JP6955183B2 - Information processing equipment, information processing systems, control methods, and programs - Google Patents

Description

The present invention relates to prevention of erroneous transmission of a file attached to an e-mail.

In recent years, in an e-mail system, e-mail is sent and received between client terminals via a network, but it is used as a very convenient tool for exchanging information with a distant place.

However, in an emergency, etc., there are many cases where the e-mail contains highly confidential information and is exchanged with the other party. In this case, the sent e-mail is sent to the other party's mail server. In the process, eavesdropping and falsification are carried out, and there is a risk that highly confidential information cannot be transmitted safely.

Therefore, a number of methods for encrypting e-mail have been proposed, and for example, methods such as PGP (Pretty Good Privacy) and S / MIME (Secure / Multipurpose Internet Mail Extensions) have been proposed. The above-mentioned risks are avoided by performing encryption and decryption on both the transmitting and receiving sides.

In order to use such a method, it is necessary to install software that provides functions for encryption and decryption to each client terminal, and consideration of the introduction of these software (cost and security). Etc.), installation work, setting work after installation, etc., it is undeniable that there are some inconveniences for the user.

However, as a method of using e-mail, there is a method of inputting low-confidential or non-confidential information in the body of the e-mail and sending a file containing the highly confidential information as an attachment to the e-mail.

In this case, it is not necessary to encrypt all the e-mails as in the above method, and the files attached to the e-mails are separated, stored in a file storage server, etc., and stored in the storage destination. The URL is pasted into a separate e-mail and the e-mail is sent to the destination.

Then, when the user who receives the e-mail accesses the URL and enters the password etc. to log in to the server for storing the file, there is a mechanism to download the file that was supposed to be sent to himself / herself. (See, for example, Patent Document 1).
JP-A-2007-251554

However, as the file attached to the e-mail, there are a file that is attached to the e-mail as it is, and a file that incorporates an image such as the background of the e-mail and the company logo.

In this case, it may be troublesome for the recipient to download the background of the e-mail, the image such as the company logo, etc. separately from the e-mail.

The present invention has been made to solve the above problems, and an object thereof is that intends row relay email attachments exists flexibly provides a mechanism.

The present invention for achieving the above object, a computer, by e-mail analysis, a determination unit configured to determine how to subject the file to the e-mail, in accordance with the determination result by the determination unit, a first method A transmission means for transmitting an e-mail having a predetermined process for controlling the file to an e-mail having a file attached by, while transmitting an e-mail having a file attached by the second method. If, then to function, the second method is characterized as to Help program that subjecting the file in the body of the e-mail.

According to the present invention, the relay of the electronic mail attachments exists can intends line flexibly, an effect that.

It is a block diagram which shows the schematic structure of an information processing system. It is a block diagram which shows the schematic structure of the hardware of various terminals. It is a block diagram which shows the functional structure in an information processing system. It is a flowchart which shows the process of separating the attachment file of an e-mail. It is a block diagram which shows the structure of the mail composition screen. It is a block diagram which shows the structure of the mail composition screen. It is a block diagram which shows the structure of an e-mail. It is a block diagram which shows the structure of an e-mail. It is a block diagram which shows the structure of the e-mail with a URL. It is a block diagram which shows the structure of the password notification mail. It is a block diagram which shows the structure of the e-mail with a URL. It is a block diagram which shows the structure of an e-mail. It is a block diagram which shows the functional structure in an information processing system. It is a flowchart which shows the process of encrypting and separating an attachment file of an e-mail. It is a block diagram which shows the structure of an e-mail. It is a block diagram which shows the structure of an e-mail. It is a block diagram which shows the structure of an e-mail. It is a block diagram which shows the structure of an e-mail.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a diagram showing an example of a system configuration in the information processing system according to the embodiment of the present invention. It should be noted that the configurations of the various terminals shown in FIG. 1 are examples, and it goes without saying that there are various configuration examples depending on the purpose and application.

As shown in FIG. 1, the information processing system 100 according to the present embodiment includes a client terminal 101, an administrator client terminal 102 used by a system administrator, an internal mail server 104, an NFS server 105, and a Web server 106. The terminals are installed and are connected to each other so as to be able to communicate with each other via the local area network (LAN) 103, and are constructed as an internal system.

Further, the client terminal 101 is connected to at least one external mail server 108 so as to be able to communicate with each other via the wide area network 107, and relays transmission / reception of e-mail to / from the client terminal 109 existing in the external system. ing.

Further, a firewall device (not shown) is installed between the LAN 103 and the wide area network 107, and communication control processing is performed according to a predetermined rule.

The internal mail server 104 is a server device for relaying e-mails by the client terminal 101, specifies the SMTP communication content of the client terminal 101, and performs various processes described later according to the communication content.

Although the internal mail server 104 is shown as one housing, the internal mail server 104 is not limited to such a configuration, and each housing of the mail server and the proxy server arranged on the external side with respect to the mail server. As a configuration including a body, the present invention may be executed by a proxy server, and the mail server may be configured to mainly handle the delivery of e-mail.

The administrator client terminal 102 sets and manages the internal mail server 104.

The NFS server 105 saves the file attached to the e-mail relayed by the internal mail server 104 in a predetermined directory.

A directory is created to store the attached file each time the attached file is separated, and the attached file is saved under this directory. It also has an area for storing emails with attachments separated.

When the Web server 106 receives the request for downloading the attached file stored in the NFS server 105 from the destination of the e-mail, the Web server 106 transmits the corresponding attached file acquired in the NFS server 105 to the request source.

Next, the hardware configurations of the various terminals of the internal mail server 104 shown in FIG. 1 will be described with reference to FIG. Since the client terminal 101, the client terminal 102 for the administrator, the NFS server 105, and the Web server 106 have the same configuration, the description thereof will be omitted.

The CPU 201 comprehensively controls each device and controller connected to the system bus 204. Further, in order to realize the functions executed by the BIOS (Basic Input / Output System) and the operating system program (hereinafter, OS), which are the control programs of the CPU 201, and each server or each client device, the ROM 202 or the external memory 211 is used. Various programs and the like, which will be described later, are stored.

The RAM 203 functions as a main memory, a work area, and the like of the CPU 201. The CPU 201 realizes various operations by loading a program or the like necessary for executing a process into the RAM 203 and executing the program.

Further, the input controller (input C) 205 controls the input from the input unit 209 indicating a pointing device such as a keyboard or a mouse (not shown). The video controller (VC) 206 controls the display on a display such as a CRT display (CRT) 210. The display may be not only a CRT but also a liquid crystal display.

The memory controller (MC) 207 is a hard disk (HD), floppy disk (registered trademark FD), or PCMCIA card slot for storing boot programs, browser software, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 211 such as a CompactFlash® memory connected to the device via an adapter.

The communication I / F controller (communication I / FC) 208 connects and communicates with an external device via a network, and executes communication control processing on the network. For example, Internet communication using TCP / IP is possible.

The CPU 201 enables display on the display device 210 by, for example, executing an outline font expansion (rasterization) process in the display information area in the RAM 203. Further, the CPU 201 enables a user instruction with a mouse cursor or the like (not shown) on the display device 210.

A program or the like for executing the password notification mail transmission process for realizing the present invention is stored in the external memory 211, and is executed by the CPU 201 by being loaded into the RAM 203 as needed.

Definition information and various information tables used by each process according to the present invention are also stored in the external memory 211. A detailed description of these will be described later.

FIG. 3 is a schematic diagram showing a functional configuration according to the information processing system 100, and an outline of each function will be described. In addition to this schematic diagram, each function content will be described together with the flowchart shown in FIG.

As shown in FIG. 3, the client terminal 101 includes a first client transmitting means 301, and the first client transmitting means 301 is connected to the internal mail server 104 via the LAN 103.

The first client transmission means 301 has a function realized by software for instructing transmission of an e-mail. For example, the mail creation screen 500 shown in FIG. 5 is displayed on the display device 210, and the sender 501 is displayed. , The sender address of the e-mail is displayed, and the user uses the input unit 209 to indicate the destination 502 indicating the destination address of the e-mail, CC (Carbon Copy) 503, the subject 504 indicating the title of the e-mail, and the electronic. Input or attach to the attached file 505, which indicates the file attached to the e-mail, the e-mail body 506, and the like.

Then, when the user sends an e-mail, by pressing the send button 507 provided on the mail creation screen 500, the user sends the e-mail created by using the input unit 209 to the destinations 502 and CC503. Send to the destination address.

Further, the mail creation screen 500 includes an attachment button 508, and the user specifies a file existing in the client terminal 101 by pressing the attachment button 508 when attaching the attachment file 505 to the e-mail. A screen (not shown) for this purpose is displayed on the display device 210, and a file to be attached is attached to an e-mail by selecting and specifying a file displayed on the screen using the input unit 209.

Further, as shown in FIG. 6, when the user creates an e-mail based on HTML, the mail creation screen 500 uses an image owned by the user as an image 509 as a background of the e-mail, or a company logo. It is possible to insert it into the body of an e-mail as an image 510 showing the above.

Further, in the case of the mail creation screen 500 shown in FIG. 6, it is possible to attach the file to the e-mail together with the attached file by inserting the image as described above. For example, the file selected by the user can be attached. , As an attachment file 505, it can be attached to an e-mail.

The client terminal 101 includes a first client receiving means 302, and the first client receiving means 302 is connected to the internal mail server 104 via the LAN 103.

The first client receiving means 302 receives an e-mail from a client terminal 101 existing in the internal system or a client terminal existing in an external system other than the internal system via the internal mail server 104.

The internal mail server 104 includes a server mail receiving means 303, and the server mail receiving means 303 is connected to at least one or more external mail servers 108 via a client terminal 101 or a wide area network 107.

The server mail receiving means 303 receives an e-mail from a client terminal 101 existing in the internal system or a client terminal 109 existing in an external system other than the internal system.

The internal mail server 104 includes separation determination means 304, attachment file extraction means 305, attachment storage request means 306, mail generation means 307, password notification mail generation means 308, server mail transmission means 309, and original mail storage means 310. ing.

The separation determination means 304 is connected to the server mail receiving means 303 and the attached file extracting means 305.

When the separation determination means 304 receives the notification that the e-mail has been received by the server mail receiving means 303, the separation determination means 304 analyzes the content of the e-mail, but the outline of the analysis content is a target to be separated from the e-mail. If the email has an attachment, it will be filtered.

As an example of a method for determining whether or not an attached file exists in an e-mail, a configuration diagram of the e-mail shown in FIG. 7 will be described. It should be noted that each of these parts exists as the header information of the e-mail (hereinafter, the same applies).

The e-mail shown in the upper part of FIG. 7 is divided into each part, and corresponds to the structure of the e-mail, for example, the part 600 representing the multipart format, the text format, the HTML format, etc., and the body of the e-mail. Part 602, part 604 corresponding to the attached file, and part 606 corresponding to the other attached file.

In this example, in a multipart format email, the user creates a text-based email and shows that there are two attachments.

The e-mail shown in the lower part of FIG. 7 is a configuration when the user creates an e-mail based on HTML in the multipart format e-mail, and corresponds to the part 608 corresponding to the text format body and the HTML format body. It has the configuration of part 610, part 612 corresponding to the attached file, and part 614 corresponding to the other attached file.

In an e-mail having such a configuration, if a value is set for the filename in Part 604, Part 606, Part 612, and Part 614 corresponding to the attached file, it is determined that the attached file exists in the e-mail. Will be done.

However, by making this judgment, when the user composes an e-mail based on HTML, if the image created by the user is inserted into the e-mail itself, these images will be the background image of the e-mail or Even if it is an image showing the company logo and has low confidentiality, there are cases where a value is set for the above-mentioned filename, so it is not necessary to separate it from the original. There may be a problem that even attached files are separated.

Therefore, in order to distinguish between the attached file indicating the file attached to the e-mail and the attached file indicating the image inserted in the e-mail, the configuration diagram of the e-mail shown in FIG. 8 will be described.

The e-mail shown in FIG. 8 is a configuration when a user creates an e-mail based on HTML in a multipart format e-mail, and has the same configuration as the e-mail shown in the lower part of FIG. different.

As shown in Part 614, in the example of FIG. 8, ContentID is set, and in the case of a part with this ContentID set, this attachment will have a value set for filename. , Limited to attachments showing images inserted in the main email.

Therefore, depending on whether or not the Content ID is set, it is possible to determine whether or not the file is an attached file indicating the image inserted in the main part of the e-mail.

The attached file extracting means 305 is connected to the separation determining means 304 and the attached file storage requesting means 306.

When the separation determination means 304 receives a notification from the e-mail that the attached file to be separated exists, the attached file extracting means 305 acquires the attached file from the e-mail.

The attachment file storage request means 306 is connected to the attachment file extraction means 305, the attachment file storage means 311 and the mail generation means 307.

When the attachment file storage request means 306 receives the notification that the attachment file has been separated by the attachment file extraction means 305, the attachment file storage request means 306 requests the NFS server 105 to store the separated file.

The mail generating means 307 is connected to the attached file storage requesting means 306 and the password notification mail generating means 308.

When the attached file is stored by the attached file storage requesting means 306, the mail generating means 307 sends the attached file stored in the NFS server 105 via the Web server 106 to the e-mail from which the attached file is separated. Give a URL to connect to the system for acquisition.

An example thereof is shown in FIGS. 9 and 11. The e-mail 800 shown in FIG. 9 is based on the e-mail created on the e-mail creation screen 500 shown in FIG. , CC (Carbon Copy) 803, subject 804 indicating the title of the e-mail, newly inserted message 805 for the body of the e-mail, URL 806 described above, and body 807 of the original e-mail.

On the other hand, the e-mail 800 shown in FIG. 11 is based on the e-mail created on the mail creation screen 500 shown in FIG. 6, and shows the sender 801 indicating the sender address of the e-mail and the destination address of the e-mail. Address 802, CC (Carbon Copy) 803, subject 804 indicating the title of the email, newly inserted message 805 for the email body, URL 806 mentioned above, and original email body 807, image of the original email The image 808 and the image 809 corresponding to the image 509 and the image 510 are provided.

That is, the attached file displayed in the attached file 505 is separated from the e-mail and has a URL, and the image 509 and the image 510 inserted in the body of the e-mail are sent to the destination without being separated from the e-mail. The e-mail is sent at.

The password notification mail generating means 308 is connected to the mail generating means 307 and the server mail sending means 309.

The password notification mail generating means 308 sends the e-mail generated by the mail generating means 307 to the destination, and then when the user who receives the e-mail accesses the NFS server 105 by the URL described above, the password or the like is used. In order to request input, an e-mail is generated to notify the information such as the password required for the input.

An example thereof is shown in FIG. The password notification mail 900 shown in FIG. 10 is based on the e-mail created on the mail creation screen 500, and has a sender 901 indicating the source address of the e-mail, a destination 902 indicating the destination address of the e-mail, and a destination 902 indicating the destination address of the e-mail. It includes CC (Carbon Copy) 903, a subject 904 indicating the title of an e-mail, and a message 905 indicating information such as the above-mentioned password (destination e-mail address, e-mail ID, password, etc.).

Information such as this password is stored in a predetermined area of the NFS server 105 and is used when the user accesses the NFS server 105.

The server mail transmitting means 309 is connected to at least one or more external mail servers 108 via the client terminal 101 and the wide area network 107.

Specifically, the server mail sending means 309 is connected to the mail generating means 307, the password notification mail generating means 308, the first client receiving means 302, and the second client receiving means 313.

When the server mail sending means 309 receives the notification that the e-mail is generated by the mail generating means 307, the server mail sending means 309 transmits the e-mail to the destination. When the password notification email generation means 308 notifies that the password notification email has been generated, the password notification email is first sent to the sender, and after a predetermined time has elapsed, the recipient is notified. , Send the email.

The original mail storage means 310 is connected to the server mail receiving means 303, and stores the e-mail received by the server mail receiving means 303.

The NFS server 105 includes an attachment file storage means 311 and an attachment file acquisition means 312.

The attachment file storage means 311 is connected to the attachment file storage request means 306 and the attachment file acquisition means 312, and when the request for storing the attachment file is received from the attachment file storage request means 306, the attachment file is stored. Create a directory for this and store attachments under this directory.

As described above, a directory is created to store the attached file each time the attached file is separated, and the e-mail is placed in the area for storing the e-mail generated by the mail generating means 307. Also save.

The attached file acquisition means 312 is connected to the attached file storage means 311 and the attached file receiving means 316, and the attached file transmitting means 317.

When the attachment file acquisition means 312 receives the request for downloading the attachment file from the attachment file reception means 316 from the client terminal 109 that has received the e-mail with the URL, the request is stored in the attachment file storage means 311. The attached file is acquired and the attached file is output to the attached file transmitting means 317.

The client terminal 109 includes a second client receiving means 313, an attached file requesting means 314, and an attached file receiving means 315.

The second client receiving means 313 is connected to the server mail sending means 309 and receives an e-mail or a password notification e-mail.

The attachment file requesting means 314 is connected to the attachment file receiving means 316, and when the user clicks the URL attached to the e-mail, the attachment file receiving means 316 displays a screen (not shown) to the user. , Requests the user to input information related to the message 905 notified by the password notification mail.

The input information is compared with the information such as the password stored in the predetermined area of the NFS server 105, and if they match, the authentication is performed.

Then, when the authentication is performed, the attached file that the user can refer to is displayed on the screen (not shown), the attached file that the user wants to download is specified, and the request for download execution is accepted.

The attached file receiving means 315 is connected to the attached file transmitting means 317, and receives the attached file acquired by the NFS server 105 from the attached file transmitting means 317.

The Web server 106 includes an attached file receiving means 316 and an attached file transmitting means 317.

The attached file receiving means 316 is connected to the attached file requesting means 314 and the attached file acquiring means 312.

As described above, when the attached file receiving means 316 receives the request for downloading the attached file from the attached file requesting means 314, the attached file receiving means 316 notifies the attached file acquiring means 312 to that effect.

The attached file transmitting means 317 is connected to the attached file acquiring means 312 and the attached file receiving means 315.

The attached file transmitting means 317 transmits the attached file acquired by the attached file acquiring means 312 to the attached file receiving means 315 that requested the attached file.

FIG. 4 shows a flowchart showing a process of separating an attached file of an e-mail in the information processing system according to the embodiment of the present invention. The process executed in each step is executed under the control of the CPU 201 of the internal mail server 104.

In step S401, the server mail receiving means 303 receives the e-mail transmitted by the first client transmitting means 301 of the client terminal 101, and in step S402, the separation determination means 304 separates into the e-mail received by step S401. Determine if there is an attachment to be targeted.

To make this determination, as described above, refer to the part corresponding to the attached file, and if a value is set for filename, it is assumed that the attached file exists, but the Content ID is also set. In this case, even if a value is set in filename, it is determined that this attached file is an attached file indicating an image and that the attached file does not exist.

Further, when the mail creation screen 500 shown in FIG. 6 is used to attach to an e-mail together with the attached file by inserting the image as described above, for example, the file selected by the user is designated as the attached file 505. , When attaching to an e-mail, the attachment by inserting an image is not regarded as the attachment to be separated, and the attachment attached to the e-mail is regarded as the attachment to be separated. I consider it.

If it is determined that the attached file exists, the process proceeds to step S403, and if it is not determined that the attached file exists, the process proceeds to step S412.

In step S403, the attachment file extraction means 305 acquires the attachment file to be separated from the e-mail, and the attachment file storage request means 306 stores the attachment file in the NFS server 105, so that the attachment file storage means 311 is used. The attached file storage means 311 stores the attached file in the NFS server 105.

In step S404, the mail generating means 307 is an e-mail in which the attached file is separated, and is given a URL for connecting to the system in order to acquire the attached file stored in the NFS server 105 via the Web server 106. Generate an email that has been sent. For example, generate the email shown in FIG. 9 or FIG.

In step S405, the server mail transmitting means 309 transmits the e-mail generated in step S404 to the second client receiving means 313 of the client terminal 109.

Further, it is also possible to store the e-mail generated in step S404 in a predetermined area of the NFS server 105.

In step S406, the password notification mail generating means 308 requests the input of a password or the like when the user to whom the mail is sent accesses the NFS server 105 by clicking the URL attached to the mail. Therefore, a password notification email is generated to notify the information such as the password required for the input. For example, in the e-mail shown in FIG. 10, the e-mail address of the sender of the original e-mail is set as the destination.

In step S407, the server mail transmitting means 309 transmits the password notification mail generated in step S406 to the first client receiving means 302 of the client terminal 101.

In step S408, the password notification mail generation means 308 determines in step S406 whether or not a predetermined time has elapsed since the password notification mail was transmitted, and if it is determined that the predetermined time has elapsed, the process proceeds to step S409.

In step S409, the password notification mail generating means 308 generates the password notification mail as in step S406, but in this case, for example, the e-mail shown in FIG. 10 is generated. As the destination, unlike step S406, the e-mail address of the destination of the original e-mail is set.

In step S410, the server mail transmitting means 309 transmits the password notification mail generated in step S410 to the second client receiving means 313 of the client terminal 109.

In step S411, the original mail storage means 310 stores the e-mail received in step S401 in a predetermined area of the internal mail server 104.

In step S412, the server mail transmitting means 309 transmits the e-mail received in step S401 to the second client receiving means 313 of the client terminal 109.

In this embodiment, the part corresponding to the attached file is referred to, and if the value is set in filename, the attached file is assumed to exist, and if the ContentID is set, this attached file is Even if a value is set in filename, it is determined that the attached file does not exist because it is an attached file indicating an image.

In order to make a more accurate judgment than this judgment method, the part corresponding to the attached file is referred to, a value is set in filename, and Content-Type is the type in which the attached file is an attached file indicating an image. Further, when the ContentID is set, it may be determined that the attached file does not exist as an attached file indicating an image. In this case, a value indicating an image such as image / * is set in Content-Type.

As an example of this determination, in the structure of the e-mail shown in FIG. 12, in the parts 616, 618, 620, and 622 corresponding to the attached file, values are set for the filenames in all the parts, but the parts 616 and 618 Does not have a ContentID set, and it is determined that there is an attachment indicating a file attached to the email, while parts 620 and 622 have a ContentID set and are therefore inserted into the email. Assuming that there is an attached file showing the image, it is determined that the attached file does not exist.

As described above, in order to make a more accurate judgment, the judgment may be performed on the condition that the value of image / * is set in the Content-Type for all the parts.

In addition, when a user creates an e-mail based on HTML, the style sheet (CSS) may be used to decorate the e-mail.

In this case as well, the decoration itself is regarded as a separation target because the style sheet is embedded in the e-mail and the value is set in the filename, although the airtightness is low.

Therefore, in the same way, if the part corresponding to the attached file is referred to, the value is set in filename, and the ContentID is set, the style sheet is separated by not considering it as a separation target. Can be prevented.

In addition, as described above, in order to make a more accurate judgment, the Content-Type is also referred to, and the judgment is made on the condition that a value indicating a style sheet such as text / css is set in the Content-Type. You may.

Similarly, as an example of this determination, in the configuration of the e-mail shown in FIG. 12, since the Content ID is set in the part 624 corresponding to the attached file, it is excluded from the separation target.

Furthermore, referring to Content-Type, since text / css is set, this part 624 is related to the style sheet, so it can be determined that it is not to be separated.

If the attached file to be separated does not exist in step S402, the conventional filtering process is performed by applying the rule to the e-mail before the process of step S412, and the e-mail is transmitted. It can also be suspended or banned.

When the hold is made, the process of step S412 may be performed after the approval is given by the auditor.

Further, even if there is an attached file to be separated, after step S403, the conventional filtering process is performed by applying the rule to the e-mail from which the attached file is separated and the attached file, and the relevant attachment is performed. It is also possible to suspend or ban the sending of e-mail.

When it is put on hold, the process of step S404 may be performed after approval is given by the auditor.

[Second Embodiment]
Next, the second embodiment will be described. In the first embodiment, it is determined whether or not the attached file is to be separated, but in the second embodiment, the attached file is used. , Determine whether or not it is subject to encryption.

Since the configuration and processing in the second embodiment perform almost the same configuration and processing as in the first embodiment, the same configuration and processing will be omitted and the same reference numerals will be used for description. ..

FIG. 13 is a schematic diagram showing a functional configuration according to the information processing system 100, and an outline of each function will be described. This schematic diagram is an improvement of FIG.

The difference from FIG. 3 is that the internal mail server 104 includes an encryption determination means 318 and an encryption means 319.

The encryption determination means 318 is connected to the server mail receiving means 303 and the attached file extracting means 305, and when the server mail receiving means 303 receives a notification that the e-mail has been received, the content of the e-mail is analyzed. However, as an outline of the analysis contents, if the e-mail has an attached file to be encrypted, it is subject to filtering.

As a method for determining whether or not an attached file to be encrypted exists in the e-mail, a method similar to the method described in the first embodiment is used, and in the second embodiment, the first embodiment is used. In the first embodiment, the case where the attachment file to be separated exists is the case where the attachment file to be encrypted exists, while the case where the attachment file to be separated does not exist is the case where the attachment file to be encrypted exists. It is judged as the case where the file does not exist.

Then, when the attachment file extraction means 305 receives a notification from the e-mail that the attachment file to be encrypted exists by the encryption determination means 318, the attachment file extraction means 305 acquires the attachment file from the e-mail.

The encryption means 319 is connected to the attachment file extraction means 305 and the mail generation means 307, and the encryption determination means 318 encrypts the attachment to be encrypted and gives a password for decryption. Issue.

When the attached file is encrypted by the encryption means 319, the mail generating means 307 attaches the encrypted attached file to the e-mail.

The password notification mail generation means 308 sends the e-mail generated by the mail generation means 307 to the destination, and then generates an e-mail for notifying the password issued by the encryption means 319.

When the server mail sending means 309 receives the notification that the e-mail is generated by the mail generating means 307, the server mail sending means 309 sends the e-mail to the destination, and the password notification mail generating means 308 generates the password notification mail. Upon receiving the notification to that effect, the password notification email is sent to the sender, the recipient, or both.

It should be noted that it may be set in advance which determination is to be used for the received e-mail, whether the determination is made by the separation determination means 304 or the encryption determination means 318, or the transmission is performed. Depending on the above, it may be decided which determination is to be made.

FIG. 14 shows a flowchart showing processing for an attached file of an e-mail in the information processing system according to the embodiment of the present invention. The process executed in each step is executed under the control of the CPU 201 of the internal mail server 104.

In step S420, the server mail receiving means 303 determines whether to perform a separation determination or an encryption determination on the e-mail received in step S401, and if it is determined to perform the separation determination, step S. If the process proceeds to S428 and it is determined that the encryption determination is to be performed, the process proceeds to step S421.

As an example of this determination method, as described above, which determination to be used may be set in advance, or which determination to be performed may be set according to the transmission destination.

Further, the determination is not limited to the server mail receiving means 303, and the determination may be performed by the separation determination means 304 or the encryption determination means 318.

In step S421, the encryption determination means 318 determines whether or not the attached file to be encrypted exists in the e-mail received in step S401, and if it determines that it exists, proceeds to step S422. If it is not determined that it exists, the process proceeds to step S427.

As an example of this determination method, as described above, in the second embodiment, the case where the attached file to be separated exists in the first embodiment is assumed to be the case where the attached file to be encrypted exists. In the first embodiment, the case where the attached file to be separated does not exist is determined as the case where the attached file to be encrypted does not exist.

In step S422, the attachment file extraction means 305 acquires the attachment file to be encrypted from the e-mail, and the encryption means 319 encrypts the attachment file and issues a password for decrypting the attachment file.

In step S423, the mail generating means 307 generates an e-mail replaced with the encrypted attachment file in step S422.

In step S424, the server mail transmitting means 309 transmits the e-mail generated in step S423 to the second client receiving means 313 of the client terminal 109.

In step S425, the password notification mail generation means 308 generates a password notification mail to notify information such as a password for combining the encrypted attached file issued in step S422.

In step S426, the server mail transmitting means 309 sends the password notification mail generated in step S425 to the first client receiving means 302 of the client terminal 101, the second client receiving means 313 of the client terminal 109, or the client terminal 101. It transmits to both the first client receiving means 302 and the second client receiving means 313 of the client terminal 109.

In step S427, the server mail transmitting means 309 transmits the e-mail received in step S401 to the second client receiving means 313 of the client terminal 109.

In step S428, the separation process is performed, but in detail, the processes from step S402 to step S412 shown in FIG. 4 are performed.

The result of this processing is shown in FIG. Since Part 616 and Part 618 (see FIG. 12) are subject to encryption (because they do not include the Content ID), the encrypted attachment is, for example, a file such as an encrypted ZIP as shown in Part 626 (see Part 626). It is attached to the e-mail as a file of XXX.zip), and parts 620, 622, and 624 remain as they are because they are not subject to encryption.

If the attached file to be encrypted does not exist in step S421, the conventional filtering process is performed by applying the rule to the e-mail before the process of step S427, and the e-mail is transmitted. It is also possible to suspend or ban.

When the hold is made, the process of step S427 may be performed after the approval is given by the auditor.

If there is an attached file to be encrypted, the transmission of the e-mail may be suspended once, and after approval by the auditor, the processing of step S422 and subsequent steps may be performed.

Further, even if there is an attached file to be encrypted, in step S422, by applying a rule to the e-mail from which the attached file has been acquired and the attached file, the conventional filtering process is performed and the said. It is also possible to suspend or ban the sending of emails

[Third Embodiment]
Next, a third embodiment will be described. In the first embodiment and the second embodiment, separation and encryption are avoided for images and style sheets attached to HTML-formatted e-mails. However, the third embodiment relates to separation and encryption of rich text format emails.

Rich text format e-mail that allows you to decorate e-mail from a client terminal under the e-mail system environment based on Exchange and Office 365 (registered trademark), which are products of Microsft (registered trademark). Is sent, the email is converted into a message in a given format, and the email with the files (winmail.dat, win.dat, hereafter decorative files) attached is sent.

Therefore, when the internal mail server 104 receives such an e-mail, it detects that the file is attached, and the user does not intentionally attach the file to the e-mail. The file is separated or encrypted.

For example, the upper part of FIG. 16 shows each part of an e-mail created in rich text format, and part 1000 includes part 1002 relating to the body of the e-mail and an e-mail created in rich text format. Suppose that an e-mail with this configuration is sent from a client terminal, including part 1004 and the like.

Then, since the value (winmail.dat) is set in the filename in the conventional method, the internal mail server 104 regards it as a separation target or an encryption target, and the system automatically considers it. The attached decorative file is separated or encrypted.

Then, when the recipient of the e-mail sees the e-mail with the URL indicating the location where it was stored separately and the encrypted decorative file attached, it feels strange that the unexpected file is attached. There is a problem that business is hindered because the attached decorative file is confirmed and the attached decorative file is confirmed.

In addition, in the system environment on the receiving side of the e-mail, there may be a problem that such a file is misidentified as a malicious file attached to the e-mail and processed.

In addition, since there are many users who are not particular about the decoration given in the rich text format, a method for solving such a problem will be described below.

First, as shown in Part 1000 at the top of FIG. 17, Part 1002 related to the body of the e-mail, part related to the e-mail created in rich text format, and the part related to the decorative file not intentionally attached by the user. It is assumed that the e-mail composed of 1008 is transmitted from the first client transmitting means 301 of the client terminal 101.

In this case, in step S402, the separation determination means 304 determines whether or not the attached file to be separated exists in the e-mail received in step S401.

To make this judgment, refer to the part corresponding to the attached file, and if the value is set in filename (winmail.dat, win.dat is set), it is assumed that the attached file exists, but in addition, If Content-Type is a decorative file type (application / ms-tnef) that is automatically attached by the system by email created in rich text format, this attachment will have a value set in filename. Even if it exists, it is considered that the attached file does not exist.

However, as a result of analyzing (expanding) the decorative file, if it can be identified that the file intentionally attached by the user exists in the decorative file, it is determined that the attached file to be separated exists.

The decoration file has a configuration including a body of the e-mail, a file including information related to the decoration of the body, and a file intentionally attached by the user.

Then, as a preprocessing in step S412, the attachment file extracting means 305 separates the decorative file from the e-mail, and in step S412, the server mail transmitting means 309 sends the e-mail from which the decorative file is separated to the client terminal 109. Is transmitted to the second client receiving means 313 of the above.

An example thereof is shown in the lower part of FIG. 17, and the e-mail is transmitted with the part 1002 relating to the body of the e-mail remaining and the part 1008 relating to the e-mail created in rich text format deleted.

On the other hand, in step S421, the encryption determination means 318 determines whether or not the attached file to be encrypted exists in the e-mail received in step S401, and if it determines that it exists, the process proceeds to step S422. If it is advanced and it is not determined that it exists, the process proceeds to step S427.

As an example of this determination method, as described above, the case where the attached file to be separated exists is the case where the attached file to be encrypted exists, and the case where the attached file to be separated does not exist is encrypted. It is judged as the case where the attached file to be converted does not exist.

Then, as a preprocessing in step S427, the attachment file extracting means 305 separates the decorative file from the e-mail, and in step S427, the server mail transmitting means 309 sends the e-mail from which the decorative file is separated to the client terminal 109. Is transmitted to the second client receiving means 313 of the above.

Next, as shown in Part 1000 at the top of FIG. 18, Part 1010 related to the body of the e-mail, a part related to the e-mail created in rich text format, and a file (AAAAA.docs,) intentionally attached by the user. It is assumed that an e-mail composed of part 1012 relating to BBBBBB.xlsx) is transmitted from the first client transmitting means 301 of the client terminal 101.

In step S402, the separation determination means 304 performs the above-described processing, but after considering it as a decoration file, the decoration file is analyzed (expanded), and the file that the user intentionally attached exists. If can be specified (the files AAAAA.docs and BBBBBB.xlsx exist in the decorative file), it is determined that the attached file to be separated exists.

In step S403, the attachment extraction means 305 acquires the attachments to be separated from the e-mail (the files AAAAA.docs and BBBBB.xlsx of the decoration files), and the attachment storage request means 306 removes the attachments. In order to store the attached file in the NFS server 105, the attached file storage means 311 is requested to store the attached file, and the attached file storage means 311 stores the attached file in the NFS server 105.

The file containing the body of the e-mail and the information related to the decoration of the body is deleted, and the NFS server 105 is not requested to store the file. After that, the processes after step S404 are performed.

On the other hand, in step S421, the case where the attached file to be separated exists is assumed to be the case where the attached file to be encrypted exists by the same determination method as the process performed in step S402 described above, while the separation target. The case where the attached file does not exist is determined as the case where the attached file to be encrypted does not exist.

In step S422, the attachment extraction means 305 acquires the attachments to be encrypted (the decorative files AAAAA.docs and BBBBB.xlsx files) from the e-mail, and the encryption means 319 encrypts the attachments. And issue a password for compounding.

At this time, the body of the e-mail included in the decoration file and the file containing the information related to the decoration of the body are deleted and not encrypted.

In step S423, the mail generating means 307 generates an e-mail replaced with an encrypted attachment file (files of AAAAA.docs and BBBBBB.xlsx).

An example of the configuration of the e-mail generated by this process is shown in the lower part of FIG. 18, but the part 1010 related to the body of the e-mail is left, and the part 1012 related to the e-mail created in rich text format is deleted. Generates an e-mail containing part 1014 (AAAAAA.docs) and part 1016 (BBBBBB.xlsx) relating to a file intentionally attached by the user included in the decorative file.

Next, as in Part 1000 shown at the bottom of FIG. 16, an e-mail composed of Part 1002 relating to the body of the e-mail and Part 1006 indicating that the user intentionally attached a decorative file is the client terminal 101. It is assumed that the transmission is performed from the first client transmission means 301 of the above.

In this case, since the decoration file is not automatically attached by the system, it is set as a separation target and an encryption target.

Therefore, in step S402 and step S421, if the Content-Type is a type (application / octet-stream) indicating that the user intentionally attached the decorative file, it is determined that the attached file exists. ..

Regardless of whether or not the attached file exists in the decorative file, the decorative file determines that the attached file exists.

Further, as in the first embodiment, when the attached file to be separated does not exist in step S402, the conventional filtering process is performed by applying a rule to the e-mail before the process of step S412. It is also possible to suspend or prohibit the transmission of the e-mail.

When the hold is made, the process of step S412 may be performed after the approval is given by the auditor.

Further, even if there is an attached file to be separated, after step S403, the conventional filtering process is performed by applying the rule to the e-mail from which the attached file is separated and the attached file, and the relevant attachment is performed. It is also possible to suspend or ban the sending of e-mail.

When the hold is made, the process of step S404 may be performed after the approval is given by the auditor.

Further, as in the second embodiment, in step S421, when the attached file to be encrypted does not exist, the conventional filtering is performed by applying a rule to the e-mail before the processing in step S427. It is also possible to perform processing and suspend or prohibit the transmission of the e-mail.

When the hold is made, the process of step S427 may be performed after the approval is given by the auditor.

If there is an attached file to be encrypted, the transmission of the e-mail may be suspended once, and after approval by the auditor, the processing of step S422 and subsequent steps may be performed.

Further, even if there is an attached file to be encrypted, in step S422, by applying a rule to the e-mail from which the attached file has been acquired and the attached file, the conventional filtering process is performed and the said. It is also possible to suspend or ban the sending of e-mail.

As another example of the configuration of the e-mail, it is assumed that an e-mail in which the part related to the body of the e-mail (Content-Type is text / plain) does not exist is transmitted from the first client transmitting means 301 of the client terminal 101.

In this case, the decorative file is deleted as described above, but before the process of step S412, after step S403, before the process of step S427, and in step S422, a new part related to the body of the e-mail is generated. The body of the e-mail in the decorative file and the body of the e-mail in the file containing the information related to the decoration of the body are regarded as the generated part.

The file intentionally attached by the user in the decorative file is attached to the e-mail as described above.

Then, after that, the e-mail may be filtered.
As described above, according to the present invention, it is possible to improve security while performing flexible operation in sending and receiving an e-mail containing an attached file.

Further, the present invention can be implemented as, for example, a method, a program, a recording medium, or the like.

In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention. Recording media for supplying programs include, for example, flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, DVD-ROMs, magnetic tapes, non-volatile memory cards, ROMs, EEPROMs, and silicon. A disk or the like can be used.

Further, by executing the program read by the computer, not only the function of the above-described embodiment is realized, but also the OS or the like running on the computer is a part of the actual processing or based on the instruction of the program. Needless to say, there are cases where the functions of the above-described embodiment are realized by performing all of them and performing the processing.

Further, after the program read from the recording medium is written in the memory provided in the function expansion board inserted in the computer or the function expansion unit connected to the computer, the function expansion board is based on the instruction of the program code. It goes without saying that there is a case where the CPU or the like provided in the function expansion unit performs a part or all of the actual processing, and the function of the above-described embodiment is realized by the processing.

It goes without saying that the present invention can also be applied when it is achieved by supplying a program to a system or an apparatus. In this case, by reading the recording medium in which the program for achieving the present invention is stored into the system or the device, the system or the device can enjoy the effect of the present invention.

Further, by downloading and reading a program for achieving the present invention from a server, database, etc. on the network by a communication program, the system or device can enjoy the effect of the present invention. It should be noted that all the configurations in which each of the above-described embodiments and modifications thereof are combined are also included in the present invention.

100 Information processing system 101 Client terminal 102 Administrator client terminal 103 Local area network (LAN)
104 Internal mail server 105 NFS server 106 Web server 107 Wide area network 108 External mail server 109 Client terminal 201 CPU
202 RAM
203 ROM
204 System bus 205 Input controller 206 Video controller 207 Memory controller 208 Communication I / F (interface) controller 209 Input unit 210 Display device 211 External memory

Claims (13)

Computer,
Judgment means for determining the method of attaching a file to the e-mail by analyzing the e-mail, and
According to the determination result by the determination means, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
A means of sending an e-mail with a file attached by the second method,
And it is made to function,
The second method, wherein a to Help program that subjecting the file in the body of the e-mail. Computer,
Judgment means for determining the method of attaching a file to the e-mail by analyzing the e-mail, and
According to the determination result by the determination means, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
A means of sending an e-mail with a file attached by the second method,
And it is made to function,
The second method, wherein a to Help program to insert the file to the email. Computer,
Judgment means for determining the method of attaching a file to the e-mail by analyzing the e-mail, and
According to the determination result by the determination means, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
A means of sending an e-mail with a file attached by the second method,
And it is made to function,
The second method, wherein a to Help program that subjecting the file generated by the decoration of the e-mail to the e-mail. Computer,
Judgment means for determining the method of attaching a file to the e-mail by analyzing the e-mail, and
According to the determination result by the determination means, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
A means of sending an e-mail with a file attached by the second method,
And it is made to function,
The first method is the manual features and to Help program to subjecting to the electronic mail the file for the e-mail decoration. When the transmitting means determines that another file included in the file generated by the decoration of the e-mail is included, the electron subjected to a predetermined process for controlling the file with respect to the other file. The program according to claim 4 , which causes the function to send an email. To make the transmitting means function to delete the file generated by the decoration of the e-mail, perform a predetermined process for controlling the file with respect to the other file, and transmit the e-mail. The program according to claim 5. The program according to any one of claims 1 to 6 , wherein a predetermined process for controlling the file is to attach the encrypted file to the e-mail or separate the file from the e-mail. .. The program according to any one of claims 1 to 7 , for further functioning a control means for applying a rule for filtering an e-mail transmitted without performing a predetermined process for controlling the file. .. The program according to claim 8, wherein the control means functions to apply the rule to an e-mail that has undergone a predetermined process of controlling the file. An information processing device that relays e-mail
Judgment means for determining the method of attaching a file to the e-mail by analyzing the e-mail, and
According to the determination result by the determination means, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
A means of sending an e-mail with a file attached by the second method,
With
The second method is an information processing apparatus characterized in that the file is attached to the body of the e-mail. An information processing system consisting of a client terminal and an information processing device that relays e-mails transmitted from the client terminal.
The client terminal
A means of sending an email,
With
The information processing device
A determination means for determining a method of attaching a file to the e-mail by analyzing the e-mail transmitted by the transmission means, and a determination means.
According to the determination result by the determination means, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
A means of sending an e-mail with a file attached by the second method,
Bei to give a,
The second method is an information processing system characterized in that the file is attached to the body of the e-mail. A control method for an information processing device that relays e-mail.
The information processing device
A determination step for determining a method of attaching a file to the e-mail by analyzing the e-mail, and
According to the determination result by the determination step, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
The sending step of sending an email with a file attached by the second method,
And
The second method is a control method for an information processing device, which comprises attaching the file to the body of the e-mail. It is a control method of an information processing system consisting of a client terminal and an information processing device that relays e-mails transmitted from the client terminal.
The client terminal
Sending step to send an email,
And
The information processing device
A determination step for determining a method of attaching a file to the e-mail by analyzing the e-mail transmitted by the transmission step, and a determination step.
According to the determination result by the determination step, an e-mail having undergone a predetermined process for controlling the file is transmitted to the e-mail to which the file is attached by the first method.
on the other hand,
The sending step of sending an email with a file attached by the second method,
And
The second method is a control method of an information processing system, characterized in that the file is attached to the body of the e-mail.

Images