims 5. Claims 1 to characterized in that it has a storage destination selecting unit for reading is redundantly stored data in the third storage unit and the first memory unit with priority from said third storage unit 6. The data management system according to any one of 6. An encryption processing unit that performs encryption processing of data in the data stored in the first storage unit to the third storage unit;
The first storage unit to the third storage unit, the data management system as claimed in any one of claims 1 to 7, characterized in that storing said encrypted processed data. A keyword selection unit that selects a keyword indicating the content of the data from a plurality of keywords, and a tagging unit that performs tagging for associating the keyword selected by the keyword selection unit with the data. data management system as claimed in any one of claims 1 to 8 and. The data management system according to claim 2 , further comprising a status display data generation unit that generates status display data indicating a usage status of the data based on an access history managed by the access history management unit . The status display data indicating the usage status data management system of claim 10, wherein Rukoto be color coded for each of the usage. The data according to any one of claims 1 to 11, wherein the client terminal includes a desktop personal computer, and includes a notebook personal computer, a mobile phone, a smartphone, and a tablet terminal. Management system. A computer of a data management system for storing and managing a plurality of data by connecting a cloud server, a client terminal, and an archive server so that they can communicate with each other through a communication line.
A data creation unit for creating the data;
A first storage unit that stores data created by the data creation unit and is set in the cloud server;
A data selection transfer unit for selecting and transferring data from the first storage unit;
A second storage unit configured to store the data selected and transferred from the first storage unit by the data selection transfer unit and set in the archive server;
A third storage unit that stores data and is set in the client terminal;
An access permission unit that determines whether or not the access permission data input by the data input unit matches preset access permission data;
A data deletion unit for deleting data stored in the third storage unit when it is determined that there is a mismatch between the input access permission data and preset access permission data;
Stores the data name of the data deleted by the data deletion unit, and the same data as the deleted data when the same access permission data as the changed access permission data is input by the data input unit A program that functions as a data restoration unit that copies and stores name data from the first storage unit and / or the second storage unit to the third storage unit . A computer-readable storage medium storing the program according to claim 13 .

Images