JP6435676B2 - File management apparatus, file management system, and program - Google Patents

Description

  The present invention relates to a file management apparatus, a file management system, and a program.

  Conventionally, in order to ensure the security of an electronic file existing on a network, a technique for controlling access to the electronic file by performing user authentication has been proposed. As a method for performing user authentication, for example, the technique of Patent Document 1 has been proposed.

  In the technology disclosed in Patent Document 1, in the schedule information acquired from the schedule information management server, the user to be authenticated is working, and the current location of the user is the installation location (work location) of the own apparatus. If it is, the user is authenticated as a valid user.

JP 2008-181217 A

  It is an object of the present invention to provide a file management apparatus, a file management system, and a program that can maintain file security without impairing user convenience.

A file management apparatus according to claim 1 of the present invention includes a user identification unit that identifies a user who accesses a file stored in a storage unit, and a current location acquisition unit that acquires the current location of the user identified by the user identification unit. And schedule acquisition means for acquiring the user's schedule information identified by the user identification means from the storage means for storing the user's schedule information, the user's current location acquired by the current location acquisition means, and the schedule Access control for controlling access to the file based on the event location indicating the location where the event registered in the user's schedule information acquired by the acquisition means is performed, the content of the event, and the content of the file and means, to the user terminal that the user possessed , Seen containing a companion detecting means, the detecting the presence or absence of companions to accompany the user, current location of the user, the event place, when the content and the content of the file of the event satisfies a predetermined condition The access control means permits the user to access the file when the accompanying person is not detected by the accompanying person detecting means, and when the accompanying person is detected by the accompanying person detecting means, the access control means Access to the file is restricted .

The file management apparatus according to claim 2 of the present invention, in the configuration according to claim 1, identifies calculation means for calculating a distance from the current location to the event location, and identifies a companion accompanying the user to the event Companion identification means that further includes the access control means, wherein the distance calculated by the calculation means is smaller than a preset set distance, and the content of the file is the content of the event and the content of the event If it is associated with a companion, the user is allowed access to the file.

The file management apparatus according to claim 3 of the present invention, in the configuration according to claim 1, identifies calculation means for calculating a distance from the current location to the event location, and identifies a companion accompanying the event of the user Companion identification means that further includes the access control means, wherein the distance calculated by the calculation means is smaller than a preset set distance, and the content of the file is the content of the event and the content of the event If associated with a companion, the user is allowed access to a portion of the file.

According to a fourth aspect of the present invention, in the configuration of the first aspect, the file management apparatus identifies a calculation unit that calculates a distance from the current location to the event location, and identifies a companion accompanying the event of the user. The access control means does not specify the accompanying person, the user's current location matches the event location, and the content of the file relates to the content of the event. If so, the user is allowed access to the file.

The file management apparatus according to claim 5 of the present invention, in the configuration according to claim 1, further includes a companion identification means for identifying a companion accompanying the event of the user, wherein the access control means If the accompanying person is not estimated, the user is prohibited from accessing the file.

A file management system according to claim 6 of the present invention is a file management system including a user terminal used by a user and a file management apparatus connected to the user terminal via a network, wherein the file management apparatus User identification means for identifying a user accessing a file stored in the storage means, current location acquisition means for acquiring the current location of the user identified by the user identification means, and storage means for storing user schedule information From the schedule acquisition unit for acquiring the schedule information of the user identified by the user identification unit, the current location of the user acquired by the current location acquisition unit, and the schedule information of the user acquired by the schedule acquisition unit Indicates the location where events registered in And cement location, and contents of the event, based on the content of the file, and access control means for controlling access to the file, the user terminal that the user possesses, the presence or absence of a companion to accompany the user seen containing a companion detecting means for detecting a current location of the user, the event place, when the content and the content of the file of the event satisfies a predetermined condition, the access control means, said companion detection When the accompanying person is not detected by the means, the user is allowed to access the file, and when the accompanying person is detected by the accompanying person detecting means, the user is restricted from accessing the file. And

According to a seventh aspect of the present invention, there is provided a program for identifying a user who accesses a file stored in a storage unit, a user identification unit for acquiring a current location of the user identified by the user identification unit, The schedule acquisition means for acquiring the schedule information of the user identified by the user identification means, the current location of the user acquired by the current location acquisition means, and the schedule acquisition means acquired from the storage means for storing the schedule information. And an access control means for controlling access to the file based on the event location indicating the location where the event registered in the user's schedule information is performed, the content of the event, and the content of the file, and Depending on the user terminal possessed by the user, A program for causing a computer to function companion detection means for detecting the presence of companion to accompany over The, as, the user current location, the event location, the contents and the contents of the file of the event is predetermined In the case where the condition is satisfied, the access control means permits the user to access the file when the accompanying person is not detected by the accompanying person detecting means, and the accompanying person is detected by the accompanying person detecting means. The program restricts access of the user to the file . This program may be stored in a computer-readable information storage medium such as a CD-ROM or a DVD-ROM.

According to the configuration of the first, sixth , and seventh aspects of the present invention, the security of the file is maintained without impairing the convenience for the user.

According to the configuration of claim 2 of the present invention, when a companion is specified, access to a file related to the companion is permitted.

According to the configuration of claim 3 of the present invention, when a companion is estimated, access to a file related to the companion is conditionally permitted.

According to the configuration of claim 4 of the present invention, when the accompanying person is not specified and the current location of the user matches the event location, access to the file related to the content of the event is permitted.

According to the configuration of claim 5 of the present invention, access to a file is prohibited when a companion is not estimated.

1 is an overall configuration diagram of a file management system according to the present embodiment. It is a block diagram which shows the specific structure of a file management system. It is a block diagram which shows the specific structure of the file management apparatus which concerns on this embodiment. It is a figure which shows an example of a file information table. It is a figure which shows an example of a user information table. It is a figure which shows an example of an attendance information table. It is a table which shows an example of schedule information. It is a figure which shows an example of a schedule process table. It is an operation | movement flowchart of a file management system. It is an operation | movement flowchart of a file management system. It is a file management system operation | movement flowchart concerning the modification 1. It is a block diagram which shows the specific structure of the file management apparatus which concerns on the modification 2. It is a figure which shows an example of a user information table. It is a table which shows an example of schedule information. It is a file management system operation | movement flowchart concerning the modification 2. It is a file management system operation | movement flowchart concerning the modification 2. It is a file management system operation | movement flowchart concerning the modification 2. It is a file management system operation | movement flowchart concerning the modification 2.

  An embodiment of the present invention will be described below with reference to the drawings.

  FIG. 1 is an overall configuration diagram of a file management system according to the present embodiment. As shown in FIG. 1, a file management system 100 includes a file management apparatus 10 that manages various files, a schedule information management server 20 that stores and manages schedule information indicating a user's schedule, and a user terminal that is used by the user. 30. The number of user terminals 30 may be one or plural. The file management apparatus 10, the schedule information management server 20, and the user terminal 30 are connected to each other via a communication network 40 such as a LAN (Local Area Network) or the Internet.

  The file management apparatus 10 controls access from the user to the file. The file (document) includes a file created by the user of the user terminal 30, a file created by an unspecified user, a file downloaded from the outside by the file management apparatus 10, and the like. The format of the file is not limited, and includes various electronic data such as document data, image data, drawing data, and e-mail data.

  The user terminal 30 is a terminal device used by a user connected to the communication network 40. The user terminal 30 accesses the file management apparatus 10 via the communication network 40 based on a user operation. Thereby, the user terminal 30 acquires various information from the file management apparatus 10, or displays the acquired information on the display screen. The user terminal 30 may incorporate software such as a browser and an e-mail client. The user terminal 30 is, for example, a personal computer, a PDA (Personal Digital Assistant), a portable information terminal such as a smartphone, a mobile phone, or the like. Further, the user uses the user terminal 30 to register and update his / her schedule information. The schedule information is registered in the schedule information management server 20 connected to the user terminal 30 via the communication network 40. The schedule information includes various information such as the start time, end time, holding place (event place), contents (event contents) of a schedule (event) such as a meeting, a meeting, a business trip, etc. inside or outside the company (FIG. 7). reference).

  The schedule information management server 20 stores and manages schedule information for each user. The schedule information management server 20 includes a schedule information DB 21 for storing schedule information (see FIG. 3).

  FIG. 2 is a block diagram illustrating a hardware configuration of the file management apparatus 10. The file management apparatus 10 includes a computer including a CPU 1, a memory 2, a storage unit 3, and a communication unit 4. These hardware elements are connected to each other by a bus so as to be able to exchange data. The communication unit 4 performs data communication with the schedule information management server 20 and the user terminal 30 via the communication network 40. The CPU 1 controls each unit of the file management apparatus 10 and executes various types of information processing. The memory 2 holds various programs and data. A work area of the CPU 1 is also secured in the memory 2. The storage unit 3 stores files, user information, attendance information, and the like. The storage unit 3 may be provided outside the file management apparatus 10 or may be provided in the schedule information management server 20.

  FIG. 3 is a block diagram showing a specific configuration of the file management apparatus 10. The file management apparatus 10 includes a user identification unit 11, a current location acquisition unit 12, a schedule acquisition unit 13, a time determination unit 14, a current location determination unit 15, a required time calculation unit 16, a required time determination unit 17, a file determination unit 18, and an access. A control unit 19 is included. These elements are realized by the CPU 1 executing a program stored in the memory 2 (see FIG. 2). This program may be installed in the file management apparatus 10 from a computer-readable information storage medium such as a CD-ROM, a DVD-ROM, or a memory card, or may be downloaded via a communication network 40 such as the Internet. .

  The storage unit 3 includes a file DB 31, a user information DB 32, and an attendance information DB 33.

  The file DB 31 is a database that stores the various files described above. The file DB 31 stores a table (hereinafter referred to as a file information table) in which information (file information) such as a file name, a file creator, a company name of the creator, and a department to which the file belongs is associated. FIG. 4 shows an example of the file information table. A table corresponding to the file information table may be displayed on the user terminal 30, and the file data storage URL may be linked to the file name in the table.

  The user information DB 32 is a database that stores information on one or more users. The user information DB 32 stores a table (hereinafter referred to as a user information table) in which information such as a user name (user ID), a terminal ID (identification number) of a user terminal, a user company name, and a department to which the user belongs is associated. Has been. FIG. 5 shows an example of the user information table. In the user information table, for example, information on all employees of the company to which the user belongs and information on employees of affiliated companies and business partners of the company are registered. User information can be registered and updated using the user terminal 30 or the file management apparatus 10.

  The attendance information DB 33 is a database that stores attendance information of one or more users. The attendance information DB 33 stores a table (hereinafter, referred to as attendance information table) in which a user name (user ID), a default time zone indicating a work time zone, and information on a default location indicating a work location are associated with each other. Yes. The predetermined time zone refers to, for example, a working time zone determined in advance by a contract, work rules, or the like. The predetermined time zone is not limited to the legal working hours, and may be a time zone including, for example, an assumed overtime hours. FIG. 6 shows an example of the attendance information table. For example, the default time zone for users A, B, and C is set to “8: 00-20: 00”, and the default time zone for user D is set to “10: 00-16: 00”. In addition, the default location for users A, B, C, and D is set to “Company X”.

  The user identification unit 11 identifies a user who has requested access to a file stored in the storage unit 3 of the file management apparatus 10. Specifically, the user identifying unit 11 identifies (identifies) a user by referring to the user information table (see FIG. 5) in the user information DB 32 based on the terminal ID of the user terminal 30 that is the access request source. For example, when a user connects to the file management apparatus 10 using the user terminal 30 (terminal ID: ID01) and tries to acquire (access) the file “F0001” stored in the file DB 31, the user identification unit 11 Identifies (identifies) the user as “user A” with reference to the user information table.

  The user identification unit 11 is not limited to the above configuration. For example, the user identification unit 11 may identify a user by acquiring a user image captured by a camera provided in the user terminal 30 and analyzing the acquired image. Moreover, the user identification part 11 may identify a user by acquiring the user ID and password input into the user terminal 30, and collating the acquired user ID and password.

  The current location acquisition unit 12 acquires the current location of the user who uses the user terminal 30. Specifically, the current location acquisition unit 12 acquires the detection result of a position detection unit (not shown) provided in the user terminal 30, and acquires the position of the user who uses the user terminal 30 based on the detection result ( Identify. The position detection method is not limited, and for example, a GPS (Global Positioning System), a wireless LAN, a wired LAN, an IC tag, an RFID, a human sensor, or the like can be used. For example, when GPS is used, it is possible to acquire the current location (for example, address location: T address) of a user who is out. For example, when an IC tag is used, the current location of the user in the company (for example, the conference room 101 on the 10th floor) can be acquired.

  The schedule acquisition unit 13 acquires the schedule information of the user identified by the user identification unit 11 from the schedule information DB 21 of the schedule information management server 20.

  FIG. 7 is a table showing an example of schedule information stored in the schedule information DB 21. For example, from the schedule information DB 21, the schedule acquisition unit 13 sets the event time “10: 00-12: 00”, the event place “Y company”, the event A as the schedule information of the event A1 on October 15 for the user A The contents “α product negotiation” are acquired, and the event time zone “14: 00-15: 00”, the event location “Company Z”, and the event content “β product negotiation” are acquired as schedule information of the event A2.

  The schedule acquisition unit 13 may create a schedule process table based on the attendance information stored in the attendance information DB 33 and the schedule information acquired from the schedule information DB 21. FIG. 8 shows an example of the schedule process table. In the example of FIG. 8, the schedule process table of users A, B, C, and D on October 15 is shown. The schedule process chart may be displayed on the user terminal 30 so that the user can check.

  The time determination unit 14 determines whether or not the current time is included in a predetermined time zone (see FIG. 6) stored in the attendance information DB 33. The current time is the time when the user requested access to the file. For example, the time determination unit 14 determines whether or not the current time is included in a predetermined time zone “8: 00-20: 00” registered in the attendance information of the user A. Specifically, when the current time is “11:00”, the time determination unit 14 determines that the current time is included in the predetermined time zone, and when the current time is “21:00”, the time determination unit 14 Determines that the current time is not included in the predetermined time zone.

  Further, the time determination unit 14 determines whether or not the current time is included in the event time zone registered in the schedule information (see FIG. 7) acquired by the schedule acquisition unit 13. For example, the time determination unit 14 determines whether or not the current time is included in the event time zone “10: 00-12: 00” or “14: 00-15: 00” registered in the schedule information of the user A. judge. Specifically, when the current time is “11:00”, the time determination unit 14 determines that the current time is included in the event time zone, and when the current time is “13:30”, the time determination unit 14 Determines that the current time is not included in the event time zone.

  The current location determination unit 15 determines the current location of the user acquired by the current location acquisition unit 12. For example, if the user A is in the company (Company X), the current location determination unit 15 determines that the current location of the user A is a default location, and if the user A is in an outside meeting location (Company Y), the current location determination The unit 15 determines that the current location of the user A is an event location (Company Y), and if the user A is in an outside coffee shop, the current location determination unit 15 determines that the current location of the user A is a coffee shop.

  The required time calculation unit 16 calculates the required time (movement time) required for the user to move from the current location acquired by the current location acquisition unit 12 to the event location of the user. A known method can be applied to the calculation method of the required time. For example, when the user A is in an outside coffee shop at the current time “13:30”, the required time calculation unit 16 calculates the distance from the coffee shop to the event place (company Z) thereafter, and the user A Calculate the time required to move from the coffee shop to company Z on foot or using transportation. The required time calculation unit 16 calculates the distance from the coffee shop to the previous event place (Company Y), and is required for the user A to move from the coffee shop to Company Y on foot or using transportation. Calculate time.

  The required time determination unit 17 determines whether or not the required time calculated by the required time calculation unit 16 is within a preset set time. For example, when the set time is set to 30 minutes and the required time is 15 minutes, the required time determination unit 17 determines that the required time is within the set time, and the required time is When it is 1 hour, the required time determination unit 17 determines that the required time is outside the set time.

  The required time calculation unit 16 calculates the distance from the current location of the user to the event location, and the required time determination unit 17 determines whether the calculated distance is shorter than a preset set distance. May be. That is, in the file management apparatus 10, the required time calculation unit 16 may be replaced with a distance calculation unit, and the required time determination unit 17 may be replaced with a distance determination unit.

  The file determination unit 18 (file comparison unit) allows the user to reach within the set time among events registered in the contents of the file stored in the file DB 31 and the user's schedule information (see FIG. 7). The contents of the event are compared, and it is determined whether or not both are related. For example, the file determination unit 18 includes the contents of the file “F0001” (for example, a document file) requested by the user A and the contents of the event A2 registered in the schedule information (see FIG. 7) of the user A “β product Compare with "Negotiation". When the file name of the file “F0001” and the content of the “β product” are described in the text of the document, the file determination unit 18 determines that the file “F0001” is a file related to the event A2 (hereinafter referred to as a related file). .). A well-known method can be applied as a method for determining relevance. For example, determination by keyword search or determination of similarity by difference can be used. Further, the content of the event to be compared is not limited to the agenda of the event (for example, a meeting), but may be information (participant name, company name, department, etc.) of participants who participate in the event.

  The access control unit 19 permits or prohibits the user's access to the file stored in the file DB 31 based on factors such as the user's current location, current time, the required time, and the relationship between the event and the file. Or conditionally allow. For example, at a current time “13:30”, a user A (ID01) stores the related file “F0001” of the event A2 at an outside coffee shop where the time required from the event location of the event A2 is 15 minutes. When the download (access) is attempted, the access control unit 19 permits this access and transmits the target related file “F0001” to the user terminal (ID01).

  Next, processing contents in the file management system 100 will be described. 9 and 10 are operation flowcharts of the file management system 100. FIG. Here, a case where the user A tries to download the file “F0001” using the user terminal “ID01” will be described as an example. Also. Here, conditions such as the current time and the current location of the user A will be described while being changed as necessary.

  First, when the user A uses the user terminal “ID01” to make an access request to the file “F0001”, the user identification unit 11 uses the user information table (in the user information DB 32) based on the terminal ID of the user terminal 30. With reference to FIG. 5, the user is identified (specified) (S11). The file access request is, for example, when the file is selected (clicked or the like). Here, the user identification unit 11 identifies the user A.

  Next, the current location acquisition unit 12 acquires the current location of the user A (S12). For example, when the user A is in an outside coffee shop, the current location acquisition unit 12 acquires the location of the coffee shop.

  Next, the schedule acquisition unit 13 acquires the schedule information of the user A from the schedule information DB 21 (S13). For example, the schedule acquisition unit 13 acquires schedule information of the events A1 and A2 of the user A shown in FIG.

  Next, the time determination unit 14 determines whether or not the current time is included in the predetermined time zone (see FIG. 6) (S14). For example, since the default time zone of the user A is “8: 00-20: 00”, when the current time is “13:30”, the current time is included in the default time zone.

  When the current time is included in the predetermined time zone (YES in S14), the time determination unit 14 further determines whether or not the current time is included in the event time zone registered in the schedule information (S15). Here, since the event time zone of event A1 is “10: 00-12: 00” and the event time zone of event A2 is “14: 00-15: 00”, the current time is included in the event time zone. I can't.

  When the current time is not included in the event time zone (NO in S15), the current location determination unit 15 determines whether or not the current location of the user A matches the default location of the user A (S16). Here, since user A is in an outside coffee shop, the current location of user A does not match the default location.

  When the current location of the user A does not match the predetermined location (NO in S16), the required time calculation unit 16 calculates each required time required for the user A to move from the current location to the event location of the events A1 and A2. (S17). For example, it is assumed that the time required from the coffee shop to the event place (company Z) of event A2 is 15 minutes, and the time required from the coffee shop to the event place of event A1 (company Y) is 1 hour.

  Next, the required time determination unit 17 determines whether or not the required time is within the set time (S18). When the set time is set to 30 minutes, for the event A2, the required time is within the set time, and for the event A1, the required time is outside the set time.

  When the required time is within the set time (YES in S18), the file determination unit 18 determines the content of the file “F0001” requested by the user A and the content of the event A2 that can be reached within the set time “ “Sale of β product” is compared (S19).

  When the file name of the file “F0001” and the content of “β product” are described in the text of the document, and the file “F0001” is a related file of the event A2 (YES in S19), the access control unit 19 Access to “F0001” from the user A is permitted, and the file “F0001” is transmitted to the user terminal “ID01” (S20).

  In the process of S14, when the current time is not included in the predetermined time zone (see FIG. 6) (NO in S14), that is, when the current time is before 8:00, or from 20:00 If it is later, the access control unit 19 prohibits access from the user A to the file “F0001” (S21). This prevents access to the file outside working hours.

  In the process of S15, when the current time is included in the event time zone (YES in S15), the current location determination unit 15 determines whether or not the current location of the user A matches the event location of the corresponding event ( S101 in FIG. For example, when the current time is “14:30”, it is determined whether or not the current location of user A matches the event location “Company Z” of event A2. When the current location of the user matches the event location (YES in S101), the file determination unit 18 compares the content of the file requested by the user with the content of the event at the event location where the user exists (S102). As a result of the comparison, for example, if the file name of the file “F0001” and the content of the “β product” are described in the document body, and the file “F0001” is the related file of the event A2 (YES in S102), access The control unit 19 permits access from the user A to the file “F0001” and transmits the file “F0001” to the user terminal “ID01” (S103). Thereby, for example, during a meeting, a file related to the meeting can be acquired or viewed.

  If the current location of the user does not match the event location (NO in S101), or if the content of the file requested by the user is not related to the content of the event at the event location where the user exists (NO in S102), access The control unit 19 prohibits access from the user A to the file “F0001” (S104).

  In the process of S16, when the current location of the user A matches the default location (YES in S16), the access control unit 19 permits the access from the user A to the file “F0001” and sets the file “F0001” to the user terminal. It transmits to “ID01” (S20). In this case, for example, the user A is performing a normal business in the company.

  In the process of S18, if the required time is outside the set time (NO in S18), or in the process of S19, the content of the file requested by the user and the event at the event location where the user exists When the contents are not related (NO in S19), the access control unit 19 prohibits the user A from accessing the file “F0001” (S21).

  Here, when an event is not registered in the schedule information like the user B (see FIGS. 7 and 8), the file management apparatus 10 performs the following processing. That is, in the process of S14, when the current time is included in the predetermined time zone (see FIG. 6) (YES in S14), the access control unit 19 permits the user A to access the file “F0001” ( S20) If the current time is not included in the predetermined time zone (NO in S14), the access control unit 19 prohibits access from the user A to the file “F0001” (S21).

  In the example illustrated in FIG. 8, for the user C, the default location is “X company's 5th floor”, and the event location of the event C1 is “X company's 10th floor”. In this way, even when the user is in the same company, file access is controlled according to the user's current location and event location. In this case, the current location and the event location may be distinguished in units such as an in-house floor, a room, and a department.

  Further, when the event is set outside the predetermined time (for example, overtime hours) as the user D (see FIGS. 7 and 8), the file management apparatus 10 performs the following processing. In the following description, the file management apparatus 10 according to the first modification is described. FIG. 11 is an operation flowchart of the file management system 100 according to the first modification. In FIG. 11, the same processing steps as those shown in FIG.

  In the process of S14 shown in FIG. 11, when the current time is not included in the predetermined time zone (see FIG. 6) (NO in S14), the time determination unit 14 further sets the event time zone registered in the schedule information as the default time zone. It is determined whether it is included in the time zone (S31). Specifically, when both the start time and end time of the event time zone are included in the default time zone, the time determination unit 14 determines that the event time zone is included in the default time zone. In addition, when at least one of the start time and the end time of the event time zone is not included in the default time zone, the time determination unit 14 determines that the event time zone is not included in the default time zone. For example, when the event time zone is “7: 00-9: 00” or “20: 30-21: 00: 00”, the event time zone is not included in the default time zone.

  If the event time zone is not included in the predetermined time zone (NO in S31), the process proceeds to S15. For example, the event time zone “17: 00-18: 00” of the event D1 registered in the schedule information of the user D (see FIGS. 7 and 8) is the default time zone “17: 00-18: 00” of the user D. "(See FIG. 6), the process proceeds to S15. The processing after S15 is the same as the processing shown in FIG.

  When the event time zone is included in the predetermined time zone (YES in S31), the process proceeds to S21 as in the process shown in FIG.

  According to the first modification, even when an event is set outside a predetermined time (for example, overtime hours), access to a file can be permitted.

  In addition, the file management apparatus 10 may control access to the user's file in consideration of a companion accompanying the user. Hereinafter, this configuration will be described as the file management apparatus 10 according to the second modification. FIG. 12 is a block diagram illustrating a specific configuration of the file management apparatus 10 according to the second modification. 12, parts that are the same as the structures shown in FIG. 3 are given the same reference numerals, and descriptions thereof are omitted. Here, as an example, it is assumed that the user information table shown in FIG. 13 is registered in the user information DB 32 and the schedule information shown in FIG. 14 is registered in the schedule information DB 21. In the user information in FIG. 13, information (feature information) indicating user characteristics is registered. The feature information includes, for example, a user's face image, business card, company badge, job type, and the like. In the user information of FIG. 13, there is no distinction between the user and the accompanying person, and the accompanying person is also registered as a user.

  The accompanying person detection unit 101 detects an accompanying person who accompanies the event of the user who has requested access to the file registered in the storage unit 3 of the file management apparatus 10. Specifically, the accompanying person detection part 101 detects the presence or absence of the accompanying person who accompanies a user with the human sensitive sensor and camera provided in the user terminal 30 which a user possesses.

  The accompanying person identification unit 102 identifies (specifies) the accompanying person detected by the accompanying person detection unit 101. Specifically, the accompanying person identification part 102 acquires the accompanying person's image by acquiring the image of the accompanying person photographed by the camera provided in the user terminal 30 and analyzing the acquired image. For example, the accompanying person identification unit 102 collates the accompanying person's face image captured by the camera with the face image registered as feature information in the user information table (see FIG. 13), and identifies the accompanying person. . The method for identifying the accompanying person is not limited to this, and for example, biometric authentication such as fingerprint authentication may be used.

  If the accompanying person cannot be clearly identified based on the captured image and the feature information, the accompanying person identifying unit 102 estimates the accompanying person based on the information. For example, when the accompanying person's face is unclear in the photographed image by the camera and the accompanying person cannot be specified, the accompanying person is estimated based on a business card, a company emblem, etc. in the photographed image.

  When the accompanying person is present, the access control unit 19 controls access to the user's file in consideration of the accompanying person's identification state.

  15 to 18 are operation flowcharts of the file management system 100 according to the second modification. In FIG. 15, the same processing parts as those shown in FIG. 9 are given the same step numbers, and description thereof is omitted. Here, a case where the user A attempts to download the file “F0001” at the current time “13:30” using the user terminal “ID01” will be described as an example. Further, a case where the user E accompanies the user A is taken as an example.

  In the process of S19 shown in FIG. 15, when the file “F0001” is a related file of the event A2 (YES in S19), the accompanying person detection unit 101 detects the presence / absence of the accompanying person who accompanies the user A (FIG. 16). S201). Here, a companion “present” is detected.

  When a companion is present (YES in S201), the companion identification unit 102 identifies (specifies) the companion (S202). Here, for example, the companion face image captured by the camera provided in the user terminal “ID01” is collated with the face image registered in the user information table (see FIG. 13), and the companion is identified. User E is identified.

  When the accompanying person is specified (YES in S202), the file determining unit 18 compares the content of the file “F0001” requested by the user A with the characteristic information of the accompanying user E, and accompanies the file. The relevance with the person is determined (S301 in FIG. 17).

  For example, the file name of the file “F0001” and the text of the document describe the contents related to “Company Z”, which is one of the characteristic information of the user E, and the file “F0001” is a file ( If it is a related file (YES in S301), the access control unit 19 permits access from the user A to the file “F0001” and transmits the file “F0001” to the user terminal “ID01” (S302). On the other hand, when the contents of the file requested by the user and the accompanying person are not related (NO in S301), the access control unit 19 prohibits the user A from accessing the file “F0001” (S303).

  If the accompanying person is not specified in the process of S202 (NO in S202), the current location determination unit 15 determines whether or not the current location of the user A matches the event location of the corresponding event A2 (S203).

  When the current location of the user A matches the event location of the event A2 (YES in S203), the access control unit 19 permits the access from the user A to the file “F0001” and sets the file “F0001” to the user terminal “ID01”. (S210).

  In the process of S203, when the current location of the user A does not match the event location of the event A2 (NO in S203), the accompanying person identifying unit 102 displays the accompanying person photographed by the camera provided in the user terminal “ID01”. The accompanying person is estimated based on the image and the feature information (face image, business card, company badge, etc.) registered in the user information table (see FIG. 13) (S204).

  When the companion is estimated (YES in S204), the file determination unit 18 includes the content of the file “F0001” requested by the user A and the characteristic information of the user who is the companion (hereinafter referred to as the “estimator”). And the relevance between the file and the estimator is determined (S401 in FIG. 18). Note that the estimated case is when the companion cannot be identified with certainty, for example, but the companion can be identified at a reasonable rate based on information such as the companion's image, company name, department, job type, etc. Say. Here, it is assumed that the user E is estimated as a companion. When the file “F0001” is a related file of the estimator (user E) (YES in S401), the access control unit 19 permits the access from the user A to the file “F0001” with conditions. For example, the access control unit 19 transmits only the outline (summary part, etc.) of the file “F0001” to the user terminal “ID01” (S402). If the contents of the file requested by the user and the estimator are not related (NO in S401), the access control unit 19 prohibits access from the user A to the file “F0001” (S403).

  The present invention is not limited to the above embodiment. For example, if there are a plurality of events whose required time (for example, 15 minutes) is within the set time (for example, 30 minutes) (YES in S18), a plurality of events (for example, events A1 and A2) are extracted. The In this case, the companion identified or estimated by the companion identification unit 102 is compared with the participants of the events A1 and A2, and the file related to the event including a person closely related to the companion is determined for the user. It is good also as a structure which permits the access from A with permission or conditions.

  For example, the file management apparatus 10 may perform access control from the user to the file DB 31. In this case, the user identification unit 11 identifies the user who has requested access to the file DB 31 included in the storage unit 3 of the file management apparatus 10. Further, the file determination unit 18 compares the contents of all the files stored in the file DB 31 with the contents of the events that can be reached within the set time among the events registered in the schedule information. Extract files related to. The access control unit 19 permits access to one or more files (related files) extracted by the file determination unit 18, for example. Note that the file DB 31 may include a plurality of folders, and the plurality of files may be classified into a plurality of folders according to their contents. In this case, the file management apparatus 10 may perform access control from the user to the folder.

  All or some of the functions of the file management apparatus 10 may be provided in the schedule information management server 20 or in the user terminal 30. Further, the schedule information DB 21 of the schedule information management server 20 may be provided in the schedule information management server 20 or may be provided in the user terminal 30.

  100 file management system, 10 file management apparatus, 1 CPU, 2 memory, 3 storage unit, 4 communication unit, 11 user identification unit, 12 current location acquisition unit, 13 schedule acquisition unit, 14 time determination unit, 15 current location determination unit, 16 Required time calculation unit, 17 Required time determination unit, 18 File determination unit, 19 Access control unit, 20 Schedule information management server, 21 Schedule information DB, 30 User terminal, 31 File DB, 32 User information DB, 33 Attendance information DB, 40 communication network, 101 accompanying detection unit, 102 accompanying identification unit.

Claims (7)

User identification means for identifying a user accessing a file stored in the storage means;
Current location acquisition means for acquiring the current location of the user identified by the user identification means;
Schedule acquisition means for acquiring the user schedule information identified by the user identification means from storage means for storing user schedule information;
The current location of the user acquired by the current location acquisition unit, the event location indicating the location where the event registered in the schedule information of the user acquired by the schedule acquisition unit is performed, the content of the event, and the file Access control means for controlling access to the file based on the contents of
Accompanying person detection means for detecting the presence or absence of a companion accompanying the user by a user terminal possessed by the user;
Only including,
In the case where the current location of the user, the event location, the content of the event, and the content of the file satisfy predetermined conditions, the access control means, when the accompanying person is not detected by the accompanying person detection means, the user Access to the file is restricted, and if the accompanying person is detected by the accompanying person detection means, the user's access to the file is restricted.
A file management apparatus. Calculating means for calculating a distance from the current location to the event location;
A companion identification means for identifying a companion accompanying the event of the user;
Further including
If the distance calculated by the calculating means is smaller than a preset set distance and the contents of the file are related to the contents of the event and the accompanying person, the access control means Allow access to the file,
The file management apparatus according to claim 1. Calculating means for calculating a distance from the current location to the event location;
A companion identification means for identifying a companion accompanying the event of the user;
Further including
If the distance calculated by the calculating means is smaller than a preset set distance and the contents of the file are related to the contents of the event and the accompanying person, the access control means Allow access to a portion of the file;
The file management apparatus according to claim 1. Calculating means for calculating a distance from the current location to the event location;
A companion identification means for identifying a companion accompanying the event of the user;
Further including
If the accompanying person is not specified, the current location of the user matches the event location, and the content of the file is related to the content of the event, the access control means gives the user access to the file. To give permission,
The file management apparatus according to claim 1. A companion identification means for identifying a companion accompanying the event of the user;
The access control means prohibits the user from accessing the file when the accompanying person is not estimated.
The file management apparatus according to claim 1. A file management system including a user terminal used by a user and a file management device connected to the user terminal via a network,
The file management device includes:
User identification means for identifying a user accessing a file stored in the storage means;
Current location acquisition means for acquiring the current location of the user identified by the user identification means;
Schedule acquisition means for acquiring the user schedule information identified by the user identification means from storage means for storing user schedule information;
The current location of the user acquired by the current location acquisition unit, the event location indicating the location where the event registered in the schedule information of the user acquired by the schedule acquisition unit is performed, the content of the event, and the file Access control means for controlling access to the file based on the contents of
Accompanying person detection means for detecting the presence or absence of a companion accompanying the user by a user terminal possessed by the user;
Only including,
In the case where the current location of the user, the event location, the content of the event, and the content of the file satisfy predetermined conditions, the access control means, when the accompanying person is not detected by the accompanying person detection means, the user Access to the file is restricted, and if the accompanying person is detected by the accompanying person detection means, the user's access to the file is restricted.
A file management system characterized by that. User identification means for identifying a user accessing a file stored in the storage means;
Current location acquisition means for acquiring the current location of the user identified by the user identification means;
Schedule acquisition means for acquiring the user's schedule information identified by the user identification means from storage means for storing the user's schedule information;
The current location of the user acquired by the current location acquisition unit, the event location indicating the location where the event registered in the schedule information of the user acquired by the schedule acquisition unit is performed, the content of the event, and the file based in on the content, the access control means for controlling access to the file and,
Accompanying person detection means for detecting the presence or absence of a companion accompanying the user by means of a user terminal possessed by the user;
A program for causing a computer to function as,
In the case where the current location of the user, the event location, the content of the event, and the content of the file satisfy predetermined conditions, the access control means, when the accompanying person is not detected by the accompanying person detection means, the user Access to the file is restricted, and if the accompanying person is detected by the accompanying person detection means, the user's access to the file is restricted.
program.

Images