WO2009087801A1

WO2009087801A1 - File sharing system, access right management method and terminal device

Info

Publication number: WO2009087801A1
Application number: PCT/JP2008/069136
Authority: WO
Inventors: Fumitaka Nakahara; Yoshihiro Ono; Kenichi Ariga; Takashi Shiraki; Shinya Ishikawa
Original assignee: Nec Corporation
Priority date: 2008-01-10
Filing date: 2008-10-22
Publication date: 2009-07-16
Also published as: JPWO2009087801A1

Abstract

A file making-up terminal device acquires identification information of a terminal device that belongs to the same group. Based on the acquired identification information, the file making-up terminal device grants other terminal devices the right to access the file made up by the file making-up terminal device.

Description

File sharing system, access right management method and terminal

The present invention is used for managing access rights in a file sharing system such as groupware, an intranet, or a social network king system.

In recent years, various social networking services are becoming popular. The social networking service is a community-type service that is developed mainly on the Web, and it is possible to register acquaintances or friends between participating users, or to establish a group called an individual community on the service to expand new friendships. It is also a membership service that makes it possible.

Social networking services generally have a control function that allows only acquaintances, friends, and community participants to view content such as diaries, blogs, and photo albums. These functions can be edited or viewed on mobile devices such as mobile phones, and their use is increasing in environments where friends and acquaintances who are registered share the same time and place. (For example, refer to Japanese Patent Publication No. 2004-086441 or Japanese Patent Publication No. 2005-309890.)

However, due to the rapid increase in the number of members in recent years and the increase in the number of acquaintances or friends registered by one user and the increase in the number of users constituting a community, access control of content disclosed by users is not functioning as expected by users. is there. Alternatively, since it is necessary for the user to set an access right for each individual, this setting is troublesome for the user.

In addition, for example, you may want to set up to allow viewing of the created file only for those who attended the meeting room, and in that case it is very important to set the attendee's terminal for each created file troublesome.

In the access right determination method described above, it is troublesome for the user to grant the access right to each publicly disclosed terminal for the file published by the public terminal. There is also a method of grouping open terminals in advance and granting access rights to those groups. However, if you want to set slightly different access rights for the terminals in the group, you must assign access rights individually as described above. There was a need to decide.

The present invention has been made to solve such a problem. When a file is shared, the access right is automatically assigned, so that the trouble of granting the access right can be solved. The purpose is to do.

In order to achieve the above object, the present invention provides:
In a shared file creation terminal provided with a shared file creation means for creating a shared file to be shared by one or more shared file browsing terminals,
Identification information acquisition means for acquiring identification information of other terminals in the vicinity of the shared file creation terminal;
Means for transmitting the identification information of the other terminal acquired by the identification information acquisition means to a file management device that manages access to the shared file from the shared file browsing terminal based on the identification information of the shared file browsing terminal; It is provided with.

In addition, in a file management apparatus provided with a file access right database storing identification information indicating that it is a shared file browsing terminal to which an access right has been granted,
A group information database for pre-registering a group to which the shared file creation terminal and the shared file browsing terminal belong;
Based on the identification information of other terminals acquired and transmitted by the shared file creation terminal, a terminal belonging to the same group as the shared file creation terminal registered in the group information database or a group specified by the shared file creation terminal is extracted. And a file access right determination device including means for registering the extracted terminal identification information in the file access right database.

Further, when accessing a shared file, the identification information of the shared file browsing terminal is sent to a file management apparatus that manages access to the shared file from the shared file browsing terminal based on the identification information of the shared file browsing terminal. In the shared file browsing terminal, comprising: means for sending and inquiring about access right; and means for accessing the shared file when there is the access right.
In response to an inquiry from the shared file creation terminal, a means for returning identification information of the shared file browsing terminal is provided.

Also, a shared file creation terminal that creates a shared file to be shared by one or more shared file browsing terminals, one or more shared file browsing terminals that access the created shared file, and the shared file from the shared file browsing terminal In a file sharing system comprising a file management device that manages access to a file based on identification information of the shared file browsing terminal,
The shared file creation terminal
Identification information acquisition means for acquiring identification information of other terminals in the vicinity of the shared file creation terminal;
Means for transmitting the identification information of the other terminal acquired by the identification information acquisition means to the file management device;
The file management device includes:
A file access right database storing identification information indicating that the access right is a shared file browsing terminal;
A group information database that pre-registers a group to which the shared file creation terminal and the shared file browsing terminal belong;
Based on the identification information of other terminals acquired and transmitted by the shared file creation terminal, a terminal belonging to the same group as the shared file creation terminal registered in the group information database or a group specified by the shared file creation terminal is extracted. And a file access right determination device including means for registering the extracted terminal identification information in the file access right database,
The shared file browsing terminal is provided with means for returning identification information of the shared file browsing terminal in response to an inquiry from the shared file creation terminal.

Also, a shared file creation terminal that creates a shared file to be shared by one or more shared file browsing terminals, one or more shared file browsing terminals that access the created shared file, and the shared file from the shared file browsing terminal In a file access right management method applied to a file sharing system comprising a file management device that manages access to a file based on identification information of the shared file browsing terminal,
The shared file creation terminal acquires identification information of other terminals in the vicinity of the shared file creation terminal, and transmits the acquired identification information of other terminals to the file management device;
The file management device is registered in a group information database that pre-registers a group to which the shared file creation terminal and the shared file browsing terminal belong based on identification information of other terminals acquired and transmitted by the shared file creation terminal. A terminal belonging to the same group as the shared file creation terminal or a group specified by the shared file creation terminal is extracted, and the identification information of the extracted terminal is the shared file browsing terminal to which the access right is given Register it in the file access right database that stores the identification information,
The shared file browsing terminal sends back identification information of the shared file browsing terminal in response to an inquiry from the shared file creation terminal.

Also, a program that is executed by an information processing apparatus by being installed in the information processing apparatus,
In a program for realizing a function corresponding to the function of a shared file creation terminal having a shared file creation function for creating a shared file to be shared by one or more shared file browsing terminals,
An identification information acquisition function for acquiring identification information of other terminals in the vicinity of the shared file creation terminal;
A function of transmitting the identification information of the other terminal acquired by the identification information acquisition function to a file management device that manages access to the shared file from the shared file browsing terminal based on the identification information of the shared file browsing terminal; It is characterized by realizing.

A program to be executed by an information processing apparatus by installing the information processing apparatus,
In a program that realizes a function corresponding to the function of a file management device having a file access right database storing identification information indicating that it is a shared file browsing terminal to which an access right has been granted,
Realizing a function corresponding to the function of the group information database that pre-registers the group to which the shared file creation terminal and the shared file browsing terminal belong,
Based on the identification information of other terminals acquired and transmitted by the shared file creation terminal, a terminal belonging to the same group as the shared file creation terminal registered in the group information database or a group specified by the shared file creation terminal is extracted. Then, the function of registering the extracted terminal identification information in the file access right database is realized.

Also, a program that is executed by an information processing apparatus by being installed in the information processing apparatus,
When accessing a shared file, the shared file viewing terminal transmits the identification information of the shared file viewing terminal to a file management device that manages access to the shared file based on the identification information of the shared file viewing terminal. A function to inquire access rights,
In the program for realizing the function corresponding to the function of the shared file browsing terminal provided with the function of accessing the shared file when there is the access right,
In response to an inquiry from a shared file creation terminal, a function of returning identification information of the shared file browsing terminal is realized.

According to the present invention, the shared file creation terminal that created the shared file can set another terminal that can be automatically accessed when storing the file as the shared file browsing terminal. Can grant the access authority.

1 is a diagram illustrating an overall configuration of a file sharing system according to a first embodiment. It is an example of the recorded content of the file access right database of 1st embodiment. It is a figure which shows an example of the recording content of the group information database of 1st embodiment. It is a flowchart which shows the operation | movement procedure of the file access right determination apparatus of 1st embodiment. It is a figure which shows the whole structure of the file sharing system of 3rd embodiment. It is a figure which shows the recording content of the access policy database of 3rd embodiment. It is a flowchart which shows the operation | movement procedure of the file access right determination apparatus of 3rd embodiment. It is a whole block diagram of the file sharing system of 4th embodiment. It is a figure which shows the recording content of the log | history information database of 4th embodiment. It is a flowchart which shows the operation | movement procedure of the file access right determination apparatus of 4th embodiment.

(Overview)
In the embodiment of the present invention, a terminal that creates a shared file and searches for identification information of other terminals in the vicinity of its own terminal and transmits it to the file management apparatus is called a shared file creation terminal. The shared file creation terminal searches for identification information of other terminals in the vicinity of the own terminal by short-range radio or GPS (Global Positioning System) and transmits it to the file management apparatus. The file management device collates the terminal information of the terminal transmitted from the shared file creation terminal with the terminal identification information extracted from the group information database in which the group information of the shared file creation terminal is registered. If common identification information exists as a result of collation, access permission is automatically granted to the corresponding terminal. If not applicable, the access right is denied. On the other hand, it is possible to automatically grant access denial to the corresponding terminal. Note that a terminal that attempts to browse a shared file is called a shared file browsing terminal.

When the shared file browsing terminal sends a file browsing request to the file management device, the file management device searches the file access right database for files that are permitted to be accessed by the shared file browsing terminal requested by the file management device. The search result is provided to the shared file browsing terminal. In response to this search result, the shared file browsing terminal designates a file to be read out and makes a request to the file management apparatus. As a result, the file management device reads the file from the file storage device storing the shared file and transmits it to the shared file browsing terminal.

By adding the condition of not only group information but also a terminal in the vicinity of the shared file creation terminal, there is no need to assign access rights individually for determining access rights depending on location, which can be annoying to the user. Can be reduced.

Note that the difference between the present invention and the Japanese Patent Publication No. 2004-086441 or 2005-309890 is that the present invention eliminates the troublesome initial setting of the file access right to a large number of users. It is different. In the present invention, when the shared file creation terminal stores a file, the access right of the other terminal is set, and then the access right is set first regardless of where the other terminal is located when the browsing request is made. However, it is different in that access is possible if the user is in a position where access is permitted. Therefore, if you are in the office when you set access rights, you can browse even when you are away from home.

(Configuration of the first embodiment)
A first embodiment will be described with reference to the drawings. FIG. 1 is an overall configuration diagram of a file sharing system according to the first embodiment. As shown in FIG. 1, the first embodiment includes a shared file creation terminal 10, a shared file browsing terminal 11, a file access right determination device 20, a file access right database 30, a file storage device 40, a file browsing management device 50, It consists of a group information database 60. The file access right determination device 20, the file access right database 30, the file storage device 40, the file browsing management device 50, and the group information database 60 constitute the file management device 12.

The shared file creation terminal 10 includes a file control function 10A, a camera function 10B, and a wireless network function 10C. The shared file browsing terminal 11 includes a wireless network function 11C and a file browsing request device 11D.

The shared file creation terminal 10 and the shared file browsing terminal 11 in the present embodiment describe only functions necessary for transmission or browsing. Actually, the shared file creation terminal 10 and the shared file browsing in the same terminal. The function of the terminal 11 may be provided.

If there is more than one shared file browsing terminal 11, there may be any number. Further, the shared file creation terminal 10 and the shared file browsing terminal 11 each have identification information that can uniquely identify the terminal.

These file control function 10A, camera function 10B, wireless network function 10C, wireless network function 11C, file browsing function 11D, file access right determination device 20, file access right database 30, file storage device 40, file browsing management device 50, The group information database 60 operates under program control.

In the first embodiment, the wireless network function 10C and the wireless network function 11C have a function of forming an ad hoc network using short-range wireless communication such as Bluetooth (registered trademark), IrDA, Zigbee, and file control. The shared file browsing terminal 11 is searched by the search request of the function 10A.

FIG. 2 is a diagram showing an example of the recorded contents of the file access right database 30. The file access right database 30 possesses shared file creation terminal identification information, browsing-permitted shared file browsing terminal identification information, file names, and file storage locations.

FIG. 3 is a diagram showing an example of the recorded contents of the group information database 60. The group information database 60 is a list of shared file browsing terminals 11 registered in the shared file creation terminal 10 and possesses shared file creation terminal identification information and registered shared file browsing terminal identification information. This uses group information used in social networking services and groupware.

That is, the group in the present invention refers to a large-scale (hundreds or thousands) group such as a social networking service or groupware. Members of such a large group are registered in the group information database 60. According to the present invention, a process of automatically granting an access right is limited to a small specific group composed of a small number of members who have met in the large group.

(Description of operation of the first embodiment)
(Overview of operation)
An outline of the operation of the first embodiment will be described with reference to FIG. FIG. 4 is a flowchart showing a processing procedure of the file access right determination device 20 in the first embodiment.

In the first embodiment, when the file access right determination device 20 acquires the identification information of the shared file creation terminal 10 in step 1, the file access right determination device 20 searches the group information database 60 to determine the group to which the shared file creation terminal 10 belongs. Confirm in step 2.

Subsequently, when the identification information of the terminal in the vicinity of the shared file creation terminal 10 is acquired from the shared file creation terminal 10 in Step 3, the shared file creation confirmed in Step 2 by the terminal in the vicinity of the shared file creation terminal 10 based on the identification information. It is determined in step 4 whether or not the group is the same as the terminal 10.

If the group is the same in step 4, the access right is granted by registering the terminal as the shared file browsing terminal 20 in the file access right database in step 5.

(Details of operation)
Saving to the file access right management device 30 and the file storage device 40 is performed as follows.
(1) The shared file creation terminal 10 takes a picture using the camera function 10B and transmits the created photo file to the file control function 10A immediately after creating the file.
(2) The file control function 10A transmits a search request for the shared file browsing terminal 11 in the vicinity of the shared file creation terminal 10 to the wireless network function 10C.
(3) The wireless network function 10C broadcasts a search request for terminals existing in the vicinity of the shared file creation terminal 10 indiscriminately using short-range wireless.
(4) The wireless network function 11C that has received a search request from the wireless network function 10C transmits terminal-specific identification information held by the shared file browsing terminal 11 to the wireless network function 10C. All the shared file browsing terminals 11 that have received the broadcast from the shared file creation terminal 10 perform the above operation.
(5) The wireless network function 10C transmits all the identification information received from the wireless network function 11C to the file control function 10A.
(6) The file control function 10A transmits the photo file received from the camera function 10B, the identification information received from the wireless network function 10C, and the identification information of the shared file creation terminal 10 to the file access right management device 20.
(7) The file access right management device 20 stores the photo file received from the file control function 10A in the file storage device 40.
(8) The file access right management device 20 is registered in the group information database 60 as a group member of the shared file creation terminal 10 using the identification information of the shared file creation terminal 10 received from the file control function 10A as a key. The identification information of the shared file browsing terminal 11 is extracted.
(9) The file access right management device 20 collates the identification information of the shared file browsing terminal 11 received from the file control function 10 </ b> A with the identification information extracted from the group information database 60. As a result of the collation, together with the identification information of the shared file browsing terminal 11 that exists in common, the identification information of the shared file creation terminal 10 received from the file control function 10A, the name of the file, and the storage location of the file stored in the file storage device 40 Save in the file access right database 30.

Browse the file as follows:
(1) The file browsing function 11D transmits the identification information of the shared file browsing terminal 11 and the file list request to the file browsing management device 50.
(2) The file browsing management device 50 searches the file access right database 30 using the identification information of the shared file browsing terminal 11 received from the file browsing function 11D as a key, and lists the files permitted to the shared file browsing terminal 11 To extract.
(3) The file browsing management device 50 transmits the file list extracted from the file access right database 30 to the file browsing function 11D.
(4) The user of the shared file browsing terminal 11 designates a file to be read from the file list received from the file browsing management device 50 in the file browsing function 11D, and sends the file browsing management device 50 to the shared file browsing terminal 11 The identification information and the name of the file to be read are transmitted.
(5) The file browsing management device 50 searches the file access right database 30 using the identification information of the shared file browsing terminal 11 received from the file browsing function 11D and the name of the file to be read as keys. As a result of the search, the file storage location is obtained from the file access right database 30, the file designated as the storage location is obtained from the file storage device 40, and is transmitted to the file browsing function 11D.

(Explanation of effect)
Among the shared file browsing terminals 11 registered in the group of the shared file creation terminal 10, an access right is automatically given to the shared file browsing terminal 11 in the vicinity of the shared file creation terminal 10 at the same time. It is. As a specific example, when a friend belonging to the same group goes on a trip, the shared file creation terminal 10 takes a picture, and among the many shared file browsing terminals 11 registered in the group, it is in the vicinity. A situation where the access right is given only to the shared file browsing terminal 11 can be considered.

Other than this, it is also possible to apply when creating a document file in the office and publishing it. Further, since the file itself is not transmitted directly to the shared file browsing terminal 11, it is possible to suppress information leakage by changing the access right of the shared file browsing terminal 11 later.

(Second embodiment)
In the second embodiment, the access right can be changed or updated for a file already stored in the file storage device 40. The configuration of the second embodiment is the same as FIG. The operation will be described below.
(1) The file control function 10A transmits the identification information of the shared file creation terminal 10 and the file list request to the file access right determination device 20.
(2) The file access right determination device 20 searches the file access right database 30 using the identification information of the shared file creation terminal 10 received from the file control function 10A as a key, and obtains a list of files stored in the shared file creation terminal 10 Extract.
(3) The file access right determination device 20 transmits the file list of the shared file creation terminal 10 extracted from the file access right database 30 to the file control function 10A.
(4) In the file control function 10A, the user of the shared file creation terminal 10 issues an access right change command to the file whose access right is to be changed from the file list received from the file access right determination device 20.
(5) Upon receiving the file access right change command, the file control function 10A transmits a search request for the shared file browsing terminal 11 in the vicinity of the shared file creation terminal 10 to the wireless network function 10C.
(6) The wireless network function 10C broadcasts the search request of the shared file browsing terminal 11 in the vicinity of the shared file creation terminal 10 indiscriminately using short-range wireless.
(7) The wireless network function 11C that has received a search request from the wireless network function 10C transmits terminal-specific identification information of the shared file browsing terminal 11 to the wireless network function 10C. All the shared file browsing terminals 11 that have received the broadcast from the shared file creation terminal 10 perform the above operation.
(8) The wireless network function 10C transmits all the identification information received from the wireless network function 11C to the file control function 10A.
(9) The file control function 10A transmits the end identification information received from the wireless network function 10C and the identification information of the shared file creation terminal 10 to the file access right determination device 20.
(10) The file access right determination device 20 is registered in the group information database 60 as a group member of the shared file creation terminal 10 using the identification information of the shared file creation terminal 10 received from the file control function 10A as a key. The identification information of the shared file browsing terminal 11 is extracted.
(11) The file access right determination device 20 collates the identification information of the shared file browsing terminal 11 received from the file control function 10 </ b> A with the identification information extracted from the group information database 60. About the identification information of the shared file browsing terminal 11 that exists in common as a result of the collation, the identification information of the shared file creation terminal 10 received from the file control function 10A, the name of the file, the storage location of the file stored in the file storage device 40 At the same time, the file access right database 30 is updated.

(Effect of the second embodiment)
Instead of setting the access right only at the time of file creation, the user can change the access right at an arbitrary timing. As a result, it is possible to change the access right according to the creation process status for a file with high update frequency such as a document file.

(Third embodiment)
A third embodiment will be described with reference to FIG. FIG. 5 is an overall configuration diagram of the file sharing system according to the third embodiment. In the third embodiment, as shown in FIG. 5, an access right policy setting function 10E, location information providing functions 10F and 11F, an access policy determination device 70, an access policy database 80, and a location information management device 90 are used. The file access right determination device 20, the file access right database 30, the file storage device 40, the file browsing management device 50, the group information database 60, the access policy determination device 70, the access policy database 80, and the location information management device 90 are file management. The apparatus 120 is configured.

Location information providing functions 10F and 11F are latitude and longitude altitude information that can be acquired by GPS, barometric altimeter and other position detection devices, or ESSID (Extended Service Set Identifier) information and base station information that can be acquired from a wireless access point. And a position detection function that can specify the position of the terminal, etc., and when a request is received from the position information management apparatus 90, the detection result can be returned.

FIG. 6 is a diagram showing an example of recorded contents of the access policy database. As shown in FIG. 6, the access policy database 80 specifies and stores the policy of the shared file browsing terminal 11 that the shared file creation terminal 100 wishes to permit access to. The access policy database 80 uses the location information provided by the location information management device 90. The policy description method is different. When the position information management device 90 provides an absolute position such as latitude / longitude altitude information, a description such as “permit write access to the shared file browsing terminal 110 within a radius of 20 m of the shared file creation terminal 100”. I do. In addition, when a location name is provided, a description such as “permitted to read access to shared file browsing terminal 110 in XX building Room A” is described. In addition, it is possible to set whether to read, write, and execute in the policy.

The location information management device 90 receives from the access policy database 80 the location information of the shared file creation terminal 100 and the shared file browsing terminal 110 acquired by making a location information acquisition request to the location information providing functions 10F and 11F. Judgment is made in comparison with the access policy. As a result of the determination, it has a function of extracting identification information of the shared file browsing terminal 110 along the policy.

The access policy determination device 70 receives the access policy and location information, interprets the description of the access policy, and determines whether or not the policy meets the location information of each shared file browsing terminal 110.

As described in the first embodiment, the file access right determination device 20 acquires the identification information of the shared file creation terminal 100, searches the group information database 60, and selects the group to which the shared file creation terminal 100 belongs. Check. Based on the determination result of the access policy determination device 70, an access right is granted to the shared file browsing terminal 110. It also includes the ability to calculate if necessary.

Specifically, the access policy is “permitted to read shared file browsing terminal 110 within a radius of 20 m of shared file creation terminal 100”, and position information providing functions 10F and 11F have a position detection function for providing latitude and longitude information. If it is, the distance between the shared file creation terminal 100 and the shared file browsing terminal 110 is calculated by calculating whether the distance is within 20 m from the latitude / longitude information, and whether or not the access right is permitted is determined.

(Description of operation of the third embodiment)
(Overview of operation)
An outline of the operation of the third embodiment will be described with reference to FIG. FIG. 7 is a flowchart showing a processing procedure of the file access right determination device 20 in the third embodiment.

In the third embodiment, when the file access right determination device 20 acquires the identification information and location information of the shared file creation terminal 100 in step 10, the file access right determination device 20 searches the group information database 60 based on the identification information and creates the shared file. In step 11, the group to which the terminal 100 belongs is confirmed.

Subsequently, when the identification information and position information of the own terminal are acquired from the shared file browsing terminal 110 in step 12, the shared file browsing terminal 110 is based on the identification information in the same group as the shared file creation terminal 100 confirmed in step 11. It is determined in step 13 whether or not there is.

If it is determined in step 13 that they are the same group, it is determined in step 14 whether or not the access policies determined by the access policy determination device 70 match. If the access policies determined by the access policy determination device 70 match, access is granted by registering the terminal as the shared file browsing terminal 110 in the file access right database in step 15.

(Details of operation)
The access policy database 80 is stored as follows.
(1) The access right policy setting function 10E stores the identification information of the shared file creation terminal 100 and the access policy described by the access right policy setting function 10E in the access policy database 80.

Next, storage in the file access right database 30 and the file storage device 40 is performed as follows.
(1) The shared file creation terminal 100 takes a picture using the camera function 10B and transmits the created photo file to the file control function 10A immediately after the file is created.
(2) The file control function 10A transmits the photo file received from the camera function 10B and the identification information of the shared file creation terminal 100 to the file access right determination device 20.
(3) The file access right determination device 20 extracts corresponding group information from the group information database 60 using the identification information received from the file control function 10A as a key, and transmits the group information to the file access right determination device 20.
(4) The file access right determination device 20 searches the access policy database 80 using the identification information of the shared file creation terminal 100 as a key, and transmits the extracted access policy information to the file access right determination device 20.
(5) The file access right determination device 20 transmits the group information acquired from the group information management database 60 to the location information management device 90.
(6) The location information management device 90 provides a location information acquisition request for the shared file browsing terminal 110 using the identification information of the shared file browsing terminal 110 included in the group information received from the file access right determination device 20. This is transmitted to the function 10F and the position information providing function 11F.
(7) The position information providing function 10 </ b> F and the position information providing function 11 </ b> F that have received the position information acquisition request from the position information management apparatus 90 perform position detection and transmit the position information result to the position information management apparatus 90.
(8) The location information management device 90 transmits the location information received from the location information providing function 10F and the location information providing function 11F to the file access right determination device 20.
(9) The file access right determination device 20 provides the access policy determination device 70 with the identification information and location information of the shared file creation terminal 100 and the shared file browsing terminal 110 received from the location information management device 90, and the access policy database 80. The access policy received from is transmitted.
(10) The access policy determination device 70 interprets the access policy received from the file access right determination device 20 and calculates whether or not it follows the policy based on the location information of the shared file creation terminal 100 and the shared file browsing terminal 110. Judge with. As a result of the determination, the shared file browsing terminal 110 along the policy is extracted, and the identification information of the corresponding shared file browsing terminal 110 is transmitted to the file access right determination device 20.
(11) The file access right determination device 20 stores the file received from the file control function 10A in the file storage device 40. The file access right determination device 20 also includes the identification information of the shared file creation terminal 100, the name of the file, the storage location of the file stored in the file storage device 40, and all of the shared file browsing terminals 110 received from the access policy determination device 70. The identification information is stored in the file access right database 30 as an access right permission.

* File browsing is performed in the same manner as in the first embodiment.

(Effects unique to the third embodiment)
By using the location information providing functions 10F and 11F, the location information management device 90, and the access policy database 80, an access right can be given regardless of the format of the location information to be provided.

(Fourth embodiment)
A fourth embodiment will be described with reference to FIGS. FIG. 8 is an overall configuration diagram of a file sharing system according to the fourth embodiment. In the fourth embodiment, the file management apparatus 121 includes a history information database 81. The configuration of the shared file creation terminal 100-1 and the shared file browsing terminal 110-1 is the same as that of the third embodiment shown in FIG. 5, but the location information providing functions 10-1F and 11-1F are The identification information, position information, and time information of the terminal itself are transmitted to the position information management apparatus 90-1.

FIG. 9 is a diagram illustrating an example of recorded contents of the history information database 81 according to the fourth embodiment. The history information database 81 records the location information and the location date and time of the shared file browsing terminal 110-1.

(Effects unique to the fourth embodiment)
In the fourth embodiment, the location information providing function 11-1F of the shared file browsing terminal 110-1 does not transmit location information in real time, and even if the location information is delayed, it is located in the specified location at the specified date and time. An access right can be given to the shared file browsing terminal 110-1.

For example, the position information providing function 11-1F of the shared file browsing terminal 110-1 stores the position information for a predetermined time and then transmits the position information to the position information management apparatus 90-1 of the file management apparatus 121 together with the location time information. Even in the information provision form, the access right can be given.

(Overview of operation)
The operation procedure of the file access right determination device 20 of the fourth embodiment will be described with reference to FIG. FIG. 10 is a flowchart illustrating an operation procedure of the file access right determination device 20 according to the fourth embodiment.

In the fourth embodiment, when the file access right determination device 20 acquires the identification information, position information, and time information of the shared file creation terminal 100-1 in step 20, it searches the group information database 60 based on the identification information. In step 21, the group to which the shared file creation terminal 100-1 belongs is confirmed.

Subsequently, when the identification information, position information, and time information of the own terminal are acquired from the shared file browsing terminal 110-1 in step 22, the shared file confirmed by the shared file browsing terminal 110-1 in step 21 based on the identification information. In step 23, it is determined whether or not the group is the same as the creation terminal 100-1.

If it is determined in step 23 that they are the same group, it is determined in step 24 whether or not the location of the shared file browsing apparatus 110-1 at the predetermined time is the same as that of the shared file creation terminal 100-1. If the location of the shared file browsing device 110-1 at the predetermined time is the same as that of the shared file creation terminal 100-1, that terminal is registered in the file access right database as the shared file browsing terminal 110-1 in step 25. To grant access rights.

(Supplementary information regarding the embodiment)
According to the present embodiment, for example, the shared

file creation terminals

10, 100, and 100-1 and the shared

file browsing terminals

11, 110, and 110-1 are mobile phone terminals, and the

file management devices

12, 120, and 121 are mobile phones. It is possible to realize a usage form such as a server installed on the service company side.

In this embodiment, the photograph taken by the camera function 10B is transmitted to the file control function 10A. However, the file handled here is not only a photograph but also a document file, a spreadsheet file, music, video, or the like. It can be applied to any file such as a multimedia file, an execution program, a program file written in a script, etc., and does not limit the attributes of the file.

In addition to usage modes such as a mobile phone terminal and a server, for example, a file access right determination device 20, a file access right database 30, a file storage device 40, a file browsing management device 50, a group information database 60, an access policy determination device 70, The access policy database 80 and the history information database 81 can be installed in the shared

file creation terminals

10, 100, 100-1 or the shared

file browsing terminals

11, 110, 110-1, respectively, and the usage form is limited. is not.

(Example of the program)
An example of a program that, when installed in an information processing apparatus, causes the information processing apparatus to realize a function corresponding to the function of the file sharing system of the present embodiment will be described.

By recording the program of this embodiment on a recording medium, the information processing apparatus can install the program of this embodiment using this recording medium. Alternatively, the program of the present embodiment can be directly installed on the information processing apparatus from the server holding the program of the present embodiment via the network.

As a result, using the information processing apparatus, as the functions of the shared

file creation terminals

10, 100, and 100-1 of the present embodiment, the file control function 10A, the control function of the camera function 10B, the control function of the wireless network function 10C, and the access As the functions of the right policy setting function 10E, the location information providing function 10F, and the shared file browsing terminal 11, the control function of the wireless network function 11C, the file browsing function 11D, the location information providing function 11F, and the functions of the file management devices 12, 120 A function 20 corresponding to the function of the file access right determination device, a function 30 corresponding to the function of the file access right database, a function 40 corresponding to the function of the file storage device, a function 50 corresponding to the function of the file browsing management device, and group information Function 60 corresponding to the function of the database Sesuporishi determining device function 70 corresponding to the function of the function of the access policy database 80, the function of the history information database 81, it is possible to realize a function corresponding to the location information managing device 90,90-1.

Note that the program of the present embodiment includes not only a program that can be directly executed by the information processing apparatus but also a program that can be executed by being installed on a hard disk or the like. Also included are those that are compressed or encrypted.

It can be applied to access management in information sharing systems such as social networking services, intranets, and groupware.

The present invention has been described above with reference to the embodiments, but the present invention is not limited to the above embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

Note that this application claims priority based on Japanese Patent Application No. 2008-003258 filed on Jan. 10, 2008, the entire disclosure of which is incorporated herein.

Claims

In a shared file creation terminal provided with a shared file creation means for creating a shared file to be shared by one or more shared file browsing terminals,
Identification information acquisition means for acquiring identification information of other terminals in the vicinity of the shared file creation terminal;
Means for transmitting the identification information of the other terminal acquired by the identification information acquisition means to a file management device that manages access to the shared file from the shared file browsing terminal based on the identification information of the shared file browsing terminal; A shared file creation terminal characterized by comprising:
The shared file creation terminal according to claim 1, further comprising means for changing an access right of the shared file browsing terminal to which an access right of the shared file stored in the file management apparatus is granted.
3. The shared file creation terminal according to claim 1 or 2, further comprising means for registering an access policy, which is a condition to be satisfied by the shared file browsing terminal, which gives the file management apparatus an access right to the created shared file in advance.
The shared file creation terminal according to claim 3, wherein the access policy includes location information.
5. The apparatus according to claim 1, further comprising means for inquiring identification information of another terminal by wireless means and receiving and acquiring identification information from the other terminal when acquiring the position information of the other terminal. Shared file creation terminal.
In a file management apparatus provided with a file access right database storing identification information indicating that it is a shared file browsing terminal to which an access right has been granted,
A group information database for pre-registering a group to which the shared file creation terminal and the shared file browsing terminal belong;
Based on the identification information of other terminals acquired and transmitted by the shared file creation terminal, a terminal belonging to the same group as the shared file creation terminal registered in the group information database or a group specified by the shared file creation terminal is extracted. And a file access right judging device including means for registering the extracted terminal identification information in the file access right database.
An access right policy database in which information on an access policy that is a condition to be satisfied by the shared file browsing terminal to grant the access right is registered;
The file access right determination device acquires information related to the access policy of the shared file browsing terminal that has made an access request when there is a request for access to the shared file from the shared file browsing terminal. 7. The file management apparatus according to claim 6, further comprising means for referring to a right policy database and determining whether the shared file browsing terminal is a terminal to which an access right should be granted.
Means for acquiring and recording identification information and location information of the shared file creation terminal and time information located in the location;
When the file access right determination device acquires the identification information and the position information of the shared file browsing terminal and the history of the time information located in the position after the recording to the recording means is completed, Based on the means for recording, means for determining whether the shared file creation terminal belongs to the same group and was located at the same time at the same time;
The file management apparatus according to claim 6, further comprising: a unit that grants an access right to the shared file browsing terminal based on a determination result of the determination unit.
When accessing a shared file, the shared file viewing terminal transmits the identification information of the shared file viewing terminal to a file management device that manages access to the shared file based on the identification information of the shared file viewing terminal. In the shared file browsing terminal, comprising: means for inquiring access rights; and means for accessing the shared file when there is the access right,
A shared file browsing terminal comprising means for returning identification information of the shared file browsing terminal in response to an inquiry from a shared file creation terminal.
10. The inquiring unit transmits to the file management apparatus information related to an access policy which is a condition to be satisfied by the shared file browsing terminal together with identification information of the shared file browsing terminal. The listed shared file browsing terminal.
History recording means for recording the location information of the shared file browsing terminal and the history of time information located in the location;
Means for transmitting the identification information of the shared file browsing terminal, the position information recorded in the history recording means, and the history of time information located in the position to the file management apparatus. The shared file browsing terminal according to claim 9.
A shared file creation terminal for creating a shared file to be shared by one or more shared file viewing terminals; one or more of the shared file viewing terminal for accessing the created shared file; and from the shared file viewing terminal to the shared file In a file sharing system comprising a file management device that manages access based on identification information of the shared file browsing terminal,
The shared file creation terminal
Identification information acquisition means for acquiring identification information of other terminals in the vicinity of the shared file creation terminal;
Means for transmitting the identification information of the other terminal acquired by the identification information acquisition means to the file management device;
The file management device includes:
A file access right database storing identification information indicating that the access right is a shared file browsing terminal;
A group information database that pre-registers a group to which the shared file creation terminal and the shared file browsing terminal belong;
Based on the identification information of other terminals acquired and transmitted by the shared file creation terminal, a terminal belonging to the same group as the shared file creation terminal registered in the group information database or a group specified by the shared file creation terminal is extracted. And a file access right determination device including means for registering the extracted terminal identification information in the file access right database,
The shared file browsing terminal comprises means for returning identification information of the shared file browsing terminal in response to an inquiry from the shared file creation terminal.
13. The file sharing system according to claim 12, wherein the shared file creation terminal includes means for changing an access right of the shared file browsing terminal to which an access right of the shared file stored in the file management apparatus is granted.
14. The shared file creation terminal comprises means for inquiring identification information of another terminal by wireless means when receiving position information of the other terminal, and receiving and acquiring identification information from the other terminal. The file sharing system described.
The shared file creation terminal comprises means for registering an access policy to be satisfied by the shared file browsing terminal that gives an access right to the created shared file to the file management device in advance,
The file management device includes:
An access right policy database in which information on an access policy that is a condition to be satisfied by the shared file browsing terminal to grant the access right is registered;
The file access right determination device acquires information related to the access policy of the shared file browsing terminal that has made an access request when there is a request for access to the shared file from the shared file browsing terminal. Means for referring to a rights policy database and determining whether the shared file browsing terminal is a terminal to which an access right should be granted;
The shared file browsing terminal includes means for transmitting to the file management apparatus together with identification information of the shared file browsing terminal, information related to an access policy that is a condition to be satisfied by the shared file browsing terminal. The file sharing system according to claim 12, wherein:
The file sharing system according to claim 15, wherein the access policy includes location information.
The shared file creation terminal comprises means for transmitting the identification information and location information of the shared file creation terminal and time information residing in the location to the file management device,
The file management device includes:
Means for acquiring and recording identification information and location information of the shared file creation terminal and time information located in the location;
When the file access right determination device acquires the identification information and the position information of the shared file browsing terminal and the history of the time information located in the position after the recording to the recording means is completed, Based on the means for recording, means for determining whether the shared file creation terminal belongs to the same group and was located at the same time at the same time;
Means for granting an access right to the shared file browsing terminal based on a determination result of the determining means,
The shared file browsing terminal
History recording means for recording the location information of the shared file browsing terminal and the history of time information located in the location;
And means for transmitting the identification information of the shared file browsing terminal, the position information recorded in the history recording means, and the history of the time information located in the position to the file management apparatus. The file sharing system according to claim 12.
A shared file creation terminal for creating a shared file to be shared by one or more shared file viewing terminals; one or more of the shared file viewing terminal for accessing the created shared file; and from the shared file viewing terminal to the shared file In a file access right management method applied to a file sharing system comprising a file management device that manages access based on identification information of the shared file browsing terminal,
The shared file creation terminal acquires identification information of other terminals in the vicinity of the shared file creation terminal, and transmits the acquired identification information of other terminals to the file management device;
The file management device is registered in a group information database that pre-registers a group to which the shared file creation terminal and the shared file browsing terminal belong based on identification information of other terminals acquired and transmitted by the shared file creation terminal. A terminal belonging to the same group as the shared file creation terminal or a group specified by the shared file creation terminal is extracted, and the identification information of the extracted terminal is the shared file browsing terminal to which the access right is given Register it in the file access right database that stores the identification information,
The file access right management method, wherein the shared file browsing terminal returns identification information of the shared file browsing terminal in response to an inquiry from the shared file creation terminal.
19. The file access right management method according to claim 18, wherein the shared file creation terminal changes the access right of the shared file browsing terminal to which the access right of the shared file stored in the file management apparatus is granted.
20. The file access according to claim 18 or 19, wherein when the shared file creation terminal acquires position information of another terminal, the identification information of the other terminal is inquired by wireless means, and the identification information from the other terminal is received and acquired. Rights management method.
The shared file creation terminal registers an access policy to be satisfied by the shared file browsing terminal that gives an access right to the created shared file to the file management device in advance,
When the file management device receives an access request to the shared file from the shared file browsing terminal, the file management device acquires information related to the access policy of the shared file browsing terminal requested to access, and Refer to an access right policy database in which information on an access policy that is a condition to be satisfied by the shared file browsing terminal to be granted is registered, and determine whether the shared file browsing terminal is a terminal to which an access right is to be granted;
The shared file browsing terminal transmits information related to an access policy that is a condition to be satisfied by the shared file browsing terminal together with identification information of the shared file browsing terminal to the file management apparatus. 18. The file access right management method according to 18.
The file access right management method according to claim 21, wherein the access policy includes location information.
The shared file creation terminal transmits identification information and location information of the shared file creation terminal and time information residing in the location to the file management device,
The shared file browsing terminal records the history of the location information of the shared file browsing terminal and the time information located in the location, the identification information of the shared file browsing terminal and the location information recorded as history, and the A history of time information in the location is sent to the file management device,
The file management device acquires and records the identification information and location information of the shared file creation terminal and time information in the location, and after the recording is completed, the identification information of the shared file browsing terminal and When the location information and the history of the time information located at the location are acquired, based on the record, whether the location belongs to the same group as the shared file creation terminal and is located at the same location at the same time. 19. The file access right management method according to claim 18, wherein a determination is made and an access right is given to the shared file browsing terminal based on the determination result.
By installing on an information processing device,
In a program for realizing a function corresponding to the function of a shared file creation terminal having a shared file creation function for creating a shared file to be shared by one or more shared file browsing terminals,
An identification information acquisition function for acquiring identification information of other terminals in the vicinity of the shared file creation terminal;
A function of transmitting the identification information of the other terminal acquired by the identification information acquisition function to a file management device that manages access to the shared file from the shared file browsing terminal based on the identification information of the shared file browsing terminal; A program characterized by realizing.
25. The program according to claim 24, which realizes a function of changing an access right of the shared file browsing terminal to which an access right of the shared file stored in the file management apparatus is granted.
26. The program according to claim 24 or 25, wherein a function of registering an access policy to be satisfied by the shared file browsing terminal that gives an access right to the created shared file in advance to the file management apparatus is realized.
27. The program according to claim 26, wherein the access policy includes location information.
28. The function according to any one of claims 24 to 27, wherein when acquiring the position information of the other terminal, a function for inquiring the identification information of the other terminal by wireless means and receiving and acquiring the identification information from the other terminal is realized. program.
By installing on an information processing device,
In a program that realizes a function corresponding to the function of a file management device having a file access right database storing identification information indicating that it is a shared file browsing terminal to which an access right has been granted,
Realizing a function corresponding to the function of the group information database that pre-registers the group to which the shared file creation terminal and the shared file browsing terminal belong,
Based on the identification information of other terminals acquired and transmitted by the shared file creation terminal, a terminal belonging to the same group as the shared file creation terminal registered in the group information database or a group specified by the shared file creation terminal is extracted. A program for realizing the function of registering the extracted terminal identification information in the file access right database.
A function corresponding to the function of the access right policy database in which information of an access policy that is a condition to be satisfied by the shared file browsing terminal to grant the access right is registered;
When there is an access request to the shared file from the shared file browsing terminal, obtain information related to the access policy of the shared file browsing terminal that has requested access, refer to the access right policy database, and 30. The program according to claim 29, further comprising a file access right determination function including a function of determining whether the shared file browsing terminal is a terminal to which an access right should be given.
A function of acquiring and recording identification information and position information of the shared file creation terminal and time information located in the position;
After the recording to the recording function is completed, when the identification information of the shared file browsing terminal, the position information, and the history of the time information in the position are acquired, the sharing function is based on the recording function. A function to determine whether the user belongs to the same group as the file creation terminal and was in the same location at the same time,
30. The program according to claim 29, wherein a function for granting an access right to the shared file browsing terminal is realized based on a determination result of the determination function.
By installing on an information processing device,
When accessing a shared file, the shared file viewing terminal transmits the identification information of the shared file viewing terminal to a file management device that manages access to the shared file based on the identification information of the shared file viewing terminal. A function to inquire access rights,
In the program for realizing the function corresponding to the function of the shared file browsing terminal provided with the function of accessing the shared file when there is the access right,
A program for realizing a function of returning identification information of a shared file browsing terminal in response to an inquiry from a shared file creation terminal.
The inquiring function transmits to the file management apparatus, together with identification information of the shared file browsing terminal, information related to an access policy which is a condition to be satisfied by the shared file browsing terminal. The program described.
A history recording function for recording the location information of the shared file browsing terminal and the history of the time information in the location;
A function of transmitting the identification information of the shared file browsing terminal, the position information recorded in the history recording function, and the history of time information existing in the position to the file management apparatus is realized. The program according to claim 32.