WO2000013097A1

WO2000013097A1 - System for access control of information

Info

Publication number: WO2000013097A1
Application number: PCT/JP1998/003844
Authority: WO
Inventors: Chikako Tsuchiyama; Hisashi Toyoshima; Yukiko Kumagai
Original assignee: Hitachi, Ltd.
Priority date: 1998-08-28
Filing date: 1998-08-28
Publication date: 2000-03-09

Abstract

An access control system for information provision through the Web which can meet the attribute conditions of a user minutely and, further, can reduce the coding load in setting and changing the access control and the communication load during the access control. When an interoffice WWW server (112) requests a mark management server (101) to send a mark, the mark management server (101) confirms the requester and searches or generates a mark of identical access conditions and transmits the mark. The URL of the linked site and the access conditions of the linked site are buried in the mark, which is attached to the index page of the Web page by the interoffice WWW server (112). When the index page of the interoffice Web is referred to by an employee terminal (121), the access to the linked site can be controlled by comparing and collating the access conditions of the mark with the personal attribute information such as the position by the employee terminal (121).

Description

Description System for information access control

The present invention relates to access control when a user accesses information on a network.

^ Dani

Scenic technique

In recent years, a WWW system that uses a server program and a browser system as a means to disclose and transmit information to multiple users using a network such as the Internet has been developed. Widespread.

The use of a database as a method for controlling access to information in such a network is being considered. For example, a method is considered in which user IDs and the like are registered for each file to be accessed, and access is controlled by checking the presence or absence of the IDs on the ID management data base. Also, for example, in Japanese Patent Application Laid-Open No. 9-192697, in order to determine access rights to information and manage access class information, an identifier (URL) of a specific information resource is specified as a specific access class. Uses a relational database that relates and classifies.

The anchor mark, which connects to the link when clicked, is already widely used.

In the above-mentioned conventional WWW system, it is assumed that a connection is made to a database having access condition information, so that a communication load is inevitable. In addition, access control settings and changes for each information provider on the intranet, etc. Furthermore, the coding load is increased. Therefore, if the conventional system attempts to provide detailed information corresponding to the user's attributes, the load on each information provider increases, and it is safe to use safe information that no problem will occur if any of the employees access it. It is the current situation of many companies flowing on the net o Disclosure of invention

A first object of the present invention is to provide an access control system that reduces the communication load on a network as compared with a conventional system. A second object is to change access control settings in the above system. It is an object of the present invention to provide an access control system that can reduce the load on the information provider side and other information and can respond to user attribute conditions in detail.

In order to achieve the above two objects, the present invention provides at least one client terminal, at least one WWW server that provides information in response to a request from the client terminal, the client terminal and the WWW server. At least one mark management server that manages marks used in <and that has a visually confirmable property and access control means is interconnected via a communication network,

An index page of a web page provided by the WWW server includes a mark sent from the mark management server, and the mark management server stores a mark image for storing the existing mark image. A mark management DB that manages the status of mark delivery and the mark delivery status.If a mark delivery request is received from the WWW server, if the mark with the same access conditions is in the mark image DB, the corresponding mark is sent. If not, a means for sending a new access condition mark is provided, and the client terminal refers to information on a Web page provided by the WWW server. At this time, the system may be configured to include means for comparing and judging the access condition contained in the mark such as the index page of the Web page with the attribute condition of the user. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram showing a schematic configuration of an access control system to which an embodiment of the present invention is applied, FIG. 2 is a diagram showing a hardware configuration of a mark management server shown in FIG. 1, and FIG. Diagram showing the hardware configuration of the company WWW staff terminal shown in the figure, Fig. 4 shows the hardware configuration of the company WWW server shown in Fig. 1, and Fig. 5 shows the hardware of the employee terminal shown in Fig. 1. Fig. 6 shows the configuration of the mark image DB shown in Fig. 2, Fig. 6 shows the data example of the mark management DB shown in Fig. 2, and Fig. 6 shows the data example of the mark management DB shown in Fig. 2. Fig. 8 shows a data example of the personal attribute information management DB shown in Fig. 2, Fig. 9 shows a data example of mark embedding information, Fig. 10 shows a mark payout system using marks Figure 11 explains the operation of the access control system using a mark. BEST MODE FOR CARRYING OUT THE because of the flow diagram der o invention

Hereinafter, embodiments of the present invention will be described with reference to the drawings. Here, the details of the present invention will be described using an example of information provision on a corporate intranet.

FIG. 1 shows a schematic configuration of an access control system of the present invention. The access control system according to the present embodiment includes a mark administrator 100, which manages access control to an in-house WWW, and an in-house WW W staffer, who provides information to the company, 110 1 to 110 n (hereinafter, simply referred to as In-house WWW staff 1 1 0 This is a system used by employees 1201 to 120n (hereinafter simply referred to as employees 120), and as shown in FIG. 1, a mark management server 101, In-house WWW staff terminal 1 1 1 1 to 1 1 1 n (hereinafter simply referred to as in-house WWW staff terminal 1 11 1) and in-house WWW server 1 1 2 1 to: L 1 2 n (hereinafter simply referred to as in-house WWW server 1 12) and employee terminals 1 2 1 1 to 1 2 1 n (hereinafter also simply referred to as employee terminals 1 2 1) and power ^ via a communication network 130 such as a corporate intranet. And are connected to each other. Note that the mark here refers to image data with high visibility among multimedia data (image data, audio data, video data, etc.), and if the access condition of the link destination is met, the mark is regarded as the link destination. It indicates a mark that has the function of connecting. That is, the access control function is added to the conventional anchor mark.

The mark management server 101 is a mark management server that is controlled by the system administrator 100 and controls access within the corporate intranet. The mark management server 101 sends a mark in response to a request from the company WWW staff 110. However, the image data up to now has no authenticity because it is easy to falsify or illegally copy, but the mark management server 101, which is one of the components of the present invention, By associating them with each other and managing them with the mark management DB 102 or the like described later, they also have the function of guaranteeing authenticity. In addition, personal attribute information of employees required as access conditions is managed by personal attribute information DB103, which will be described later. The company WWW staff terminal 111 is a terminal used by the company WWW staff 110. The company's WWW staff 110 uses the company's WWW staff terminal 1 111 to create a company-managed web page and exchange data with the mark manager 100 I do.

The company WWW server 1 1 10 is managed by the company WWW server 1 1 2. new When an internal Web page is created or information is updated or changed, the access conditions are set and a request is sent to the mark administrator 100 to send the mark. When an access is made from the employee terminal 121, an index page stored in an in-house web page DB 308 described later is transmitted. The transmitted index page is displayed on the employee terminal 121. Screen image 122 is an example of a screen image of the index page.

The employee terminal 1 2 1 is a terminal used by the employee 1 20. The employee 120 uses the employee terminal 122 to access the company Web and exchange data with the system administrator 100. In addition, personal attribute information as access conditions is managed using the employee terminal 121 or an ID card, and when it is changed, the updated information is transmitted from the system administrator 1001 to the employee terminal 122. Alternatively, the updated information may be put in the ID field.

FIG. 2 shows a hardware configuration of the mark management server 101. As shown in FIG.

As shown in FIG. 2, the hardware configuration of the mark management server 101 of the present embodiment includes a display device 201, an input device 202, a communication network interface 203, and mark image management. DB interface 204, mark management DB interface 205, personal attribute information management DB 206, storage device 207, central processing unit (CPU) 209, temporary storage device (Memory) 209 are connected to each other by power and bus 209. A mark image DB 210, a mark management DB 211, and a personal attribute information management DB 212 are connected as external storage devices. The display device 201 is used for displaying a message or the like to a system administrator 100 using the mark management server 101, and is configured by a CRT, a liquid crystal display, or the like. The input device 202 is used by the system administrator 100 using the mark management server 101 to input data, instructions, and the like, and includes a keyboard and a mouse.

The communication network interface 203 is an interface for exchanging data with the employee terminal 121 and the company WWW staff terminal 110 via the communication network 130.

The mark image DB interface 204 is an interface for exchanging data with the mark image DB 210. The mark image DB 210 manages data such as an existing mark image and access conditions in association with each other, and is, for example, as shown in FIG.

The mark management DB interface 205 is an interface for exchanging data with the mark management DB 211. The mark management DB 211 stores data such as the type of mark, expiration date of the mark, payout information of the mark, link information of the mark, and access conditions of the link of the mark. They are managed in association with each other, for example, as shown in Fig. 7.

The personal attribute information management interface DB 206 is an interface for exchanging data with the personal attribute information management DB 212. The personal attribute information management DB 221 manages data such as the ID, name, affiliation, and position of each employee in association with each other, for example, as shown in FIG.

The storage device 207 is used for permanently storing programs and data used in the mark management server 101 and the like, and includes a hard disk and a floppy disk.

The CPU 208 controls each part of the mark management server 101 in an integrated manner. Control and perform various arithmetic processing.

The memory 209 includes an operating system (hereinafter, also simply referred to as OS 209a), a mark management server program 209b, a mark creation program 209c, and a personal attribute information management program 209. A program, such as d, which is necessary for the CPU 208 to perform the above processing is temporarily stored.

Here, OS 209a is a program for implementing functions such as file management, process management, and device management in order to control the entire mark management server 101.

The mark management server program 209b is a company WWW staff terminal 1 1

When a request is made to send a mark from (1), the company checks the company's WWW staff 110 to determine whether or not to send the mark.If it is determined that the mark is to be sent, it is managed by the mark image DB 210. Searching for marks that match the access conditions with the mark for which the sending request was made from the marks that have been sent, managing the matching marks, updating the DB 211, and processing the company's WWW staff 1 This is a program for performing processing for sending the mark to 10. The mark image DB 210 and the mark management DB 211 ensure the authenticity of the mark by using a system that allows only those who have authority to update the mark.

The mark creation program 209 c is a program for embedding URL information of an access condition information access destination in a mark. The mark created in the mark creation program 209c is stored in the mark image DB210. The information to be embedded in the mark is, for example, as shown in FIG. The technology for embedding specific information in a mark is known as “digital watermarking”. The technology of “digital watermarking” is described on pages 100 to 107 of Nikkei Electronics, Inc. ing.

The personal attribute information management server program 209d performs updating processing of the attribute information of the employee 120, transmission processing of the personal attribute information to the employee terminal 121, and encryption of the personal attribute information at the time of the transmission processing. It is a program to be performed. The personal attribute information is stored in an ID card, an employee terminal, or the like.

FIG. 3 is a diagram showing a hardware configuration of the in-house WWW staff terminal 111. As shown in FIG.

The hardware configuration of the company WWW staff terminal 1 1 1 in this embodiment is

As shown in FIG. 3, a display device 301, an input device 302, a communication network interface 303, a storage device 304, a central processing unit (CPU) 305, The temporary storage device (memory) 303 is connected to each other by a node 300.

The display device 301 is a company WW that uses the company WWW staff terminal 1 1 1

It is used to display a message or the like on the person in charge W 110, and is composed of a CRT, a liquid crystal display, and the like.

The input device 302 is used by the company WWW staff 110 using the company WWW staff terminal 111 to input data, instructions, etc., and consists of a keyboard, mouse, etc. .

The communication network interface 303 is an interface for exchanging data with the in-house WWW server 112 and the mark management server 101 via the communication network 130.

The storage device 304 is used to permanently store programs and data used in the company's WWW staff terminal 111 and the like, and includes a hard disk and a floppy disk.

The CPU 305 controls the components of the in-house WWW staff terminal 111 in an integrated manner and performs various arithmetic processing. The memory 306 temporarily stores programs required for the CPU 305 to perform the above-described processing, such as the OS 306a and the web page creation program 306b.

Here, 0S306a is a program for implementing functions such as file management, process management, or device management in order to control the entire WWW staff terminal 111 in the company.

The web page creation program 306 b processes the web page created by the in-house WWW staff 110 and communicates with the in-house WWW server 112 to store the created web page in the web page DB 408 described below. It is a program for performing processing.

FIG. 4 is a diagram showing a hardware configuration of the company WWW server 112. As shown in FIG. As shown in FIG. 4, the hardware configuration of the in-house WWW staff terminal 111 of the present embodiment includes a display device 401, an input device 402, a communication network interface 403, and a web page DB interface 404. And a storage device 405, a central processing unit (CPU) 406, a temporary storage device (memory) 407, a power supply, and a bus 400. A web page DB 408 is connected as an external storage device. The display device 401 is used for displaying a message or the like to the company WWW staff 110 using the company WWW server 112, and includes a CRT, a liquid crystal display, and the like.

The input device 402 is used by an in-house WWW manager 110 using the in-house WWW server 112 to input data, instructions, and the like, and is composed of a keyboard and a mouse.

The communication network interface 403 is an interface for exchanging data with the employee terminal 121 and the company WWW staff terminal 111 via the communication network 130. The web page DB interface 404 is an interface for exchanging data with the web page DB 408.

The storage device 405 is used to permanently store program / data used in the company WWW server 112 or the like, and includes a hard disk, a floppy disk, and the like.

The CPU 406 controls the components of the in-house WWW server 112 in a centralized manner and performs various arithmetic processes.

The memory 407 temporarily stores programs necessary for the CPU 406 to perform the above-described processing, such as the OS 407a, the WWW server program 407b, and the mark acquisition program 407c.

Here, the OS 407a is a program for implementing functions such as file management, process management, and device management in order to control the entire in-house WWW server 112.

WWW server program 407 Communicates with the company's WWW staff terminal 1 1 1, stores the received Web page in the Web page DB 408, and processes the data from the employee terminal 1 2 1 using the browser program 506 b described later. When the web page is accessed, the program transmits the web page stored in the web page DB 408.

The mark acquisition program 407 c is a process in which the company WWW server 112 communicates with the mark management program 209 b to acquire a mark to be pasted on the index page of the web page, and the mark is stored in the index page. This is a program that performs the process of pasting to the.

FIG. 5 is a diagram showing a hardware configuration of the employee terminal 122.

As shown in FIG. 5, the hardware configuration of the employee terminal 1 21 of the present embodiment includes a display device 501, an input device 502, a communication network interface 503, a storage device 504, a central processing unit (C PU) 505 and temporary storage (Memory) 506 are connected to each other by a bus 504. When using an ID card, a card reader / writer 507 is connected.

The display device 501 is used to display a message or the like on the employee 120 using the employee terminal 121, and includes a CRT, a liquid crystal display, and the like.

The input device 502 is used by the employee 120 using the employee terminal 121 to input data, instructions, and the like, and includes a keyboard and a mouse.

The communication network interface 503 is an interface for exchanging data with the company WWW server 112 and the mark management server 101 via the communication network 130.

The storage device 504 is used for permanently storing programs and data used in the employee terminals 121 and the like, and is constituted by a hard disk, a floppy disk, or the like.

The CPU 505 controls the components of the employee terminal 121 in a centralized manner and performs various arithmetic processing.

The memory 506 temporarily stores programs necessary for the CPU 505 to perform the above processing, such as the OS 506 a, the browser program 506 b. Or the access control program 506 c. Is stored in

Here, OS506a is a program for implementing functions such as file management, process management, and device management in order to control the entire employee terminal 121.

The browser program 506 b is a program that allows the employee terminal 121 to communicate with the in-house WWW server 112 and download the Web page stored in the Web page DB 408. The access control program 506c is a mark created by the mark creation program 207c pasted on the index page of the web page downloaded to the employee terminal 121 by the browser program 506b. Access information is extracted from the information, and the employee's personal attribute information read from the employee terminal 1 is compared with the access information. Only when the access information matches, the link destination is extracted based on the URL of the link extracted from the mark. This is a program that performs the process of accessing Note that the employee's personal attribute information is transmitted in advance from the mark management server 101 and stored in the storage device 504 of the employee terminal 121 or stored in the ID card. Read it into the employee terminal 12 1 using 507, etc.

FIG. 6 is an example of data of the mark image DB210. The mark name, mark image, link destination access condition, etc. are stored in unified notation based on a certain notation standard. Update the mark image DB210 when creating a mark with a new access condition or changing the access condition of an existing mark.

FIG. 7 is an example of data in the mark management DB 211. NO 701, expiration date 702, payee name 704, payout URL 705, link URL 706, access condition of link 707, etc. Based on the notation, store them in unified form. The information required for dispensing these marks is included in the mark sending request from the company's WWW server 112 to the mark management server 101, and based on this information, the mark management server 101 Update the mark management DB 211 when dispensing marks. In Fig. 7, when the expiration date is not used for the mark, and when the system administrator 100 issues only one mark, etc., the corresponding items, such as the expiration date and mark type, are used. No need to manage No.

FIG. 8 is a data example of the personal attribute information management DB2112. ID 81, name 8002, affiliation 803, title, etc. 804, etc., are stored in a unified way based on a certain notation standard according to each employee. Update personal attribute information management DB2112 when personnel changes or when employees enter or leave the company. In addition, the access condition 603 of the link destination of the mark image DB 210, the access condition 707 of the link of the mark management DB 211, the position of the personal attribute information management DB 211, etc. 4 is the corresponding data, and the notation is unified.

FIG. 9 shows an example of information to be embedded in a mark, and shows an example of the mark E in FIG. In this example, the access condition 901 and the link destination URL 902, etc., in this case, E in the table indicates the headquarters. For example, if the access condition is higher than the section manager, the information to be embedded in the mark is “Y = K or B or E” (in this example, K indicates the section manager and B indicates the manager). List matching personal attributes with "or". Even for the same link (URL), different access control can be performed by attaching different access condition marks to different index pages.

Next, the operation of the access control system of the present embodiment will be described. FIG. 10 is a diagram for explaining a mark payout processing flow between the in-house WWW server 112 and the mark management server 101. First, the in-house WWW server 112 has a mark acquisition program 407. Then, a mark transmission request is transmitted to the mark management server 101 (step 1001). Note that this mark sending request not only requests the sending of the mark, but also includes information necessary for the mark payout as shown in FIG. 7 and used as a basis for setting the mark management DB 211. When the mark management server 101 receives the mark transmission request (step 1002), the request source is the official WWW. Check if the request is from the person in charge (step 1003). After confirmation, the mark management server 101 searches the mark management program 209b to determine whether the mark has the same access condition as the mark requested for transmission and whether the mark exists in the mark image DB 210 (step 1004). If there is no mark with the same access condition in the mark image DB 210, a new mark in which the new access condition is embedded is created by the mark management program 209b (step 1005). After the mark is obtained from the mark image DB 210 (step 1006), the URL information of the link destination is embedded in the mark by the mark management program 209b (step 1007). After the payout information of the mark is stored in the mark management DB 211 and the mark management information is updated (step 1008), the mark is transmitted to the in-house WWW server 112. The house WW W server 1 receiving the mark 12, the mark acquisition program 407 c, paste the mark on the index page of the company We b pages (step 1010) ₀

FIG. 11 is a diagram for explaining an access control processing method of a mark in the employee terminal 121. First, the employee 120 uses the browser program 506b of the employee terminal 121 to display the index page of the in-house web page to be referred to (step 1 101). When the mark on the index page is clicked, the access control program 506c of the employee terminal 121 recognizes the clicked mark (step 1102). After extracting the access information embedded in the mark (step 1103), the access control program 506c decrypts and reads the attribute information of the employee from the storage device 504 of the employee terminal 121 (step 1104). Access control program 506. Is the access of the mark The information and the attribute information are compared and collated (step 1105). If they match, the access control program 506c accesses the link based on the URL information of the link extracted from the mark (step 1106), and displays it on the employee terminal 122. Yes (Step 1 107). If they do not match, the linked information is not accessed (step 1108). Industrial applicability

As described above, the embodiment of the present invention has been described using the example of the corporate intranet. However, the scope of the present invention is not limited to the corporate intranet, but is generally used on the Internet. It can also be applied in providing information. For example, if a link collection page is provided on a website that provides information on the Internet, it may be desirable to consider the user's attribute conditions depending on the information content of the link destination. In this case, the mark of the present invention (here, the content level of the link destination and the URL of the link destination) are attached to the link collection page, and the attribute information (violence) is given to the user when using the link collection or in advance. Access control program (if the content level of the link destination embedded in the mark is out of the range of the tolerance level selected by the user, access the link destination) If you download, you can prevent users from accidentally accessing unnecessary pages. In addition, if the user sets attribute information such as hobbies and the access conditions embedded in the mark correspond to this, it can be used so that users can access pages that match the user's attribute conditions. It is. As described above, according to the present invention, by providing access control information to the mark itself, the editing action of the home page can be accessed. It is not necessary to set the access control information in the information itself, which makes it easy to set and change the access control corresponding to the user attribute. In addition, in this system, if the access conditions are not satisfied, no communication load is generated, so that the communication cost can be reduced especially for individual users of the Internet.

Claims

The scope of the claims

1. At least one client terminal, at least one WWW server that provides information in response to a request from the client terminal, and at least one mark management server that manages marks used by the client terminal and the WWW server Are connected to each other via a communication network, and the index page of the web page provided by the WWW includes the mark sent from the mark management server,

The mark management server, when receiving a mark payout request from the WWW server, sends a corresponding existing mark if there is an existing mark with the same access condition, and sends a new access condition mark if not. Prepared,

When the client terminal refers to the information on the Web page provided by the WWW server, the client terminal compares the access condition and the attribute condition of the user included in the mark such as the index page of the Web page with the link destination. An information access control system comprising means for comparing and judging information before actually accessing the information.

2. The information access system according to claim 1, wherein the determination unit permits access to a link destination only when an access condition included in the mark and an attribute condition of the user match. Information access control system.

3. The information access control system according to claim 1, wherein when a mark transmission request is issued to the mark management server, a mark having the same access condition as the transmission request mark is included in a DB managed by the mark management server. An information access control system characterized in that the mark is used a plurality of times, if any.

4. The information access control system according to claim 1, wherein the mark management server includes a mark image, which is image data, as a link destination U.

An information access control system, comprising: mark generation means for embedding RL information and an access condition of a link destination to form a mark having access control means.

5. The information access control system according to claim 1, wherein the access control is performed by the mark and the access control means on the client terminal without applying a communication load at the time of the access control. .