JP6602562B2 - File management system and file management method - Google Patents

Description

  The present invention relates to a file management system and a file management method, and more specifically, to a technique that enables accurate acquisition management according to an organization policy for an external file.

  A predetermined organization such as a financial institution is required to operate a highly secure and reliable system and business based thereon. There is also a strict handling policy for each piece of information according to its attributes, such as sensitive information such as customer personal information and asset information, or information for which access is restricted for investment business.

  Therefore, when a file is downloaded to an internal system of such an organization from an external network such as the Internet, it is necessary to apply appropriate precautions such as a virus infection check on the file.

  As such a technique, for example, in a device that downloads (receives) a file from a server device connected to the Internet / Intranet in order to efficiently and surely prevent the entry of a virus from a file on the Internet / Intranet, a computer virus A computer virus check is automatically performed on a file that has been downloaded, a warning is displayed when a file containing a virus is detected, and the file is invalidated or stored. An apparatus for deleting from the top (see Patent Document 1) has been proposed.

Japanese Patent Laid-Open No. 2001-34554

  As described above, by performing a virus check on a file to be downloaded, it is possible to avoid a situation where the internal system of the organization is infected with a virus. However, information that is restricted or prohibited from being viewed or used by laws or policies cannot be appropriately managed, including downloading. In such a case, there is a risk that the above-described leakage of sensitive information, the incorporation of information that is problematic in laws and ethics, or the utilization of the information.

  Therefore, an object of the present invention is to provide a technique that enables accurate acquisition management according to an organization policy for an external file.

  The file management system of the present invention that solves the above-described problems is a communication device that can access each of the internal and external networks, and a file received from the external network, collated with a predetermined standard according to the file attribute, And an arithmetic device that determines whether transfer is possible and transfers the file determined to be transferable as a result of the determination to a predetermined device of an internal network.

According to the file management method of the present invention, an information processing system including a communication device that can access each of internal and external networks checks a file received from an external network with a predetermined standard according to a file attribute, and sends the file to the internal network. Transfer of the file determined to be transferable as a result of the determination is transferred to a predetermined device on the internal network.

  According to the present invention, it is possible to accurately acquire and manage external files according to organizational policies.

It is a network block diagram containing the file management system of this embodiment. It is a figure which shows the hardware structural example of the center file server in this embodiment. It is a figure which shows the data structural example of the format reference | standard table in this embodiment. It is a figure which shows the data structural example of the dictionary table in this embodiment. It is a figure which shows the data structural example of the policy level table in this embodiment. It is a figure which shows the example of a data structure of the URL list table in this embodiment. It is a flowchart which shows the process sequence example of the file management method in this embodiment.

--- Network configuration ---

  Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a network configuration diagram including a file management system 10 of the present embodiment. A file management system 10 shown in FIG. 1 is a computer system that enables accurate acquisition management according to organizational policies for external files.

  In the present embodiment, a configuration in which the file management system 10 is included in the business system 1 of a financial institution is assumed. In addition, the business system 1 illustrated in FIG. 1 includes a DMZ (DeMilitarized Zone) segment 2 connected to the Internet 20 as an external network through an appropriate firewall 15, the DMZ segment 2 and the above-described firewall (or another provided separately). In-line segment 3 connected via the internal network 30, and the segment 4 of each branch office connected to the in-line segment 3 via the internal network 30.

  Further, a terminal server 150 and a DMZ file server 160 are arranged in the above-described DMZ segment 2 network. On the other hand, the center file server 100 is arranged in the in-line segment 3 described above. On the other hand, in-store file server 200, branch terminal 220, and client terminal 230 are arranged in the network of branch store segment 4 described above. Of course, the application target of the file management system 10 of the present embodiment is not limited to such a segment configuration or a device arrangement form on a network.

  Based on the above-described segment and device arrangement on the network, the client terminal 230 operated by a bank employee of the financial institution cannot be directly connected to the Internet 30. The client terminal 230 operates a Web browser mounted on the terminal server 150 via the in-line network 30, and the display screen data is provided from the terminal server 150 by RDP (Remote Desktop Protocol).

In other words, a virtual desktop environment is constructed in the business system 1 of the financial institution, and the client terminal 230 belonging to the business system 1 is operated so that it can only indirectly access the Internet 30 by so-called remote access. ing. Accordingly, the file on the Internet 30 cannot be directly taken into the network of the branch office segment 3 by operating the client terminal 230 by the bank clerk.

  In the present embodiment, a file (on the Internet 30) for which a download instruction has been issued from the client terminal 230 is downloaded by the terminal server 150 through a virus check and temporarily stored in a predetermined folder 165 of the DMZ file server 160. . On the other hand, the center file server 100 of the in-line segment 3 checks a predetermined folder of the DMZ file server 160 every predetermined time, and if there is a file stored in this folder, the file file is compared with a standard regarding the file attribute. Then, it is determined whether or not transfer to the internal network 30 is possible, and the file determined to be transferable as a result of the determination is transferred to the in-line file server 200 of the in-line segment 3 via the internal network 30.

The network configuration including the file management system 10 in the present embodiment has been described above.
--- Hardware configuration ---

  Next, a hardware configuration example of the information processing apparatus that configures the file management system 10 of the present embodiment will be described. FIG. 2 is a diagram illustrating a hardware configuration example of the center file server 100 according to the present embodiment. Here, the center file server 100 as a unit of the minimum configuration of the file management system 10 is shown, but the file management system 10 may also be configured including the terminal server 150 and the DMZ file server 160 described above.

  In this case, the center file server 100 includes a storage device 101 composed of an appropriate nonvolatile storage element such as an SSD (Solid State Drive) or a hard disk drive, a memory 103 composed of a volatile storage element such as a RAM, and a storage device 101. The stored program 102 is read into the memory 103 and executed to perform overall control of the device itself, and perform various determinations, calculations, and control processing, such as a CPU 104 and the Internet 20 (in this embodiment, via the terminal server 150). ) And a communication device 105 connected to the internal network 30 and responsible for communication processing with other devices. The storage device 101 stores at least a program 102 for implementing functions necessary for the file management system 10 of the present embodiment and various tables 125 to 128 used for determination processing regarding file attributes. Details of the tables 125 to 128 will be described later.

  Each hardware configuration of the terminal server 150, the DMZ file server 160, and the in-line file server 200 has the same hardware configuration as that of a general server device, similar to the center file server 100 described above.

Further, the branch office terminal 220 and the client terminal 230 have the same hardware configuration as a general PC. However, the client terminal 230 is provided with an appropriate function for using the virtual desktop environment with the terminal server 150 as described above. This function is an existing technology and will not be described.
--- Function ---

  Next, functions provided in the file management system 10 of this embodiment will be described. As described above, the functions described below can be said to be functions implemented by executing the program 102 included in the center file server 100 that mainly configures the file management system 10, for example.

  The center file server 100 according to the present embodiment collates the type reference table 125 and the dictionary table 126, which are predetermined criteria according to the file attribute, with respect to the files having undergone the wealth check received from the Internet 20 via the terminal server 150 described above. The file can be transferred to the internal network 30 by determining whether or not the file format is specified by the type reference table 125 and whether or not the vocabulary specified by the dictionary table 126 includes the file name and content. And a file that is determined to be transferable as a result of the determination is transferred to the in-line file server 200 of the internal network 30.

  Note that the center file server 100 of the present embodiment further has a function of checking whether transfer is possible by checking the above-described type reference table 125 for each file received from the Internet 20 via the terminal server 150 in the above-described determination. I have. Further, the center file server 100 in this case specifies the policy reference level of the file transfer destination such as a department in the financial institution in the policy level table 127 for each of the above-described files, and a range corresponding to the policy level specified here. This vocabulary group is specified in the dictionary table 126, and it is determined whether or not transfer is possible by determining whether or not the vocabulary group includes the name and contents of the file.

  Further, the center file server 100 according to the present embodiment senses a download instruction from the client terminal 230 via the terminal server 150, and the policy level table 127 described above regarding the department to which the in-line segment 3 in which the client terminal 230 is placed belongs. The function of storing the vocabulary group obtained by the above-described determination and specifying the vocabulary group in the dictionary table 126 based on this policy reference level in the memory 103 is stored and retained in the memory 103. I have.

  In this case, the center file server 100 reads out the above-mentioned vocabulary group corresponding to the department (scheduled internal transfer destination) from the above-mentioned memory 103 and collates each file received from the Internet 20 via the terminal server 150, A function for determining whether transfer is possible is provided.

  Further, the center file server 100 according to the present embodiment, in addition to the determination regarding the file attributes (the model reference table 125 and the dictionary table 126), sets the acquisition destination address of the file as a white list (URL) on the URL on the Internet 20. In comparison with the URL list table 128), when the acquisition destination address of the file is included in the URL list table 128, the file has a function of determining that the file can be transferred to the internal network 30.

  In this case, if the center file server 100 obtains a result indicating that transfer is possible by any of the determination regarding the file attribute and the determination based on the URL list table 128 described above, the center file server 100 transfers the file to the in-line file server 200 of the internal network 30. Is further provided with a function of transferring to

Further, the center file server 100 according to the present embodiment performs a masking process such as painting with a predetermined color on the information of the location that is the basis of the determination for the file determined to be untransferable as a result of any of the above determinations, or A function of performing a deletion process and transferring the processed file to the in-line file server 200 of the internal network 30 is further provided.
--- Data structure example ---

Next, an example of the data structure in the table used by the file management system 10 of this embodiment will be described. FIG. 3 is a diagram illustrating a data configuration example of the format reference table 125 in the present embodiment. The format reference table 125 in the present embodiment is a table that defines file formats that cannot be imported into the internal network 30 in the financial institution described above. The type standard table 125 illustrated in FIG. 3 is an aggregate of records associated with file format names such as “EXE” using the model ID as a key.

  FIG. 4 is a diagram showing a data configuration example of the dictionary table 126 in the present embodiment. The dictionary table 126 in the present embodiment is a table that defines vocabularies that are recognized as problematic in terms of security, laws, and ethics in the above-described financial institutions. The dictionary table 126 illustrated in FIG. 4 is a collection of records in which the vocabulary and the policy reference level are associated with each other using the vocabulary ID as a key. In addition, the vocabulary mentioned above can assume vocabulary, such as an anti-social force and the company name of an unlisted stock. The policy reference level is a value indicating the policy reference level to be checked for the presence or absence of the corresponding vocabulary in the file. The policy reference level is different for each department of the above-mentioned financial institution and is a value indicating the strictness of the policy regarding information handling.

  FIG. 5 is a diagram showing a data configuration example of the policy level table 127 in the present embodiment. The policy level table 127 in the present embodiment is a table that prescribes policy levels relating to information handling, which differ for each department of a financial institution. The policy level table 127 illustrated in FIG. 5 is a collection of records in which the department level of the financial institution is associated with the value of the policy level in the corresponding department. The policy level is different for each department of the financial institution described above, and is a value indicating the strictness of the policy regarding information handling. For example, the loan department has the highest rank “A”, and the branch has the next rank “B”. The higher this rank, the greater the number of vocabularies that should be checked for file existence.

FIG. 6 is a diagram showing a data configuration example of the URL list table 128 in the present embodiment. The URL list table 128 in the present embodiment is a table that defines URLs of Web sites that are operated by the existence of no problem as an information source, such as the supervisory authorities of the above-mentioned financial institutions and business partners.
--- Processing procedure example ---

  Hereinafter, an actual procedure of the file management method in the present embodiment will be described with reference to the drawings. Various operations corresponding to the file management method described below are realized by a program that is read into a memory or the like and executed by an information processing apparatus (the center file server 100 or the like) constituting the file management system 10. And this program is comprised from the code | cord | chord for performing the various operation | movement demonstrated below.

  FIG. 7 is a flowchart showing an example of a processing procedure of the file management method in the present embodiment. In this flow, it is assumed that the terminal server 150 first receives a download request from the client terminal 230 for a certain file (hereinafter referred to as a DL target file) held by a predetermined Web site (providing server) on the Internet (s100).

  The terminal server 150 extracts the identification information of the department to which the information processing apparatus client terminal 230 belongs and the URL of the download destination Web site (DL target file acquisition destination address) included in this download request, and these information Is sent to the center file server 100 (s101).

On the other hand, the center file server 100 that has received this notification collates the URL that is the acquisition destination address of the DL target file indicated by the notification with the URL list table 128, and the URL that is the acquisition destination address is the URL list of the URL list table 128. (S102).

  As a result of the determination, if the URL as the acquisition destination address is included in the URL list of the URL list table 128 (s102: OK), the center file server 100 determines that the DL target file can be transferred to the internal network 30. The next step s104 is to be processed. On the other hand, as a result of the above determination, if the URL as the acquisition destination address is not included in the URL list of the URL list table 128 (s102: NG), the center file server 100 cannot acquire the DL target file. This is notified to the client terminal 230 described above (s103), and the process is terminated.

  Subsequently, in step s104, the center file server 100 searches the policy level table 127 using the identification information of the department indicated by the notification received in the above-described step s102 as a key, and identifies the policy level relating to the relevant department as “A” or the like. To do. Further, the center file server 100 searches the dictionary table 126 with the policy level value “A” specified here, the vocabulary associated with the level “A” as the value of the policy reference level, and the value below “A”. , That is, the vocabulary associated with levels “B” to “C” are extracted, and the extracted vocabulary group is stored in the memory 103 in association with the above-described department identification information (s105).

  In the case where the terminal server 150 includes the policy level table 127 and the dictionary table 126 described above, the terminal server 150 executes the processes in steps s104 and s105 described above, and the vocabulary group as a result of the process is obtained. It may be transferred to the center file server 100.

  On the other hand, after the above-described step s101, the terminal server 150 acquires the DL target file from the corresponding website on the Internet 20, and temporarily stores it in a predetermined folder in the DMZ file server 160 (s106).

  Subsequently, the DMZ file server 160 performs a virus check on the DL target file held in the predetermined folder (s107). Of course, it is assumed that the DMZ file server 160 includes a program for Will check, which can be executed as necessary to implement a virus check function.

  As a result of the virus check described above, if a virus infection is found (s108: NG), the DMZ file server 160 deletes the DL target file or stores it in a predetermined quarantine area, and notifies the client terminal to that effect. 230 is notified (s109).

  On the other hand, if it is determined as a result of the above-described virus check that no virus is infected (s108: OK), the DMZ file server 160 transmits the DL target file to the center file server 100 (s110).

  The center file server 100 receives the DL target file transmitted from the DMZ file server 160, and specifies the file format from the extension value of the DL target file (s111). Further, the center file server 100 checks the file format specified here against the type standard table 125 and determines whether or not there is a problematic file format defined in the type standard table 125 (s112).

As a result of the above determination, if the file format of the DL target file is problematic (s112: NG), the center file server 100 notifies the fact to the security administrator's terminal in the financial institution, for example. The determination result is requested (s113). Alternatively, similar to the DL target file in a situation where the virus infection is found, the DL target file may be deleted or stored in a predetermined quarantine area, and notification to that effect may be sent to the client terminal 230.

  When the center file server 100 receives an answer to the above-described determination result request from the security administrator's terminal and the content indicates “processing can be continued” (s114: OK), for example, the self-decompression type A predetermined process predetermined for each file format, such as decompressing the DL target file, is applied (s115), and the DL target file after the process is set as a processing target in the subsequent step s117.

  On the other hand, if the response content received from the above-mentioned security administrator's terminal indicates “unable to continue processing” (s114: NG), the center file server 100 deletes the DL target file or sets a predetermined value. And notifies the client terminal 230 to that effect (s116).

  If there is no problem in the file format of the DL target file as a result of the determination in step s111 described above (s112: OK), the center file server 100 executes a virus check process again (s117). Of course, like the DMZ file server 160, the center file server 100 also includes a will check program, which can be executed as necessary to implement a virus check function.

  By executing the virus check process again, the following effects can be expected. For example, although the DL target file is actually infected with a virus, a pattern file corresponding to the virus is not prepared at the time of execution of the virus check process (step s107) in the DMZ file server 160 described above. Suppose that there was a situation where the virus check process was passed. This is the same situation as a situation where a so-called Web browser or system was subjected to a zero-day attack. However, since the above-described step s117 is executed after a predetermined time has elapsed from the execution time of step s107 by the DMZ file server 160, it can be expected that a pattern file corresponding to the virus is prepared. . That is, the computer virus that has passed the virus check process in step s107 is identified as infected with the DL target file by executing step s117, and is appropriately dealt with.

  As a result of the virus check described above, if a virus infection is found (s118: NG), the center file server 100 deletes the DL target file or stores it in a predetermined quarantine area, and informs the client terminal of the fact. 230 is notified (s119).

  On the other hand, as a result of the above-described virus check, if the virus-free infection is found (s118: OK), the center file server 100 acquires the vocabulary group related to the department that requested the download of the DL target file (obtained in step s105) Is identified in the memory 103, and each vocabulary included in the vocabulary group is collated with each text (including numerical values and symbols) of the name and content of the DL target file to determine the presence or absence in the DL target file (s120). .

  As a result of the above determination, if any of the vocabulary included in the vocabulary group is included in the DL target file (s120: NG), the center file server 100 cannot transfer the DL target file to the internal network 30. It is determined that it is deleted, or it is deleted or accommodated in a predetermined isolation area, and that is notified to the client terminal 230 (s121).

Note that the center file server 100 describes the location that is the basis for the determination, that is, one of the vocabulary included in the vocabulary group, instead of processing such as deletion, for the DL target file that is determined to be untransferable as described above. It is also possible to perform a masking process (for example, a process of filling the corresponding area with black or the like) or a deletion process on the information. In this case, the center file server 100 transfers the processed DL target file to the in-line file server 200 of the internal network 30.

  As a result of the above determination, if none of the vocabulary included in the vocabulary group is included in the DL target file (s120: OK), the center file server 100 determines that the DL target file can be transferred to the internal network 30. The DL target file is determined and transferred to the in-line file server 200 of the internal network 30 (s122), and the process ends.

  On the other hand, the branch office terminal 220 or the client terminal 230 located in the above-mentioned in-line segment 3 accesses the in-line file server 200 of its own department by the operation of the employee, reads the above-mentioned DL target file stored therein, Will be output to the display device for viewing by employees.

  Although the best mode for carrying out the present invention has been specifically described above, the present invention is not limited to this, and various modifications can be made without departing from the scope of the invention.

  According to the present embodiment, it is possible to accurately acquire and manage external files according to the organization policy.

  At least the following will be clarified by the description of the present specification. That is, in the file management system of the present embodiment, the arithmetic device collates the received file with respect to at least one of the file format, name, and content, which is the predetermined standard, in the determination. If the file does not have the file format, name, and contents defined by the predetermined standard, it may be determined that the file can be transferred to the internal network.

  According to this, specific file types such as self-extracting files that are often concealed by computer viruses, etc., identification of anti-social forces, company names of unlisted shares, etc., where access to information itself may be a problem It is possible to check the above-mentioned determination target file (obtained from an external network such as the Internet) for the name and content of the file including the above word. As a result, it is possible to accurately acquire and manage external files according to organizational policies.

  Further, in the file management system of the present embodiment, the arithmetic device, in the determination, determines whether transfer is possible by checking a predetermined standard corresponding to the file format among the file attributes for the received files in common. And a process for determining whether transfer is possible by checking a predetermined standard according to at least one of the file name and format among the file attributes, which is different for each received internal transfer destination for each received file. May be executed.

  According to this, for specific file types such as self-extracting files where computer viruses are often concealed, all files are checked uniformly, while the strictness of the information handling policy is set. Depending on the existence of such policies (for example, each department within a company), the name and content of files containing specific words, such as antisocial forces and company names of unlisted shares, that are subject to different check ranges. It is possible to perform a check based on established criteria. As a result, it is possible to perform more accurate acquisition management corresponding to each policy of the organization with respect to external files with high accuracy.

  Further, in the file management system of the present embodiment, the arithmetic device uses a predetermined standard according to at least one of a file name and a format among the file attributes, which is different for each internal transfer destination of the file, in the determination. The file may be acquired in advance from a predetermined storage device, and for each received file, the predetermined reference corresponding to the corresponding internal transfer destination is read from the predetermined storage device and collated to determine whether transfer is possible.

  According to this, before and after the uniform check regarding the file type described above, the file name and content standard determined for each existence of different policies (for example, for each department in the company) are read in a memory or the like in advance. It is possible to check quickly and efficiently. As a result, it is possible to more efficiently acquire and manage external files according to each policy of the organization with high accuracy.

  Further, in the file management system of the present embodiment, in the determination, the arithmetic device collates the acquisition destination address of the file with a reference list of predetermined addresses on the external network in addition to the determination regarding the file attribute. When the acquisition destination address is included in the reference list, the file is further subjected to a process for determining that the file can be transferred to the internal network. May be transferred to a predetermined device in the internal network.

  According to this, regarding the files obtained from websites operated by the existence of no problem as information sources, such as the regulatory authorities and business partners of the organization, it is determined that there is no problem in the reliability and ethics of the information. On the other hand, it is determined that there is a problem with a file acquired from a blog, electronic bulletin board, SNS or the like whose operator is unknown, and the incorporation of such a file into the system can be reliably avoided. As a result, it is possible to perform more accurate acquisition management according to the organization policy for external files.

  Further, in the file management system of the present embodiment, the arithmetic device performs a masking process or a deletion process on the information of the location that is the basis of the determination for the file determined to be untransferable as a result of the determination, A process for transferring a later file to a predetermined device in the internal network may be further executed.

  According to this, for example, for a file that is not infected by a computer virus but has difficulty only with respect to some file attributes, the information in the organization is taken after measures are taken so that the information on the corresponding part cannot be used. Can be provided to the requester. As a result, accurate acquisition management according to the organization's policy for external files can be performed together with the use of information within a range where there is no problem.

  In the file management method of the present embodiment, the information processing system checks the received file for at least one of the file format, the name, and the content, which is the predetermined standard, in the determination. If the file does not have the file format, name, and content defined by the predetermined standard, it may be determined that the file can be transferred to the internal network.

  In the file management method of the present embodiment, the information processing system determines whether transfer is possible by checking a predetermined standard according to the file format among the file attributes, in common with the received files, in the determination. Processing for determining whether transfer is possible by comparing predetermined criteria according to at least one of the file name and format among the file attributes, which differ for each planned internal transfer destination for each received file And may be executed.

  Further, in the file management method of the present embodiment, the information processing system determines a predetermined criterion according to at least one of a file name and a format among the file attributes, which differs for each internal transfer destination of the file at the time of the determination. May be acquired from a predetermined storage device in advance, and the predetermined criteria corresponding to the scheduled internal transfer destination may be read from the predetermined storage device for each received file and collated to determine whether transfer is possible.

  Further, in the file management method of the present embodiment, the information processing system, in the determination, checks the acquisition destination address of the file against a reference list of predetermined addresses on the external network in addition to the determination regarding the file attribute. Then, when the acquisition destination address is included in the reference list, the file is further subjected to a process for determining that the file can be transferred to the internal network. The file may be transferred to a predetermined device on the internal network.

  Further, in the file management method of the present embodiment, the information processing system performs a mask process or a deletion process on the information of the location that is the basis of the determination for the file determined to be untransferable as a result of the determination, A process of transferring the processed file to a predetermined device in the internal network may be further executed.

10 File management system 20 Internet (external network)
30 Internal Network 100 Center File Server 101 Storage Device 102 Program 103 Memory 104 Computing Device 105 Communication Device 125 Format Criteria Table 126 Dictionary Table 127 Policy Level Table 128 URL List Table 150 TS Server 160 DMZ File Server 200 Inline File Server 220 Branch Terminal 230 Client terminal

Claims (10)

A communication device capable of accessing an internal network and an external network of an organization composed of a plurality of departments ;
Based on an instruction to download a predetermined file by a predetermined device provided in a predetermined department in the internal network, a file extension as a file attribute and a name of the file or a file attribute for the file received from the external network An arithmetic device that checks whether or not transfer to an internal network is possible by collating predetermined criteria according to the vocabulary related to the contents, and transfers the file determined to be transferable as a result of the determination to the predetermined device of the internal network; ,
Equipped with a,
The predetermined criterion is a vocabulary policy level that is associated with each of the departments and is information that specifies the vocabulary in the file that needs to be checked to determine whether the file can be transferred and the level of the number. Is included as a criterion,
The arithmetic device transfers the received file determined to be transferable by comparing the vocabulary related to the content of the received file with the vocabulary policy level to a predetermined device of the predetermined department in the internal network. To
A file management system characterized by that. The arithmetic unit is:
For the determination,
A process of determining whether transfer is possible by checking a predetermined standard according to a file format among the file attributes in common for each received file;
For each received file, a process for determining whether transfer is possible by comparing predetermined criteria according to at least one of the file name and format among the file attributes, which is different for each internal transfer destination,
The file management system according to claim 1, wherein: The arithmetic unit is:
In the determination, a predetermined reference according to at least one of the file name and format among the file attributes, which is different for each internal transfer destination of the file, is acquired in advance from a predetermined storage device, and for each received file, The predetermined reference corresponding to the corresponding internal transfer scheduled destination is read from the predetermined storage device and collated to determine whether transfer is possible.
The file management system according to claim 1. The arithmetic unit is:
In the determination, in addition to the determination regarding the file attribute, the acquisition address of the file is checked against a reference list of predetermined addresses on an external network, and the acquisition address is included in the reference list, The file is further subjected to a process for determining that the file can be transferred to the internal network, and if the result of transfer is obtained by any of the determinations, the file is transferred to a predetermined device of the internal network.
The file management system according to claim 1. The arithmetic unit is:
As a result of the determination, the file determined to be untransferable is subjected to a mask process or a deletion process on the information on the basis of the determination, and further executes a process of transferring the processed file to a predetermined device on the internal network To do,
The file management system according to claim 1. An information processing system including a communication device that can access an internal network and an external network of an organization composed of a plurality of departments .
Based on an instruction to download a predetermined file by a predetermined device provided in a predetermined department in the internal network, a file extension as a file attribute and a name of the file or a file attribute for the file received from the external network A predetermined standard according to the vocabulary related to the content is checked to determine whether transfer to the internal network is possible, and as a result of the determination, the file determined to be transferable is transferred to the predetermined device of the internal network ,
The predetermined criterion is a vocabulary policy level that is associated with each of the departments and is information that specifies the vocabulary in the file that needs to be checked to determine whether the file can be transferred and the level of the number. Is included as a criterion,
The arithmetic device transfers the received file determined to be transferable by comparing the vocabulary related to the content of the received file with the vocabulary policy level to a predetermined device of the predetermined department in the internal network. To
A file management method characterized by the above. The information processing system is
For the determination,
A process of determining whether transfer is possible by checking a predetermined standard according to a file format among the file attributes in common for each received file;
For each received file, a process for determining whether transfer is possible by comparing predetermined criteria according to at least one of the file name and format among the file attributes, which is different for each internal transfer destination,
The file management method according to claim 6 , wherein: The information processing system is
In the determination, a predetermined reference according to at least one of the file name and format among the file attributes, which is different for each internal transfer destination of the file, is acquired in advance from a predetermined storage device, and for each received file, Reading out and collating the predetermined criteria according to the corresponding internal transfer scheduled destination from the predetermined storage device, and determining whether transfer is possible,
The file management method according to claim 6 . The information processing system is
In the determination, in addition to the determination regarding the file attribute, the acquisition address of the file is checked against a reference list of predetermined addresses on an external network, and the acquisition address is included in the reference list, The process further determines that the file can be transferred to the internal network, and if a result indicating that the file can be transferred is obtained in any determination, the file is transferred to a predetermined device on the internal network.
The file management method according to claim 6 . The information processing system is
As a result of the determination, the file determined to be untransferable is subjected to a mask process or a deletion process on the information on the basis of the determination, and further executes a process of transferring the processed file to a predetermined device on the internal network To
The file management method according to claim 6 .

Images