WO2010016382A1 - Information processing method, information processing device, and storage medium containing program - Google Patents

Abstract

When Node 1 is disconnected from a network (NW) because of some reason and has entered the offline state (communication-disabled state), a reference control unit of Node 1 deletes a substantial portion (description for defining each object) of work space data stored in a data storage unit.  This disables Node 1 to access to objects contained in the work space and eliminates existence of the data relating to the objects as garbage or leak of the data.

Description

Information processing method, information processing apparatus, and storage medium storing program

The present invention relates to an information processing method for providing a work space in which a plurality of users can collaborate, an information processing apparatus, and a storage medium storing the program.

Applications that provide a collaborative work space (hereinafter also referred to as “workspace”) in order to improve the collaborative work by a plurality of users have been proposed (for example, Japanese Patent Laid-Open Nos. 09-305542 and 11-11). 288428). This workspace is a virtual space that a plurality of users can access simultaneously. Typically, a workspace is realized by sharing data among a plurality of information processing apparatuses (hereinafter also referred to as “nodes”) configured to be able to communicate with each other such as a network connection. Is done. By using such a work space, users in remote locations can collaborate.

As an example for realizing such a workspace, a configuration is adopted in which each of the information processing apparatuses connected to the network commonly holds data constituting the workspace. Under such a configuration, consider a case where the user operates any one of the information processing apparatuses and performs some operation such as newly creating, changing, or deleting an object such as text, line, or image on the workspace. In this case, in addition to the information processing apparatus in which the operation from the user is performed, the data update process for reflecting the operation is executed for the other information processing apparatus configured to be capable of data communication. .

More specifically, a command for executing the data update process is transmitted from the information processing apparatus in which some operation has been performed to another information processing apparatus. Then, each of the information processing apparatuses that have received this command executes update processing.

Japanese Patent Laid-Open No. 09-305542 Japanese Patent Laid-Open No. 11-288428

The update process as described above is executed between the information processing apparatuses participating in the workspace at that time. For example, the workspace held by the information processing apparatus in a power-off state or offline. The update process cannot be performed on the data constituting the.

Therefore, for example, one of the workspaces is no longer necessary, and even if an operation that deletes the entire workspace is performed, the user has once participated in the workspace, but the deletion operation has been performed. At the timing, the information processing apparatus that has been temporarily powered off or offline cannot receive the workspace deletion command. That is, when a deletion operation is performed, the data constituting the work space that is held by the information processing apparatus that is temporarily powered off or offline is not permanently deleted.

As a result, the data constituting the work space held in the information processing apparatus becomes so-called garbage, and the storage capacity of the storage device is substantially reduced. Alternatively, when an information processing apparatus that holds data that has already been deleted is brought online, a workspace may be reconstructed with another information processing apparatus. Furthermore, if the information processing apparatus is taken outside while the data to be deleted is retained, there is a possibility that a problem such as information leakage may occur.

Accordingly, the present invention has been made to solve such a problem, and an object of the present invention is to provide a virtual space that can be accessed simultaneously by a plurality of users and to increase the confidentiality of the data constituting the virtual space. An information processing method, an information processing apparatus, and a storage medium storing a program are provided.

According to an aspect of the present invention, there is provided an information processing method for providing a virtual space that can be accessed simultaneously by a plurality of users, using a plurality of information processing apparatuses having a storage unit. The information processing method includes the following steps executed by the information processing apparatus. Storing at least a part of data constituting the virtual space in its own storage unit, determining whether or not the information processing apparatus is in a communication cut-off state with another information processing apparatus, and information A step of disabling a user's reference to data stored in the storage unit at the time when the processing device determines that the communication is interrupted;

Preferably, the step of disabling user reference includes a step of deleting data stored in the storage unit.

More preferably, the information processing method further includes the following steps executed by the information processing apparatus. Steps for determining whether or not the communication enabled state has been restored after the transition to the communication cut-off state, and for requesting data constituting the virtual space from another information processing apparatus when it is determined that the communication enabled state has been restored And updating the contents of its own storage unit in response to reception of data constituting the virtual space from another information processing apparatus.

More preferably, the step of deleting data includes a step of deleting an entity part constituting the virtual space in a state where information for specifying the virtual space is held in the storage unit. The information processing method further includes the following steps executed by the information processing apparatus. In response to a user operation, a step of deleting the entire virtual space, and when a request for data constituting the virtual space is received from another information processing apparatus, whether or not the entire requested virtual space has been deleted Determining whether the entire requested virtual space has been deleted, notifying the requesting information processing apparatus that the entire requested virtual space has been deleted, And, in response to receiving the notification that the entire virtual space has been deleted from another information processing apparatus, the step of deleting the entire data constituting the virtual space including information for specifying the virtual space .

Alternatively, preferably, the step of disabling user reference includes encrypting data stored in the storage unit using an encryption key held in common among a plurality of information processing apparatuses, Deleting the encryption key used for encryption.

More preferably, the information processing method further includes the following steps executed by the information processing apparatus. A step of determining whether or not the communication-enabled state has been restored after the transition to the communication cut-off state, a step of requesting a common key from another information processing apparatus when it is determined that the communication-enabled state has been restored, and others And decrypting the encrypted data using the common key in response to receiving the common key from the information processing apparatus.

Alternatively, preferably, the step of disabling the user's reference includes a step of measuring a time after the transition to the communication cut-off state, and a user's reference to the data when the measured time reaches a predetermined value. Disabling.

More preferably, the predetermined value is defined in units of at least one of data constituting the virtual space and objects included in the virtual space.

Alternatively, preferably, the step of disabling the user's reference is a step of maintaining the user's reference to the data if the user is referring to the data even if it is determined that the communication is cut off. including.

According to another aspect of the present invention, there is provided an information processing apparatus configured to be capable of data communication with another information processing apparatus and providing a virtual space that can be accessed simultaneously by a plurality of users. The information processing apparatus includes a storage unit for storing at least a part of data constituting the virtual space, and a part for determining whether or not communication with another information processing apparatus is interrupted. And a part for disabling the user's reference to the data stored in the storage unit at the time when it is determined that the communication is cut off.

According to still another aspect of the present invention, there is provided a storage medium storing a program for providing a virtual space that can be accessed simultaneously by a plurality of users, using a plurality of information processing apparatuses having a storage unit. When the program is executed by the information processing apparatus, the information processing apparatus is in a communication cut-off state between the step of storing at least part of the data constituting the virtual space in the storage unit and the other information processing apparatus And a step of disabling the user's reference to the data stored in the storage unit at that time when it is determined that the communication is cut off.

According to the present invention, in a virtual space that can be accessed simultaneously by a plurality of users, it is possible to increase the confidentiality of data constituting the virtual space.

It is a schematic block diagram of the system for providing the work space according to Embodiment 1 of this invention. It is a schematic diagram which shows the schematic hardware constitutions of the personal computer which is a typical example of the information processing apparatus according to Embodiment 1 of this invention. It is the figure which showed typically an example of the workspace according to Embodiment 1 of this invention. It is the figure which showed typically an example of the workspace according to Embodiment 1 of this invention. It is a block diagram which shows the control structure of the information processing apparatus according to Embodiment 1 of this invention. It is a figure which shows an example of the content of the work space data according to Embodiment 1 of this invention. It is a figure which shows the state with a work space according to Embodiment 1 of this invention. In the state shown in FIG. 6, it is a figure which shows a state immediately after user operation was performed by Node1. It is a figure which shows the state in process of a synchronization after FIG. FIG. 8 is a diagram illustrating a state in which the synchronization process related to the user operation illustrated in FIG. 7 is completed. FIG. 10 is a diagram showing a state in which Node 1 has shifted to the local environment in the workspace according to the first embodiment of the present invention. It is a figure which shows the process which judges whether it is a local environment according to Embodiment 1 of this invention. It is a figure which shows the state which Node1-Node3 moved to the local environment in the workspace according to Embodiment 1 of this invention. FIG. 11 is a diagram illustrating a state in which Node1 has shifted from a local environment to online in the workspace illustrated in FIG. 10. FIG. 13 is a diagram showing a state in which Node 1 to Node 3 have shifted from a local environment to online in the workspace shown in FIG. 12. FIG. 11 is a diagram illustrating a state in which the entire workspace is deleted during a period in which Node1 is a local environment in the workspace illustrated in FIG. 10. FIG. 16 is a diagram illustrating a state in which Node1 has shifted from the local environment to online in the workspace illustrated in FIG. 15. It is a flowchart which shows the whole process procedure according to Embodiment 1 of this invention. It is a figure which shows the state which Node1 transferred to the local environment in the workspace according to the 1st modification of Embodiment 1 of this invention. FIG. 19 is a diagram illustrating a state immediately after Node1 shifts from the local environment to online in the workspace illustrated in FIG. 18. It is a figure which shows the state which Node1-Node3 moved to the local environment in the workspace according to the 2nd modification of Embodiment 1 of this invention. It is a figure which shows the data structure used in the workspace according to the 4th modification of Embodiment 1 of this invention. It is a figure which shows the data structure used in the workspace according to the 4th modification of Embodiment 1 of this invention. It is a schematic block diagram of the system for providing the work space according to the 5th modification of Embodiment 1 of this invention. It is a figure which shows an example of the content of the work space data according to Embodiment 2 of this invention. It is a block diagram which shows the control structure of each information processing apparatus according to Embodiment 2 of this invention. It is a figure which shows the state in which both Node1 and Node2 are online in the work space according to Embodiment 2 of this invention. FIG. 26 is a diagram illustrating a state immediately after Node1 has shifted from online to a local environment in the workspace illustrated in FIG. 25. It is a figure which shows the state after Node1 transfers to online environment from online in the work space shown in FIG. 25, and predetermined time progress. FIG. 26 is a diagram illustrating a state in which Node1 has shifted from the local environment to online in the workspace illustrated in FIG. 25. It is a flowchart which shows the whole process sequence according to Embodiment 2 of this invention. It is a figure which shows an example of the content of the work space data according to the 1st modification of Embodiment 2 of this invention.

Embodiments of the present invention will be described in detail with reference to the drawings. Note that the same or corresponding parts in the drawings are denoted by the same reference numerals and description thereof will not be repeated.

[Embodiment 1]
(Whole workspace configuration)
FIG. 1 is a schematic configuration diagram of a system for providing a work space according to the first embodiment of the present invention.

Referring to FIG. 1, the system according to the present embodiment includes a plurality of information processing devices PC1 to PC3 (hereinafter referred to as “information processing device PC” or “devices” connected to each other via a network NW so that data communication is possible. node (node) "). In this specification, “node” indicates an arbitrary device connected to the network, and particularly indicates a device that can receive information (data) transmitted over the network and process the information by itself.

Each of these information processing apparatuses PC1 to PC3 holds all or a part of common data constituting the workspace (hereinafter also referred to as “workspace data”), thereby allowing simultaneous access by a plurality of users. A virtual space. That is, when the workspace data is changed by a user operation on any of the information processing apparatuses PC, information (all or a part of the changed workspace data) instructing the change to the changed workspace data is provided. It is transmitted to another information processing apparatus PC. By performing such synchronization processing as needed, substantially the same work space is provided in all the information processing apparatuses PC.

Note that the information processing apparatuses PC do not necessarily have to be connected to the same hierarchical network as long as they can logically communicate with each other.

(Hardware configuration)
FIG. 2 is a schematic diagram showing a schematic hardware configuration of a personal computer which is a representative example of information processing apparatus PC according to the first embodiment of the present invention.

Referring to FIG. 2, information processing device PC according to the present embodiment includes a CPU 201 that executes various programs including an operating system, and a storage unit that temporarily stores data necessary for execution of the program by CPU 201. And a hard disk (HDD) 211 for storing a program executed by the CPU 201 in a nonvolatile manner. Such a program is read from a CD-ROM 215a or FD 217a by a CD-ROM (Compact Disk-Read Only Memory) drive 215 or an FD (Flexible Disk) drive 217, respectively.

The CPU 201 receives an operation request from the user via the input device 209 including a keyboard and a mouse. The CPU 201 outputs a screen output generated by executing the program to the monitor 205 which is a display unit. The CPU 201 performs data communication with another information processing apparatus PC and / or server apparatus SRV via a communication interface 207 including a LAN card or the like. These parts are connected to each other via an internal bus 203.

Any device may be used as long as it functions as a “node” in the present specification, and for example, a mobile phone having a communication function may be used.

(Work space)
In this specification, “work space” means a virtual space that can be accessed simultaneously by a plurality of users, and the work space is provided using the work space data and any number of object data defined in the work space data. Is done. In the present specification, the result of rendering (visualizing) workspace data and object data may be referred to as “workspace”.

3A and 3B are diagrams schematically showing an example of a work space WS according to the first embodiment of the present invention.

FIG. 3A shows an example of the entire image of the visualized workspace WS. As an example, it is assumed that the workspace WS includes three objects OBJ1 to OBJ3. In this specification, an “object” is a unit of an object that is a target of each operation by a user. Specifically, any electronically handleable information such as a text object (text) indicating characters, a line object (line) indicating drawing, and an image object (image) indicating images can be used. In the example illustrated in FIG. 3A, an “image object” is illustrated as the object OBJ1, a “character object” is illustrated as the object OBJ2, and a “line object” is illustrated as the object OBJ3.

The size of the workspace WS can be set freely. Typically, the size of the work space WS is set to be larger than the display size of the monitor 205 of each information processing apparatus PC. Therefore, as shown in FIG. 3B, only a partial area of the work space WS is often rendered (visualized) on the monitor 205 of each information processing apparatus PC.

The user selects an area to be rendered on the monitor 205 in the workspace WS using the input device 209 (FIG. 2) including a keyboard and a mouse. Furthermore, the user can perform operations such as creating, changing, and deleting a target object by selecting various operation buttons and / or selecting and dragging an object to be displayed.

(Control structure)
FIG. 4 is a block diagram showing a control structure of information processing apparatus PC according to the first embodiment of the present invention.

Referring to FIG. 4, each of information processing apparatuses PC has, as its control structure, a reference control unit 250, a data operation unit 252, a synchronization control unit 254, a drawing unit 256, a user authentication unit 258, data A transmission / reception unit 260 and a data storage unit 262 are included. The data storage unit 262 is provided as an arbitrary area of the hard disk 211 (FIG. 2). The data transmitting / receiving unit 260 is provided by the cooperation of the communication interface 207 (FIG. 2) and related driver software. The other parts are typically provided by the CPU 201 (FIG. 2) developing a program in the memory unit 213 (FIG. 2) and executing a command included in the program.

The data storage unit 262 also includes information (for example, IP information) for specifying the work space data 262a constituting the work space and another node (information processing apparatus PC) connectable via the network NW (FIG. 1). And a connection table 262b in which unique destination information that can uniquely identify each node such as an address is described in a list format.

The reference control unit 250 executes characteristic processing of the information processing apparatus PC according to the present embodiment. The reference control unit 250 determines whether or not reference (access) to the work space data 262a is possible for the user who operates the device, and provides a state where the user cannot refer to the work space data 262a as necessary. As a more specific example, as will be described later, when the own device leaves the work space WS and is in a communication cutoff state with the local environment, that is, another information processing device, the reference control unit 250. Deletes or encrypts all or a part of the work space data 262a already stored in the data storage unit 262, thereby providing a state in which reference from the user is impossible.

The data operation unit 252 performs new creation, change, deletion, etc. of an object in accordance with the operation of the input device 209 (FIG. 2) by the user. More specifically, in response to the operation by the user, the data operation unit 252 adds, changes, and deletes the work space data 262a stored in the data storage unit 262.

The synchronization control unit 254 synchronizes the work space data 262a constituting the work space WS with another node (information processing apparatus PC). In other words, when any change is made to the work space data 262a in the own apparatus, the synchronization control unit 254 participates in the corresponding work space WS with all or a part (difference) of the changed work space data 262a. Each is transmitted to another node. When the synchronization control unit 254 receives all or a part (difference) of the changed work space data 262a from another node, the work space data 262a stored in the data storage unit 262 of the own device is accordingly received. Update.

As described above, such a synchronization process may be executed with an event that a specific operation is performed in any of the information processing apparatuses PC. Further, in addition to or instead of this, data match / mismatch is matched for every predetermined period among all the nodes (information processing apparatuses PC) participating in the workspace WS, and based on this result, The contents of the work space data 262a may be changed.

The drawing unit 256 performs a drawing process (rendering process) based on information included in a range designated by the user among the information of the workspace data 262a. That is, the drawing unit 256 visualizes an area specified by the user in the work space WS. More specifically, the drawing unit 256 refers to the work space data 262a and periodically outputs data indicating an image to be displayed on the monitor 205 (FIG. 2) to a video memory (not shown). An image is displayed on the monitor 205 based on the data stored in the video memory.

The user authentication unit 258 executes user authentication processing for a user who uses the information processing apparatus PC. Specifically, the user authentication unit 258 prompts the user to input an ID and password when the user starts using the information processing apparatus PC. When the user inputs an ID and password, user authentication processing is performed by referring to a user table (not shown) stored in advance or by inquiring a user authentication server (not shown). When the user authentication is successful, the user authentication unit 258 permits the user to use the information processing apparatus PC and holds the user name currently in use (logged in). In the information processing apparatus PC according to the present embodiment, it is only necessary to identify the user who uses each information processing apparatus PC, and therefore, it is not always necessary to request a password.

The data transmitter / receiver 260 controls data communication with other nodes (information processing apparatus PC). Specifically, the data transmission / reception unit 260 reads all or part of the work space data 262a stored in the data storage unit 262 in accordance with a request from the synchronization control unit 254, and transmits it to another node, or All or part of the work space data 262a received from another node is transferred to the synchronization control unit 254. The data transmission / reception unit 260 refers to the connection table 262b stored in the data storage unit 262, and specifies a partner with which data communication is performed.

Further, the data transmission / reception unit 260 also determines whether the own device is connected to the network NW or is in a local environment. As a specific method, the data transmission / reception unit 260 periodically transmits (multicasts) a confirmation packet to another node. Then, the data transmitting / receiving unit 260 determines whether or not it is connected to the network NW, that is, whether or not it is a local environment, based on whether or not a presence packet from the transmission destination for this confirmation packet has been received. In other words, the data transmitting / receiving unit 260 determines whether its own device is in a communication cut-off state with another information processing device PC or in a communicable state.

(data structure)
With reference to FIG. 5, the data structure of work space data 262a constituting work space WS according to the present embodiment will be described. Each data is typically described in a markup language such as XML. This is to enhance the expandability of the system by freely setting tags (attributes given to characters surrounded by <> and </>).

FIG. 5 shows an example of the contents of workspace data 262a according to the first embodiment of the present invention. The contents shown in FIG. 5 correspond to the objects OBJ1 to OBJ3 shown in FIG.

Referring to FIG. 5, workspace data 262a includes a workspace tag 270 for specifying the workspace and a description defining each object. The workspace tag 270 includes a workspace identification number (workspace id) and a creator attribute (Author). In the example illustrated in FIG. 5, identification number = “1” and creator attribute = “Node2”.

The description defining each object includes a tag indicating the type (image / text / line) and coordinate position (x, y) of each object, and link data to the entity file.

For example, the definition of the object OBJ1 indicates a description indicating an image (image) arranged at the position of x = “250” y = “140”, and a file name (fuji.jpg) of the entity of the image. Contains a description. Further, the definition of the object OBJ2 includes a description indicating that the text (text) is arranged at the position of x = '300' and y = '180', and a description indicating the content (ABC) of the text. The definition of the object OBJ3 includes a description indicating that the object is a line and a description indicating the coordinates of the vertex defining the line.

Although FIG. 5 illustrates an example in which the work space WS is configured using one work space data 262a, an arbitrary data structure can be employed. For example, a configuration using a plurality of hierarchized files or a configuration in which a plurality of files are associated with each other (typically a relational database) can be employed.

It is also possible to share an arbitrary number of work spaces WS among a plurality of information processing apparatuses PC. In this case, the target workspace WS is specified based on the value of the above-described workspace identification number (workspace id). In other words, when only one work space WS is shared among a plurality of information processing apparatuses PC, it is not always necessary to define the above-mentioned work space identification number.

(Overview of synchronization processing)
With reference to FIGS. 6 to 9, synchronization processing in the workspace according to the present embodiment will be described. In the examples shown in FIGS. 6 to 9, it is assumed that objects OBJ1 to OBJ3 have already been created in the workspace WS as shown in FIG. 3A.

FIG. 6 shows a state in which there is a work space according to the first embodiment of the present invention. FIG. 7 shows a state immediately after a user operation is performed at Node 1 in the state shown in FIG. FIG. 8 shows a state during synchronization processing after FIG. FIG. 9 shows a state in which the synchronization process related to the user operation shown in FIG. 7 has been completed.

Referring to FIG. 6, in a state where the synchronization processing is completed, each of Node 1 to Node 3 holds work space data 262a in which the same contents are described.

Next, a case where the user of Node 1 performs some operation in the state of FIG.

Referring to FIG. 7, it is assumed that the user of Node1 drags object OBJ1 (see FIG. 3A) on workspace WS and changes the position of object OBJ1 by operating input device 209 such as a mouse. In response to the user operation on Node1, the data operation unit 252 (FIG. 4) of Node1 obtains the position information after the change of the object OBJ1, and stores it in the data storage unit 262 (FIG. 4) of its own device. The corresponding value of the workspace data 262a is changed (tag 274).

Specifically, as shown in FIG. 7, the value of the tag describing the object OBJ1 of the workspace data 262a held by Node1 is changed from “x = '250' y = '140'" to "x = '255' y = '150' ".

With the change of the workspace data 262a, the synchronization control unit 254 (FIG. 4) of the Node 1 executes the synchronization process so that the same change is reflected in other nodes. Specifically, as illustrated in FIG. 8, the synchronization control unit 254 of Node 1 uses the change information data 280 indicating the difference between the changed workspace data 262 a and the changed workspace data 262 a in its own device, It transmits to each of the other nodes participating in the space WS. Note that the nodes participating in the workspace WS are identified by referring to the connection table 262b.

An example of the contents of the change information data 280 shown in FIG. 8 includes a delete line instruction 282 with a “−” symbol at the beginning of the line and an additional line instruction 284 with a “+” symbol at the beginning of the line. The deletion line instruction 282 indicates the contents to be deleted from the current work space data 262a. The additional line instruction 284 indicates contents to be added to the current workspace data 262a.

In the change information data 280, information (not shown) for specifying the transmission source and the transmission destination of the change information data 280 may be added.

Each of Node 2 and Node 3 that has received the change information data 280 changes the contents of the work space data 262a stored in its own data storage unit 262 based on the change information data 280. As a result, as shown in FIG. 8, the changed workspace data 262a is commonly held in all the nodes participating in the workspace WS.

Hereinafter, even if a user operation is performed in any node, the same synchronization processing as described above is executed.

(Process overview when migrating to local environment)
Next, processing when a node that has participated in the work space WS shifts offline (local environment) will be described.

In particular, in the workspace according to the present embodiment, after the self-device shifts to the local environment, the workspace data cannot be referred to by the user. By performing such processing, the confidentiality of the workspace data can be enhanced.

As an example of a method for maintaining the reference of the workspace data in an inaccessible state, when it is determined that the information processing apparatus PC according to the present embodiment has shifted to the local environment, the information processing apparatus PC may perform the same with another node. Delete previously shared workspace data. Hereinafter, with reference to FIG. 10, the processing at the time of shifting to the local environment will be specifically described.

FIG. 10 is a diagram showing a state in which Node 1 has migrated to the local environment in workspace WS according to the first embodiment of the present invention.

Referring to FIG. 10, consider a case where Node 1 is offline (communication cut-off state) for some reason because the connection with network NW is cut off. In this case, when the reference control unit 250 (FIG. 4) of Node 1 detects that its own device has shifted to the local environment, the entity part (defines each object) of the work space data 262 a stored in the data storage unit 262. (Description) is deleted. As a result, access to objects included in the work space WS is disabled on Node1. As a result, it can be avoided that the data related to these objects exists as garbage or the data leaks.

In the present embodiment, the workspace tag 270 (FIG. 5) included in the workspace data 262a is not deleted. As will be described later, when the system once goes offline and then goes online again (transition to a communicable state) and rejoins the work space WS, the work space WS can be easily reconstructed. It is to do.

It should be noted that a method of periodically transmitting (multicasting) a confirmation packet to another node can be adopted to determine whether or not the own device has moved to the local environment.

FIG. 11 is a diagram showing processing for determining whether or not the local environment is in accordance with the first embodiment of the present invention.

Referring to FIG. 11, each node transmits (multicasts) a confirmation packet to each of the other nodes. This confirmation packet is a control packet for requesting transmission of a response packet when the packet is received. Therefore, for example, each of Node 2 and Node 3 that has received the confirmation packet from Node 1 returns a response packet to Node 1. Note that the multicast destination of the confirmation packet is determined with reference to the connection table 262b stored in the data storage unit 262.

When a response packet is returned from any node in response to such a confirmation packet to be multicast, it is determined that the device is not in the local environment, that is, is participating in the workspace. On the other hand, if no response packet is returned from any node, it is determined that the local environment is set. Note that if response packets are not returned from only some of the nodes, it is assumed that the destination node of the confirmation packet is the local environment, so only if response packets are not received from all the nodes. For the first time, it is determined that the local environment has been migrated.

FIG. 12 is a diagram showing a state in which Node 1 to Node 3 have migrated to the local environment in the workspace according to the first embodiment of the present invention.

Referring to FIG. 12, when all of Node 1 to Node 3 are moved to the local environment (offline), each node similarly stores the actual part of workspace data 262a stored in data storage unit 262 (each object is Delete the description to be defined).

However, in the workspace according to the present embodiment, the node defined as the creator of the workspace data 262a to be deleted is not converted to the local environment (offline). Do not delete. This is for facilitating the processing when a plurality of nodes are brought online and the workspace WS is reconfigured. In the example shown in FIG. 12, “Node2” is described as the creator attribute (Author) in the workspace tag 270 of the workspace data 262a. That is, Node2 is the creator of the work space data 262a. For this reason, Node2 does not delete the substantial part of the work space data 262a to be held.

As will be described later, when the entire workspace WS is deleted, even if the node is defined as the creator of the target workspace data 262a, the node is the entire workspace data 262a. delete.

Also, as shown in FIG. 12, the workspace data 262a remains in the node defined as the creator of the workspace data 262a even after the migration to the local environment. Therefore, it is preferable to employ a secure device such as a server device as the node defined as the creator of such work space data 262a.

(Outline of processing when shifting from the local environment to online)
(1) Case where re-participation in workspace is possible Next, a description will be given of processing in a case where a node that has migrated to the local environment comes back online and re-joins the workspace WS.

As described above, the information processing apparatus PC according to the present embodiment does not delete the workspace tag 270 of the workspace data 262a even if it is determined that the information processing apparatus PC has shifted to the local environment. Therefore, the node that has rejoined the workspace WS refers to the workspace tag 270 of the workspace data 262a stored in the data storage unit 262 of the own device, so that the data necessary for the reconstruction of the workspace WS can be obtained. Obtain from another node.

FIG. 13 is a diagram showing a state in which Node1 has shifted from the local environment to online in the workspace WS shown in FIG.

Referring to FIG. 13, when Node 1 comes online from the local environment (offline), it refers to the value of the identification number (workspace id) described in the workspace tag 270 of the workspace data 262 a, and the necessary data ( Requests the other node to the entity part deleted at the time of shifting to the local environment. In response to this request, the change information data 290 is transmitted to Node 1 from any node already participating in the workspace.

FIG. 13 illustrates the case where the change information data 290 is transmitted from the Node 2 defined as the creator of the workspace data 262a. However, the node defined as the creator does not necessarily transmit the change information data 290. do not have to. The node to which the change information data 290 is requested can be determined based on criteria such as a predetermined order, a distance on the network, a load state of each node, and a node having the fastest response to the request. .

FIG. 14 is a diagram showing a state in which Node 1 to Node 3 have shifted from the local environment to online in the workspace shown in FIG.

Referring to FIG. 14, when all of Node 1 to Node 3 return to the online state from the local environment (offline), each node requests other nodes for necessary data (the entity part deleted at the time of shifting to the local environment). In the example shown in FIG. 14, Node 2 holds the substantial part of the work space data 262 a, so there is no need to request data from another node. On the other hand, Node1 and Node3 receive the change information data 290 from Node2, respectively, and update the work space data 262a to the original contents.

(2) When it is impossible to rejoin the workspace In the above example, when the node that has migrated to the local environment comes online again, the workspace WS that was participating at the time of transition to the local environment exists effectively. Explained about the processing when there is. On the other hand, it is also assumed that the workspace WS that participated is deleted after a certain node moves to the local environment.

Even in such a case, the node that has migrated to the local environment holds the workspace data 262a including the workspace tag 270. Therefore, when the node is online again, the workspace WS that has participated in the previous time is stored. It is necessary to determine whether or not it is valid. When such a determination is not made, the deleted work space WS is treated as valid in the node that is online again. Therefore, there is a possibility that a user operation for the work space WS may be possible in the node.

Therefore, in the workspace according to the present embodiment, after the workspace itself is deleted in this way, the target workspace is deleted in response to a request from the node participating in the deleted workspace. It has a function to notify that.

FIG. 15 shows a state in which the entire work space WS is deleted during the period when Node 1 is in the local environment in the work space WS shown in FIG. FIG. 16 shows a state in which Node1 has shifted from the local environment to online in the workspace WS shown in FIG.

Referring to FIG. 15, consider a case where the user of Node 2 performs an operation for deleting the entire workspace WS after Node 1 has moved to the local environment. By this operation, each of Node 2 and Node 3 participating in the work space WS at this time deletes the contents of the work space data 262a held and changes it to a null state.

Subsequently, as shown in FIG. 16, when Node1 is brought online from the local environment (offline), Node1 refers to the value of the identification number described in the workspace tag 270 of the workspace data 262a, and the necessary data Request to another node (eg, Node 2). When the node of the transmission destination of this request determines that the requested work space WS has been deleted, it responds with a deletion notification for notifying that effect. The requesting node that has received this deletion notification deletes the contents of the work space data 262a held in its own device and changes it to a null state.

(Overall procedure)
FIG. 17 is a flowchart showing an overall processing procedure according to the first embodiment of the present invention. Each processing procedure shown in FIG. 17 is typically provided by the CPU 201 (FIG. 2) of each information processing apparatus PC executing a program.

Referring to FIG. 17, when execution of the application that provides the work space is started, the CPU 201 of the information processing apparatus PC determines whether or not the own apparatus is currently online (step S <b> 100). If it is determined that it is online (YES in step S100), CPU 201 sets the internal flag to the online state (step S102).

Subsequently, the CPU 201 determines whether or not it has shifted from online to offline (step S104). When it is determined that the system has shifted from online to offline (YES in step S104), the CPU 201 refers to the workspace tag 270 of the workspace data 262a stored in the data storage unit 262 of the own device. Then, it is determined whether or not the own device is the creator of the work space data 262a (step S106).

If the own device is the creator of the workspace data 262a (YES in step S106), the process proceeds to step S122.

On the other hand, if the device itself is not the creator of the workspace data 262a (NO in step S106), the CPU 201 deletes the actual part (description defining each object) of the workspace data 262a (step S108). ). Thereafter, the process proceeds to step S122.

If it is determined that the system has not shifted from online to offline (NO in step S104), the CPU 201 determines whether a workspace data request has been received from another information processing apparatus PC (step S110). ). If no workspace data request has been received from another information processing apparatus PC (NO in step S110), the process returns to step S102.

When a workspace data request is received from another information processing apparatus PC (YES in step S110), the CPU 201 has deleted the entire workspace data 262a stored in the data storage unit 262 of the own apparatus. Is determined (step S112).

If the entire workspace data 262a has been deleted (YES in step S112), the CPU 201 transmits a deletion notification to the information processing apparatus PC that is the transmission source of the workspace data request (step S114). Thereafter, the process returns to step S102.

On the other hand, if the entire work space data 262a has not been deleted (NO in step S112), the CPU 201 uses the actual part of the work space data 262a stored in the data storage unit 262 of the own device as the work space data. The request is transmitted to the information processing apparatus PC that is the transmission source of the request (step S116). Thereafter, the process returns to step S102.

On the other hand, when it is determined that it is not online (NO in step S100), the CPU 201 sets the internal flag to an offline state (step S122).

Subsequently, the CPU 201 determines whether or not it has shifted from offline to online (step S124). If it is determined that the system has not shifted from offline to online (NO in step S124), the process of step S124 is repeated.

On the other hand, when it is determined that the system has shifted from offline to online (YES in step S124), CPU 201 transmits a workspace data request to any other information processing apparatus PC (step S126). ). Then, the CPU 201 waits for a response from another information processing apparatus PC. When any received data is received from another information processing apparatus PC, the CPU 201 determines the content of the received data (step S128).

When the received data is a deletion notification (“deletion notification” in step S128), the CPU 201 deletes the entire work space data 262a stored in the data storage unit 262 of the own apparatus (step S130). Then, the process returns to step S102.

On the other hand, when the received data is work space data (“work space data” in step S128), the CPU 201 stores the work stored in the data storage unit 262 of its own device based on the received work space data. The space data 262a is updated (step S132). Then, the process returns to step S102.

Note that the processing procedure shown in FIG. 17 ends when the execution of the application providing the workspace is stopped.

According to the present embodiment, when any node participating in a workspace moves to the local environment, the node cannot be referred to by the user by deleting the actual part of the stored workspace data. To make sure Furthermore, if the entire workspace in which the node participated is deleted after any node has migrated to the local environment, the node identifies the workspace at the timing when it has entered online again. Delete the entire data, including information for the workspace tag etc.

Therefore, it is possible to avoid the data related to the work space that is no longer necessary on the hard disk of each node remaining as garbage. In addition, even if the information processing device that constitutes the node is taken out to the outside, the data remaining in each node can be reduced to the minimum or zero, so that occurrence of problems such as information leakage can be reduced. .

[First Modification of First Embodiment]
In the first embodiment described above, the node (information processing apparatus) that has shifted to the offline (local environment) deletes the actual part of the workspace data stored in the own apparatus, so that the workspace data cannot be referenced in the node. The configuration for providing the status is illustrated. On the other hand, in this modification, the structure which provides the state which cannot be referred by encrypting workspace data is illustrated.

Since the schematic configuration of the system for providing a workspace according to this modification and the hardware configuration of the information processing apparatus PC are the same as those in FIGS. 1 and 2, respectively, detailed description thereof will not be repeated.

FIG. 18 is a diagram showing a state in which Node 1 has shifted to the local environment in the workspace according to the first modification of the first embodiment of the present invention. FIG. 19 is a diagram showing a state immediately after Node 1 has shifted from the local environment to online in the workspace shown in FIG.

Referring to FIG. 18, in the work space WS according to the present modification, each information processing device PC is the same among the information processing devices PC that participate in the work space WS, in addition to the work space data 262 a configuring the work space. The common key 264 is held.

In this state, for example, when Node1 shifts from online to the local environment (offline), part or all of the workspace data 262a (only the entity part in the example shown in FIG. 18) is encrypted using the common key 264. It becomes. FIG. 18 shows a state (reference numeral 266) in which the actual part of the work space data 262a is encrypted. As encryption, a known encryption method or encoding method (for example, Base 64) can be used.

After the actual part of the workspace data 262a is encrypted, the common key 264 is deleted from Node1. As a result, Node 1 cannot decrypt the actual part of the encrypted work space data 262a into plain text. Therefore, the general user cannot refer to the entity part.

Referring to FIG. 19, when Node 1 is brought online from the local environment (offline), it requests delivery of the common key to another node. In response to this request, the common key 264 is delivered to Node 1 from any node already participating in the workspace.

Then, Node 1 decrypts the actual part of the encrypted work space data 262a using the distributed common key 264. As a result, the work space data 262a is restored as plain text, so that the user of Node 1 can perform normal reference.

Other processing procedures and control structure are the same as in the first embodiment described above, and detailed description thereof will not be repeated.

According to the present modification, in addition to the effects in the first embodiment described above, it is necessary to acquire data from other nodes when each node joins the workspace WS again after shifting from the local environment to online. Therefore, the load on the network can be reduced. Moreover, the work on the work space WS can be resumed quickly.

[Second Modification of First Embodiment]
In the first embodiment described above, the node that has moved offline (local environment) deletes the actual part of the workspace data stored in its own device, thereby providing a state in which the workspace data in the node cannot be referred to It illustrated about. On the other hand, in this modification, each node illustrates a configuration that provides an inaccessible state by only partially holding the work space data.

Since the schematic configuration of the system for providing a workspace according to this modification and the hardware configuration of the information processing apparatus PC are the same as those in FIGS. 1 and 2, detailed description thereof will not be repeated.

FIG. 20 is a diagram showing a state in which Node 1 to Node 3 have moved to the local environment in the workspace according to the second modification of the first embodiment of the present invention.

Referring to FIG. 20, in the work space WS according to the present modification, each information processing apparatus PC, when shifting to the local environment (offline), holds the work space data 262a only partially so that the work in each node The reference to the space data 262a is made substantially impossible.

“Only partially holding the workspace data 262a” means that each node holds only a part of information that does not make sense by itself, and the information held by each node is combined with each other for the entire time. This means a state where meaningful workspace data 262a is generated.

In the example shown in FIG. 20, each of Node 1 to Node 3 is configured to hold only the character strings that constitute the original work space data 262a in a predetermined order. For example, Node1 holds the first, fourth, seventh,... Characters of the character string, Node2 holds the second, fifth, eighth,... Characters of the character string, and Node3 holds the third, sixth, and ninth characters of the character string. , ... hold the character. As described above, since each node is distributed and holds information, a protection function against information leakage can be enhanced.

FIG. 20 illustrates the state after all of Node 1 to Node 3 have moved to the local environment for the sake of simplification. However, only one or two of Node 1 to Node 3 are in the local environment. Even in the case of migration, each node that has migrated to the local environment holds only a part of the information in the same state as in FIG. As described above, each node holds only a part of the entire work space data 262a, so that each node can provide a state in which the work space data 262a cannot be referred to.

Other processing procedures and control structure are the same as in the first embodiment described above, and detailed description thereof will not be repeated.

According to the present modification, in addition to the effects in the first embodiment described above, when each node joins the workspace WS again after shifting from the local environment to online, less data is acquired from other nodes. it can. Therefore, the load on the network can be reduced, and the work on the work space WS can be resumed more quickly.

[Third Modification of Embodiment 1]
In the first embodiment described above, the configuration in which the actual part of the workspace data stored in the node that has been moved offline (local environment) is deleted without taking into account the user's use state (access state).

Alternatively, each node may maintain a state where reference to the workspace data is possible if the user of the node is referring to the workspace data to be deleted at the time of transition to the local environment. . That is, under such conditions, processing such as deletion of workspace data in the node may not be performed.

By adding such a process, even if a user of any node is working, even if the node has moved to the local environment for some reason, the contents being worked on are deleted. Can be avoided.

[Fourth Modification of Embodiment 1]
In the first embodiment described above, the configuration in which the creator of the work space data 262a is identified on a node (information processing apparatus PC) basis has been exemplified. On the other hand, in this modification, it illustrates about the structure which identifies the creator of workspace data per user.

Since the schematic configuration of the system for providing a workspace according to this modification and the hardware configuration of the information processing apparatus PC are the same as those in FIGS. 1 and 2, detailed description thereof will not be repeated.

21A and 21B show data structures used in the workspace according to the fourth modification of the first embodiment of the present invention.

Referring to FIG. 21A, workspace data 262c including a workspace tag 272 in which a user name is described as a creator attribute (Author) is used in a workspace WS according to this modification.

Further, as shown in FIG. 21B, each node stores a user table 262d that describes the correspondence between the user described in the workspace data 262c and the node that the user is using (logged in). The That is, each node, when any user logs in through user authentication, adds the logged-in user to the user table 262d held by the own device. When each node shifts from online to the local environment (offline), each node refers to the creator attribute (Author) described in the work space data 262c that should not be referred to and the user table 262d. Each node does not delete the actual part of the work space data 262c whose creator is the user who is logged in to the own device.

In addition, since it is assumed that the user who is the creator of the workspace data 262c is not logged in to any node, the node name and the user name are described as the creator attribute of the workspace data, Whether to use the creator attribute may be arbitrarily selected. In this case, two attribute values may be determined using an AND condition and / or an OR condition.

Other processing procedures and control structure are the same as in the first embodiment described above, and detailed description thereof will not be repeated.

According to this modification, in addition to the effect in the first embodiment, the node that holds the workspace data can be determined more flexibly. However, the user holding the workspace data can be set more freely.

[Fifth Modification of Embodiment 1]
In the above-described first embodiment, when any node has shifted from offline to online, when the entire target workspace has already been deleted, another node transmits a deletion notification. On the other hand, in this modified example, a configuration in which another device that does not participate in the workspace is inquired as to whether or not the entire target workspace has already been deleted is illustrated.

FIG. 22 is a schematic configuration diagram of a system for providing a work space according to the fifth modification of the first embodiment of the present invention.

Referring to FIG. 22, the system according to the present modification includes server apparatus SRV in addition to information processing apparatuses PC1 to PC3 (Node1 to Node3). This server SRV has a function of monitoring the state of the work space WS configured between Node1 to Node3. More specifically, the server SRV continuously monitors packets flowing on the network NW, and the workspace status information holds the status of the workspace WS in its own device according to an instruction from any node. It is reflected in the contents of 350. When the entire workspace WS is deleted, the server SRV determines that the entire workspace WS has been deleted by receiving a packet instructing the deletion, and the workspace status information 350 stores the workspace. “Delete” which means deletion of the entire WS is described.

On the other hand, Node 1 that has shifted from the local environment (offline) to online determines whether or not the workspace WS exists effectively in the server SRV before sending a request for data necessary for the workspace data to another node. Only when the workspace WS exists effectively, a request for necessary data is transmitted to another node.

Note that, instead of the configuration in which the server SRV continuously monitors packets flowing through the network NW, the node instructing the deletion of the entire workspace WS has also been deleted from the server SRV. May be notified.

Other processing procedures and control structure are the same as in the first embodiment described above, and detailed description thereof will not be repeated.

According to the present modification, in addition to the effects in the first embodiment described above, when each node receives a data request from another node, the history of deleting the entire workspace in order to respond to the deletion notification Need not be memorized. Therefore, the processing in each node can be simplified, and unnecessary data need not be held in each node.

[Embodiment 2]
In the first embodiment described above, the configuration in which the process of deleting the substantial part of the work space data is executed immediately when any node moves to the local environment is illustrated. On the other hand, in the present embodiment, a configuration in which the substantial part of the work space data is maintained for a predetermined period even after the transition to the local environment is illustrated.

For example, when the work space WS is temporarily removed from the work space WS and used again in a form that rejoins the work space WS in a relatively short time, each time the work space WS is joined, the work space data is changed to other data. When the process synchronized with the node is executed, the load on the network NW increases. Further, there may be a problem that the user of the node cannot immediately start work.

Therefore, in the present embodiment, the workspace data is maintained as it is for a predetermined period after a certain node moves to the local environment, and after that predetermined period, the actual part of the workspace data is maintained. Adopting a configuration in which is deleted.

(data structure)
As described above, in order to control the timing at which the entity part of the workspace data is deleted, the workspace data according to the present embodiment has a timer value that specifies the period from the transition to the local environment until the deletion. Contains a description.

FIG. 23 shows an example of the contents of workspace data 262e according to the second embodiment of the present invention.

23, workspace data 262e according to the present embodiment includes a timer attribute in the description of workspace tag 272 in place of workspace tag 272 in workspace data 262a according to the first embodiment shown in FIG. A workspace tag 276 to which (Timer) is added is employed.

This timer attribute describes a period until the substantial part of the work space data 262e is deleted after the corresponding node shifts to the local environment. In the example shown in FIG. 23, timer attribute (Timer) = “50000” is set. For example, this description means 50000 seconds.

Since other descriptions are the same as those in the workspace data 262a, detailed description will not be repeated.

(Control structure)
FIG. 24 is a block diagram showing a control structure of each information processing device PC according to the second embodiment of the present invention.

Referring to FIG. 24, the control structure of information processing apparatus PC according to the present embodiment is the same as the control structure of information processing apparatus PC according to the first embodiment shown in FIG. The data storage unit 262 stores work space data 262e and timer data 262f instead of the work space data 262a.

The reference control unit 251 provides a state in which reference to the work space data 262e stored in the data storage unit 262 cannot be performed after a predetermined period of time has elapsed after the device has left the work space WS and entered the local environment. . More specifically, the reference control unit 251 includes a timer unit 251A. When the timer unit 251A detects that its own device has shifted to the local environment, the timer unit 251A starts time measurement after the shift to the local environment. Then, the timer unit 251A sequentially updates the contents of the timer data 262f stored in the data storage unit 262 according to the time measurement result. Furthermore, when the timer value measured by the timer unit 251A reaches the timer attribute value described in the work space data 262e, the reference control unit 251 deletes the actual part of the work space data 262e. Thereby, the reference control unit 251 provides a state in which reference to the work space data 262e is impossible.

Also, the timer unit 251A resets the measured value when the own device shifts from the local environment to online and rejoins the workspace WS. For this reason, the entity of the work space data 262e is not deleted as long as the current node is brought back online after each node is transferred to the local environment and before the timer attribute value described in the work space data 262e.

Others are the same as in FIG. 4, and thus detailed description will not be repeated.
(Process overview when migrating to local environment)
Next, a process when a node that has participated in the workspace WS according to the present embodiment has moved offline (local environment) will be described.

FIG. 25 shows a state in which both Node 1 and Node 2 are online in workspace WS according to the second embodiment of the present invention. FIG. 26 shows a state immediately after Node1 shifts from online to the local environment in the workspace WS shown in FIG. FIG. 27 shows a state after a predetermined period has elapsed since Node 1 has shifted from online to the local environment in the workspace WS shown in FIG.

Referring to FIG. 25, each node holds the work space data 262e shown in FIG. 23 and timer data 262f for managing the elapsed time after the own device has shifted to the local environment.

The timer data 262f includes a count tag 296 and a local tag 298. In the online state, the value of the count tag 296 is set to the value of the timer attribute (Timer) described in the workspace tag 276 of the workspace data 262e. As will be described later, the value of the count tag 296 is decremented with the passage of time when the own apparatus shifts to the local environment. For example, FIG. 26 shows a state in which 10 seconds have elapsed since the own apparatus moved to the local environment.

Also, the value of the local tag 298 is updated as needed according to the state (online / offline) of the own device. For example, as shown in FIG. 25, when Node1 is online, the value of the local tag 298 is set to “off” indicating that the local apparatus is not in the local environment. On the other hand, as shown in FIG. 26, when Node1 is in the local environment, the value of the local tag 298 is set to “on” indicating that the own apparatus is in the local environment.

Thus, after Node 1 moves to the local environment, when a period described as a timer attribute (in this case, 50000 seconds) elapses, a state as shown in FIG. 27 is obtained. As shown in FIG. 27, the value of the count tag 296 of the timer data 262f is “0”, meaning that it is counting up. Thus, when the value of the count tag 296 becomes “0”, the Node1 deletes the substantial part of the work space data 262e. As a result, in Node1, the user cannot access the work space data 262e.

If the user is logged in to Node1, before deleting the actual part of workspace data 262e, Node1 notifies the user of deletion of workspace data 262e (for example, by a pop-up message). Good.

(Outline of processing when shifting from the local environment to online)
FIG. 28 is a diagram illustrating a state in which Node1 has shifted from the local environment to online in the workspace WS illustrated in FIG.

Referring to FIG. 28, when Node 1 shifts from the local environment to online, Node 1 resets the value (timer value) of count tag 296 of timer data 262f. In the example shown in FIG. 28, the value of the count tag 296 of the timer data 262f is returned to the initial value “50000”.

Also, at this time, if the entity part of the workspace data 262e has been deleted, Node1 re-joins the workspace WS by acquiring the entity part from another node. On the other hand, if the substance of the work space data 262e has not yet been deleted, the Node 1 immediately rejoins the work space WS without changing the work space data 262e.

Other processing procedures and control structure are the same as in the first embodiment described above, and detailed description thereof will not be repeated.

(Time measurement)
If the user of the node is referring to the workspace data to be deleted at the timing when each node moves to the local environment, the node may not decrement the count tag 296 of the timer data 262f. This is to prevent the contents being worked from being deleted even if the user of any node is working and the node has moved to the local environment for some reason.

Further, in response to a user operation of each node, the node may temporarily stop decrementing the count tag 296 of the timer data 262f, or reset the value of the count tag 296 of the timer data 262f. May be.

(Overall procedure)
FIG. 29 is a flowchart showing an overall processing procedure according to the second embodiment of the present invention. Each processing procedure shown in FIG. 29 is typically provided by the CPU 201 (FIG. 2) of each information processing apparatus PC executing a program. Of the processes shown in FIG. 29, the same processes as those shown in FIG. 17 are denoted by the same reference numerals.

Referring to FIG. 29, when the CPU 201 of the information processing apparatus PC starts executing an application that provides a workspace, it determines whether or not the own apparatus is currently online (step S100). If it is determined that it is not online (NO in step S100), the process proceeds to step S140.

On the other hand, if it is determined to be online (YES in step S100), the CPU 201 sets the internal flag to an online state (step S102).

Subsequently, the CPU 201 determines whether or not it has shifted from online to offline (step S104). If it is determined that the system has shifted from online to offline (YES in step S104), CPU 201 starts time measurement (step S140). More specifically, the CPU 201 sets a value set as a timer attribute to the initial value of the count tag 296 of the timer data 262f, and then sequentially updates the initial value. Then, the CPU 201 determines whether or not the count tag 296 of the timer data 262f has been counted up (step S142). That is, the CPU 201 determines whether or not the value of the count tag 296 of the timer data 262f is “0”.

If the count tag 296 of the timer data 262f has not yet been counted up (NO in step S142), the process proceeds to step S124.

On the other hand, when the count tag 296 of the timer data 262f has been counted up (YES in step S142), the CPU 201 stores the workspace tag of the workspace data 262a stored in the data storage unit 262 of the own device. Referring to 270, it is determined whether or not the own device is the creator of work space data 262a (step S106).

If the own apparatus is the creator of the work space data 262a (YES in step S106), the process proceeds to step S124.

On the other hand, if the device itself is not the creator of the workspace data 262a (NO in step S106), the CPU 201 deletes the actual part (description defining each object) of the workspace data 262a (step S108). ). Thereafter, the process proceeds to step S124.

In step S124, the CPU 201 determines whether or not it has shifted from offline to online. If it is determined that the system has not shifted from offline to online (NO in step S124), the process returns to step S140.

On the other hand, if it is determined that the system has shifted from offline to online (YES in step S124), the CPU 201 resets the timer value during time measurement (step S144). Then, the process proceeds to step S146. More specifically, the CPU 201 sets again the value set as the timer attribute in the count tag 296 of the timer data 262f.

In step S146, the CPU 201 determines whether or not the substantial part of the work space data 262a stored in the data storage unit 262 of the own device has been deleted (step S146). If the actual part of workspace data 262a has not been deleted (NO in step S146), the process returns to step S102.

On the other hand, when the substantial part of the work space data 262a has been deleted (YES in step S146), the CPU 201 transmits a work space data request to any other information processing apparatus PC ( Step S126). Then, the CPU 201 waits for a response from another information processing apparatus PC. When any received data is received from another information processing apparatus PC, the CPU 201 determines the content of the received data (step S128).

When the received data is a deletion notification (“deletion notification” in step S128), the CPU 201 deletes the entire work space data 262a stored in the data storage unit 262 of the own apparatus (step S130). Then, the process returns to step S102.

On the other hand, when the received data is work space data (“work space data” in step S128), the CPU 201 stores the work stored in the data storage unit 262 of its own device based on the received work space data. The space data 262a is updated (step S132). Then, the process returns to step S102.

On the other hand, if it is determined that the transition from online to offline has not been made (NO in step S104), the CPU 201 determines whether a workspace data request has been received from another information processing apparatus PC. Judgment is made (step S110). If no workspace data request has been received from another information processing apparatus PC (NO in step S110), the process returns to step S102.

When a workspace data request is received from another information processing apparatus PC (YES in step S110), the CPU 201 has deleted the entire workspace data 262a stored in the data storage unit 262 of the own apparatus. Is determined (step S112).

If the entire workspace data 262a has been deleted (YES in step S112), the CPU 201 transmits a deletion notification to the information processing apparatus PC that is the transmission source of the workspace data request (step S114). Thereafter, the process returns to step S102.

On the other hand, if the entire work space data 262a has not been deleted (NO in step S112), the CPU 201 uses the actual part of the work space data 262a stored in the data storage unit 262 of its own device as the request. The information is transmitted to the information processing apparatus PC as the transmission source (step S116). Thereafter, the process returns to step S102.

Note that the processing procedure shown in FIG. 29 ends when the execution of the application providing the workspace is stopped.

According to the present embodiment, when any node that has participated in the workspace moves to the local environment, the substantial part of the workspace data is deleted after a predetermined period of time, and the reference by the user becomes impossible.

By adopting such a configuration, once a user leaves the workspace and then rejoins the workspace in a relatively short period of time, the data constituting the workspace from other nodes Therefore, it is possible to quickly resume the work on the work space WS. On the other hand, for users who have left the workspace for a long time, it is possible to avoid unnecessary data remaining on the hard disk as garbage, so that the hard disk can be used effectively and problems such as information leakage can occur. Can be reduced.

[First Modification of Second Embodiment]
In the above-described second embodiment, a configuration is described in which a timer attribute (Timer) is set for the entire workspace data, and the actual part of the workspace data is collectively deleted based on the value of the timer attribute. . On the other hand, in this modification, a configuration in which timer attributes are set in units of objects included in workspace data is illustrated.

Since the schematic configuration of the system for providing a workspace according to this modification and the hardware configuration of the information processing apparatus PC are the same as those in FIGS. 1 and 2, detailed description thereof will not be repeated.

FIG. 30 is a diagram showing an example of the contents of the work space data 262g according to the first modification of the second embodiment of the present invention.

Referring to FIG. 30, in workspace data 262g according to the present modification, timer attributes 301 to 303 are added to the descriptions of objects OBJ1 to OBJ3, respectively.

The reference control unit 251 (FIG. 24) of each node defines timer attributes 301 to 303 in association with the objects OBJ1 to OBJ3, and sequentially updates the values of the timer attributes. Then, the reference control unit 251 deletes the corresponding description for the object for which the value of the corresponding timer attribute is counted up.

Since other descriptions are the same as those of the workspace data 262e, detailed description will not be repeated.

Other processing procedures and control structures are the same as in the second embodiment described above, and thus detailed description will not be repeated.

According to this modification, in addition to the effects in the above-described second embodiment, the period from the transition to the local environment until the reference becomes impossible according to the importance of the object placed on the workspace, the file size, and the like. It can be set freely. For this reason, when each node joins the workspace WS again after shifting from the local environment to online, the amount of data acquired from another node can be limited to an appropriate range.

[Other Modifications of Embodiment 2]
The first to fifth modifications of the first embodiment described above can be similarly applied to the second embodiment.

[Embodiment 3]
In the above-described first and second embodiments and their modifications, the configuration is illustrated in which each node holds the entire workspace data. However, the configuration in which each node holds a part of the workspace data is also illustrated. Applicable.

For example, consider a system including a plurality of client devices and a server device configured to be able to communicate data with each client device. In this system, the server device manages the entire workspace data, and each client device moves a part of the workspace data held in the server device mainly for speeding up the processing. The present invention can also be applied to the case where the information is held (typically, the so-called cache function). More specifically, in such a system, each client device deletes the cache held by the client device according to the same processing procedure as in any of the above-described embodiments.

[Other embodiments]
The program according to the present invention may be a program module that is provided as a part of a computer operating system (OS) and that calls necessary modules in a predetermined arrangement at a predetermined timing to execute processing. . In that case, the program itself does not include the module, and the process is executed in cooperation with the OS. A program that does not include such a module can also be included in the program according to the present invention.

Furthermore, the program according to the present invention may be provided by being incorporated in a part of another program. Even in this case, the program itself does not include the module included in the other program, and the process is executed in cooperation with the other program. Such a program incorporated in another program can also be included in the program according to the present invention.

The provided program product is installed in a program storage unit such as a hard disk and executed. Note that the program product includes the program itself and a storage medium in which the program is stored.

Furthermore, part or all of the functions realized by the program according to the present invention may be configured by dedicated hardware.

The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

201 CPU, 203 internal bus, 205 monitor, 207 communication interface, 209 input device, 211 hard disk, 213 memory unit, 215 CD-ROM drive, 217 flexible disk drive, 250, 251 reference control unit, 251A timer unit, 252 data operation Unit, 254 synchronization control unit, 256 drawing unit, 258 user authentication unit, 260 data transmission / reception unit, 262 data storage unit, NW network, PC, PC1 to PC3 information processing device, SRV server device.

Claims (11)

1. An information processing method for providing a virtual space (WS) that can be accessed simultaneously by a plurality of users using a plurality of information processing devices (PC) having a storage unit (211; 262),
   The information processing apparatus storing at least a part of data constituting the virtual space in its storage unit (FIGS. 6 to 9);
   Determining whether or not the information processing apparatus is in a communication cutoff state with another information processing apparatus (S100);
   An information processing method comprising: a step of disabling a user's reference to the data stored in the storage unit at the time when the information processing apparatus determines that the communication is cut off (S108). .
2. The information processing method according to claim 1, wherein the step of disabling user reference includes a step (S108) of deleting the data stored in the storage unit.
3. A step (S124) of determining whether or not the information processing apparatus has returned to a communicable state after shifting to the communication cut-off state;
   A step of requesting data constituting the virtual space from another information processing apparatus when the information processing apparatus determines that the communication enabled state has been restored (S126);
   The information processing apparatus further includes a step (S132) of updating the contents of its own storage unit in response to reception of data constituting the virtual space from the other information processing apparatus. Information processing method according to item.
4. The step of deleting data includes a step of deleting an entity part constituting the virtual space in a state where information for specifying the virtual space is held in the storage unit,
   The information processing method includes:
   The information processing apparatus deleting the entire virtual space in response to a user operation (FIG. 15);
   When the information processing apparatus receives a request for data constituting the virtual space from another information processing apparatus, the step of determining whether or not the entire requested virtual space has been deleted (S112); ,
   When the information processing apparatus determines that the entire requested virtual space has been deleted, the information processing apparatus notifies the requesting information processing apparatus that the entire requested virtual space has been deleted. Step (S114);
   The information processing apparatus configures the virtual space including information for specifying the virtual space in response to receiving a notification from the other information processing apparatus that the entire virtual space has been deleted. The information processing method according to claim 3, further comprising a step (S130) of deleting the entire data.
5. The step of disabling user browsing comprises:
   Encrypting the data stored in the storage unit using an encryption key held in common among the plurality of information processing devices (FIG. 18);
   The information processing method according to claim 1, further comprising a step (FIG. 18) of deleting the encryption key used for encryption.
6. A step (S124) of determining whether or not the information processing apparatus has returned to a communicable state after shifting to the communication cut-off state;
   A step of requesting a common key from another information processing device when it is determined that the information processing device has returned to the communicable state (FIG. 19);
   6. The method according to claim 5, further comprising a step (FIG. 19) of decrypting the encrypted data using the common key in response to reception of the common key from the other information processing apparatus. Information processing method described in 1.
7. The step of disabling user browsing comprises:
   Measuring the time since the transition to the communication cut-off state (S140);
   The information processing method according to claim 1, further comprising a step (S108) of disabling user's reference to the data when the measured time reaches a predetermined value.
8. The information processing method according to claim 7, wherein the predetermined value is defined in units of at least one of data constituting the virtual space and objects included in the virtual space.
9. The step of disabling the user's reference includes a step of maintaining the user's reference to the data if the user is referring to the data even if it is determined that the communication is cut off. The information processing method according to claim 1, further comprising:
10. An information processing apparatus (PC) configured to be capable of data communication with another information processing apparatus and providing a virtual space (WS) that can be accessed simultaneously by a plurality of users,
    A storage unit (211; 262) for storing at least part of data constituting the virtual space;
    A part (201; 260) for determining whether or not communication with another information processing apparatus is interrupted;
    An information processing apparatus comprising: a part (201; 250) for disabling user's reference to the data stored in the storage unit at the time when it is determined that the communication is cut off.
11. A storage medium storing a program for providing a virtual space that can be accessed simultaneously by a plurality of users using a plurality of information processing devices (PCs) having a storage unit (211; 262), When executed by the information processing apparatus, the information processing apparatus
    Storing at least a part of data constituting the virtual space in the storage unit (FIGS. 6 to 9);
    A step of determining whether or not communication with another information processing apparatus is interrupted (S100);
    A storage medium storing a program that, when it is determined that the communication is cut off, performs a step (S108) of disabling user's reference to the data stored in the storage unit at the time.

Images