JP7121779B2 - Information processing device, information processing method, and information processing program - Google Patents

Description

TECHNICAL FIELD Embodiments of the present invention relate to an information processing apparatus, an information processing method, and an information processing program.

2. Description of the Related Art IRM (Information Rights Management) technology is known for managing files such as document data and image data created by users so that only authorized users can view and edit the files.

Conventionally, a technology has been disclosed in which a file is encrypted using a dedicated application program, and the server manages the access rights of users who can decrypt and access the encrypted file. With this technology, when a person with access authority accesses a file, a decryption key for decrypting the encrypted file is given to the user via the server so that the user can view the file.

By managing user access rights through the server, even if the file leaves the creator's control, such as when the file is attached to an e-mail and sent to the other party, the configured access rights Access to files can always be restricted.

JP 2006-99419 A

In the above-described IRM technology for controlling access to files, a server manages authorized users who can access files as access authority information.

With this technology, if a person who can access files and set/change file access permissions changes the access permission information to the files for the purpose of illegally taking them outside (for example, if an external third party (e.g., added to a person) can easily take files out of the organization, making it difficult to detect. Even if system administrators can change access permissions after the fact, it may be too late after the files have been leaked.

SUMMARY OF THE INVENTION It is an object of the present invention to provide an information processing apparatus, an information processing method, and an information processing program capable of immediately detecting unauthorized access to a protected file. .

An information processing apparatus according to an embodiment of the present invention includes: an access authority acquisition unit that acquires access authority information including information of an authorized person corresponding to a protected file; whether to transmit release information for releasing the protection of the file and permitting access to the terminal based on the set illegal condition storage unit, the user identification information for identifying the user received from the terminal, and the access authority information; an access control unit for determining whether or not access is unauthorized, and determining whether or not the access is unauthorized based on the set unauthorized condition when the access authority information is set or when the file is accessed by the terminal. and a notification unit that notifies an administrator terminal if it is determined to be unauthorized, wherein the unauthorized condition includes a condition for setting the access authority information by the terminal, and the notification unit When the authority information is set, the setting of the access authority information is not permitted if it is determined that the access is unauthorized based on the unauthorized conditions .

Embodiments of the present invention provide an information processing device, an information processing method, and an information processing program capable of immediately detecting unauthorized access to a protected file.

1 is a configuration diagram showing an example of the configuration of an access control system using an information processing apparatus according to this embodiment; FIG. FIG. 4 is a diagram showing an example of setting of access authority information by a sender terminal; FIG. 5 is a diagram showing an example of an illegality condition registered in an illegality condition storage unit; The figure which shows an example of the flow at the time of detecting an unauthorized access in the information processing method which concerns on this embodiment.

An embodiment of the present invention will be described below with reference to the accompanying drawings.
FIG. 1 is a diagram showing an example of the configuration of an access control system 100 using an information processing device 10 according to this embodiment.

First, the overall configuration will be described.
The access control system 100 is a system that controls access to a file by authenticating a terminal of a user to whom an access right to a protected file is set by the information processing apparatus 10 (management server).

The access control system 100 comprises an information processing device 10 , a sender terminal 11 , a receiver terminal 12 and an administrator terminal 20 .

The information processing device 10 and the sender terminal 11, which is the terminal that sends the file to the recipient terminal 12, are connected via a network so as to be communicable. The information processing device 10 and the recipient terminal 12, which is the terminal that receives the file from the sender terminal 11, are communicably connected via a network. The information processing apparatus 10 and an administrator terminal 20, which is the terminal of the administrator of this system, are connected via a network so as to be able to communicate with each other.

The sender terminal 11 is a terminal that protects a file by setting an authorized person to access (open and view the file) a file created or held by the terminal.

The sender terminal 11 has an access authority setting section 13 . The access authority setting unit 13 sets access authority information including information of users who are granted access authority to files. Information on users to whom access rights are granted to files can be set by identification information that can uniquely identify users, and is set by e-mail addresses corresponding to users, for example. In addition, as the information of the user who is granted access rights to the file, the telephone number of the user's mobile device such as a telephone or smartphone, identification information for identifying each mobile device, or the file It may be set by authentication application information that operates within the receiving recipient terminal 12 .

In addition, the access authority information includes various control operations when a user who has been granted access authority operates a file (for example, permission to extract a raw file in a state where the file is unencrypted, editing of the file, overwrite saving, etc.). , printing, copying, etc.) may be included.

When access authority information is set for a file, the access authority setting unit 13 protects the file by password lock, encryption processing, or the like so that only users who have release information can access the file. The access authority setting unit 13 generates release information for releasing file protection, specifically, a password for releasing password lock and a decryption key for decrypting an encrypted file.

The sender terminal 11 transmits to the information processing apparatus 10 access authority information set for the file and release information for releasing and accessing the protected file. The sender terminal 11 transmits, to the information processing apparatus 10, identification information (terminal ID, user ID, etc.) for identifying the terminal itself, setting time of the access authority information, position information of the terminal, and the like.

FIG. 2 is a diagram showing an example of setting of access authority information by the sender terminal 11. As shown in FIG. The users to whom you give access to the files are configured with email addresses. In FIG. 2, three users "xxx@aaa.co.jp", "yyy@bbb.co.jp", and "zzz@kensaku.co.jp" are granted access rights. In addition, as the access authority information, it is set to be selectable whether or not to restrict the control operation of overwrite saving, printing, and copying of the file.

The sender terminal 11 transmits, as access authority information, the information of the user who is permitted to access and the setting of the control operation to the file. At this time, the file is protected by encryption processing or the like in the access authority setting unit 13 , and release information for releasing the protection is transmitted to the information processing device 10 .

After being stored in the information processing apparatus 10 , the access authorization information and the access authorization information of the control operation can be changed by accepting a setting change command from the sender terminal 11 .

A file protected by the sender terminal 11 is sent to the receiver terminal 12 . A file is sent from the sender terminal 11 to the receiver terminal 12 by attaching it to an e-mail. Also, the transfer of files from the sender terminal 11 to the receiver terminal 12 is not limited to the method via e-mail. A method of recording and sending file data to the recipient terminal 12 via a storage medium may also be used.

Further, when a file is sent from the sender terminal 11 to the receiver terminal 12 using e-mail, there is no need for the user to set the access authority information in advance. The access authority information may be automatically generated with the e-mail addresses of the destinations (TO, CC, BCC) set in . In this case, the e-mail is sent to the recipient terminal 12 with a new protected file attached instead of the attached file. At this time, the automatically generated access authority information and release information for releasing protection of the file are transmitted to the information processing apparatus 10 .

The recipient terminal 12 is a terminal that receives the protected file from the sender terminal 11 and accesses (views) the file, and has an identification information transmission section 19 and a release information acquisition section 18 .

The identification information transmission unit 19 transmits identification information including the mail address of the user of the recipient terminal 12 to the information processing device 10 when accessing the protected file. When the information processing apparatus 10 authenticates the user using the received identification information and determines that the user is permitted to access the file, release information for releasing protection of the file is processed. Sent from device 10 .

The release information acquisition unit 18 acquires release information (a password or a decryption key for an encrypted file) acquired from the information processing device 10 . The receiver terminal 12 can access the file by releasing the protection of the file according to the release information. If the release information acquisition unit 18 cannot acquire the release information, the protection of the file cannot be released and the file cannot be accessed.

The information processing apparatus 10 according to the embodiment is a management server that acquires access authority information from the sender terminal 11, authenticates the user based on the user identification information transmitted from the receiver terminal 12, and controls access. Then, the file access authority information set by the user is collated with preset illegality conditions, and if it is determined to be illegal, the manager terminal 20 is notified.

A specific configuration of the information processing device 10 according to the embodiment will be described.
The information processing device 10 includes an access authority acquisition unit 14 , an illegal condition storage unit 15 , an access control unit 16 and a notification unit 17 .

It should be noted that the function of each unit constituting the information processing apparatus 10 may be realized by executing a predetermined program code using a processor. It may be implemented by hardware processing, or may be implemented by combining software processing and hardware processing.

The access authority acquisition unit 14 acquires from the sender terminal 11 the access authority information including the information of the access authorized person (e-mail address of the user to whom the access authority is granted) corresponding to the file protected in the sender terminal 11. do. The access authority acquisition unit 14 stores access authority information in association with identification information that identifies each file. Also, release information for releasing the protection of the file received from the sender terminal 11 is stored in association with the file.

Also, the access authority acquisition unit 14 acquires identification information of the sender terminal 11 for which access authority information is to be set. When the setting of the access authority information is changed by the sender terminal 11, the changed access authority information is saved.

The illegal condition storage unit 15 stores in advance inappropriate access conditions for files as illegal conditions. Inappropriate access conditions mean access conditions intended to intentionally use files outside the organization, which are not assumed during normal file access operations.

As an illegal condition, an inappropriate condition is set as an access authority information setting transmitted from the sender terminal 11 and stored in the access authority acquisition unit 14. For example, a private domain used for personal e-mail is set as a condition. For example, setting an e-mail address including . Also, as an illegal condition, an inappropriate access condition to a file in the sender terminal 11 or the recipient terminal 12 is set as a condition. be. It should be noted that it is possible to set a plurality of conditions as fraudulent conditions.

FIG. 3 is a diagram showing an example of fraudulent conditions registered in the fraudulent condition storage unit 15. As shown in FIG.
In Fig. 3, four illegal conditions are set, and if an e-mail address including a private domain used for personal e-mail is added to the authorized users, an e-mail with an external domain for a file in a specific folder X It is set when the address is added to the authorized users.

Furthermore, file access of the terminal outside of 9:00 to 24:00, which is assumed to be working hours, is set as an unauthorized access as an unauthorized condition. Furthermore, a case where the location information of the accessed terminal is outside a predetermined range (for example, outside the premises of the workplace) is set as an illegal condition. In this case, if any one of the conditions is met, it is determined as an unauthorized access state.

When the recipient terminal 12 accesses a file, the access control unit 16 accepts user identification information that identifies the user from the recipient terminal 12 and compares it with the information of the acquired access permitter to authenticate the user. . The user identification information that identifies the user includes the email address of the user corresponding to the recipient terminal 12 . The access control unit 16 may acquire the access time when the recipient terminal 12 accesses the file, the position information of the terminal, and the like.

The access control unit 16 determines whether or not the e-mail address of the user corresponding to the acquired recipient terminal 12 is included in the access authorized persons in the access authority information stored in association with the file. determines whether or not the user of the recipient terminal 12 has valid access authority to the file, and determines whether or not to transmit to the recipient terminal 12 release information for releasing protection of the file and permitting access. judge.

Specifically, if the e-mail address of the user corresponding to the recipient terminal 12 is included in the e-mail address of the authorized person set in the access authority information, the user of the recipient terminal 12 is authorized. Authenticate as an access authority. Authentication will be inconsistent if it is not included in the authorized person's email address. User authentication may be performed by one-time password authentication, SAML authentication, AD authentication, or a combination thereof. In addition, the telephone number of a mobile device such as a telephone or smartphone owned by the user corresponding to the recipient terminal 12, the identification number for identifying each of the mobile devices, or the recipient terminal 12 that receives the file User authentication may be performed using the operating authentication application information.

If the authentication matches, the access control unit 16 approves access to the file and transmits release information corresponding to the file to the recipient terminal 12 . On the other hand, if the authentication does not match, the file access permission is not granted and the release information is not sent.

The notification unit 17 determines whether or not the access is unauthorized based on an unauthorized condition when the access authority information is set or when the file is accessed by the terminal. 20 to that effect.

Specifically, when the access authority information is set (or changed) in the sender terminal 11, the notification unit 17 compares it with the illegal conditions stored in the illegal condition storage unit 15, and confirms that the illegal conditions are met. If so, it is determined as unauthorized access. If it is determined to be unfair, the manager terminal 20 is notified to that effect.

At this time, the notification unit 17 notifies the administrator terminal 20 of the target file name, terminal information (mail address, IP address, location information, etc.) of the sender terminal 11, access time, and the like. In addition, the notification unit 17 disallows setting by the access authority information in the sender terminal 11 . On the administrator terminal 20, information such as terminal information of the sender terminal 11 for which the disapproval is set is displayed so that the administrator can check it. In this case, after notifying the administrator terminal 20 of an inappropriate change in access authority, the notification unit 17 receives an approval notification to permit the setting from the administrator terminal 20 that has confirmed the change information. You may permit the setting change of access authority information.

As a result, an inappropriate change in access authority is immediately detected at the administrator terminal 20, and setting of access authority information is prevented. Furthermore, it is possible to identify the terminals involved in inappropriate access.

Further, when the sender terminal 11 or the receiver terminal 12 accesses the file, the notification unit 17 compares the file with the illegal conditions stored in the illegal condition storage unit 15, and if the illegal conditions are met, the file is illegal. Determined as access. Also, if it is determined to be illegal, the manager terminal 20 is notified to that effect. At this time, the notification unit 17 notifies the administrator terminal 20 of the terminal information (mail address, IP address, location information, etc.) of the sender terminal 11 or recipient terminal 12 . At this time, access to the file by the sender terminal 11 or receiver terminal 12 is not permitted.

Further, even if the notification unit 17 permits the access of the recipient terminal 12 when the notification unit 17 receives an approval notice to permit access from the administrator terminal 20 after notifying the administrator terminal 20 of inappropriate access. good.

As a result, inappropriate access is immediately detected at the administrator terminal 20, and inappropriate access is prevented. In addition, inappropriately accessed terminals can be identified.

The operation of the information processing apparatus 10 according to this embodiment will be described.
FIG. 4 is a diagram showing an example of the flow when detecting unauthorized access in the information processing method according to the present embodiment (see FIG. 1 as needed).

The unauthorized condition storage unit 15 presets an inappropriate access condition for a file as an unauthorized condition (S10).

The access authority acquisition unit 14 acquires access authority information including information of an access authorized person corresponding to a file protected in the sender terminal 11 from the sender terminal 11 (S11).

When the access authority information is set, the notification unit 17 collates the setting of the access authority information with the illegality condition, determines that it is illegal when the illegality condition is met, and notifies the administrator terminal 20 ( S12: YES, S13).

Then, the notification unit 17 disallows the setting by the access authority information in the sender terminal 11 (S14).

On the other hand, the notification unit 17 permits the setting of the access authority when the setting of the access authority information does not match the illegality condition (S15).

As described above, according to the information processing apparatus 10 according to the present embodiment, the change of the access authority information to the protected file is collated with the preset unfair conditions, and based on the collation result, the administrator terminal 20 to immediately detect unauthorized access to protected files.

It should be noted that the program executed by the information processing apparatus 10 is provided by being preliminarily incorporated in a storage circuit such as a ROM. Alternatively, this program may be stored in a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD, flexible disk, etc. as a file in an installable format or an executable format. may Also, the program executed by the information processing apparatus 10 may be stored in a computer connected to a network such as the Internet, downloaded via the network, and provided.

While several embodiments of the invention have been described, these embodiments have been presented by way of example and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other forms, and various omissions, replacements, and modifications can be made without departing from the scope of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are included in the scope of the invention described in the claims and equivalents thereof.

DESCRIPTION OF SYMBOLS 10... Information processing apparatus (management server) 11... Sender terminal 12... Recipient terminal 13... Access authority setting part 14... Access authority acquisition part 15... Unauthorized condition storage part 16... Access control part 17 ... notification unit, 18 ... release information acquisition unit, 19 ... identification information transmission unit, 20 ... administrator terminal, 100 ... access control system.

Claims (5)

an access authority acquisition unit that acquires access authority information including information of an authorized person corresponding to the protected file;
an illegal condition storage unit that presets an inappropriate access condition for a file as an illegal condition;
An access control unit that determines whether or not to transmit release information for releasing protection of the file and permitting access to the terminal based on the user identification information for identifying the user received from the terminal and the access authority information. When,
When the access authority information is set or when the file is accessed by the terminal, it is determined whether or not the access is illegal based on the set illegal condition, and if it is determined to be illegal, management is performed. and a notification unit that notifies the user terminal ,
The illegal conditions include conditions for setting the access authority information by the terminal,
When the access authority information is set, the notification unit does not permit the setting of the access authority information if it is determined that the access is unauthorized based on the unauthorized condition.
An information processing device comprising: The notification unit notifies the administrator terminal of information of the terminal that set the access authority information or information of the terminal that accessed the file;
The information processing apparatus according to claim 1 , characterized by: The notification unit permits the setting of the access authority information when receiving a consent notification permitting the setting from the administrator terminal.
3. The information processing apparatus according to claim 1, wherein: retrieving access rights information including the information of the authorized person corresponding to the protected file;
presetting an inappropriate access condition for the file as an illegal condition;
determining whether or not to transmit to the terminal release information for releasing protection of the file and permitting access based on the user identification information for identifying the user received from the terminal and the access authority information;
When the access authority information is set or when the file is accessed by the terminal, it is determined whether or not the access is illegal based on the set illegal condition, and if it is determined to be illegal, management is performed. and notifying the terminal of the user ;
The illegal conditions include conditions for setting the access authority information by the terminal,
When the access authority information is set, the setting of the access authority information is not permitted if it is determined that the access is unauthorized based on the unauthorized condition.
An information processing method characterized by: the computer,
the ability to retrieve access rights information, including information about the authorized person corresponding to the protected file;
A function to preset inappropriate access conditions for files as illegal conditions,
A function of determining whether or not to transmit to the terminal release information for releasing protection of the file and permitting access based on the user identification information for identifying the user received from the terminal and the access authority information;
When the access authority information is set or when the file is accessed by the terminal, it is determined whether or not the access is illegal based on the set illegal condition, and if it is determined to be illegal, management is performed. function as a function to notify the user terminal,
The illegal conditions include conditions for setting the access authority information by the terminal,
When the access authority information is set, the setting of the access authority information is not permitted if it is determined that the access is unauthorized based on the unauthorized condition.
An information processing program characterized by:

Images