WO2007072646A1

WO2007072646A1 - File operating device, file operating method, and recording medium where program is recorded

Info

Publication number: WO2007072646A1
Application number: PCT/JP2006/323276
Authority: WO
Inventors: Kosei Sonoda; Toshiyuki Ono; Minoru Taguchi; Hideki Kinoshita
Original assignee: Ixi Co., Ltd.
Priority date: 2005-12-19
Filing date: 2006-11-22
Publication date: 2007-06-28
Also published as: JP2007172021A

Abstract

[PROBLEMS] Conventional file operating devices involve a problem that all-at-a-time file operation to secure the secrecy of data cannot be performed for each folder. [MEANS FOR SOLVING PROBLEMS] A file operating device comprises a folder unit operation information storage unit storing a first folder identifier which is the information for identifying a folder containing one or more original files and folder unit operation information including first use limitation information and a use limiting setting section for acquiring one or more set files having second use limitation information on use limitation and information on the body data of the corresponding original file by using the first use limitation information paired with the first folder identifier for the one or more original files in the folder identified by the first folder identifier that the folder unit operation information has. For each folder, all-at-a-time file operation can be performed to secure data secrecy.

Description

Specification

File operation device, file operation method, and recording medium recording program

Technical field

[0001] The present invention relates to a file operation device and the like for operating a file.

Background art

Conventionally, storage means for storing data file entity data and management information indicating the storage location of the entity data, and management information while leaving the entity data in accordance with a user instruction when deleting the data file And a control means for switching whether to delete the management information after overwriting the entity data with a predetermined code. The powerful file operation device can perform high-speed data deletion processing while reliably preventing highly confidential data from leaking to a third party when a user deletes a data file. In addition, the powerful file operation device simplifies the operations required to delete highly confidential data, and can be applied to devices that use a common index format (for example, see Patent Document 1). ).

Patent Document 1: Japanese Patent Application Laid-Open No. 2004-126909 (1st page, Fig. 1 etc.)

Disclosure of the invention

Problems to be solved by the invention

[0003] However, in the conventional file operation device, in order to ensure the confidentiality of data, it is not possible to perform batch file operations in units of folders in which one or more files can be stored. There was a problem.

[0004] Further, more specifically, in a conventional file operation device, settings relating to file usage restrictions are specified in units of folders, and one or more files existing in the folder are collectively processed. There was a problem that usage restrictions could not be set easily.

Means for solving the problem

[0005] The file operation device according to the first aspect of the present invention has one or more original files as files to be operated. One or more folder unit operation information having a first folder identifier that is information for identifying the folder stored above and first use restriction information that is information for restricting the use of a file existing in the folder is stored. The first folder identifier is paired with the first folder identifier for one or more original files existing in the folder identified by the first folder identifier included in the folder unit operation information and the folder unit operation information. A usage restriction setting unit that uses the usage restriction information to obtain one or more set files having second usage restriction information, which is information related to usage restrictions, and information about the main data of the corresponding original file. It is a file operation device provided. Here, the information about the main data may be the main data of the original file as it is, or data obtained by encrypting the main data of the original file.

[0006] With a powerful configuration, it is possible to set information on usage restrictions for one or more files in a folder. By setting usage restriction information in the file, the file can be used while ensuring the security of the information described in the file.

[0007] In addition, the file operation device according to the second aspect of the present invention is the information regarding the execution of the process for obtaining the set file performed by the use restriction setting unit. When a log information storage unit that can store certain log information and a process for obtaining the set file are executed, log information that is information about the recording of the process is generated, and the log information is stored as the log information. Log information storage means for storing in the storage means, and at least one original file existing in a folder identified by a first folder identifier included in the folder unit operation information at a predetermined timing. Using the first usage restriction information paired with the folder identifier, information on the main data of the corresponding original file that has second usage restriction information that is information on usage restrictions A file operation device having a use restriction setting means for obtaining the already-set file on one or more of.

[0008] By using a powerful configuration, it is possible to collectively set usage restriction information for one or more files per folder. In addition, when usage restrictions are set, log information of the setting process can be left and the log information can be used. This log information can be used, for example, to avoid performing duplicate setting processing.

[0009] Further, the file operation device according to the third aspect of the present invention is limited to the use restriction as compared with the second aspect of the invention. The setting means obtains an identifier of a file existing in the folder identified by the first folder identifier included in the folder unit operation information of the folder unit operation information storage unit at a predetermined timing, and stores the log information. By referring to the first folder identifier and using the first usage restriction information, the corresponding set file is obtained, and only the unprocessed file is processed. This is a file operation device that is a set file corresponding to a processing file, has a second usage restriction information, and obtains a set file having information about the main data of the corresponding original file.

[0010] By using a powerful configuration, it is possible to collectively set usage restriction information for one or more files in folder units. Also, by checking the log information, it is possible to prevent unnecessary processing from being performed on one original file without performing duplicate setting processing.

[0011] Further, in the file operation device according to the fourth aspect of the present invention, the folder unit operation information includes one or more first folder identifiers and the set file as compared to the first force or the third aspect of the invention. 1 or more of a second folder identifier that is information for identifying a folder to be arranged, and first use restriction information, and the use restriction setting unit includes one or more first folder identifiers contained in the folder unit operation information. The first usage restriction information paired with the one or more first folder identifiers is used for one or more original files in one or more identified folders, and second usage restriction information is provided. One or more set files having information about the main data of the corresponding original file are obtained, and the one or more set files are identified by the one or more second folder identifiers. folder Is a file operation apparatus to place.

[0012] With a powerful configuration, it is possible to set information on usage restrictions for one or more files in a folder. In addition, a set file, which is a file with usage restriction information, can be stored in one or more folders. Therefore, for example, when the same set file is stored in two or more folders, it is possible to take measures such as changing the processing for each folder. In addition, file management can be facilitated by changing the department that uses the set file for each folder.

[0013] In addition, in the file operation device according to the fifth aspect of the present invention, the process performed by the use restriction setting unit in accordance with any one of the first to fourth aspects includes an encryption process of main data of the original file. And the information about the main body data is a file operation device in which the main body data of the original file is encrypted data.

[0014] With the powerful configuration, the data of the main body of the set file is encrypted, and the confidentiality of the information can be further increased.

[0015] Further, the file operation device of the sixth aspect of the invention includes a first usage restriction information storage unit that stores first usage restriction information that is information for restricting use of an original file, and the original file. The first use restriction information is used to execute processing for obtaining one or more set files having second use restriction information and information on the main data of the corresponding original file. A restriction setting unit, wherein the use restriction setting unit determines whether an original file before execution of the process for obtaining the set file and an original file after execution of the process for obtaining the set file have changed. A determination unit for determining whether or not the determination result of the determination unit has changed and the determination result is! / ヽ!

[0016] Due to the powerful configuration, if the original file is updated while the usage restriction information is being set, the usage restriction information setting process can be executed again from the beginning. Through the process, you can build a set file with usage restriction information for the latest original file.

[0017] Further, according to the seventh aspect of the present invention, in the first aspect of the invention, the usage restriction setting unit includes an original file before execution of processing for obtaining the set file, and the set file. If the determination means determines whether or not the original file after the execution of the process for obtaining is changed, and the determination result that the determination result of the determination means has not changed, the set file is obtained. It is a file operation device comprising usage restriction setting means.

[0018] Due to the powerful configuration, usage restriction information for one or more files can be set in a batch and only when the original file has not been changed during the setting process. You can confirm the set file that has been set.

[0019] Further, in the file operation device according to the eighth aspect of the present invention, with respect to any of the sixth and seventh aspects, the usage restriction setting means determines that the determination result of the determination means has changed. If it is a result, the original file after the change is processed using the first use restriction information. The file operation device obtains a set file having second usage restriction information and having information about the main data of the corresponding original file.

[0020] By using a powerful configuration, you can set usage restriction information for one or more files in a folder, and build a set file with usage restriction information for the latest original file. it can.

[0021] Further, according to any of the first to eighth inventions, the file operation device according to the ninth aspect of the invention is a file for processing the set file according to the second usage restriction information of the set file. The file operation device further includes a processing unit.

[0022] With this configuration, usage restrictions can be controlled for files in accordance with the usage restriction information that has been set. As a result, the file can be used while maintaining the security of the information described in the file.

The invention's effect

[0023] According to the file operation device of the present invention, a file can be used while ensuring the security of the information described in the file.

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of a file operation device and the like will be described with reference to the drawings. Note that components having the same reference numerals in the embodiment perform the same operation, and thus the description thereof may be omitted.

(Embodiment 1)

FIG. 1 is a block diagram of the information processing system in the present embodiment. The information processing system includes a file management device 11 and a file operation device 12. The file management device 11 manages files. The file management device 11 manages zero or more files in each folder of one or more folders. The folder also includes a root folder. Further, the file management device 11 accepts user file operations. The file management device 11 is, for example, a so-called computer, and the file management function of the file management device 11 can be realized by, for example, a so-called file system.

The file operation device 12 operates the file of the file management device 11. Here, operations include file deletion, file access control, file creation, modification, and the like. Arc Access control includes file opening, reading, writing, execution, etc.

. In particular, the file operation device 12 performs a process of setting information on usage restrictions for the file of the file management device 11. In addition, the file operation device 12 performs processing for restricting use, such as access control or deleting a file, in accordance with the use restriction information of the file.

The file operation device 12 includes a folder unit operation information storage unit 121, a use restriction setting unit 122, and a file processing unit 123.

The usage restriction setting unit 122 includes log information storage means 1221, log information storage means 1222, and usage restriction setting means 1223.

[0029] The folder unit operation information storage unit 121 stores one or more folder unit operation information having a first folder identifier and first usage restriction information. The first folder identifier is information for identifying a folder in which one or more original files as files to be operated are stored. The first use restriction information is information for restricting the use of the first folder identifier and the files existing in the folder. One or more folder unit operation information may be stored in one file, or may be one record in the database. Also, the data structure of folder unit operation information is questionable! /.

[0030] The folder unit operation information includes at least a first folder identifier and first usage restriction information. The folder unit operation information preferably includes one or more first folder identifiers, one or more second folder identifiers, and first use restriction information. The second folder identifier is information for identifying the folder in which the set file is arranged. The first folder identifier and the first folder identifier may be IDs for identifying the power folder, which is usually a folder name. The first usage restriction information is, for example, timed date information that indicates the date and time when the file can be accessed or a time limit, usage number information that indicates the number of times the file can be used, and access information that is information related to access to the file. Information. The timed date and time information includes information indicating an absolute date, information indicating a relative date, information specifying an elapsed time after receipt, and information specifying an elapsed time after opening. The information indicating the absolute date / time is information indicating the time when the file can be accessed (for example, December 19, 2005, 22:00, etc.). The information indicating the absolute date is If it is “December 19 22:00”, the file can be accessed until “December 19 December 21:00”. The information indicating the relative date and time is information indicating the time after the folder unit operation information is recorded (or updated) in the folder unit operation information storage unit 121 (for example, 48 hours now). When the information indicating the relative date and time is “12 hours”, the file can be accessed for 12 hours after the folder unit operation information is recorded (or updated) in the folder unit operation information storage unit 121. The information specifying the elapsed time after receipt is information specifying the elapsed time from the time when the file was recorded or updated in the folder. If the information specifying the elapsed time after receipt is, for example, “24 hours”, the information specifying the elapsed time after receipt is only for 24 hours from the update date and time of the file that is the attribute value of the file. Indicates that the file can be accessed. The information specifying the elapsed time after opening is information specifying the accumulated time since the file was opened. If the information specifying the elapsed time after opening is “12 hours”, the file cannot be opened after the file has been opened and the accumulated time of 12 hours has passed. The access information includes, for example, information indicating permission / prohibition of file copy, information indicating permission / prohibition of file copy and paste, information indicating permission / prohibition of print screen, editing, alias, etc. Information indicating permission / prohibition of saving, information indicating permission / prohibition of printing, and information indicating permission / prohibition of conversion to a PDF file.

[0031] The folder unit operation information storage unit 121 is preferably a non-volatile recording medium, but can also be realized by a volatile recording medium. When the folder unit operation information storage unit 121 is a volatile recording medium, for example, the folder unit operation information is held by a server device (not shown), and the file operation device 12 receives the folder unit operation information from the server device. By receiving, for example, folder unit operation information is obtained.

[0032] The usage restriction setting unit 122 reads the folder unit operation information in the folder unit operation information storage unit 121, and one or more original files existing in the folder identified by the first folder identifier included in the folder unit operation information. (Normally, all original files may be part of the original files that meet the specified conditions.) Use the first usage restriction information paired with the first folder identifier. Secondary interest, information about restrictions Get one or more configured files with restriction information. The set file also has information on the main data of the corresponding original file. Here, “information about main body data” includes main body data itself, which is data described in a file, data obtained by encrypting main body data, and the like. In other words, for example, the usage restriction setting unit 122 writes the second usage restriction information in the header part of the original file and sets it for one or more original files existing in the folder identified by the first folder identifier. Get a completed file. Then, the use restriction setting unit 122 normally writes the set file in the folder identified by the first folder identifier. Further, the use restriction setting unit 122 reads the main data of the original data, encrypts it, and adds the encrypted data to the set file. In such a case, the usage restriction setting unit 122 may delete the original file that is the source of the set file, or may move it to another folder. In addition, the usage restriction setting unit 122 applies the one or more first files to one or more original files existing in one or more folders identified by one or more first folder identifiers included in the folder unit operation information. Using the first usage restriction information paired with the folder identifier, obtain one or more configured files with the second usage restriction information, and use the one or more second folder identifiers for the one or more configured files. It is preferable to place them in one or more identified folders. In addition, when power is applied, the set files are usually copied by the number of second folder identifiers. Here, the second usage restriction information may be the same information as the first usage restriction information, or may be information of a different structure. However, the second usage restriction information is usually the same information as the first usage restriction information. However, the second usage restriction information may be a part of the first usage restriction information. Note that the usage restriction setting unit 122 may write the second usage restriction information in a location other than the header portion such as the footer portion of the set file, for example, to obtain the set file.

[0033] The usage restriction setting unit 122 can usually also realize an MPU, a memory and the like. The processing procedure of the usage restriction setting unit 122 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

[0034] The log information storage unit 1221 can store log information, which is information related to execution of a process for obtaining a set file performed by the use restriction setting unit 122. For example, log information First folder identifier in which this file is stored, original file name, usage restriction setting section

It has 122 processing statuses (processing, processed, etc.), second folder identifier, and set file name.

The log information storage unit 1221 is preferably a non-volatile recording medium, but can also be realized by a volatile recording medium.

[0036] When a process for obtaining a set file is executed, the log information accumulating unit 1222 generates log information that is a record of the process, and stores the log information as a log information storage unit. Accumulate in stage 1221. In addition, when the usage restriction setting unit 122 reads the original file for processing, the log information accumulating unit 1222 obtains the information of the original file name and the first folder identifier, and “in process”. Generate information. Then, the log information storage means 1222 may generate blog information having information of “first folder identifier, original file name, character string 〃 processing”, and may add the log information to the log information storage means 1221. Then, the log information storage unit 1222 generates information of “second folder identifier, set file name, character string“ processed ”” after the use restriction setting unit 122 obtains the set file, and logs The information is “first folder identifier, original file name, second folder identifier, set file name, character string processed”, and the log information is “first folder identifier, original file name, character string” You may overwrite the log information that has the information “in process”.

[0037] The log information storage unit 1222 can usually be realized by an MPU, a memory, or the like. The processing procedure of the log information storage means 1222 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

[0038] Usage restriction setting means 1223 applies the first restriction file to one or more original files existing in the folder identified by the first folder identifier included in the folder unit operation information at a predetermined timing. One or more configured files that have second usage restriction information that is information about usage restrictions using the first usage restriction information that is paired with the folder identifier, and that have information about the main data of the corresponding original file Get. Further, the use restriction setting unit 1223 acquires the identifier of the file existing in the folder identified by the first folder identifier included in the folder unit operation information of the folder unit operation information storage unit 121 at a predetermined timing. Refer to the log information and make a pair with the first folder identifier. The first usage restriction information is used to obtain the corresponding set file, and only the unprocessed file is processed, and the second file is the set file corresponding to the unprocessed file. It is preferable to obtain a set file having usage restriction information. In such a case, it is not necessary to perform the setting process of duplicate usage restriction information. Here, the “predetermined timing” is, for example, when a file is generated or updated in a folder. The “predetermined timing” is, for example, a timing at a predetermined time interval (for example, 5 minutes).

[0039] The usage restriction setting means 1223 can usually also be implemented with an MPU or memory power. The processing procedure of the usage restriction setting means 1223 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

[0040] The file processing unit 123 processes the set file according to the second usage restriction information of the set file. File processing includes file deletion, access control when accessing the file, control to limit the number of times the file can be used (control to disable access when the limit is exceeded), and specify the elapsed time after opening For example, control that limits the cumulative open time of files based on information to be processed. When the second usage restriction information includes information indicating the absolute date and time, for example, the file processing unit 123 acquires information on the current time and determines that the current time has passed the absolute date and time. (2) Delete a set file with usage restriction information or make it inaccessible. Processing to make a set file inaccessible includes not opening the file. Further, when the second usage restriction information includes information indicating information indicating the relative date and time, for example, the file processing unit 123 acquires information on the current time, and folder unit operation information (usually a file). If the current date / time is determined to be more than the relative date / time from the update date / time, the set file with the second usage restriction information is deleted or cannot be accessed. To do. In addition, when the second usage restriction information includes information specifying the elapsed time after reception, for example, the file processing unit 123 acquires information on the current time, and information on the update date and time of the set file. And the current time is determined to be more than the elapsed time since receipt of the update date and time Then, the set file having the second usage restriction information is deleted or cannot be accessed. In addition, when the second usage restriction information includes the usage count information, the file processing unit 123, for example, every time the file is used once, the file usage section indicates the usage count indicated by the usage count information included in the second usage restriction information. After the decrement and the usage count indicated by the usage count information becomes “0”, the file processing unit 123 performs control so that the file cannot be used. “Control so that it cannot be used” means control such as not opening or executing the file. In addition, when the second usage restriction information includes information specifying the elapsed time after opening, the file processing unit 123, for example, measures the open time every time the file is opened, and the file is closed. When the information specifying the elapsed time after opening is decremented and the information specifying the elapsed time after opening becomes `` 0 '', the file processing unit 123 will not be able to open the file. To control. The technique for measuring the time when a file is opened is a known technique.

[0041] The file processing unit 123 can usually be realized by an MPU, a memory, or the like. The processing procedure of the file processing unit 123 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

Next, the operation of the file operation device 12 will be described using the flowcharts of FIGS. 2 to 4.

[0043] (Step S201) The use restriction setting unit 122 determines whether or not it is a timing for performing use restriction setting processing on the original file. If it is time to perform the usage restriction setting process, go to step S202; otherwise, go to step S208.

(Step S 202) The usage restriction setting unit 122 reads all the folder unit operation information stored in the folder unit operation information storage unit 121.

(Step S 203) Usage restriction setting section 122 reads log information from log information storage means 1221.

(Step S204) The use restriction setting unit 122 substitutes 1 for the counter i.

[0047] (Step S205) The use restriction setting unit 122 sets the folder unit read in Step S202. It is determined whether or not folder unit operation information exists in the position operation information. If the second folder unit operation information exists, the process goes to step S206, and if the i-th folder unit operation information does not exist, the process returns to step S201.

(Step S206) The use restriction setting unit 122 performs folder unit operation information processing that is processing corresponding to the i-th folder unit operation information. Folder unit operation information processing involves processing one or more original files in the folder identified by the first folder identifier included in the folder unit operation information and creating one or more set files. is there. Details of the folder unit operation information processing will be described using the flowchart of FIG.

(Step S 207) Usage restriction setting section 122 increments counter i by 1. Return to step S205.

(Step S 208) The file processing unit 123 determines whether or not it is a timing for processing the set file. This process is a file process according to the second usage restriction information of the set file. The processing timing is, for example, the timing at which an access instruction such as executing or opening a device force setting file (not shown) is received. Moreover, the timing for performing the processing is, for example, the timing at which the file operation device 12 detects that a predetermined time has been reached. In addition, the timing for performing the processing is, for example, the timing at which it was detected that the predetermined time (for example, 12 hours) has elapsed since the previous processing was performed.

(Step S209) The fine processing unit 123 assigns 1 to the counter i.

(Step S210) The file processing unit 123 determines whether or not the i-th set file exists. If the i-th set file exists, the process goes to step S211. If the i-th set file does not exist, the process returns to step S201. When the set file exists in a plurality of folders, the file processing unit 123 normally searches for the plurality of folders, acquires identifiers of all the set files, and sequentially performs file processing. Further, for example, the folder unit operation information is held in the folder where the set file exists.

[0053] (Step S211) The file processing unit 123 performs file processing on the i-th set file. Process. Details of the file processing will be explained using the flowchart of FIG.

(Step S 212) The file processing unit 123 increments the counter i by 1. Return to step S210.

Note that in the flowchart of FIG. 2, the processing ends due to power-off or processing termination interrupt.

Details of the folder unit operation information processing in step S206 will be described using the flowchart in FIG.

(Step S 301) Usage restriction setting means 1223 acquires one or more first folder identifiers included in the folder unit operation information.

(Step S302) Usage restriction setting means 1223 acquires first usage restriction information included in the folder unit operation information.

(Step S303) Usage restriction setting means 1223 constitutes the first usage restriction information power second usage restriction information acquired in step S302. Here, for example, the data structure of the first usage restriction information is converted into the data structure of the second usage restriction information to obtain the second usage restriction information. If the first usage restriction information and the second usage restriction information are the same information, the process of this step is omitted.

(Step S 304) The use restriction setting means 1223 acquires one or more second folder identifiers included in the folder unit operation information.

(Step S 305) Usage restriction setting means 1223 substitutes 1 for counter i.

(Step S 306) Usage restriction setting means 1223 determines whether the first folder identifier of the cell exists among the one or more first folder identifiers acquired in step S 301. If the i-th first folder identifier exists, the process goes to step S307. If the i-th first folder identifier does not exist, the process returns to the upper function.

(Step S 307) Usage restriction setting means 1223 substitutes 1 for counter j.

[0064] (Step S308) The use restriction setting means 1223 determines whether or not the j-th file exists in the folder identified by the i-th first folder identifier. If the jth file exists, go to step S309, and if the jth file does not exist, step S32 Go to 4. For example, the usage restriction setting unit 1223 obtains all the identifiers of the files existing in the folder identified by the i-th first folder identifier, and determines whether or not the j-th file identifier exists. Determine if the second file exists.

(Step S 309) Usage restriction setting means 1223 searches log information in log information storage means 1221 using the file identifier of the j-th file as a key.

[0066] (Step S310) In step S309, the use restriction setting unit 1223 includes log information having the file identifier of the j-th file, and the log information corresponds to the j-th file (original file). To determine whether a set file has already been generated. If a set file has already been generated, if it is (processed), go to step S323, otherwise go to step S311. Here, it is preferable that the use restriction setting unit 1223 copies the jth file (original file) to a work buffer (folder or the like) and performs the subsequent processing on the copied file. In this way, the user can freely edit the original original file (original file of the file management apparatus 11).

(Step S 311) Usage restriction setting means 1223 determines the file identifier of the set file corresponding to the jth file (original file). For example, when the identifier of the j-th file (original file) is “abc.docj”, the use restriction setting unit 1223 determines the file identifier of the set file as “abc.zgn”. That is, the use restriction setting unit 1223 combines the main part of the file identifier of the original file with a predetermined extension (for example, “zgn”) to determine the file identifier of the set file.

(Step S 312) Usage restriction setting means 1223 generates a file with the file identifier determined in step S 311.

(Step S313) Usage restriction setting means 1223 opens the file generated in Step S312.

[0070] (Step S314) The use restriction setting means 1223 writes the second use restriction information in a predetermined location (for example, a header portion) of the file opened in Step S313. The second usage restriction information is information configured in step S303.

[0071] (Step S315) Usage restriction setting means 1223 reads the book of the jth file (original file) Acquire body data that is data of the body part. The usage restriction setting means 1223 opens the j-th file (original file), for example, reads all the data in the file onto the memory.

(Step S 316) Usage restriction setting means 1223 encrypts the main body data acquired in Step S 315 and acquires information about the main body data. The encryption algorithm is not limited. The cipher key may be a public key or a secret key.

(Step S 317) Usage restriction setting means 1223 adds the above information to the set file according to the main body data obtained by encryption in step S 316.

(Step S 318) Usage restriction setting means 1223 substitutes 1 for counter k.

(Step S 319) Usage restriction setting means 1223 determines whether or not the k-th second folder identifier exists in one or more second folder identifiers acquired in step S 304. If the kth second folder identifier exists, the process goes to step S320, and if the kth second folder identifier does not exist, the process goes to step S323.

(Step S320) Usage restriction setting means 1223 copies the set file created by the processing up to step S317 to the folder identified by the kth second folder identifier.

[0077] (Step S321) The log information accumulating unit 1222 composes a set file, and forms log information that is processing information indicating that the file has been copied to the second folder identified by the second folder identifier. And stored in the log information storage means 1221.

(Step S 322) Usage restriction setting means 1223 increments counter k by 1. Return to step S319.

(Step S323) Usage restriction setting means 1223 increments counter j by 1. Return to step S308.

(Step S324) Usage restriction setting means 1223 increments counter i by 1. Return to step S306.

Note that the encryption key process need not be performed in the flowchart of FIG. In such a case, the use restriction setting means 1223 adds the main data of the original file as it is to the set file. In addition, in the flowchart of Figure 3, created by processing up to step S317 The set file can be written as it is to the second folder identifier, or after copying, the set file created in the process up to step S317 can be deleted.

Further, in the flowchart of FIG. 3, it is more preferable to encrypt the entire set file including the second usage restriction information and the main body data in which only the main body data is encrypted. It is a force that contributes to prevention of falsification of second usage restriction information.

Further, in the flowchart of FIG. 3, the log information storage means 1222 configures log information having information on the processing state “processing” at the stage of starting the creation of the set file, and temporarily stores it. Also good. Such processing is preferably performed between steps S312 and S313, for example.

Next, details of the file processing in step S211 will be described using the flowchart of FIG.

(Step S401) The file processing unit 123 opens a set file to be processed.

(Step S402) The file processing unit 123 reads the second usage restriction information of the set file opened in Step S401.

(Step S 403) The file processing unit 123 determines whether or not the user has instructed to use the set file. If there is a usage instruction, go to step S404, and if there is no usage instruction, go to step S409. Note that “use” refers to the execution and opening of a file.

(Step S 404) The file processing unit 123 reads the usage count information included in the second usage restriction information. The usage count information is information indicating the number of times the file to be processed can be used to the maximum extent.

(Step S 405) The file processing unit 123 acquires information on the number of used times, which is the number of times the file has already been used, for a file for which processing is set. The information on the number of times already used may be included in the log information of the log information storage unit 1221, may be included in the second usage restriction information of the set file, or in another location, or may be included in the first not shown. Three devices may be held.

(Step S406) The file processing unit 123 determines whether or not the usage count indicated by the usage count information is greater than the usage count indicated by the usage count information. If big Go to step S407, and if not, return to the upper function.

(Step S407) The file processing unit 123 decrypts the set file. The location of the key for decryption does not matter. Moreover, the content of the key is not questioned.

(Step S408) The file processing unit 123 uses the decrypted set file (for example,

, Execute, open, etc.) In addition, after use, the file processing unit 123 normally increments the information on the number of times of use by 1, and writes it to a predetermined location (log information, etc.). Return to upper function.

[0093] (Step S409) The file processing unit 123 determines whether or not there is an access instruction such as an instruction to copy, edit, save as another name, or print the set file. . If there is an access instruction, go to step S410, and if there is no access instruction, go to step S414.

(Step S410) The file processing unit 123 reads access information included in the second usage restriction information.

(Step S 411) The file processing unit 123 determines from the access information read in Step S 410 whether or not the process for copying the set file (access process) is possible. If access processing is possible, go to Step S412; otherwise, return to the upper function.

(Step S 412) The file processing unit 123 decrypts the set file.

(Step S413) The file processing unit 123 executes an access process such as copying the decrypted set file. Return to upper function.

(Step S414) The file processing unit 123 acquires the current time. The current time may be acquired from the clock in the file operation device 12 or may be acquired from an external server device.

(Step S415) The file processing unit 123 acquires the update time of the set file.

(Step S 416) The file processing unit 123 acquires the update time of the folder unit operation information.

[0101] (Step S417) The file processing unit 123 displays information indicating the absolute date / time included in the second usage restriction information, information indicating Z and relative date / time, or Z and the time after receipt. Read the information that specifies the interval. Then, the file processing unit 123 receives information indicating the absolute date / time, information indicating the Z and relative date / time, or information specifying the Z and the elapsed time after reception, the current time acquired in step S414, and / or the step. From the update time of the set file acquired in S415, or the update time of Z and the folder unit operation information acquired in step S416, determine whether or not to delete the set file (whether it meets the conditions) To do. If the condition is met, the process goes to step S418, and if the condition is not met, the process returns to the upper function.

(Step S418) The file processing unit 123 deletes the set file. Return to upper function.

[0103] Hereinafter, a specific operation of the file operation device 12 in the present embodiment will be described.

(Specific example 1)

FIG. 5 is an example of one folder unit operation information in the folder unit operation information storage unit 121. The folder unit operation information has a first folder identifier and a second folder identifier. Here, each of the first folder identifier and the second folder identifier is a single folder identifier. Further, the folder unit operation information has first usage restriction information. In addition, folder unit operation information is stored in the original file deletion information indicating whether or not to delete the original file when a set file is created from the original file file, or in the client device where the set file is not shown. There is also operation mode information, which is the operation mode at the time of loading. The original file deletion information is “1” if the original file is deleted, and “0” otherwise. The operation mode information is “0” when the set file is moved when the set file is imported to a client device (not shown), and “1” when the set file is copied. The first usage restriction information includes information indicating whether each usage restriction information is valid or invalid. “1” when enabled, “0” when disabled. Examples of usage restriction information are timed date information, usage count information, and access information. Here, the time limit date / time information is information indicating absolute date / time, information indicating relative date / time, and information specifying the elapsed time after receipt. The usage count information is information indicating the maximum number of times the set file can be used. Here, the access information is file copy permission “0” or prohibition “1”. Copy / paste of files, information indicating permission “0” or prohibition “1” on the print screen, information indicating permission “0” or prohibition “1” of editing or saving, printing, It has information indicating permission for PDF conversion “0” and prohibition “1”. Normally, two or more folder unit operation information is stored in one file or database. In addition, “IN:” in the folder unit operation information in FIG. 5 is information that does not constitute the first folder identifier in “IN: C: ¥ WORD ¥ IN_DIR001J”, and “C: ¥ WORD ¥ IN_DIR001J This is information indicating that the folder is the input source.Furthermore, “OUT:” in OUT: C: \ WO RD \ OUT_DIR001J of the folder unit operation information in FIG. Yeah! This information indicates that “C: \ WORD \ OUT—DIR001” is the output destination folder.

[0105] Next, a user has a file having a file identifier "abc. Do c" from an input means (not shown) in a folder identified by the folder identifier "C: \ WORD \ IN—DIR001" of the file management apparatus 11. Is copied. Currently, the file “abc.doc” exists in the folder “C: ¥ WORD ¥ IN—DIR001” of the file management apparatus 11.

Then, the file operation device 12 checks the file management device 11 once every 10 seconds, and constructs a set file from the original file catalog according to the folder unit operation information shown in FIG. .

Next, specific operations of the file operation apparatus 12 will be described.

First, the usage restriction setting means 1223 determines that it is the timing for performing usage restriction setting processing for the original file (the previous processing power has also passed 10 seconds). Next, the use restriction setting unit 122 reads the folder unit operation information of FIG.

Then, the use restriction setting unit 1223 reads the log information in the log information storage unit 1221. Here, the log information is NULL (does not exist).

Next, the usage restriction setting means 1223 performs folder unit operation information processing according to the folder unit operation information of FIG. That is, the use restriction setting unit 1223 reads the first folder identifier “C: ¥ WORD ¥ IN—DIR001” in the folder unit operation information. Next, the usage restriction setting means 1223 obtains the first usage restriction information from the folder unit operation information. Next, the usage restriction setting means 1223 configures the second usage restriction information shown in FIG. 6 from the acquired first usage restriction information. In the second usage restriction information, if the flag is “0” for which the designation is invalid, the corresponding information is “NULL”, but the second usage restriction information and the first usage restriction information may be the same information. good. It goes without saying that the second usage restriction information shown in Fig. 6 inherits the contents of the first usage restriction information.

Next, the usage restriction setting unit 1223 reads the second folder identifier “C: ¥ WORD ¥ OUT—DIR001” in the folder unit operation information.

Next, the usage restriction setting unit 1223 acquires all the file identifiers in the folder “C: ¥ WORD ¥ IN—DIR001”. Here, only the file identifier “abc.doc” is acquired.

Next, the usage restriction setting means 1223 searches the log information using the file identifier “abc. Doc” as a key. And since there is no information in the log information, the use restriction setting means 1223 cannot retrieve the information. Then, the use restriction setting unit 1223 determines that the file “abc. Do cj is unprocessed.

[0115] Next, the usage restriction setting means 1223 sets the file identifier "abc. (1 _{0 (} :"_& 1 ^ ") and the preset file extension" zgn "stored in advance. Determine the file identifier of the file as “abc.zg n”.

Next, the use restriction setting unit 1223 generates a file having the file identifier “abc.zgn” using the set file identifier “abc.zgn” as a parameter. Here, it is preferable that the use restriction setting unit 1223 generates a file having the file identifier “abc.zgnj” in the second folder identifier “C: ¥ WORD ¥ OUT—DIR001”.

Next, the usage restriction setting means 1223 opens the file “abc.zgn”.

[0118] Then, the use restriction setting unit 1223 writes the second use restriction information in Fig. 6 in the header portion of the opened file.

Next, the usage restriction setting means 1223 opens the original file “C: ¥ WORD ¥ IN—DIR001 ¥ abc.doc” and reads the main data. Then, the use restriction setting means 1 223 encrypts the acquired main body data.

[0120] Next, the usage restriction setting means 1223 converts the data acquired by encryption into the set file " Add to "abc.zgn". Then, the use restriction setting unit 1223 closes the set file “abc.z gnj”.

Here, since there is only one second folder identifier, the set file “abc.zgn” is not copied to a folder other than “C: ¥ WORD ¥ OUT—DIR 001”. Note that the usage restriction setting means 1223 does not generate the set file “abc. 2 ₈ 11” in “Ji: ¥ WORD ¥ OUT—DIR 001”, but if it is generated in the work folder etc., the set file “abc. Copy “abc.zgn” to the folder “C: \ WORD \ OUT—DIR001” and delete the set file “abc.zgn” such as work folder.

Next, the log information accumulating unit 1222 configures the log information shown in FIG. 7, and writes it in the log information storage unit 1221. Here, the log information includes “first folder identifier”, “original file name”, “status”, “second folder name”, and “set file name”.

[0123] Since there is only one original file here, the folder unit operation information processing ends here. The concept of the above processing is shown in FIG. In FIG. 8, the setting process is executed for the original file “abc.doc” in the first folder, and the set file “abc.zgn” is configured in the second folder.

In FIG. 5, since the original file deletion information, which is information indicating whether or not the original file is deleted, is “0” indicating no deletion, the usage restriction setting means 1223 uses the set file “abc. After configuring "zgn", the original file "abc.doc" is not deleted.

[0125] Next, a specific example of file processing performed by the file operation device 12 on a set file will be described.

First, the file processing unit 123 determines that the file processing timing has come. Specifically, the file processing unit 123 performs file processing, for example, every 5 minutes. Then, it is assumed that the file processing unit 123 detects that five minutes have passed since the previous process and determines that the file processing timing has come.

Next, the file processing unit 123 reads the second folder identifier “C: ¥ WORD ¥ OUT_DIR001” in the folder unit operation information.

Next, the file processing unit 123 acquires all the file identifiers in the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR0 01”. here, The file processing unit 123 acquires one file identifier “abc.zgn”.

Next, the file processing unit 123 opens the set file identified by the file identifier “abc.zgn”. Then, the file processing unit 123 reads the second usage restriction information (see FIG. 6) of the opened set file “a be. Zgn”.

[0130] Since the file operation device 12 does not accept the use instruction for the set file or the file copy instruction, the file processing unit 123 uses the time limit in the second use restriction information. Use date / time information to determine whether the set file should be deleted or not. Then, it is assumed that the file processing unit 123 has acquired the current time “2005/12/18 12:13”. Next, it is assumed that the file processing unit 123 acquires the update time “2005/12/5 10:00” of the set file. Then, it is assumed that the file processing unit 123 has acquired the update time “2005/11/13 11:17” of the folder unit operation information. Then, the file processing unit 123 reads information “1” indicating that the absolute date / time designation of the time / date / time information is valid from the second usage restriction information in FIG. 6 and reads the absolute date / time “2005Z12Z31 12:00”. get. Then, the file processing unit 123 compares the absolute date “2005Z12Z31 12:00” with the acquired current time “2005/12/18 12:13”, and the absolute date does not match the current time (does not match the condition). ) And the process ends. Here, for example, when the current time is “2005Z12Z31 12:03”, the file processing unit 123 determines that the absolute time has passed the current time (matches the condition), and the set file “Perform the process of deleting abc. Zgnj.

Further, it is assumed that the user gives an instruction to copy the file “abc.zgnj to another device or another folder by means (not shown) such as a mouse. In such a case, the file processing unit 123 Determines that the file operation device 12 has received an instruction to copy the file, and obtains access information included in the second usage restriction information in Fig. 6. Then, obtains information on copying permission Z prohibition. Since the second usage restriction information includes information “1” that prohibits copying of the file, the file processing unit 123 determines that the file “abc.zgn” cannot be copied and ends the processing. . In such a case, the file processing unit 123 may perform processing such as “output a message stating that the file“ a be. Zgnj cannot be copied ”!

(Specific example 2) FIG. 9 is an example of one folder unit operation information in the folder unit operation information storage unit 121. The folder unit operation information in FIG. 9 has a plurality of (here, two) first folder identifiers and second folder identifiers. In addition, “Specify elapsed time after receipt” is valid for the folder unit operation information in FIG. In FIG. 9, “IN1 =” and “IN2 =” are not information constituting the first folder identifier. In FIG. 9, “OUTl =” and “OUT2 =” are not information constituting the second folder identifier.

[0133] Further, it is assumed that the log information in the log information storage unit 1221 is the log information illustrated in FIG.

[0134] The folder identified by the folder identifier “C: \ WORD \ IN—DIR005-1” of the file management device 11 is now identified by the original file identifiers “aaa.txt” and “bbb.bmp” 2 Assume that there are two files.

[0135] In addition, there is one file identified by the original file identifier "ccc.mp3" in the folder identified by the folder identifier "C: \ WORD \ IN—DIR005-2" of the file management device 11. , And.

Then, the file operation device 12 checks the file management device 11 once every 10 seconds, and constructs a set file from the original file catalog according to the folder unit operation information shown in FIG. . In this specific example, three configured files are constructed from the three original files of the first folder identified by the two first folder identifiers, and the first folder identifier identified by the second folder identifier of the three configured files. Placed in two folders.

Next, a specific operation of the file operation device 12 will be described.

First, the usage restriction setting means 1223 determines that it is the timing for performing usage restriction setting processing on the original file (the previous processing power has also passed 10 seconds). Next, the use restriction setting unit 122 reads the folder unit operation information of FIG.

Then, the use restriction setting unit 1223 reads the log information of FIG.

Next, the use restriction setting means 1223 performs folder unit operation information processing according to the folder unit operation information of FIG. That is, the usage restriction setting unit 1223 reads the first folder identifiers “C: ¥ WORD ¥ IN—DIR005-1” and “C: ¥ WORD ¥ IN_DIR005-2” in the folder unit operation information. Next, the use restriction setting means 1223 acquires the folder unit operation information power first use restriction information. [0141] Next, the use restriction setting means 1223 configures the second use restriction information shown in FIG. 10 from the acquired first use restriction information.

[0142] Next, the usage restriction setting means 1223 sets the second folder identifier "C: \ WORD \ OUT—DIR005-1" and "C: \ WORD \ OUT—DIR005-2" in the folder unit operation information.

BJC sticks out.

Next, the usage restriction setting unit 1223 acquires all file identifiers in the folder “C: ¥ WORD ¥ IN—DIR005—1”. Here, the use restriction setting means 1223 obtains the file identifiers “meeting.txt” and “bbb.bmp”.

Next, the usage restriction setting unit 1223 performs processing of the original file identified by the file identifier “aaa.txt”. Specifically, the usage restriction setting unit 1223 searches the log information of FIG. 7 using the first folder identifier and the file identifier “abc.doc” as keys. Since the log information in FIG. 7 does not include log information related to the processing of the file identified by the file identifier “abc.doc”, the usage restriction setting unit 1223 does not process the file “aaa.txt”. And decide.

Next, the usage restriction setting means 1223 sets the set file identifier to “ _&&& ” of the file identifier “aaa. 1;” and the extension “zgn” of the set file stored in advance as “ aaa. zg n ”.

Next, the usage restriction setting unit 1223 generates a file with the set file identifier “aaa.zgn”.

Next, the usage restriction setting means 1223 opens the file “aaa.zgn”.

Then, the use restriction setting means 1223 writes the second use restriction information of FIG. 10 in the header part of the opened file “aaa.zgnj”.

[0149] At the beginning of this process, the log information storage means 1222 displays the log information (first folder identifier "C: \ WORD \ IN—DIR005-1" original file name "aaa.zgn" status "process It is preferable to write information having “medium” in the log information storage means 1221.

Next, the usage restriction setting means 1223 opens the original file “C: ¥ WORD ¥ IN—DIR005—l ¥ aaa.txt” and reads out the main body data. Then, the usage restriction setting unit 1223 encrypts the acquired main body data. Next, the usage restriction setting means 1223 adds the data obtained by encryption to the set file “aaa.zgn”. Then, the use restriction setting unit 1223 closes the set file “aaa.z gnj”.

Next, the use restriction setting unit 1223 copies the set file “aaa.zgn” to the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR005-1”. Next, the log information accumulating unit 1222 has log information having the structure shown in FIG. 7 (“C: \ WOR D \ IN—DIR005—1, aaa.txt, processed, C: ¥ WORD ¥ OUT—DIR005—1 , a aa. zgn ”) and write it to the log information storage means 1221. Further, the use restriction setting unit 1223 copies the set file “aaa.zgn” to the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR005-2”. Next, the log information storage means 1222 stores log information having the structure shown in FIG. 7 (“C: ¥ WORD ¥ IN—D IR005—1, aaa.txt, processed, C: ¥ WORD ¥ OUT—DIR005—2 , aaa. zgn ”information) and write it to the log information storage means 1221. The log information accumulating unit 1222 overwrites the log information indicating that the processing is in progress with the previously accumulated log information, and deletes the log information indicating that the processing is in progress.

Next, the usage restriction setting unit 1223 processes the original file identified by the file identifier “bbb.bmp”. Specifically, the usage restriction setting unit 1223 searches the log information of FIG. 7 using the first folder identifier and the file identifier “bbb.bmp” as a key. Since the log information in FIG. 7 does not include log information related to the processing of the file identified by the file identifier “bbb.bmp”, the usage restriction setting unit 1223 has not processed the file “bbb.bmp”. And decide.

Next, the usage restriction setting means 1223 uses the file identifier “bbb.

The set file identifier is determined as “bbb.zgn” based on the extension “zgn” of the set file stored in advance and “1 ₎ ”.

Next, the usage restriction setting unit 1223 generates a file with the file identifier “bbb.zgn”.

Open the file “bbb.zgn”.

Then, the use restriction setting unit 1223 writes the second use restriction information in FIG. 10 in the header part of the opened file “bbb.zgn”. [0157] Next, the log information storage means 1222 stores the log information (first folder identifier “C: ¥ WORD ¥

IN—DIR005—1 ”original file name“ bbb.bmp ”(information having“ processing ”)) is written in the log information storage means 1221.

Next, the usage restriction setting means 1223 opens the original file “C: ¥ WORD ¥ IN—DIR005—l ¥ bbb.bmp” and reads the main data. Then, the use restriction setting means 1223 encrypts the acquired main body data.

Next, the usage restriction setting unit 1223 appends the data acquired by encryption to the set file “bbb.zgn”. Then, the use restriction setting unit 1223 closes the set file “bbb.zgnj”.

Next, the usage restriction setting unit 1223 copies the set file “bbb.zgn” to the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR005-1”. Next, the log information accumulating unit 1222 has log information having the structure shown in FIG. 7 (“C: ¥ WOR D ¥ IN—DIR005—1, bbb. Bmp, processed, C: ¥ WORD ¥ OUT—DIR005—1 , bbb.zgn ”), and is written in the log information storage means 1221. Further, the use restriction setting means 1223 copies the set file “bbb.zgn” to the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR005-2”. Next, the log information storage means 1222 stores log information having the structure shown in FIG. 7 (“C: ¥ WORD ¥ IN—D IR005—1, bbb.bmp, processed, C: ¥ WORD ¥ OUT—DIR005—2). , bbb.zgn ”) and write it to the log information storage means 1221. The log information accumulating unit 1222 overwrites the log information indicating “processing in progress” previously accumulated, and deletes the log information indicating that processing is in progress.

Next, the usage restriction setting unit 1223 acquires all file identifiers in the folder “C: ¥ WORD ¥ IN—DIR005-2”. Here, the use restriction setting means 1223 obtains the file identifier “ccc.mp3”.

[0162] Next, use restriction setting means 1223 performs the processing of the original file identified by the file identifier _"CCC. Mp3". Specifically, the usage restriction setting unit 1223 searches the log information of FIG. 7 using the first folder identifier and the file identifier “ccc.mp3” as a key. The log information shown in FIG. 7 includes an entry relating to processing of the file identified by the file identifier “ccc.mp3”. Therefore, the usage restriction setting means 1223 determines that the file “ccc.mp3” is unprocessed.

[0163] Next, the usage restriction setting unit 1223 converts the file identifier "ccc.mp3" from "ccc" and the file extension "zgn" stored in advance to the file identifier "ccc" zg n ”.

Next, the usage restriction setting unit 1223 generates a file with the set file identifier “ccc.zgn” and opens the file “ccc.zgn”.

Then, the use restriction setting means 1223 writes the second use restriction information in FIG. 10 in the header part of the opened file “ccc.zgn”.

[0166] Next, the log information storage means 1222 stores the log information (first folder identifier “C: ¥ WORD ¥

IN—DIR005—2 ”original file name“ ccc. Mp3 ”(information having“ processing ”) is written in the log information storage means 1221.

[0167] Next, the usage restriction setting means 1223 reads the original file “C: \ WORD \ IN—DIR005—

Open "2 \ ccc.mp3" and read the main data. Then, the usage restriction setting unit 1223 encrypts the acquired main body data.

Next, the usage restriction setting unit 1223 appends the data acquired by encryption to the set file “ccc.zgn”. Then, the use restriction setting unit 1223 closes the set file “ccc.z gnj”.

Next, the usage restriction setting unit 1223 copies the set file “ccc.zgn” to the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR005-1”. Next, the log information storage means 1222 stores log information having the structure shown in FIG. 7 ("C: \ WOR D \ IN—DIR005-2, ccc. Mp3, processed, C: \ WORD \ OUT—DIR005-1) , ccc. zgn ”) and write it to the log information storage means 1221. In addition, the usage restriction setting unit 1223 copies the set file “ccc.zgn” to the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIR005-2”. Next, the log information storage means 1222 has log information having the structure shown in FIG. 7 (“C: ¥ WORD ¥ IN—D IR005—2, ccc.mp3, processed, C: ¥ WORD ¥ OUT—DIR005—2). , ccc. zgnj) and write it to the log information storage means 1221. And the final log An example of the information is shown in Figure 11.

[0170] Through the above process (setting process), three set files have been placed in each of the two second folders. Figure 12 shows the concept of the setting process.

In FIG. 9, since the original file deletion information power is “1” indicating that there is deletion, the usage restriction setting means 1223 configures each set original file (“aaa”

txt "," bbb. bmp "," ccc. mp3 ").

[0172] Next, a specific example of file processing performed by the file operation device 12 on a set file will be described.

First, the file processing unit 123 determines that the file processing timing has come. Specifically, it is assumed that the file processing unit 123 performs the file processing, for example, every day at a predetermined time, for example, “15:00”. Then, it is assumed that the file processing unit 123 detects that it is 15:00 and determines that the timing of file processing has come.

[0174] Next, the file processing unit 123 reads the second folder identifier "C: \ WORD \ OUT—DIR005-1" and "C: \ WORD \ OUT—DIR005-2" in the folder unit operation information. .

Next, the file processing unit 123 acquires all file identifiers in the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DIRO 05-1”. Here, the file processing unit 123 acquires three file identifiers “aaa. Zgnj” “bbb. Zgnj“ ccc. Zgn ””.

Next, the file processing unit 123 first opens the set file identified by the file identifier “aaa.zgn”. Then, the file processing unit 123 reads the second usage restriction information (see FIG. 10) of the opened set file “aaa.zgn”.

[0177] Since the file operation device 12 does not accept the usage instruction for the set file or the file copying instruction, the file processing unit 123 uses the time limit in the second usage restriction information. Use date / time information to determine whether the set file should be deleted or not.

Then, it is assumed that the file processing unit 123 has acquired the current time “2005Z12Z18 15:00”. Next, the file processing unit 123 updates the update time “2005 of the set file“ aaa.zgn ”. / 12/15 10: 00 "is acquired. Then, it is assumed that the file processing unit 123 has acquired the update time of the folder unit operation information.

[0179] Then, the file processing unit 123 reads information "1" indicating that the elapsed time designation after receipt of the timed date and time information is valid from the second usage restriction information in FIG. 2 days 12 hours 30 minutes ”. Then, the file processing unit 123 receives the elapsed time after reception “2 days 12 hours 30 minutes”, the acquired current time “2005Z12Z18 12:13”, and the update time “2005Zl2Zl5 10” of the set file “aaa.zgn”. : 00 ”Since the current time“ 20 05/12/18 12:13 ”force has elapsed since the receipt of time“ 2 days 12 hours 30 minutes ”or more, it is determined that the condition is met, and the file is already set. Delete “aaa. Zgn”.

Similarly, the file processing unit 123 uses the files “bbb.zgn” and “ccc.zgn” in the second folder identified by the second folder identifier “C: ¥ WORD ¥ OUT—DI R005-1”. On the other hand, file processing is executed.

[0181] Similarly, the file processing unit 123 uses the files "aaa.zgn" and "bbb.zgn" in the second folder identified by the second folder identifier "C: \ WORD \ OUT—DIR005-2". ”,“ Execute file processing for ccc. Zgnj.

[0182] With the above file processing, a set file for which usage restriction information is set is deleted when the usage period expires.

[0183] Further, as described in the specific example 1, the set file can be restricted based on the access information. Since this process is the same as the process of Example 1, description thereof is omitted here.

[0184] As described above, according to the present embodiment, by setting usage restriction information for a folder, it is possible to apply the same usage restriction to all files existing in the folder. Information processing can easily ensure confidentiality of information.

[0185] Also, according to the present embodiment, when the usage restriction is set for the original file and the set file is obtained, the log information of the setting process can be left and the log information can be used. . This log information can be used, for example, to avoid performing duplicate setting processing.

[0186] Also, according to the present embodiment, a set file that is information on usage restrictions is already set. Files can be automatically stored in one or more folders. Therefore, for example, when the same set file is stored in two or more folders, measures such as changing the processing for each folder can be taken. In addition, file management can be facilitated by changing the department that uses the set file for each folder.

[0187] Also, according to the present embodiment, the data of the main body of the set file is encrypted, and the confidentiality of the information can be further enhanced.

[0188] Also, according to the present embodiment, by processing the set file in accordance with the second usage restriction information that the set file has, the file is secured while ensuring the security of the information described in the file. Can be used.

[0189] According to the present embodiment, the first folder identifier and the second folder identifier have a one-to-one relationship.

, And the specific example of 2 to 2, but the first folder identifier and the second folder identifier are

, N (N is 1 or more) vs. M (M is 1 or more). The same applies to other embodiments.

Further, according to the present embodiment, the file management device 11 and the file operation device 12 are different devices, but the functions of the file management device 11 and the file operation device 12 are included in one device. You may have. That is, the file management device 11 and the file operation device 12 may be connected via a network such as the Internet, or may be a single device. The same applies to other embodiments.

[0191] Also, according to the present embodiment, the file processing unit 123 of the file operation device 12 may exist in the file management device 11, and the file processing unit 123 may not be connected to a third device (not shown). It may exist in the place. The same applies to other embodiments.

[0192] According to the present embodiment, there are two or more file management devices 11, the file management device 11 is a client device, the file operation device 12 is a server device, and the file operation devices 12 are two or more. The original file of the file management apparatus 11 may be processed to generate a set file. The same applies to other embodiments.

[0193] In the present embodiment, only the main data is encrypted. However, it is more preferable to encrypt the entire set file including the second usage restriction information and the main data. second This is because it contributes to prevention of falsification of usage restriction information. The same applies to processing in other embodiments.

[0194] Also, according to the present embodiment, the device using the set file may be the file operation device 12, the file management device 11, or the third device. The same applies to other embodiments.

Furthermore, according to the present embodiment, the apparatus in which the original file and the set file exist are the same apparatus (file management apparatus 11), but they may be different apparatuses. This also applies to other embodiments.

[0196] Further, according to the present embodiment, it is preferable to be able to specify a device in which an original file exists and a device that generates a set file. The same applies to other forms of implementation.

Further, according to the present embodiment, the folder unit operation information may be information originally existing in two or more devices. The same applies to other embodiments.

In the present embodiment, the file processing apparatus may be another apparatus other than the file operation apparatus 12. The same applies to other embodiments.

[0199] Furthermore, the processing in the present embodiment may be realized by software. This software may be distributed by software download or the like. In addition, this software may be recorded and distributed on a recording medium such as a CD-ROM. This also applies to other embodiments in this specification. The software that realizes the file operation apparatus in the present embodiment is the following program. That is, this program reads a folder unit operation information stored in a computer, obtains a first folder identifier included in the read folder unit operation information, and associates the first folder identifier with the step. The step of acquiring the first usage restriction information, the step of generating one or more set files for the one or more original files existing in the folder identified by the acquired first folder identifier, A step of recording second usage restriction information, which is information related to usage restrictions, using the first usage restriction information in each of one or more configured files; and corresponding to each of the one or more configured files. A program for recording information on the main data of the original file to obtain one or more set files and a step for accumulating the set files. As the main data of the set file, the same data as the main data of the original data or data obtained by encrypting the main data of the original data is recorded.

[0200] Further, when the program executes a process for obtaining the set file in the computer, the program generates log information that is the previous information by recording the process, It is preferable to further execute a log information accumulation step of accumulating the log information in a recording medium.

[0201] In addition, the program obtains the set file with respect to the program in a folder identified by the first folder identifier included in the folder unit operation information at a predetermined timing. Get the identifier of the existing file, refer to the mouth information, use the first usage restriction information paired with the first folder identifier, and get the corresponding set file! It is preferable that the program is a program that performs processing only on an unprocessed file and obtains a set file corresponding to the unprocessed file and having the second usage restriction information.

[0202] In addition to the above-mentioned program, the program further includes a folder unit operation information including one or more first folder identifiers and a second folder identifier that is information for identifying a folder in which the set file is arranged. In the step of obtaining one or more and first use restriction information and obtaining the set file, in the one or more folders identified by the one or more first folder identifiers contained in the folder unit operation information. For one or more existing original files, use the first usage restriction information paired with the one or more first folder identifiers to obtain one or more configured files with second usage restriction information, It is preferable to place the one or more set files in one or more folders identified by the one or more second folder identifiers.

[0203] In addition, the program further encrypts the main data of the original file in the step of obtaining the set file with respect to the program, and records the encrypted main data in the set file. It is preferred that

[0204] In addition, the present program causes the above-mentioned program It is preferable that the program is a program for further executing a file processing step for processing the set file according to the second usage restriction information of the file.

(Embodiment 2)

FIG. 13 is a block diagram of the information processing system in the present embodiment. This information processing system includes a file management device 11 and a file operation device 132.

The file operation device 132 includes a folder unit operation information storage unit 121, a usage restriction setting unit 1322, and a file processing unit 123.

Further, the usage restriction setting unit 1322 includes log information storage means 1221, log information storage means 1222, judgment means 13221, and usage restriction setting means 13223.

Determination means 13221 determines whether or not the original file before execution of the process for obtaining the set file and the original file after execution of the process for obtaining the set file have changed. The change of the original file is performed using, for example, the attribute value of the update date and time of the original file. In such a case, the processing becomes faster, which is preferable. In such a case, the determination unit 13221 acquires the update date and time of the original file before executing the process, and acquires the update date and time of the original file after executing the process. If the two update dates and times are different, the original file changes. Judge that you are doing. On the other hand, the judging means 13221 judges that the original file has not changed unless the two update dates are different. Judgment is based on the update date, so even if the contents are substantially the same, if the update date is different, it is determined that the original file has changed. Also, the judging means 13221 reads the contents of the original file before executing the process, reads the contents of the original file after executing the process, compares the two contents, and if the two contents are the same, It can be determined that the original file has not changed, and if the two contents are different, it can be determined that the original file has changed. In such a case, the change can be judged accurately, but the processing time is thought to be significant. The judging means 13221 can be usually realized from an MPU, a memory or the like. The processing procedure of the judging means 13221 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it may be realized by hardware (dedicated circuit).

[0209] When the determination result that the determination result of the determination means 13221 has not changed is made, the usage restriction setting means 13223 obtains a set file. Usage restriction setting means 13223 If the judgment result in step 13221 is changed, the original file after the change is subjected to setting processing again using the first usage restriction information, and the second usage restriction information is obtained. Get a configured file with The set file also has information about the main data of the corresponding original file. The usage restriction setting means 13223 can usually be realized by an MPU, a memory and the like. The processing procedure of the use restriction setting means 13223 is usually realized by software, and the software is recorded on a recording medium such as a ROM. However, it can be realized with hardware (dedicated circuit).

Next, the operation of the file operation device 132 will be described. The operation of the file operation device 132 differs from the operation of the file operation device 12 in folder unit operation information processing. Therefore, folder unit operation information processing will be described using the flowchart of FIG. In the flowchart of FIG. 14, only the steps different from the flowchart of FIG. 3 will be described.

[0211] (Step S1401) The judging means 13221 acquires the update date and time (file attribute value) of the original file. This update date is set as the first update date. Here, it is preferable that the determination unit 13221 copies the original file to a work buffer (folder or the like) and performs the following processing on the copied file. In this way, the user can freely edit the original original file.

[0212] (Step S1402) The log information storage means 1222 constitutes log information and stores it in the log information storage means 1221. The log information to be configured is log information indicating that the set file corresponding to the original file is being processed.

[0213] (Step S1403) The determination means 13221 acquires the update date and time (file attribute value) of the original file. This update date is the second update date.

(Step S1404) Determination means 13221 determines whether the first update date and time acquired in step S 1401 and the second update date and time acquired in step S 1403 are the same information. If the information is the same, go to step S318; otherwise, return to step S315.

[0215] In the flowchart of FIG. 14, if the determination means 13221 is not successful in step S1403, it is impossible to obtain the update date of the original file (for example, if the original file is deleted), the original file You may cancel the process corresponding to. [0216] Hereinafter, a specific operation of the file operation device 132 in the present embodiment will be described. In this specific example, the specific example described in the first embodiment is that a set file can be created from the latest original file even if the original file is changed during the process of creating the set file. Different.

FIG. 5 is an example of one folder unit operation information in the folder unit operation information storage unit 121.

Further, it is assumed that the file “abc.doc” currently exists in the folder “C: ¥ WORD ¥ IN—DIR001” of the file management apparatus 11.

[0219] Then, it is assumed that the file operation device 132 checks the file management device 11 once every 10 seconds, and constructs a set file from the original file catalog according to the folder unit operation information shown in FIG.

Next, a specific operation of the file operation device 12 will be described.

First, the usage restriction setting unit 13223 determines that it is the timing for performing usage restriction setting processing for the original file (10 seconds have passed since the previous processing). Next, the usage restriction setting unit 122 reads the folder unit operation information of FIG.

[0222] Then, the use restriction setting unit 13223 reads the log information in the log information storage unit 1221. Here, it is assumed that the log information is NULL.

Next, the usage restriction setting means 13223 performs folder unit operation information processing according to the folder unit operation information of FIG. That is, the use restriction setting unit 1223 reads the first folder identifier “C: ¥ WORD ¥ IN—DIR001” in the folder unit operation information. next

The use restriction setting means 13223 also obtains the first use restriction information for the folder unit operation information power.

[0224] Next, the use restriction setting means 13223 configures the second use restriction information shown in FIG. 6 from the acquired first use restriction information.

Next, the usage restriction setting means 13223 reads the second folder identifier “C: ¥ WORD ¥ OUT—DIR001” in the folder unit operation information.

[0226] Next, the usage restriction setting means 13223 acquires all file identifiers in the folder “C: \ WORD \ IN—DIR001J. Here, only the file identifier“ abc.doc ”is acquired. The

The usage restriction setting means 13223 searches the log information using the file identifier “abc. Doc” as a key. The usage restriction setting means 13223 detects that the original file identified by the file identifier “abc. Doc” is processed as a result of the search, and that there is no information indicating that the set file has been constructed, and the original file “abc. .doc "is not processed.

Next, the determination unit 13221 acquires the first update date and time that is the attribute value of the original file “abc.doc”. Here, it is assumed that the acquired first update date and time was “2005Z12Z1 12:54”.

[0229] Next, the usage restriction setting means 1223 sets the file identifier “abc. (1 _{0 (} :“ _& 1 ^ ”) and the preset file extension“ zgn ”stored in advance. Determine the file identifier of the file as “abc.zg n”.

[0230] Next, the log information storage unit 1222 constitutes log information. Specifically, the log information storage means 1222 configures log information having the first folder identifier “C: ¥ WORD ¥ IN—DIR001”, the original file identifier “abc. Doc”, and the state “processing”. . Then, the log information storage unit 1222 adds, for example, log information “C: ¥ WORD ¥ IN—DIR001, abc.doc, in process” to the log information storage unit 1221.

Next, the usage restriction setting unit 13223 generates a file having the set file identifier “abc.zgn”.

Next, the usage restriction setting means 13223 opens the file “abc.zgn”.

Then, the use restriction setting unit 13223 writes the second use restriction information in FIG. 6 in the header portion of the opened file.

[0234] Next, the usage restriction setting means 13223 reads the original file “C: \ WORD \ IN—DIR001

Open \ abc.doc "and read its data. Then, the usage restriction setting unit 1223 encrypts the acquired main body data.

Next, the usage restriction setting means 1223 follows the data acquired by encryption into the set file “abc.zgn”.

Next, the determination unit 13221 acquires again the update date and time that is the attribute value of the original file “abc. Doc”. Here, the original file has been updated, and the acquired second update again It is assumed that the date and time was “2005/12/19 18:35”.

[0237] Next, the determination means 13221 compares the first update date and time "2005Z12Z1 12: 5 4" acquired first with the second update date and time "2005Z12Z19 18:35" acquired the second time, and is different. Judge that the original file has changed.

[0238] Then, the original file is opened again and its main data is read. Then, the main data is encrypted, and the encrypted data is written again in the set file “abc.zgn”. The location where the encrypted data is written is the location where the first encrypted data was written. This location is usually the location where the second usage restriction information has been written.

[0239] Then, the determination means 13221 again acquires the update date and time of the original file, and determines whether or not it has the same power as the update date and time acquired the second time (second time). Here, it is determined that the update date and time acquired last time are the same as the update date and time acquired for the third time, and the usage restriction setting unit 1223 closes the set file “abc.zgn”. Here, the contents of the configured file “abc.zgn” are confirmed.

Here, since the second folder identifier is one, the set file “abc.zgn” is not copied to a folder other than “C: ¥ WORD ¥ OUT—DIR 001”. Note that the usage restriction setting means 13223 does not generate the set file “abc. 2 ₈ 11” in “J: ¥ WORD ¥ OUT—DI R001”, but if it is generated in the work folder etc., the set file “abc. Copy “abc.zgn” to the folder “C: \ WORD \ OUT—DIR001” and delete the set file “abc.zgn” such as work folder.

Next, the log information accumulating unit 1222 configures the log information shown in FIG. 7, and writes it in the log information storage unit 1221. In such a case, the log information storage unit 1222 overwrites the log information “C: ¥ WORD ¥ IN—DIR001, abc.doc, processing” with the new log information, and creates “C: ¥ WORD ¥ IN—DIR001”. , abc. doc, processing "is deleted.

[0242] Since there is only one original file here, the folder unit operation information processing ends here. The concept of the above processing is shown in FIG.

[0243] In FIG. 5, since the deletion of the original file is “0” indicating that the original file is deleted, the usage restriction setting means 1223 configures the original file “abc.zgn” after configuring the set file “abc.zgn”. Do not delete "doc". [0244] Note that the processing of the file processing unit 123 has been described in Embodiment 1, and thus description thereof is omitted here.

[0245] As described above, according to the present embodiment, even when the contents of the original file are updated during the execution of the setting process, by monitoring whether or not the original file has changed before and after the setting process, A preconfigured file corresponding to the latest original file can be generated. For this reason, usage restriction information can be set for the latest original file, and the confidentiality of the information can be further secured.

[0246] According to the specific example of this embodiment, the presence or absence of the change in the original file is determined from the information on the update date of the file, but other information such as comparing the original data of the original file, You can use other algorithms to determine whether the original file has changed! ,.

[0247] Also, according to the present embodiment, the timing for acquiring the update date and time when the information on the update date and time of the original file is acquired before and after the setting process may be another timing.

[0248] Also, according to the present embodiment, the setting process is performed for all original files identified by the first folder identifier. However, the setting process is performed for a specific original file and the setting is performed. Of course, even when a completed file is generated, it is possible to check the original file for changes, and if it is determined that the file has changed, the setting process may be performed on the latest original file again. Yes. That is, the file operation device stores the first use restriction information that is information for restricting the use of the original file, and the first use restriction information storage unit 1521 and the original file with respect to the first use restriction information. It has a usage restriction setting unit 1522 that executes processing for obtaining one or more set files that have second usage restriction information and information about the main data of the corresponding original file by using one usage restriction information. The usage restriction setting unit 1522 determines whether the original file before execution of the process for obtaining the set file and the original file after execution of the process for obtaining the set file are changed. In the case where the determination means and the determination result of the determination means have changed and the determination result is “! / ヽ”, the file operation device 152 includes a use restriction setting means for obtaining the set file. If There. FIG. 15 is a block diagram of an information processing system including a powerful file operation device 152.

[0249] Furthermore, the software that implements the file operation device according to the present embodiment includes the following: It is a program like this. That is, the program reads a stored original file to a computer, obtains main data of the original file, reads the stored first use restriction information, and sets a set file. A step of generating, a step of writing the second use restriction information into the generated set file using the read first use restriction information, and writing information about the acquired main body data into the set file. An original file before execution of the process for obtaining the set file, and a determination step for determining whether or not the original file after execution of the process for obtaining the set file is changed. If the determination result in the determination step is changed and the determination result is “No”, the set file Which is a program, for executing the step of accumulation.

[0250] Further, the program stores in a computer and reads out folder unit operation information, acquires a first folder identifier included in the read folder unit operation information, The step of acquiring the first usage restriction information paired with the folder identifier from the folder unit operation information, and one or more settings for one or more original files existing in the folder identified by the acquired first folder identifier Generating a completed file; recording second usage restriction information, which is information relating to usage restrictions, using the first usage restriction information in each of the one or more set files; and Recording information about the main data of the corresponding original file in each configured file to obtain one or more configured files; A determination step for determining whether or not an original file before execution of the process for obtaining the set file and an original file after execution of the process for obtaining the set file are changed; and A program for executing the step of accumulating the set file when the determination result in the step is changed and the determination result is NO.

[0251] In addition, when the determination result in the determination step in the determination step changes in the computer relative to the program, the program does not change the first file in the original file after the change. It is preferable that the program is a program for further executing the step of obtaining a set file having second usage restriction information by performing processing using the usage restriction information. [0252] Further, the program is a program for causing the computer to further execute a file processing step for processing the set file in accordance with the second use restriction information of the set file. It is preferable that

[0253] Also, in each of the above embodiments, each processing (each function) may be realized by centralized processing by a single device (system) or a plurality of devices. It may be realized by distributed processing by.

[0254] FIG. 16 shows the external appearance of a computer that executes the program described in this specification and implements the file management apparatus and the file operation apparatus in the various embodiments described above. The above-described embodiment can be realized by computer hardware and a computer program executed on the computer hardware. FIG. 16 is an overview diagram of the computer system 340, and FIG. 17 is a block diagram of the computer system 340.

[0255] In FIG. 16, the computer system 340 includes an FD (Flexible Disk) drive and a CD.

-Includes a computer 341 including a Compact Disk Read Only Memory (ROM) drive, a keyboard 342, a mouse 343, and a monitor 344.

In FIG. 17, in addition to the FD drive 3411 and CD—ROM drive 3412, the computer 341 includes a CPU (Central Processing Unit) 3413 and a bus 3414 connected to the CPU 3413, CD—ROM drive 3412 and FD drive 3411. ROM (Read-Only Memory) 3415 for storing programs such as boot-up programs, and CPU 3413 for temporarily storing application program instructions and providing a temporary storage space A RAM (Random Access Memory) 3416 and an application program, a system program, and a hard disk 3417 for storing data are included. Although not shown here, the computer 341 may further include a network card that provides connection to the LAN.

[0257] A program that causes the computer system 340 to execute the functions of the file management device and the file operation device of the above-described embodiment is stored in the CD-ROM 3501 or FD 3502, and the CD-ROM drive 3412 or FD drive 3411. And may be transferred to the hard disk 3417. Alternatively, the program may be transmitted to the computer 341 via a network (not shown) and stored in the hard disk 3417. Yes. The program is loaded into RAM 3416 when executed. The program may be loaded directly from CD-ROM 3501, FD3502 or network.

[0258] The program does not necessarily include an operating system (OS), a third party program, or the like that causes the computer 341 to execute the functions of the file management device, the file operation device, and the like described above. . The program only needs to include the part of the instruction that calls the appropriate function (module) in a controlled manner and obtains the desired result. The operation of the computer system 340 is well known and will not be described in detail.

[0259] Further, the computer that executes the program may be a single computer or a plurality of computers. That is, centralized processing or distributed processing may be performed.

[0260] In addition, in each of the above embodiments, it goes without saying that two or more communication means (such as an information transmission unit) existing in one device may be physically realized by one medium.

[0261] The present invention can be variously modified without being limited to the above-described embodiments, and it goes without saying that these are also included in the scope of the present invention.

Industrial applicability

[0262] As described above, the file operation device according to the present invention has an effect that the file can be used while ensuring the security of the information described in the file, and is useful as a computer device or the like that performs the file operation. It is.

Brief Description of Drawings

[0263] [Figure 1] Block diagram of the information processing system in the first embodiment

FIG. 2 is a flowchart for explaining the operation of the file operation device.

FIG. 3 is a flowchart for explaining the operation of the folder unit operation information processing.

[Fig.4] Flowchart explaining the operation of the file processing

[Figure 5] A diagram showing a specific example of the same folder unit operation information

[FIG. 6] A diagram showing a specific example of the second usage restriction information

[Figure 7] Diagram showing an example of the log information

[Fig.8] Diagram showing the concept of this setting process

[Figure 9] A diagram showing a specific example of the same folder unit operation information [FIG. 10] A diagram showing a specific example of the second usage restriction information

[Figure 11] Figure showing an example of the log information

[Fig.12] Diagram showing the concept of this setting process

FIG. 13 is a block diagram of an information processing system in the second embodiment.

[Fig.14] Flow explaining operation of same folder unit operation information processing

[Figure 15] Block diagram of the information processing system

[Fig.16] External view of file management device and file operation device

[Fig.17] Block diagram of file management device and file operation device

11 File management device

12, 132, 152 File operation device

121 Folder unit operation information storage

122, 1322, 1522

123 File processing section

1221 Log information storage means

1222 Log information storage means

1223, 13223 Usage restriction setting means

13221 Judgment means

1521 First usage restriction information storage

Claims

The scope of the claims

[1] The first use restriction, which is information for restricting the use of the first folder identifier, which is information for identifying a folder in which one or more original files as files to be operated are stored, and the file existing in the folder. Storing at least one folder unit operation information having information, a folder unit operation information storage unit;

Use restriction using the first use restriction information paired with the first folder identifier for one or more original files existing in the folder identified by the first folder identifier included in the folder unit operation information. A file operation apparatus comprising a use restriction setting unit that obtains one or more set files that have second use restriction information that is information related to the main file data of the corresponding original file.

[2] The usage restriction setting unit

Log information storage means for storing log information, which is information related to execution of processing for obtaining a set file performed by the use restriction setting unit;

Log information storage means for generating log information, which is the previous information for recording the process, and storing the log information in the log information storage means when the process for obtaining the set file is executed; ,

The first usage paired with the first folder identifier for one or more original files existing in the folder identified by the first folder identifier included in the folder unit operation information at a predetermined timing. Claims comprising use restriction setting means for obtaining one or more set files having second use restriction information, which is information on use restrictions, and having information on main data of the corresponding original file, using the restriction information. Item 1. The file operation device according to item 1.

[3] The use restriction setting means includes:

At a predetermined timing, an identifier of a file existing in the folder identified by the first folder identifier included in the folder unit operation information of the folder unit operation information storage unit is acquired, the log information is referred to, and Use the first usage restriction information paired with the first folder identifier to obtain the corresponding set file! Execute the process only on the unprocessed file and handle the unprocessed file. It is a set file, 3. The file operation device according to claim 2, wherein the file operation device has second usage restriction information and obtains a set file having information on main data of the corresponding original file.

[4] The folder unit operation information is

1 or more first folder identifiers, 1 or more second folder identifiers that are information for identifying folders in which the set files are arranged, and first usage restriction information,

With respect to one or more original files existing in one or more folders identified by one or more first folder identifiers included in the folder unit operation information, a pair that is paired with the one or more first folder identifiers. Using the one usage restriction information, obtain one or more set files having the second use restriction information and information about the main data of the corresponding original file, and the one or more set files are 2. The file operation device according to claim 1, wherein the file operation device is placed in one or more folders identified by one or more second folder identifiers.

[5] The processing performed by the usage restriction setting unit includes encryption processing of the main data of the original file,

2. The file operation device according to claim 1, wherein the main information is data obtained by encrypting main data of the original file.

[6] A first usage restriction information storage unit that stores first usage restriction information that is information for restricting the use of the original file;

Processing for obtaining one or more set files having second usage restriction information and information on main data of the corresponding original file, using the first usage restriction information for the original file. A usage restriction setting unit to execute,

The usage restriction setting unit

An original file before execution of the process for obtaining the set file, a determination means for determining whether or not an original file after execution of the process for obtaining the set file has changed, and the determination result of the determination means is A file operation device comprising use restriction setting means for obtaining the set file when the result is a judgment result of! /!

[7] The use restriction setting unit includes:

The original file before execution of the process for obtaining the set file and the set file are obtained. A determination means for determining whether or not the original file after execution of the process is changed; and if the determination result of the determination means is a determination result of! / ヽ! The file operation device according to claim 1, further comprising usage restriction setting means for obtaining

[8] The use restriction setting means includes:

If the judgment result of the judging means is changed! /, The processed original file is processed using the first usage restriction information, and the second usage restriction information is set. 7. The file operation device according to claim 6, wherein the file operation device obtains a set file having information on the main data of the corresponding original file.

9. The file operation device according to claim 1, further comprising a file processing unit that processes the set file according to second usage restriction information of the set file.

[10] A recording medium recording a program for causing a computer to execute the following steps,

Reading stored folder unit operation information;

Obtaining a first folder identifier included in the read folder unit operation information;

The step of acquiring the first usage restriction information paired with the first folder identifier, and generating one or more set files for one or more original files existing in the folder identified by the acquired first folder identifier And steps to

Recording second usage restriction information, which is information about usage restrictions, in each of the one or more configured files using the first usage restriction information;

Recording information on the main data of the corresponding original file in each of the one or more set files to obtain one or more set files;

A recording medium on which a program for executing the step of storing the one or more set files is recorded.

[11] On the computer,

In order to further execute a log information accumulation step of generating log information, which is the previous information, and accumulating the log information in a recording medium when the process for obtaining the set file is executed. A recording medium on which the program according to claim 10 is recorded.

[12] In the step of obtaining the set file,

At a predetermined timing, an identifier of a file existing in the folder identified by the first folder identifier included in the folder unit operation information is acquired, and the log information is referred to and matched with the first folder identifier. Using the first usage restriction information, the corresponding set file is obtained, and only the unprocessed file is processed, and the set file corresponding to the unprocessed file. 12. A recording medium recording the program according to claim 11, wherein a set file having usage restriction information is obtained.

[13] The folder unit operation information is

In the step of obtaining the set file, having one or more first folder identifiers, one or more second folder identifiers, which are information for identifying folders in which the set files are arranged, and first use restriction information ,

With respect to one or more original files existing in one or more folders identified by one or more first folder identifiers included in the folder unit operation information, a pair that is paired with the one or more first folder identifiers. Using one use restriction information, obtain one or more set files having second use restriction information, and put the one or more set files into one or more folders identified by the one or more second folder identifiers. A recording medium on which the program according to claim 10 is recorded.

[14] In the step of obtaining the set file,

11. The recording medium on which the program according to claim 10 is recorded by further encrypting the main data of the original file, and recording the encrypted main data in the set file.

[15] A recording medium recording a program for causing a computer to execute the following steps,

Storing and reading the original file

Obtaining body data of the original file;

Reading stored first usage restriction information;

Generating a configured file;

Writing the second usage restriction information into the generated set file using the read first usage restriction information; Writing information about the acquired body data to the set file;

An original file before execution of the process for obtaining the set file, and a determination step for determining whether or not the original file after execution of the process for obtaining the set file has changed;

A recording medium storing a program for executing the step of accumulating the set file when the determination result in the determination step is changed and the determination result is NO.

[16] A recording medium recording a program for causing a computer to execute the following steps,

Reading stored folder unit operation information;

Obtaining first usage restriction information paired with the first folder identifier from the folder unit operation information;

Generating one or more configured files for one or more original files present in the folder identified by the acquired first folder identifier;

[17] On the computer, If the determination result in the determination step is a determination result that changes, the original file after the change is processed using the first use restriction information, and the second use restriction information is set. Claim 1 for further executing the step of obtaining a completed file

5. A recording medium on which the program described in 5 is recorded.

[18] On the computer,

11. A recording medium on which a program according to claim 10 is recorded for further executing a file processing step for processing the set file in accordance with second usage restriction information of the set file.

[19] Read out the per-folder operation information to store!

A file operation method comprising a step of storing the one or more set files.

[20] Store and read the original file! /,

Obtaining body data of the original file;

Reading stored first usage restriction information;

Generating a configured file;

Writing the second usage restriction information into the generated set file using the read first usage restriction information;

Writing information about the acquired body data to the set file;

An original file before execution of the process for obtaining the set file, and the set file A determination step for determining whether or not the original file after the execution of the process for obtaining

A file operation method comprising a step of accumulating the set file when the determination result in the determination step is a change result.