JP2005020561A - Method for preventing information flow, and system and device for managing information - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent a user from leaking shared information in an information system wherein the shared information is used by utilizing a communication line. <P>SOLUTION: The system includes a user authentication part 10; a shared information storing part 20; and a signature processing part 30. The user authentication part 10 comprises a user information storage part 11; and an access authority determining part 12 for collating a request from the user with user information stored in the user information storage part 11, so as to reject or accept the request. The shared information storing part 20 comprises a shared information storage part 21; a copyright information storage part 22; and a temporary storage part 23 for temporarily storing the storage contents. When the user 40 requests the shared information, the access authority determining part 12 of the user authentication part 10 displays only the shared information having access authority on a display. The signature processing part 30 visibly embeds and displays the user information in a ROM state. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention enables security management so that shared information is not leaked in a database system that uses shared information by utilizing a communication line such as the Internet or a local area network (LAN). In particular, the present invention relates to an information leakage prevention method, an information management system, and an information management device that prevent users from leaking information by motivating users who access shared information to leak information.
[0002]
[Prior art]
Conventionally, database systems that share information using communication lines such as the Internet and LAN have been widely used. Such a database system is extremely useful because it can share information without being affected by distance or time.
[0003]
However, since the shared information is in the form of electronic data, it is possible to copy hard documents and drawings instantly without the need for copying hard documents and drawings one by one with a copying machine or a camera. There is no need to carry out a large amount of hard copy documents and hard copy drawings as before, and floppy (registered trademark) disk, CD-ROM, CD-R, hard disk, optical disk, magneto-optical disk , Because it can be stored on media such as magnetic tapes and memory cards, it is not discovered by guards when it is taken out of the company, and it can also be transferred using a communication line without using such media. Therefore, there is no end to the information leakage cases in which information with higher useful utility value is leaked by unsavory users.
[0004]
Also, in the industry such as advanced technology, the so-called industrial espionage case where a competitor company acquires information from a rival company and leaks information by acquiring a rival company user due to fierce technological development competition. There is no end to it.
[0005]
For this reason, in a database system that shares information using a communication line such as the Internet or a LAN, security management for providing various guards against leakage of shared information is indispensable.
[0006]
Therefore, various security management methods, information management systems, and information management apparatuses have been conventionally developed.
[0007]
There are roughly two security management methods. The first method eliminates access by outsiders by allowing only registered users to access shared information. This first method includes a case where even a registered user sets access authority for each piece of shared information and allows access only to shared information having the access authority. The second method is to synthesize symbols with shared information accessed by the user to change the contents of the shared information, or to embed symbols such as characters or images that are a clue to discovery in the event of leakage. To do.
[0008]
The first method has already been widely implemented by incorporating a user authentication function such as a user name and a password into the database system.
[0009]
As a second method, a storage means for storing a symbol image having a signature function, a synthesis means for synthesizing symbol image information in the storage means to the image information when image information is requested, and the synthesis There has been proposed one that includes a transfer means for transferring the composite image obtained by the means to a device that has requested information transfer (see, for example, Patent Document 1).
[0010]
[Patent Document 1]
JP 2001-268356 A
[0011]
[Problems to be solved by the invention]
However, even though the first method can prevent information leakage due to unauthorized access by outsiders, it cannot be addressed at all when a registered user recalls information leakage. There is. In addition, the method described in Patent Document 1 as the second method is limited to the case where the shared information is image information, and the symbol image has no meaning for the user, so information leaks. After that, there is a problem that even if the owner of the leaked information and the name of the access user are found, it is impossible to expect the user to be motivated not to leak the information.
[0012]
Therefore, the present invention solves the above-mentioned problems, and proactively displays user information such as the user's name and affiliation, copyright information, etc. on the screen as well as shared information requested by the user who has accessed the database system. It is an object of the present invention to provide an information leakage prevention method, an information management system, and an information management apparatus that are displayed as, and motivate a user who requests information not to recall information leakage.
[0013]
[Means for Solving the Problems]
In order to solve the above problems, the information leakage prevention method of the present invention registers users who can access shared information in a database system that uses shared information using a communication line, and the user accesses the shared information. When trying to do so, it is determined whether or not the user has access authority, and only the information having access authority is displayed on the user's display, and at least the user in a form that cannot be deleted behind the displayed shared information. It is characterized by motivating the user not to recall information leakage by visually embedding and displaying information.
[0014]
According to the information leakage prevention method described above, since only the user having access authority can access the shared information, the shared information is not leaked to outsiders, and security management can be performed. Also, at least user information such as the user's name is displayed in a visible and non-erasable manner behind the shared information displayed on the display at the user's request, so that the user can leak this shared information or print If you copy or transfer, you can strongly recognize that your name is displayed in the shared information, so you can stop leaking shared information. As a result, it is possible to prevent the user from being a criminal and to prevent the occurrence of damage due to information leakage.
[0015]
Further, in order to solve the above problems, the information management system of the present invention registers a user who can access the shared information in the user authentication unit in the database system in which the shared information can be used by utilizing a communication line, When the user tries to access the shared information, the user authentication unit can access only the registered user and the information having the access authority, and the requested shared information is displayed on the user's display and the display is performed. It is characterized in that the user is motivated not to recall information leakage by visually embedding and displaying at least user information in a format that cannot be deleted by the signature processing unit behind the shared information. Yes.
[0016]
According to this information management system, only a user having access authority can access the shared information, so that leakage of the shared information to outsiders does not occur, and security management can be performed. Also, at least user information such as the user's name is displayed in a visible and non-erasable manner behind the shared information displayed on the display at the user's request, so that the user can leak this shared information or print If you copy or transfer, you can strongly recognize that your name is displayed in the shared information, so you can stop leaking shared information. As a result, it is possible to prevent the user from being a criminal and to prevent the occurrence of damage due to information leakage.
[0017]
In addition, in order to solve the above problems, the information management apparatus of the present invention registers a user terminal including a display and a keyboard, and a user in a database system in which shared information can be used using a communication line. At least user information is included in the user authentication unit that stores the access authority information of the registered user, the shared information storage unit that stores the shared information, and the shared information that is read from the shared information storage unit by the user having access authority. And a signature processing unit that processes the information so as to be embedded and displayed in an erasable and non-erasable manner and displays the information on a user's display.
[0018]
The shared information storage unit includes a shared information storage unit that stores a plurality of pieces of shared information, and a temporary storage unit that temporarily stores shared information read by the user having access authority from the shared information storage unit. It is good to do so.
[0019]
The shared information storage unit may include a copyright information storage unit that stores copyright information.
[0020]
The user authentication unit may include a user storage unit and an access authority determination unit.
[0021]
The signature processing unit may be configured to embed and display user information and copyright information.
[0022]
The information embedded and displayed by the signature processing unit may be displayed in a light color different from the shared information.
[0023]
The information embedded and displayed by the signature processing unit may be displayed in different colors between the user information and the copyright information.
[0024]
The user information and / or copyright information embedded and displayed by the signature processing unit may be embedded and displayed at an angle different from the shared information.
[0025]
According to the information management apparatus described above, since only a user having access authority can access the shared information, it is possible to perform security management without causing leakage of the shared information to outsiders. Also, at least user information such as the user's name is displayed in a visible and non-erasable manner behind the shared information displayed on the display at the user's request, so that the user can leak this shared information or print If you copy or transfer, you can strongly recognize that your name is displayed in the shared information, so you can stop leaking shared information. As a result, it is possible to prevent the user from being a criminal and to prevent the occurrence of damage due to information leakage.
[0026]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described.
[0027]
FIG. 1 is a schematic block diagram of an information management system for implementing the information leakage prevention method of the present invention. This information management system includes at least a user authentication unit 10 for registering a user or an administrator, a shared information storage unit 20 for storing shared information, and shared information requested by a user having access authority on a display. A signature processing unit 30 is provided that embeds and displays user information such as a user name as a digital watermark in a form that is visible and non-erasable on the display. Reference numeral 40 denotes a user who uses this system, and reference numeral 50 denotes an administrator who manages this system.
[0028]
The user authentication unit 10 includes a user information storage unit 11 that stores personal information of the user 40 and the administrator 50, and the user 40 and the administrator 50 store the user information when the user 40 and the administrator 50 access. The access authority determination part 12 which determines whether it is the user 40 and the administrator 50 who have the access authority memorize | stored in the part 11, the user outport 13, and the administrator outport 14 is provided. Processing instructions and information relating to the user 40 user are sent from the user outport 13 to the shared information storage unit 20 or the signature processing unit 30. Processing instructions and information regarding the administrator 50 are sent from the administrator outport 14 to the shared information storage unit 20.
[0029]
In addition to the user name and password of the user 40 or the administrator 50, the user information storage unit 11 includes a name, affiliation, job title, telephone number, mobile phone number, fax number, date of birth, date of employment, career, address In addition, appropriate user information is stored among used terminals, shared information having access authority, and past access history.
[0030]
When the user 40 or the administrator 50 accesses the access authority determination unit 12, the input user name and password are compared with the user name and password stored in the user information storage unit 11 and input. If the user name and / or password does not match the user name and / or password stored in the personal information storage unit 11, access is denied. When the input user name and password match the user name and password stored in the user information storage unit 11, the user can access the shared information.
[0031]
The access authority determination unit 12 also determines whether the shared information requested by the user is shared information for which the user has access authority. If shared information without access authority is requested, access is denied. When shared information having access authority is requested, the shared information is displayed on the user's display.
[0032]
The shared information storage unit 20 is a rewritable shared information storage unit 21 and a copyright information storage for storing copyright information to be embedded and displayed based on the copyright information of the shared information stored in the shared information storage unit 21. And a read-only temporary storage unit 23 that temporarily stores the shared information requested by the user having access authority from the shared information storage unit 21 together with the copyright information read from the copyright information storage unit 22. And. The information in the rewritable shared information storage unit 21 cannot be rewritten by the user 40, and only the administrator 50 has the rewriting authority.
[0033]
The signature processing unit 30 displays the shared information and copyright information read from the temporary storage unit 23 of the shared information storage unit 20 on the display of the user terminal, and displays the displayed shared information and copyright information. In the background, at least the name or the name and affiliation of the accessed user information can be read from the user information storage unit 11 of the user authentication unit 10 and cannot be deleted visually and without permission by the user. It is embedded and displayed as a digital watermark in a non-erasable format.
[0034]
The terminal device of the user 40 includes a main body 41, a keyboard 42, and a display 43. The administrator 50 terminal also includes a main body 51, a keyboard 52, and a display 53.
[0035]
Next, accumulation of shared information in the shared information accumulation unit 20 of the information management system and storage of user information in the user information storage unit 10 will be described.
[0036]
First, the shared information is stored in the rewritable shared information storage unit 21 of the shared information storage unit 20. As is well known, for example, reference numbers, titles, creators, creation dates, registration dates, classifications, search keywords, secret categories (eg, top secret, handling caution, confidential, external) Etc.) is stored.
[0037]
In addition, the copyright information storage unit 22 stores company information and group marks such as companies and organizations that own shared information, and copyright information such as company names and organization names. The copyright information stored in the copyright information storage unit 22 can be common to all shared information, for example.
[0038]
Further, the personal information of the user 40 and the administrator 50 who have access authority to the database system is stored in the user information storage unit 11 of the user authentication unit 10. As described above, the user information referred to here is, in addition to user information such as name and affiliation that can identify the individual of the user 40 or the administrator 50, accessible shared information, accessible usage mode (for example, display , Printing, copying, forwarding, etc.). However, the user information to be embedded and displayed as a digital watermark in the read shared information, which will be described later, may be only a part of the information such as name and affiliation.
[0039]
Next, the operation of the information management system will be described with reference to the flowchart of FIG. The left side of the flow 60 in FIG. 2 shows operations such as a request for shared information by the user 40 and the display on the display 43, and the right side shows the operation of the system.
[0040]
When the user 40 accesses this system, the terminal 40 is used to input a user name and password among predetermined user information and make a login request (61). When a login request is made, the user name and password are checked against the user name and password of the user information stored in the user information storage unit 11 of the user authentication unit 10 to determine whether the user has access authority or not. 12 is determined (62).
[0041]
If the input user name and / or password does not match the user name and / or password stored in the user information storage unit 11, the user's access to the shared information storage unit 20 is denied (63). .
[0042]
When the input user name and password match the user name and password stored in the user information storage unit 11, it is determined that the user is a regular user and the user information is acquired from the user information storage unit 11 (64), and the access authority A signal is sent from the determination unit 12 to the shared information storage unit 21 of the shared information storage unit 20, and a shared information search form for which the user has access authority is temporarily stored in the temporary storage unit 23. It is transmitted (65) and displayed on the display 43 of the terminal of the user 40 (66).
[0043]
For example, as shown in FIG. 3, the search form 90 includes search keys 91 such as “keyword search”, “systematic diagram search”, and “design flow search”, a search term input frame 92, a search start button 93, A display frame 94 of the number of display items is displayed. On this search form screen, company logo 95, company name logo 96, production / management department 97 of this system, etc. may be displayed as necessary.
[0044]
Using the search form 90 displayed on the display 43, the user 40 selects a search key. Then, the selected search key name is displayed in front of the search term input frame 92 (left side in FIG. 3). For example, when “keyword search” is selected as the search key, the “keyword” character 98 is displayed as shown in FIG. 4, so that the user 40 can select an appropriate search keyword (for example, a substation) in the input frame 92. ) Is input (67), and the search start button 93 is clicked to request a search (68).
[0045]
Then, this search keyword is sent to the user authentication unit 10, and the access authority determination unit 12 collates this search keyword with the user information of the user 40 stored in the user information storage unit 11. It is determined whether or not the search keyword has access authority (69). As a result, if the user 40 does not have access authority, the search is rejected (70). If the user 40 has access authority, a search is executed (71).
[0046]
When the search result is obtained, the shared information is temporarily stored in the temporary storage unit 23 and transmitted to the terminal of the user 40 (72) and displayed on the display 43 (73). On this display 43, for example, the number of hits (for example, 20) of shared information related to this search keyword is displayed in the display frame 94 of the number of cases displayed on the search form screen, and the search result is shared below. A list of information 99 is displayed.
[0047]
If this shared information list 99 cannot be displayed on one screen, the number of displayed / hit 101 currently displayed on the screen, display page / total page 102, etc. are displayed, and there is a follow-up page. Should be displayed.
[0048]
The user 40 views the shared information list 99 and selects (clicks) a required shared information file from the list to request it (74). Then, the request content is sent to the user authentication unit 10, and the access authority determination unit 12 compares the request content with the access authority of the user stored in the user information storage unit 11 to determine whether there is an access authority. (75). If the user does not have the access authority for the requested shared information, the request is rejected (76).
[0049]
If the user has access authority, the file is opened, the shared information is acquired (77), sent to the signature processing unit 30, and the signature processing unit 30 uses the user information such as the user's name and affiliation. Is embedded (78). Further, copyright information such as a secret section, a company mark, and a company name is embedded as needed (79).
[0050]
When user information or copyright information is embedded in the shared information in this way, file editing lock is applied to all the information (80). Shared information that has been locked for editing and embedded information such as user information, secret classification, and copyright information are transmitted as a file (81) and displayed on the display 43 of the user 40 (82).
[0051]
Among the operations described above, the search processing 83 is from the user authentication 62 to the access authority determination 75 and the rejection 76, and the digital watermark embedded display processing 84 is from the user information acquisition 77 to the file transmission 81.
[0052]
FIG. 5 shows a display example of the requested file. The requested file sharing information 111 is displayed in an arbitrary format determined by the management company. Behind the requested file sharing information 111, the user information 112 or, if necessary, the secret section 113, the company mark 114, the company name logo 115, etc. are embedded in a form that is visible and cannot be deleted by the user. Is displayed. Here, the information such as the user information 112, the secret section 113, the company mark 114, and the company name logo 115 to be embedded and displayed is a light color different from the color of the shared information 111 so as not to hinder the reading of the shared information 111, for example, the user When the information 112 and the secret section 113 are light blue, and the company mark 95 is red, the company mark 114 to be embedded and displayed is light pink, and the company name logo 115 is preferably displayed in light gray. The user information 112 and / or the secret section 113 to be embedded and displayed are inclined at an appropriate angle with respect to the horizontal direction, for example, about 30 ° to 60 °, as shown in FIG. 5, rather than being displayed horizontally. And displaying the shared information 111 not only obstructs the reading of the shared information 111, but also emphasizes the information such as the user information 112 and / or the secret section 113, and makes the user surely recognize the embedded information, giving a strong impression. Can be motivated not to leak shared information. The company logo 114 and the company name logo 115 can also be displayed in an inclined manner.
[0053]
Therefore, according to the information management system described above, only registered users can access only shared information for which access rights are granted, and it is impossible for outsiders to search and view shared information. Is possible. Also, the user should not leak information by embedding and displaying user information such as his / her name and affiliation behind the shared information of the requested file displayed on the display. In the unlikely event that the displayed shared information is printed, copied, transferred, etc., it is strongly recommended that user information such as your name and affiliation be displayed in the shared information. It can be recognized and motivated to discourage the leakage of the shared information, and the leakage of the shared information can be prevented in advance.
[0054]
In the above description, the case where there is only one user 40 has been described for the sake of convenience. Similarly, for a large number of users, user information and shared information having access authority are stored for each user in the same manner. By storing the information in the unit 11, security management can be performed, and motivation can be given to discourage leakage of shared information.
[0055]
Also, it is possible to make it possible for a registered user to request all shared information without setting user access authority for each piece of shared information. In such a case, it is not necessary to store the shared information having the user's access authority in the user storage unit 11 of the user authentication unit 10, and the access authority determination unit 12 simply determines that the user who requested the shared information is a registered user. It is only necessary to determine whether or not.
[0056]
In addition, the administrator 50 can perform various tasks necessary for management such as storage, editing, deletion, and download of shared information in the shared information storage unit 21 of the shared information storage unit 20. Note that the administrator 50 is more conscious of security management for shared information than general employee users and the like, and usually, the administrator 50 does not need to embed display of personal information or copyright information. If necessary, personal information and copyright information may be embedded and displayed for the administrator as well as the user.
[0057]
Although the above description has described specific embodiments, it goes without saying that various modifications can be made without departing from the spirit of the invention.
[0058]
For example, in the above embodiment, as shown in FIG. 5, the user information 112, the secret category 113, the copyright information (company logo 114, company name logo 115), etc. are displayed on the screen on which the requested shared information file is displayed. The case of the embedded display has been described, but the search information display screen 90 shown in FIG. 3 and the search result shared information list 99 display screen shown in FIG. Information such as the secret section 113 and copyright information (company logo 114, company name logo 115) can be embedded and displayed.
[0059]
In the above embodiment, the case where the copyright information storage unit 22 is provided in addition to the shared information storage unit 21 has been described. However, the copyright information storage unit 22 may be provided in the shared information storage unit 21.
[0060]
Further, in the above embodiment, the form of shared information was not particularly described, but the shared information referred to in the present invention is not only document information, but also graphic information, mixed information of documents and graphics, video information, The present invention can be similarly applied to information in which audio information is mixed in document and / or graphic information.
[0061]
【The invention's effect】
As described above, the information leakage prevention method, information management system, and information management apparatus of the present invention allow access to shared information only by users who have access authority by user authentication. Access and leakage of shared information can be prevented, security management is possible, and the user who accessed the shared information has their name and affiliation behind the shared information displayed on the display In the unlikely event that the displayed shared information is printed, copied, transferred, etc., your name and affiliation will be displayed along with the shared information. It can be strongly recognized and can be motivated to discourage the leakage of this shared information. It is possible to prevent the.
[0062]
A shared information storage unit that stores a plurality of pieces of shared information; and a read-only temporary storage unit that temporarily stores shared information read by a user having access authority from the shared information storage unit; If the shared information storage unit is directly accessed by the user to access shared information other than the permitted shared information stored in the shared information storage unit, or the shared information stored in the shared information storage unit Can be prevented from being tampered with or leaked.
[0063]
When the shared information storage unit includes a copyright information storage unit that stores copyright information, the copyright information can be embedded and displayed together with the user information in the displayed shared information.
[0064]
If the user authentication unit includes a user information storage unit and an access authority determination unit, it is possible to permit access only to registered users and only to shared information having access authority.
[0065]
If the signature processing unit embeds and displays user information and copyright information, in the unlikely event that shared information leaks, the name of the user who accessed the shared information and the attribution of the copyright of the displayed shared information The user who leaked this shared information and the copyright owner can be identified from the destination, and information leakage countermeasures can be immediately implemented.
[0066]
If the information embedded and displayed by the signature processing unit is displayed in a light color, the shared information displayed can be easily read, and the user can clearly recognize the embedded information. Therefore, it can be motivated to stop leaking shared information.
[0067]
If the information embedded and displayed by the signature processing unit is displayed in different colors according to information such as user information and copyright information, it becomes possible to clearly distinguish between user information and copyright information, and leakage of shared information A motivational function that will stop you from playing is even more reliable.
[0068]
If the user information and / or copyright information embedded and displayed by the signature processing unit is embedded and displayed at an angle different from that of the shared information, the user information and / or copyright information is clearly distinguished from the shared information. As a result, the motivation function to prevent the leakage of shared information can be achieved even more reliably.
[Brief description of the drawings]
FIG. 1 is a schematic block configuration diagram of an information management system according to an embodiment of the present invention.
FIG. 2 is an operation flow diagram of the embodiment in the information management system of FIG. 1;
FIG. 3 is a screen display example of a search form.
FIG. 4 is an example of a display screen of a shared information list as a search result.
FIG. 5 is a view showing an example of a display screen for file sharing information as a search result, embedded user information and copyright information, and the like.
[Explanation of symbols]
10 User authentication section
11 User information storage unit
12 Access authority judgment part
20 Shared data storage
21 Rewriteable shared information storage unit
23 Read-only temporary storage
30 Signature Processing Department
40 users
50 Administrator
60 Operation flow
83 Search processing
84 Signature processing
90 Search form
110 Search result display screen
111 Requested file sharing information
112 User information
113 Secret Classification
114 company logo
115 company logo

Claims (10)

In a database system that makes available shared information using a communication line,
When a user who can access the shared information is registered, when the user tries to access the shared information, it is determined whether or not the user has an access right, and only the information having the access right is displayed on the user's display and the display is performed. Information leakage prevention, which is designed to motivate the user not to recall information leakage by embeding and displaying at least user information in a non-erasable format behind the shared information. Method. In a database system that makes available shared information using a communication line,
When a user who can access shared information is registered in the user authentication unit and the user tries to access the shared information, the user authentication unit can access only the registered user and the information that has access authority. The requested shared information is displayed on the display, and at least the user information is visually embedded and displayed behind the displayed shared information in a format that cannot be deleted by the signature processing unit. An information management system characterized by being motivated not to recall. In a database system that makes available shared information using a communication line,
A user terminal including a display and a keyboard;
A user authentication unit for registering a user and storing access authority information of the registered user;
A shared information storage unit for storing shared information;
Information is processed and displayed on the user's display so that at least the user information is embedded in a visible and non-erasable manner in the shared information read by the user having access authority from the shared information storage unit. An information management apparatus comprising: a signature processing unit. A shared information storage unit for storing the shared information; and The information management apparatus according to claim 3, further comprising: The information management apparatus according to claim 3 or 4, wherein the shared information storage unit includes a copyright information storage unit that stores copyright information. An access authority determination in which the user authentication unit compares the user information input by the user with the user information stored in the user information storage unit to determine whether or not there is an access authority. The information management apparatus according to claim 3, further comprising: an information management unit. The signature processing unit embeds and displays at least a part of user information stored in the user information storage unit and copyright information in the read shared information. An information management device according to the above. 8. The information management apparatus according to claim 3, wherein user information embedded or displayed by the signature processing unit, or user information and copyright information are displayed in a light color different from shared information. . 9. The user information embedded or displayed by the signature processing unit, or user information and copyright information are displayed in different colors between the user information and the copyright information. Information management device. 10. The information management apparatus according to claim 3, wherein user information and / or copyright information embedded and displayed by the signature processing unit is embedded and displayed at an angle different from shared information.

Images