JP6561494B2 - Document management system, document processing apparatus, document management method, and computer program - Google Patents

Description

  The present invention relates to a document management system including a document processing device and a document access processing device, and a document processing device, a document access processing device, a document management method, and a computer program used therefor.

  Conventionally, document data (image data) input from a personal computer or read by a scanner by a document processing apparatus such as a copier or MFP (Multi-functional Peripheral) in an office or the like. ) Is used for processing.

  Document data input to such a document processing apparatus can be transmitted directly or indirectly to another document processing apparatus or the like using a built-in communication function. In this case, when another document processing apparatus is located outside the country, there may be a case where it is subject to laws and regulations such as the Foreign Exchange Law depending on the contents of the document data.

  For example, document data input by a document processing apparatus installed in Japan is transmitted to and stored in a cloud server, and other document processing apparatuses arranged outside the country access this cloud server and store the document data. It may be downloaded. At this time, when the document data is subject to regulation, when the document data is downloaded by a foreign document processing apparatus, the document data is browsed or printed and the information is disclosed to an unspecified number of people. In some cases this is a problem.

  Corresponding to this problem, the user's habitability (resident / non-resident information) is registered in the human resource information DB, and the user refers to the human resource information DB when accessing the document file in the document management system. It is disclosed that whether or not he / she is a foreign resident and granting access (Patent Document 1).

  Also, in a web-based data exchange tool, if the user nationality includes a foreign nationality indication and the document classification includes military technical data, access is denied until the approval process for the export representative in the business area is complete. (Patent Document 2).

  Also, when a request for obtaining document information is sent from the terminal to the host computer via the network, it is checked whether the qualification of the searcher is valid based on the searcher identification information sent from the terminal. It is disclosed that the processing proceeds when it is appropriate (Patent Document 3).

  In addition, it is disclosed that the regulation contents for each area are acquired via a network based on the area information read by the GPS, and different regulation processes are performed for each area (Patent Document 4).

JP 2012-37946 A JP 2006-202267 A JP 2002-82594 A JP 2003-259079 A

  According to Patent Document 1 described above, there is a problem that an access permission is given when a resident in Japan accesses outside the country. In addition, there are many cases where residents / non-residents coexist in the same room, so information on the screen such as printed document files or tablets is erroneously provided to unauthorized parties. There is a possibility that.

  In addition, according to Patent Document 2, there is a problem in that it is not possible to automate the document distribution process outside the country because the export representative must approve the distribution of the document to users classified as foreigners. There is.

  According to Patent Document 3, since the user inputs a request for obtaining document information, there is a possibility that the user obtains prohibited document information by falsely speaking the country.

  In any of Patent Documents 1 to 4, management or checking is performed on the side requesting the document, and management on the side providing the document or management of the mutual relationship between the side requesting the document is performed. Because it is not done, legal regulations are not always accurately reflected.

  The present invention has been made in view of the above-mentioned problems, and reflects the legal regulations as accurately as possible to prevent erroneous transmission of document data subject to the regulations to a prohibited country. With the goal.

  A document management system according to an embodiment of the present invention is a document management system including a document processing device and a document access processing device, and the document processing device includes a document data input unit that inputs document data, and the document processing A first region code acquisition unit that acquires a first region code that is a region code of a region where the device is disposed, and the input document data and the first region code are associated with each other and transmitted to the document access processing device. A document data transmission unit configured to store the document data transmitted from the document processing apparatus, and a second database disposed in a region indicated by a second region code. A document request receiving unit for receiving an access processing request including the content of transmitting the document data to a document processing device; A restriction information obtaining unit for obtaining restriction information for access, and access to the access processing request based on the first region code, the second region code, and the restriction information when the access processing request is received An access processing restriction determination unit that makes a determination on processing restriction, and the access processing restriction determination unit determines that the document data can be transmitted to the second document processing apparatus in response to the access processing request. A document data transmission unit configured to transmit document data to the second document processing apparatus.

  Further, for example, a second document processing device is provided, and the second document processing device acquires the second region code, which is a region code of a region where the second document processing device is arranged. A code acquisition unit; an access processing request transmission unit that transmits the second area code together with the access processing request to the document access processing device; and a document output unit that outputs the document data transmitted from the document access processing device; Have.

  According to the present invention, it is possible to prevent document data subject to regulation from being erroneously transmitted to a prohibited country or the like by reflecting legal regulations as accurately as possible.

It is a figure which shows the example of the whole structure of a document management system. It is a figure which shows the example of the hardware constitutions of a document processing apparatus. It is a figure which shows the example of the hardware constitutions of a cloud server. It is a figure which shows the example of the hardware constitutions of a portable terminal. It is a figure which shows the example of a functional structure of a document management system. It is a figure which shows the example of regulation information. It is a figure which shows the example of the document data to which the area code was added. 6 is a flowchart illustrating an example of a processing flow in a document processing apparatus. It is a flowchart which shows the example of the flow of a process in a cloud server. It is a flowchart which shows the example of the flow of a process in the document processing apparatus of a request side. It is a flowchart which shows the example of the flow of a process in acquisition of a region code.

[Overall configuration of document management system]
FIG. 1 shows an example of the overall configuration of the document management system 1.

  In FIG. 1, a document management system 1 includes document processing devices 3 and 4 and a cloud server 5. Further, when the document management system 1 is operated, the DNS server 6 is sometimes used. The document processing devices 3 and 4, the cloud server 5, and the DNS server 6 can exchange data or information via the network NW.

  The network NW is configured by the Internet, a LAN (Local Area Network), other communication lines, and the like. The LAN is provided with a router for connecting to the Internet as necessary. The LAN is provided with a DHCP (Dynamic Host Configuration Protocol) function. Each device belonging to the LAN is given a private IP (Internet Protocol) address by the DHCP function. It is also possible to manually assign an IP address without using the DHCP function. Each LAN is given a unique network identifier.

  The document processing apparatus 3 is an image processing apparatus generally called a multifunction peripheral or MFP (Multi Function Peripherals), and is an apparatus that integrates functions such as copying, printing, faxing, scanning, and a document server. The document processing device 3 has a web server function.

  The document processing device 4 is an image processing device having the same functions as the document processing device 3. As the document processing device 4, a terminal device such as a desktop personal computer, a notebook personal computer, a tablet computer, or a smartphone (smartphone) or a portable terminal may be used. Note that these terminal devices or portable terminals can also be used for the document processing device 3.

  The cloud server 5 stores (saves) document data and the like transmitted from the document processing devices 3 and 4 and transmits (transfers) document data and the like based on a request from the document processing devices 3 and 4. Provide various cloud services. When the cloud server 5 transmits the document data to the document processing devices 3 and 4, the cloud server 5 transmits the document data to the cloud server 5, and the destination region (counter) for transmitting (transferring) the document data. Country), that is, the transmission source and the transmission destination of the document data, and whether or not transmission is possible is determined based on regulation information according to laws and regulations.

  The cloud server 5 performs other various determinations and processes as necessary, and provides a cloud service to the client. The document processing apparatuses 3 and 4 can receive various services provided from the cloud server 5 as clients to the cloud server 5.

  The document processing device 3, the document processing device 4, and the cloud server 5 are respectively a “document processing device”, a “second document processing device” or “another document processing device” and a “document access” in the present invention. It is an example of a "processing apparatus."

  In the present embodiment, the document processing device 3 is disposed in a first region on the earth, and the document processing device 4 is disposed in a second region different from the first region.

  In this specification, the “region” is determined depending on whether or not regulations are imposed on the movement or transfer of document data. Therefore, if there is no possibility that regulation by law will work, the same region may be used, and if there is a possibility, a different region may be used. A typical example of “region” is “country”. For example, the document processing device 3 is located in Japan, and the document processing device 4 is located outside the country. Therefore, the “region code”, “first region code”, and “second region code” can be rephrased as “country code”, “first country code”, and “second country code”, respectively.

  For example, in the foreign exchange law of “JP (Japan)”, permission is required or prohibited for transmitting information or documents containing specific technology to a specific country. However, there is no such restriction on sending and storing data and applications to the cloud server 5 or the like. When document data scanned in Japan is stored in a cloud service accessible from inside and outside the country, there is a possibility that the document data may be viewed or printed using a document processing apparatus or a personal computer arranged outside the country. Also, there are cases where such document data is desired to be transmitted outside the country via a cloud service. In such a case, the cloud server 5 of the present embodiment checks the transmission source “JP” and the transmission destination country (region), and prohibits it when the document data DQ is subject to regulation. To prevent accidental transmission to the destination country.

In addition, the cloud server 5 may be arrange | positioned in the same area as the document processing apparatus 3 or the document processing apparatus 4, and may be arrange | positioned in a different area.
[Hardware configuration of document processing device and cloud server]
FIG. 2 shows an example of the hardware configuration of the document processing apparatuses 3 and 4, and FIG. 3 shows an example of the hardware configuration of the cloud server 5. FIG. 4 shows an example of a hardware configuration when the document processing device 4 is a portable terminal 4B.

  In FIG. 2, a document processing apparatus 3 includes a CPU (Central Processing Unit) 10a, a RAM (Random Access Memory) 10b, a ROM (Read Only Memory) 10c, an auxiliary storage device 10d, a touch panel display 10e, an operation key panel 10f, an NIC ( Network Interface Card) 10g, modem 10h, scan unit 10i, print unit 10j, and the like.

  The touch panel display 10e displays a screen showing a message for the user, a screen for the user to input a command or information, a screen showing a result of processing executed by the CPU 10a and the like.

  The operation key panel 10f is a so-called hardware keyboard, and includes a numeric keypad, a start key, a stop key, a function key, and the like.

  The NIC 10g communicates with the cloud server 5 using a protocol such as TCP / IP (Transmission Control Protocol / Internet Protocol). The modem 10h transmits / receives image data to / from the facsimile terminal using a protocol such as G3.

  The scan unit 10i reads a document or image written on a sheet set on a platen glass, generates document data (image data) DQ, and inputs the document data (image data) DQ.

  The print unit 10j prints document data DQ received from a personal computer (not shown) or the like in addition to the document or image read by the scan unit 10i on a sheet using an electrophotographic process or the like.

  The ROM 10c or the auxiliary storage device 10d stores a program for realizing a copy function and various functions described later. For example, it is a program for transmitting document data to the document processing apparatus 4 in cooperation with the cloud server 5. The program is loaded into the RAM 10b as necessary, and is executed by the CPU 10a. A hard disk, SSD (Solid State Drive), or the like is used as the auxiliary storage device 10d. The program may be configured to be installed via a portable recording medium such as a USB memory or a network NW.

  Also, the input document data DQ is temporarily stored in the RAM 10b or the auxiliary storage device 10d.

  In FIG. 3, the cloud server 5 includes a CPU 20a, a RAM 20b, a ROM 20c, an auxiliary storage device 20d, a NIC 20e, and the like.

  The NIC 20e communicates with the document processing devices 3 and 4 and the DNS server 6 using a protocol such as TCP / IP. The ROM 20c or the auxiliary storage device 20d checks the document data transmission source (exported country) and the transmission destination (exporting country), and transmits the document data when transmission is possible based on the regulation information by law. A program for realizing various functions in the cloud server 5 is stored.

  In FIG. 4, the portable terminal 4B includes a CPU 30a, a RAM 30b, a ROM 30c, an auxiliary storage device 30d, a liquid crystal display 30e, a keyboard 30f, a GPS (Global Positioning System) receiver 30g, a communication device 30h, and the like.

  In the portable terminal 4B, the document data DQ can be input by operating the keyboard 30f or by downloading via the network NW or the communication device 30h.

The liquid crystal display 30e displays a screen of the received document data DQ, a screen showing a message for the user, a screen for the user to input a command or information, a screen showing the result of processing executed by the CPU 30a, and the like. The GPS receiver 30g acquires the current position of the mobile terminal 4B. Programs for realizing various functions of the portable terminal 4B are stored in the ROM 30c or the auxiliary storage device 30d.
[Basic functions and processing operations of the document management system]
Next, basic functions and processing operations of the document management system 1 will be described.

  FIG. 5 shows an example of functional configurations of the document processing devices 3 and 4 and the cloud server 5 of the document management system 1.

  In FIG. 5, the document management system 1 includes document processing devices 3 and 4 and a cloud server 5. The document processing apparatus 3 includes a document data input unit 31, a first region code acquisition unit 32, an importance level acquisition unit 33, a document data transmission unit 34, a document output unit 35, an operation unit 36, and an access processing request transmission unit 37. Is provided.

  The document processing apparatus 4 includes a document data input unit 41, a second region code acquisition unit 42, an importance level acquisition unit 43, a document data transmission unit 44, a document output unit 45, an operation unit 46, and an access processing request transmission unit 47. Is provided.

  The cloud server 5 includes a restriction information acquisition unit 51, a document request reception unit 52, an access processing restriction determination unit 53, a restriction object determination unit 54, a confirmation data transmission unit 55, a document data transmission unit 56, and a first region code storage unit 57. A second area code storage unit 58, a user information database DB1, a restriction information database DB2, a document database DB3, and the like are provided.

  In the present embodiment, the cloud server 5 receives and stores the document data DQ transmitted from the document processing device 3 arranged in the first area. When there is an access processing request ASY from the document processing device 3 or 4, the document data DQ is transmitted to the document processing device 4 arranged in the second area. At this time, the cloud server 5 checks whether transmission of the document data DQ from the first region to the second region does not violate legal regulations, and the document data DQ subject to regulation is prohibited. Control to prevent accidental transmission to the region or country.

  In other words, the document processing device 3 receives the document data input unit 31 that inputs the document data DQ, and the first region code acquisition unit 32 that acquires the first region code TCD1 that is the region code of the region where the document processing device 3 is arranged. And the document data transmission unit 34 that associates the input document data DQ with the first region code TCD1 and transmits the associated data to the cloud server 5.

  The cloud server 5 transmits the document data DQ to the document database DB3 that stores the document data DQ transmitted from the document processing device 3, and the document processing device 4 that is arranged in the region indicated by the second region code TCD2. A document request accepting unit 52 that accepts an access processing request ASY, a restriction information obtaining unit 51 that obtains restriction information KJ for determination of access processing restriction, a first area code TCD1, Based on the second area code TCD2 and the restriction information KJ, the access process restriction judgment unit 53 that makes a judgment about the access process restriction for the access process request ASY, and the access process restriction judgment unit 53 corresponds to the access process request ASY. When it is determined that the document data DQ can be transmitted to the document processing device 4 A, and transmits the document data DQ to the document processing device 4, has a document data transmission unit 56.

  In the user information database DB1, information related to the user, such as the name of the user who uses the cloud server 5, the attribute, the content of the access right to the file, and the like is registered. In the user information database DB1, acquisition, update, reading, deletion, and the like of information are managed by a user information management unit (not shown). Note that user attribute information may be managed in association with authentication information in a personnel database or the like, and the cloud server 5 may acquire the information from the personnel database.

  The document database DB3 is managed by a document data management unit (not shown) for storing, browsing, reading, and deleting the document data DQ.

The document processing device 4 can transmit an access processing request ASY to the cloud server 5. That is, the document processing device 4 includes the second region code acquisition unit 42 that acquires the second region code TCD2 that is the region code of the region in which the document processing device 4 is disposed, and the second region code TCD2 as the access processing request ASY. In addition, an access processing request transmission unit 47 that transmits to the cloud server 5 and a document output unit 45 that outputs the document data DQ transmitted from the cloud server 5 are included.
[Other functions and processing operations of the document management system]
Next, functions and processing operations added as specific examples or modifications to the basic functions and processing operations described above will be described.

  In the cloud server 5, the document database DB3 includes a restricted document data storage unit DB3A that stores document data DQ subject to access processing restriction, and a general document data storage unit DB3B that stores document data DQ not subject to access processing restriction. You may comprise so that.

  In this case, the access processing restriction determination unit 53 makes a determination on access processing restriction on the document data DQ stored in the restricted document data storage unit DB3A.

  In the document processing device 3, the document data transmission unit 34 associates the restriction target information KTJ indicating that the document data DQ transmitted to the cloud server 5 is subject to access processing restriction with the document data DQ. Send to. The cloud server 5 determines the access processing restriction for the access processing request ASY only when the document data DQ is subject to the access processing restriction, and determines the access processing restriction when the document data DQ is not subject to the access processing restriction. Instead, the document data DQ is transmitted to the document processing device 4.

  In addition, the cloud server 5 includes a restriction target determining unit 54 that determines whether or not the document data DQ is subject to access processing restriction based on a word included in the document data DQ, and the document data DQ is subject to access processing restriction. Confirmation data transmission for transmitting confirmation data KND for requesting confirmation that the document data DQ is subject to access processing restriction to the document processing device 3 when the restriction object determination unit 54 determines that the document processing apparatus 3 is the object of the document processing. A portion 55 is provided.

  Whether the regulation information KJ can transmit the document data DQ from the area indicated by the first area code TCD1, the second area code TCD2, and the area indicated by the first area code TCD1 to the area indicated by the second area code TCD2. It can be configured to include availability information KHJ indicating whether or not.

  FIG. 6 shows an example of the restriction information KJ.

  In FIG. 6, the regulation information KJ is configured in a two-dimensional matrix table format. The first area code TCD1 is shown at the left end, the second area code TCD2 is shown at the upper end, and the availability information KHJ is shown at each intersection. The first region code TCD1 and the second region code TCD2 are both indicated by country codes. The availability information KHJ is indicated by “◯” indicating that transmission is possible, “Δ” indicating that transmission is possible with a condition, and “X” indicating that transmission is not possible (transmission prohibited). ing.

  For example, transmission from “JP” to “US” is possible, transmission from “JP” to “ZZ” is possible with conditions, and transmission from “JP” to “YY” is impossible. Conditional means, for example, when the document data DQ is modified, when a part of the document data DQ is deleted, when other conditions are satisfied, or when special output restrictions are performed at the transmission destination.

  Such regulation information KJ can be obtained by the regulation information acquisition unit 51 from the homepages of governments or organizations in each country published on the Internet. It can also be acquired from the document processing apparatuses 3 and 4 arranged in each country connected to the cloud server 5. It is also possible for the operator to write to the regulation information database DB2 of the cloud server 5 or update the regulation information database DB2. In this case, the availability information KHJ for the second region code TCD2 may be set based on the laws and regulations in the region indicated by the first region code TCD1.

  In addition, the document data transmission unit 34 of the document processing apparatus 3 associates (links) the document data DQ with the document data DQ by embedding information in the document data DQ. For example, information indicating the first region code TCD1 may be embedded in an image that is the content of the document data DQ in a form that cannot be recognized by a person. Further, the first area code TCD1 and the document data DQ may be collected together by a file archiver. In these cases, the cloud server 5 may extract the first area code TCD1 by expanding the file or extracting it from the document data DQ.

  Further, the document processing apparatus 3 includes an importance level acquisition unit 33 that acquires the importance level JYD or the reliability SRS of the document data DQ. The document data transmission unit 34 of the document processing device 3 transmits the importance JYD or the reliability SRS to the cloud server 5 in association with the document data DQ.

  Then, when the document processing apparatus 4 receives the document data DQ, the document output unit 45 of the document processing apparatus 4 outputs the document data DQ only when the conditions for the importance JYD or the reliability SRS are satisfied. .

  Here, the importance JYD or the reliability SRS can be set by the person who created or uploaded the document data DQ. For example, the ranks of A, B, and C are set, respectively. The importance JYD indicates how important the document data DQ is. For example, the document data DQ that is not subject to regulation is set to a low importance level JYD. Depending on the setting method of the importance level JYD, it is possible to expand or narrow the range of countries that can be transmitted for the access processing request ASY.

  The reliability SRS restricts who can access the document data DQ. For example, the reliability SRS is set to be greater than or equal to the general manager when the job title of the accessing person is not greater than or equal to the general manager. For example, the access right decreases in the order of a director, a department manager, a section manager, and a section chief, and the reliability SRS decreases in this order. Further, the reliability SRS may be set for each of the types of actions such as editing, printing, browsing, etc. with respect to the document data DQ. Such reliability SRS can be acquired from the user information database DB1. Or you may set the parameter | index of reliability SRS for every user.

  The first region code acquisition unit 32 acquires the first region code TCD1 based on the IP address assigned to the document processing device 3. The first area code acquisition unit 32 can also acquire the first area code TCD1 based on position information indicating the position where the document processing device 3 is arranged.

  For example, the DNS server 6 is accessed, an inquiry about the reverse lookup of the IP address assigned to the document processing apparatus 3 is performed to obtain the domain name, and the first region code TCD1 is obtained from the region code included in the domain name. For example, when the domain name is “XXX.ΔΔ.jp”, the first region code TCD1 is set to “JP”. The IPv4 address assigned to each country in the world is managed by the Regional Internet Registry (RIR), and as RIR, APNIC (Asia Pacific Network Information Center), ARIN (American Registry for Internet Numbers), RIPE NCC (Reseaux IP Europeens Network Coordination Center), LACNIC (The Latin American and Caribbean IP address Regional Registry), and AfriNIC (African Network Information Center) distribute IP addresses to the countries in their respective jurisdictions and create a database . The first region code TCD1 may be acquired by using these databases.

  Alternatively, the first region code TCD1 is obtained from the longitude and latitude information of the current position of the document processing device 3 using the same GPS receiver 30g provided in the portable terminal 4B. MIB (Management Information Base) information may also be used. Furthermore, you may acquire 1st area | region code TCD1 which raised the precision using the method of these some. The second area code TCD2 may be obtained in the same manner as this.

  FIG. 7 shows an example of document data DQ to which a region code TCD or the like is added.

  In FIG. 7A, the document data DQ1 is composed of the first to third pages. The header ZK1 includes a file name FM, a region code TCD (first region code TCD1), restriction target information KTJ, and an access processing request. ASY, importance JYD, and reliability SRS are written as attribute information.

  Here, the restriction target information KTJ can indicate whether or not the document data DQ1 is subject to access processing restriction. With the access processing request ASY, the cloud server 5 can be requested to transmit the document data DQ1 to another document processing apparatus or the like. When the access processing request ASY is transmitted, identification information of the other document processing device, the second area code TCD2, and the like are added.

  In FIG. 7B, two document data DQ2 and 3 are integrated and compressed as one file FD1, and a header ZK2 is given therein. In the header ZK2, common attribute information for the two document data DQ2 and 3 is written.

  In the present embodiment, since the document management system 1 mainly handles documents, “document data DQ” is used. However, the document data DQ is not limited to documents. That is, the document data DQ includes various data such as text data, character data, image data, audio data, moving image data, data obtained by combining these, and data obtained by converting or compressing them into an intermediate language.

In addition to the area code TCD itself, the area code TCD includes information corresponding to the area code TCD, information that can be converted into the area code TCD, information that can acquire the area code TCD, and the like.
[Document Management Method in Document Management System]
Next, an example of a document management method using the document management system 1 will be described.

  That is, basically, the document data DQ is input to the document processing apparatus 3, the first area code TCD1 that is the area code of the area where the document processing apparatus 3 is arranged is acquired, and the input document data DQ and the first One area code TCD1 is associated with and transmitted to the cloud server 5. This is an example corresponding to claim 17 of the present invention.

  Then, the access processing request ASY whose content is to transmit the document data DQ from the area indicated by the first area code TCD1 to the other document processing apparatus 4 arranged in the area indicated by the second area code TCD2 is a cloud server. 5, the cloud server 5 determines whether or not the document data DQ can be transmitted by the access processing request ASY based on the restriction information KJ for determining the access processing restriction. If it is determined, the document data DQ is transmitted to the other document processing device 4.

  By the way, the document processing apparatus 3 can transmit different document data DQ to the cloud server 5 as many times as necessary. Each time the document data DQ is transmitted, the document data DQ is associated with the first area code TCD1. That is, the set of the document data DQ and the first region code TCD1 is transmitted to the cloud server 5. Various methods can be adopted as a method of associating the document data DQ with the first area code TCD1.

  The cloud server 5 stores the document data DQ received from the document processing device 3 in the document database DB3. The first area code TCD1 sent together with the document data DQ may be stored in the document database DB3 together with the document data DQ, or may be stored in the first area code storage unit 57.

  Further, various methods may be employed instead of the document processing device 3 transmitting the set of the document data DQ and the first region code TCD1 to the cloud server 5. For example, when the document processing device 3 is installed, the first area code TCD1 is registered in the cloud server 5 together with the identification information of the document processing device 3, and the document data DQ is transferred from the document processing device 3 to the cloud server 5. At the time of transmission, a set of the information and identification information of the document processing device 3 is transmitted to the cloud server 5. Further, when the document processing apparatus 3 transmits the document data DQ to the cloud server 5 for the first time, a set of the first region code TCD1 and the identification information is transmitted and registered in the cloud server 5. Good.

  As a result, a database of document data DQ is formed in the cloud server 5, and each document data DQ is associated with the first region code TCD1.

  Now, the cloud server 5 receives the access processing request ASY. The access processing request ASY is a request (command) whose content is to send the designated document data DQ to the designated destination (address).

  The access processing request ASY includes, for example, information identifying document data DQ to be transmitted, request source information, transmission destination information, and the like. The first area code TCD1 or the second area code TCD2 may be included. The request source or destination information can include, for example, a URL (Uniform Resource Locator), a mail address, a facsimile number, or identification information of the request source or destination device.

  The cloud server 5 receives the access processing request ASY as one of the cases of (1) receiving from the document processing device 3, (2) receiving from the document processing device 4, and (3) receiving from the other. is there.

  As a case of receiving from (1) the document processing apparatus 3 above, for example, a case where a user operating the document processing apparatus 3 wants to transmit the document data DQ to a specific partner can be considered. In this case, when the user transmits the document data DQ to the cloud server 5, the access processing request ASY is transmitted at the same time. Alternatively, the access processing request ASY may be transmitted before transmission of the document data DQ, after transmission, or at any time.

  That is, the document data DQ is input to the document processing device 3, the first region code TCD1 that is the region code of the region where the document processing device 3 is arranged is acquired, and the input document data DQ and the first region code TCD1 are acquired. And the access processing request ASY whose content is to transmit the document data DQ to the other document processing device 4 arranged in the area indicated by the second area code TCD2 is transmitted to the cloud server 5 in association with each other. To do. This is an example corresponding to claim 18 of the present invention.

  In this case, the determination result information HKJ indicating whether or not the cloud server 5 was able to transmit the document data DQ from the area indicated by the first area code TCD1 to the area indicated by the second area code TCD2 The processing device 3 receives from the cloud server 5.

  According to this example, in response to the access processing request ASY sent from the document processing apparatus 3 by the user, the user can know whether or not the transmission is performed according to the content.

  In particular, when the cloud server 5 determines that transmission is not possible, the document processing device 3 receives the determination result information HKJ, and the user has confirmed that the document data DQ has not been transmitted according to the content of the access processing request ASY. It is possible to know and respond by issuing an access processing request ASY again. This is an example corresponding to claim 4 of the present invention.

  As the above (2) reception from the document processing device 4, for example, a user operating the document processing device 4 searches the document database DB3 of the cloud server 5 and finds the document data DQ that he / she wants. . In this case, the user transmits an access processing request ASY for the desired document data DQ from the document processing device 4 to the cloud server 5.

  In this case, in response to the access processing request ASY transmitted from the document processing device 4, the access processing restriction determination unit 53 of the cloud server 5 determines whether the document data DQ can be transmitted. If it is determined that transmission is possible, the document data transmission unit 56 transmits the document data DQ to the document processing apparatus 4.

  When the access processing restriction determination unit 53 determines that the document data DQ cannot be transmitted in response to the access processing request ASY, the cloud server 5 transmits determination result information HKJ indicating the determination result to the document processing device 4. . This is an example corresponding to claim 3 of the present invention.

  According to this example, since at least one of the document data DQ and the determination result information HKJ is transmitted in response to the access processing request ASY sent from the document processing apparatus 4 by the user, the user is a cloud server for the access processing request ASY. For example, it is possible to prevent waiting indefinitely in a non-response state.

(3) As a case of receiving from other than the above, the user who sent the document data DQ or the user who wants the document data DQ uses the document processing devices 3 and 4 or the terminal device 4B or other document processing devices or terminal devices. It is conceivable that the user wants to send document data DQ to the document processing apparatus 4 or the like by operating. In this case, the user transmits to the cloud server 5 an access processing request ASY specifying the document data DQ to be transmitted and the transmission destination.
[Explanation by flowchart]
Next, a processing operation in the document management system 1 will be described based on a flowchart.

  FIG. 8 shows an example of the processing flow in the document processing apparatus 3, FIG. 9 shows an example of the processing flow in the cloud server 5, and FIG. 10 shows the processing when the document processing apparatus 4 makes an access processing request ASY. FIG. 11 shows an example of the flow of processing in the area code acquisition.

  Here, only the part related to the document management method having the above-described contents in the document management system 1 will be described.

  In FIG. 8, the document data DQ is input (# 11), and the first region code TCD1 is acquired (# 12). Then, the document data DQ and the first region code TCD1 are transmitted in association with each other to the cloud server 5 (# 13).

  In FIG. 9, the restriction information KJ is acquired, and the restriction information database DB2 is created or updated (# 21). When the document data DQ is received, it is stored in a predetermined location of the document database DB3 (# 22). At this time, if the associated first region code TCD1 exists, the first region code T is stored in the document database DB3 or the first region code storage unit 57.

  If there is an access processing request ASY (Yes in # 23), if the document data DQ is not a restriction target (No in # 24), the document data DQ is transmitted to the transmission destination indicated by the access processing request ASY. (# 28).

  If the document data DQ is a restriction target (Yes in # 24), the second area code TCD2 is acquired from the access process request ASY, and based on this and the first area code TCD1 (# 25), A determination is made (# 26). If the document data DQ can be transmitted as a result of the restriction determination (Yes in # 27), the document data DQ is transmitted to the transmission destination indicated by the access processing request ASY (# 28). If transmission is not possible, determination result information HKJ is transmitted to the transmission destination (# 29).

  Note that the restriction information database DB2 is used when making a determination regarding access processing restriction, but instead, the determination may be made with reference to restriction information KJ existing outside the cloud server 5.

  In FIG. 10, the document processing apparatus 4 acquires the second region code TCD2 (# 31), and transmits an access processing request ASY including this to the cloud server 5 (# 32). Based on this, an access restriction determination is made in the cloud server 5. As a result, when the document processing apparatus 4 receives the document data DQ (Yes in # 33), the received document data DQ is output by printing or display. (# 34).

  If the document processing apparatus 4 receives the determination result information HKJ without receiving the document data DQ (No in # 33) (Yes in # 35), the received determination result information HKJ is output by printing or display. (# 36).

  When the cloud server 5 determines that transmission is possible with conditions and the document data DQ is transmitted, the document processing device 4 deletes and outputs a part of the document data DQ, or other conditions, for example. Various output restrictions are performed, such as outputting when the condition is satisfied, or displaying only the document data DQ and prohibiting printing. In this case, it is possible to limit the output according to the importance JYD or the reliability SRS.

  In FIG. 11, the IP address assigned to the document processing device 3, 4 or the like is acquired (# 41), and the reverse code is inquired to acquire the area code TCD (# 42).

  In FIG. 12, the position information received by the GPS receiver is acquired (# 51), and the area code TCD is acquired based on the position information (# 52).

  According to the document management system 1 of the embodiment described above, the legal regulations of each country or each region are reflected as accurately as possible, and the document data DQ to be regulated is erroneously transmitted to a prohibited country or the like. This can be prevented.

  In the description of the embodiment described above, the document processing device 3 transmits the document data DQ to the cloud server 5 and the cloud server 5 transmits the document data DQ to the document processing device 4. The same applies to the case where the device 4 transmits the document data DQ to the cloud server 5 and the cloud server 5 transmits the document data DQ to the document processing device 3. In addition, the mobile terminal 4 </ b> B may transmit the document data DQ to the cloud server 5 and may receive the document data DQ from the cloud server 5.

  In this way, since the restriction information KJ between countries is provided in the cloud server 5, it is possible to determine whether or not transmission is possible from any country to any country using the restriction information KJ.

  In the above embodiment, the cloud server 5 has been described as performing a cloud service, but instead, it may be a simple server that does not perform a cloud service. Further, such a server may be arranged in the vicinity of the document processing apparatus 3, or a part of hardware provided in the document processing apparatus 3 may be used as such a server.

  In addition, the configuration, arrangement, number, processing content or order of each part or the whole of the document processing apparatuses 3 and 4, the portable terminal 4 </ b> B, the cloud server 5, or the document management system 1 are appropriately changed in accordance with the gist of the present invention. can do.

1 Document Management System 3 Document Processing Device (Other Document Processing Device, Second Document Processing Device)
4 Document processing device (other document processing device, second document processing device)
4B mobile terminal (other document processing device, second document processing device)
5 Cloud server (document access processing device, server)
31, 41 Document data input unit 32 First region code acquisition unit 42 Second region code acquisition unit 33, 43 Importance acquisition unit 34, 44 Document data transmission unit 35, 45 Document output unit 37, 47 Access processing request transmission unit 51 Restriction information acquisition unit 52 Document request acceptance unit 53 Access processing restriction determination unit 54 Restriction object determination unit 55 Confirmation data transmission unit 56 Document data transmission unit 57 First region code storage unit 58 Second region code storage unit DB2 Restriction information database DB3 Document Database DQ Document data TCD1 First area code TCD2 Second area code ASY Access processing request KJ Restriction information HKJ Judgment result information KTJ Restriction target information

Claims (17)

A document management system comprising a document processing device and a document access processing device,
The document processing apparatus includes:
A document data input unit for inputting document data;
A first area code acquisition unit that acquires a first area code that is an area code of an area where the document processing apparatus is located;
A document data transmission unit that associates the input document data and the first region code with each other and transmits the document data to the document access processing device;
Have
The document access processing device includes:
A document database for storing the document data transmitted from the document processing apparatus;
A document request receiving unit that receives an access processing request including transmitting the document data to a second document processing device arranged in an area indicated by a second area code;
A restriction information obtaining unit for obtaining restriction information for determining access processing restriction;
An access processing restriction determination unit for making a determination on access processing restriction for the access processing request based on the first region code, the second region code, and the restriction information when the access processing request is received;
When the access processing restriction determination unit determines that the document data can be transmitted to the second document processing device in response to the access processing request, the document data is transmitted to the second document processing device; A document data transmission unit;
A document management system comprising: Comprising the second document processing device;
The second document processing apparatus includes:
A second region code acquisition unit for acquiring the second region code, which is a region code of the region where the second document processing apparatus is disposed;
An access processing request transmitting unit that transmits the second area code together with the access processing request to the document access processing device;
A document output unit for outputting the document data transmitted from the document access processing device;
Having
The document management system according to claim 1. The document access processing device includes:
When the access processing restriction determination unit determines that the document data cannot be transmitted in response to the access processing request, transmits determination result information indicating the determination result to the second document processing device;
The document management system according to claim 2. The document access processing device includes:
When the access processing restriction determination unit determines that the document data cannot be transmitted in response to the access processing request, transmits determination result information indicating the determination result to the document processing apparatus;
The document management system according to claim 1. The document database is
A restricted document data storage unit that stores document data subject to the access processing restriction;
A general document data storage unit for storing document data not subject to the access processing regulation,
The access processing restriction determination unit makes a determination on the access processing restriction on the document data stored in the restricted document data storage unit;
The document management system according to claim 1. The document data transmission unit of the document processing apparatus is
Restricted information indicating that the document data to be transmitted to the document access processing device is subject to the access processing restriction is transmitted to the document access processing device in association with the document data,
The document access processing device makes a determination about access processing restriction for the access processing request only when the document data is subject to the access processing restriction, and when the document data is not subject to the access processing restriction, Transmitting the document data to the second document processing device without making a determination of
The document management system according to claim 1. The document access processing device includes:
A restriction target determination unit that determines whether or not the document data is subject to the access processing restriction based on a word included in the document data;
When the restriction target determining unit determines that the document data is subject to the access processing restriction, confirmation data for requesting confirmation that the document data is subject to the access processing restriction is provided to the document processing apparatus. A confirmation data transmission unit to be transmitted to
Having
The document management system according to claim 1. The restriction information indicates whether the document data can be transmitted from the area indicated by the first area code, the second area code, and the area indicated by the first area code to the area indicated by the second area code. Including availability information,
The document management system according to claim 1. The first region code and the second region code are both country codes indicating countries.
The document management system according to claim 1. The document data transmission unit of the document processing apparatus is
Associating the first region code by embedding information in the document data;
The document management system according to claim 1. The document processing apparatus includes:
An importance level acquisition unit for acquiring the importance level or reliability of the document data;
The document data transmission unit of the document processing apparatus transmits the importance or reliability to the document access processing apparatus in association with the document data;
The document output unit of the second document processing apparatus includes:
The document data is output only when the condition for the importance or reliability is satisfied.
The document management system according to claim 2 or 3. The first area code acquisition unit acquires the first area code based on an IP address assigned to the document processing apparatus;
The document management system according to claim 1. The first area code acquisition unit acquires the first area code based on position information indicating a position where the document processing apparatus is disposed.
The document management system according to claim 1. A document database that stores document data transmitted from the document processing device together with a first region code that is a region code of a region where the document processing device is disposed;
A document request receiving unit that receives an access processing request including transmitting the document data to a second document processing device arranged in an area indicated by a second area code;
A restriction information obtaining unit for obtaining restriction information for determining access processing restriction;
An access processing restriction determination unit for making a determination on access processing restriction for the access processing request based on the first region code, the second region code, and the restriction information when the access processing request is received;
A document data transmitting unit that transmits the document data to the second document processing device when it is determined that the document data can be transmitted to the second document processing device in response to the access processing request;
A document access processing apparatus comprising: A document management method using a document processing apparatus,
Inputting document data into the document processing apparatus;
Obtaining a first region code which is a region code of a region where the document processing apparatus is disposed;
The input document data and the first region code are associated with each other and transmitted to the server,
When the server has an access processing request including transmitting the document data from the region indicated by the first region code to another document processing device arranged in the region indicated by the second region code The server determines whether or not the document data can be transmitted according to the access processing request based on the restriction information for determining the access processing restriction. Send it to other document processing devices,
A document management method characterized by the above. A document management method using a document processing apparatus,
Inputting document data into the document processing apparatus;
Obtaining a first region code which is a region code of a region where the document processing apparatus is disposed;
An input of the document data, the first region code, and an access processing request that includes transmitting the document data to another document processing device disposed in the region indicated by the second region code. Send them to the document access processor in association with each other,
Judgment result information indicating a result of judging whether or not the document access processing apparatus was able to transmit the document data from the area indicated by the first area code to the area indicated by the second area code; Received from the document access processing device,
A document management method characterized by the above. A computer program used in a document access processing device,
Causing the document data transmitted from the document processing apparatus to be stored in the document database together with the first area code that is the area code of the area where the document processing apparatus is arranged;
Causing the second document processing device arranged in the area indicated by the second area code to execute a process of accepting an access process request that includes transmitting the document data;
Execute the process to obtain restriction information for access processing restriction judgment,
When receiving the access processing request, based on the first region code, the second region code, and the restriction information, executing a process for determining access processing restriction for the access processing request,
When it is determined that the document data can be transmitted to the second document processing apparatus in response to the access processing request, a process of transmitting the document data to the second document processing apparatus is executed.
A computer program characterized by the above.

Images