TWI402714B - System and method for controlling authorities of files - Google Patents

Description

Document authority control system and method

The present invention relates to a document management system and method, and more particularly to a system and method for managing the status of a document.

With the development of computer software technology, the frequency of using software to handle various transactions has become more frequent. Any drawing, word processing, computer-aided design or financial management can be handled by software, which greatly improves work efficiency and reduces time and labor costs.

Since the use of computer software to handle various transactions is becoming more frequent, how to protect documents has become an important issue. The so-called "protected document", that is, by means of encryption or permission setting of the document, so that the user who does not have permission to open the document cannot see or modify the content of the document.

However, the known document protection mechanism has the disadvantage of being too singular, and it is difficult for a user to intuitively distinguish the difference between the locks of different identities. For example, simply locking a document, all users can only open and browse the document, but can not modify it, can only be unlocked by requesting an administrator, and modify the document.

In view of the above, it is necessary to provide a document authority control system and method, which can set different locking states of documents, and different users' operation authority on documents, and can dynamically change between each locking state, thereby effectively protecting documents.

The document authority control system is installed in a computer, and the computer includes a storage device for storing various types of documents, and is also used for storing identification data of registered users. The document authority control system includes: a reading device, configured to read identification information input by the user, verify whether the user has a legal identity according to the identification information and the identification data, and receive an operation performed by the user for the document a request management module for setting different types of locked states of the document and different types of locked states, the document is allowed to be executed, and the locked state of the document is changed according to the operation of the document by the user; and the verification module It is used to confirm the current locked state of the document, and to determine whether the operation request issued by the user is legal according to the identity of the user and the current locked state of the document.

The document permission control method includes the following steps: setting different types of locked states of the document and operations of the document allowed to be performed in different types of locked states; reading the identification information input by the user; and according to the read identification information Verify that the user has a legal identity; if the user has a legal identity, allow the user to log in, and receive an operation request from the user for the document; confirm the current lock status of the document; according to the identity of the user and the current lock of the document The state determines whether the operation request of the user is legal; if it is a legal operation request, the user is allowed to perform the operation; if it is an illegal operation request, the user is denied to perform the operation; and the locking state of the document is changed according to the operation of the document by the user.

Compared with the prior art, the document permission control system and method can set different locking states of the document, and different user operations rights on the document, and can dynamically change between the locked states without human resources. Constantly lock and unlock, thus effectively protecting the document.

FIG. 1 is a functional block diagram of a preferred embodiment of the document authority control system of the present invention. The document authority control system (hereinafter referred to as "the system") 2 of the present invention is installed in a computer 1 and implemented by the computer 1. The computer 1 further includes a storage device 3 for storing the document 30, the identification material 32 and other materials.

In this embodiment, the computer 1 includes at least one central processing unit, a computer readable storage device, and other peripheral devices (not shown in FIG. 1) for performing its functions, such as keyboards, mouse, and the like. Etc., and between each other, an electronic signal with a specific physical quantity is used to record or transmit information. Each device and module included in the system 2 is a program module stored in the readable storage device of the computer 1. After being read by the central processing unit, the operation and electronic signals of the related hardware can be performed. Pass to achieve its function.

In the present embodiment, the document 30 can be any computer readable piece of data that can be stored on any type of computer readable recording medium such as a hard disk, a compact disc, or a magnetic disk. The content of the document 30 may be, but is not limited to, different forms of materials such as text data or video materials.

The system 2 includes a reading device 20, a state management module 22, an inspection module 24, and a process management module 26.

The reading device 20 is configured to read the identification information input by the user, check whether the user has a legal identity according to the identification information and the identification data 32 in the storage device 3, and receive an operation request from the user for the document 30. The user can make a request using an input method such as, but not limited to, a mouse, keyboard, or voice recognition. The identification information includes: a username, a password, and the like. The operation request includes a request to open, copy, download, edit the document 30, and the like.

The verification of the legal identity of the user includes: determining whether the user is a registered user of the system 2, and if the user is a registered user, allowing the user to log in to the system 2; if the user is not a registered user, the login is denied, and the user is prompted to submit the registration application. The reading device 20 is further configured to receive an operation request issued by the user for the document 30.

The state management module 22 is configured to set different types of locked states of the document 30, and operations in which the document is allowed to be executed in different types of locked states. In the present embodiment, the locked state of the document 30 includes three types (as shown in FIG. 3): a general locked state 300, a forced locked state 310, and a system locked state 320.

Among them, the document 30 in the general locked state 300, the user who can log in to the system 2 opens, copies the document 30, changes the name of the document 30, and performs other operations except editing the document 30, and the editing of the document 30 is limited to the The author of the document 30; the document 30 in the forced lock state 310 allows only the author of the document 30 to open, edit, copy, download, etc. the document 30, and other users who log in to the system 2 cannot Any operation is performed; when the document 30 is submitted and enters the review process, the locked state of the document 30 is the system locked state 320, and no one can modify the document 30 in the locked state, and only the approver can open the document. 30 for review. In addition, the system administrator can perform various operations on the document 30 in the general lock state 300 and the forced lock state 310, and can forcibly release the system lock on the document 30 according to the actual situation, so that the document 30 is allowed to be edited by the author.

The state management module 22 is further configured to transition the locked state of the document 30 according to the operation of the document 30 by the user. For example, if the document 30 is in the general locked state 300 prior to performing the operation and then the author of the document 30 edits the document 30, the document 30 will transition from the normal locked state 300 to the forced locked state 310. For details, refer to the detailed description below with respect to FIG. 3.

The verification module 24 is configured to confirm the current locked state of the document 30, and determine whether the operation request issued by the user is legal according to the identity of the user and the locked state of the document. If the operation request is legal, the user is allowed to perform the operation; if the operation request is illegal, the user is denied the operation.

For example, the verification module 24 determines whether the user is the author of the document 30, and if it is the author of the document 30, allows it to perform operations such as editing the document 30.

If the document 30 is in the general locked state, the operation request of the user logging in to the system 2 is to open the document 30, the verification module 24 can determine that the operation request is a legal operation request, and if the user's operation request is to edit the document 30 The content, and the user is not the author of the document 30, the verification module 24 can determine that the operation request is an illegal operation request and reject the user to perform the operation.

In addition, the verification module 24 is also used to confirm whether the document 30 needs to be reviewed.

The process management module 26 is configured to set the reviewer and the review process of the document 30 when the document 30 needs to be reviewed, and start the set review process after the user submits the document 30, so that the document 30 enters the system lock. State 320.

2 is a flow chart of a preferred embodiment of the document authority control method of the present invention. First, in step S2, the state management module 22 sets the different types of locked states of the document 30, and the operations in which the document is allowed to be executed in different types of locked states. For example, the locked state may include a general locked state 300, a forced locked state 310, and a system locked state 320, wherein, in different locked states, the document allowing the operations to be performed may refer to the detailed description of the state management module 22 for FIG. .

In step S4, the reading device 20 reads the identification information input by the user, including the user name, password, or email address.

In step S6, the reading device 20 checks whether the user has a legal identity based on the read identification information and the identification data 32 in the storage device 3.

If the user has a legal identity, the user is allowed to log into the system 2. In step S8, the reading device 20 receives an operation request issued by the user for the document 30, and the operation request may include an operation of opening, copying, and editing the document 30. request.

In step S10, if the user does not have a legal identity, the user is denied login, prompting him to submit a registration application, and ending the process.

In step S12, the verification module 24 confirms that the document 30 is currently in a locked state, and the lock state of the document 30 includes three types: a general lock state 300, a forced lock state 310, and a system lock state 320. A document 30 that is in a different locked state, which allows users of different identities to perform different operations.

In step S14, the verification module 24 determines whether the operation request of the user is legal according to the current lock state of the document 30 and the identity of the user. For example, in the document 30 under the general lock state 300, all users who log in to the system 2 can open, copy the document 30, change the name of the document 30, and other operations except editing the document 30; the document in the forced lock state 310 30, only the author himself is allowed to open, edit, copy, etc.; in the document 30 under the system lock state 320, only the pre-set author can open the document 30 for review, and no one can Modify the contents of the document 30.

Step S16, if the verification module 24 determines that the operation request of the user is illegal, for example, the user is not the author of the document 30, but the operation requests to edit the content of the document 30, the verification module 24 rejects the user to perform the operation, and ends. This process.

If it is a legitimate operation request, the verification module 24 allows the user to perform the operation in step S18. For example, the author edits the document 30.

In step S20, the verification module 24 records the operation information of the user. For example, the user's personal information, as well as the time of the operation of the document 30 and the content of the operation.

In step S22, the state management module 22 changes the locked state of the document 30 according to the user's operation on the document 30. For example, when the author of the document 30 edits the document 30 at step S18, the locked state of the document 30 transitions from the normal locked state 300 to the forced locked state 310, wherein transitions between different types of locked states of the document 30 may be Reference is made to the detailed description of FIG. 3 below.

In step S24, the verification module 24 confirms whether the document 30 needs to be reviewed.

In step S26, if the document 30 needs to be reviewed, the user uses the process management module 26 to set the reviewer and review process of the document 30. If the document 30 does not need to be reviewed, the process ends.

In step S28, the user submits the document 30 to start the set review process, and the locked state of the document is changed to the system lock state 320.

As shown in FIG. 3, it is a flowchart of a document lock state transition of the document authority control method of the present invention. When the document 30 is in the general locked state 300, all users who log in to the system 2 can open, copy the document 30, change the document 30 name, or perform other operations than editing the document 30. When the author of the document 30 edits the document 30, the document 30 enters the forced lock state 310. In the forced lock state 310, only the author himself is allowed to open, edit, copy, etc. (steps) S30).

When the author completes editing of the document 30, the document 30 transitions from the forced lock state 310 to the normal lock state 300 (step S32).

When the author completes the editing of the document 30 in the forced lock state 310, and submits the updated document 30 to initiate the review process preset by the process management module 26, the locked state of the document 30 is changed to the system. In the locked state 320, in the system locked state 320, only the pre-set collaborator can open the document 30 for review, and the remaining users cannot open and edit the document 30 (step S34). The document 30 can also be submitted by the author and initiate the review process in the normal locked state 300, thereby causing the locked state of the document 30 to transition to the system locked state 320 (step S36).

If the approver considers that the document 30 is unqualified, the review process can be aborted, and the document 30 is returned to the author for modification, and the locked state of the document 30 is changed to the forced lock state (step S38).

If all of the pre-set approvers believe that the document 30 is qualified, the review process ends and the locked state of the document 30 is changed from the system lock state to the normal lock state (step S40).

In addition, the system administrator's operation on the document 30 is not affected by its locked state, and the system administrator can perform various operations on the document 30 in the normal lock state 300 and the forced lock state 310, and can release the document 30 according to the actual situation. The system locks the state so that the author of the document 30 can edit the document 30 and the like.

The present invention has been described above in terms of preferred embodiments, and is not intended to limit the invention. The scope of the present invention is defined by the scope of the appended claims, unless otherwise claimed.

computer. . . 1

Document permission control system. . . 2

Reading device. . . 20

State management module. . . twenty two

Inspection module. . . twenty four

Process management module. . . 26

Storage device. . . 3

Documentation. . . 30

General lock status. . . 300

Force lock status. . . 310

System lock status. . . 320

Identify the information. . . 32

BRIEF DESCRIPTION OF THE DRAWINGS Figure 1 is a functional block diagram of a preferred embodiment of the document access control system of the present invention.

2 is a flow chart of a preferred embodiment of the document authority control method of the present invention.

FIG. 3 is a flowchart of a document lock state transition of the document authority control method of the present invention.

Claims (8)

A document authority control system, the system is installed in a computer, the computer includes a storage device, and the storage device is configured to store various types of documents, wherein the storage device is further configured to store the identification data of the registered user, the document permission control system The method includes: a reading device, configured to read the identification information input by the user, verify whether the user has a legal identity according to the identification information and the identification data, and receive an operation request issued by the user for the document; the state management module, Used to set different types of locking states of the document, and the operations allowed by the document in different types of locked states, and to change the locking state of the document according to the operation of the document by the user; and the verification module for confirming the The current lock status of the document, and determine whether the operation request issued by the user is legal according to the identity of the user and the current lock status of the document. The document authority control system of claim 1, wherein the locked state of the document comprises: a general lock state, a forced lock state, and a system lock state. The document authority control system of claim 1, wherein the system further comprises: a process management module, configured to set a document reviewer and an audit process, and initiate the set review process after the user submits the document. . The document authority control system of claim 1, wherein the verification module is further configured to allow the user to perform the operation when determining that the operation request of the user is legal, and reject the operation when the operation request of the user is determined to be illegal. The user performs this operation. A document authority control method, the method comprising the steps of: setting a different type of locking state of a document and an operation of allowing the document to be executed in different types of locked states; reading the identification information input by the user; and identifying according to the reading The information verifies whether the user has a legal identity; if the user has a legal identity, the user is allowed to log in, and receives an operation request from the user for the document; confirms the current locked state of the document; according to the identity of the user and the document The current lock state, determining whether the operation request of the user is legal; if the operation request is legal, the user is allowed to perform the operation; if the operation request is illegal, the user is denied to perform the operation; and the lock state of the document is changed according to the operation of the document by the user. . For example, in the document permission control method described in claim 5, the method further includes the following steps: if the user does not have the legal identity, the user is denied the login, and the user is prompted to submit the registration application. The document permission control method of claim 5, wherein the locked state of the document comprises: a general lock state, a forced lock state, and a system lock state. The document authority control method according to claim 5, wherein the method further comprises the following steps after the locking state of the document is changed: confirming whether the document needs to be audited; and setting the document when the document needs to be audited; Document reviewer and review process, and submit this document to initiate the set review process.