JP2009075637A - Data management system, data providing system, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide PC content for to a portable terminal of a legitimate user in a format suitable for the portable terminal. <P>SOLUTION: An ECM server 10 authenticates a user based on authentication information from an ECM client 20, and receives a request to export PC content accessible by a user to a portable terminal 50 and the designation of an ID of the portable terminal. A conversion server 30 converts the PC content into mobile content. The converted content is stored in a temporary storage repository 45 in association with the ID of the portable terminal. The ECM server 10 displays a two-dimensional code showing the URL of the content at the ECM client 20. When the user photographs the two-dimensional code by the camera of the portable terminal 50, the code and the ID of the portable terminal 50 are transmitted to a server 40 for portable terminal. When the ID corresponds to the content shown by the code, the server 40 for portable terminal provides the content to the portable terminal 50. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a data management system, a data providing system, and a program.

  2. Description of the Related Art Content management systems that manage user access to content such as documents, photos, and moving images are widely used. For example, an ECM (Enterprise Contents Management) for managing contents in an organization such as a company is an example.

  Many conventional content management systems are premised on use from a PC (personal computer). On the other hand, with the improvement of the processing capability of mobile terminals such as mobile phones and PDAs (Personal Data Assistant), various contents including office documents and videos can be viewed on mobile terminals and are managed by the content management system. There is a growing need to carry content that is on mobile devices.

  In addition, two-dimensional codes such as QR codes (registered trademark) have become widespread as means for guiding users to websites for mobile terminals.

  For example, Patent Document 1 discloses a technique for reading a two-dimensional code printed in a catalog or the like with a camera of a mobile terminal and decoding it, and accessing a URL (Uniform Resource Locator) embedded in the two-dimensional code. .

  Patent Document 2 discloses a technique for capturing an image of a product displayed on a TV screen with a mobile terminal and transmitting the image to a server in television shopping, so that the server recognizes the image and identifies the product. Has been.

  In the system of Patent Document 3, content identification information is embedded in a printed material in the form of a digital watermark, and an image of the printed material is read by a camera of a mobile terminal and transmitted to a server. The server decodes the digital watermark in the image and returns the content corresponding to the identification information obtained as a result to the portable terminal.

JP 2003-244285 A JP 2005-122516 A JP 2004-086457 A

  Even if the capability of the mobile terminal is improved, resources such as a screen size and a memory capacity are much poorer than those of a PC, and restrictions on data formats and data sizes that can be browsed are severe. For this reason, there is an inconvenience that the content for PC cannot be displayed or output because it is too large, or even if it can be displayed, the display is not easy to view because the screen is small.

  In addition, in a system that manages access rights to content, the same access right management is required when content is provided to mobile terminals, but the input device is a weak mobile terminal and password entry etc. Requesting an operation for access authentication places a heavy burden on the user.

  In addition, when a code image indicating content is printed, the possibility that the code image is transferred to a third party by distributing or copying the print result cannot be ignored. Therefore, when printing and using a code image indicating the content subject to access restriction, it is necessary to prevent the third party from acquiring the content.

  All of the techniques disclosed in Patent Documents 1 to 3 are based on the premise of accessing content prepared in advance for a portable terminal (or a website that provides such content). No solution is disclosed in these patent documents from the viewpoint of making PC content registered in a content management system practically usable on a mobile terminal. Also, no special consideration is given to these documents regarding the management of access rights to contents.

  An object of the present invention is to provide content for an information processing device to a mobile terminal of a user having a legitimate access right in a form suitable for the mobile terminal.

  The invention according to claim 1 includes an information processing device, a data providing system, and a mobile terminal, wherein the data providing system includes a database that stores data for the information processing device, and a user who operates the information processing device. When the access request for the data stored in the database is received via the information processing apparatus, the user's access right to the data is determined, and the user is determined according to the determined access right. An access control means for permitting access to the data, and a request for taking out the data from the user to the portable terminal via the information processing apparatus for the data determined to have the access right by the user. Receiving means; acquisition means for acquiring specific information of a portable terminal that is a take-out destination corresponding to the take-out request; In response to the take-out request, a conversion unit that converts the data to be requested into the data format for the portable terminal, and the take-out destination obtained by the acquisition unit for the conversion result data converted by the conversion unit A temporary storage means for temporarily storing the information in correspondence with the unique information of the portable terminal; and code information representing access information for accessing the conversion result data stored in the temporary storage means, A request reception for receiving a data request including the access information and unique information of the mobile terminal from the mobile terminal that has read the code information displayed by the information processing apparatus and the access information providing means provided to the apparatus Means, the unique information included in the data request received by the request receiving means, and the change corresponding to the access information in the temporary storage means. Provision control means for controlling whether or not to provide the conversion result data to the portable terminal based on the unique information of the portable terminal of the take-out destination stored in association with the result data, the information processing apparatus Comprises a transmission means for transmitting a take-out request for taking out the data stored in the database to a portable terminal, and a display means for displaying the code information received from the data providing system in response to the take-out request. The terminal includes a storage unit that stores unique information of the portable terminal, the access information obtained by reading the code image displayed on the display unit of the information processing apparatus, and a unique unit stored in the storage unit. A data management system comprising: transmission means for transmitting a data request including information to the data providing system. is there.

  The invention according to claim 2 is the invention according to claim 1, wherein the acquisition means of the data providing system is received by a list storage means for storing a list of unique information of each user's mobile terminal and the reception means. In response to a take-out request, user interface information for selecting a take-out destination including a list of users having access rights to the data to be taken out of the list stored in the list storage means is generated, and the information Means for providing to the processing device; and means for acquiring from the information processing apparatus information on one or more take-out destinations selected by the user who has issued the take-out request using the user interface information, wherein the temporary storage means The unique information of one or more take-out portable terminals acquired by the acquisition unit is temporarily associated with the conversion result data. To 憶, characterized in that.

  The invention according to claim 3 provides the data to the portable terminal at the take-out destination for each portable terminal at the take-out destination stored in the temporary storage means in association with the conversion result data. When the means provides the conversion result data, the recording means records that it has been provided, and the recording means provides all of the portable terminals that are stored in association with the conversion result data. And a deletion unit that deletes the conversion result data from the temporary storage unit when it is recorded.

  The invention according to claim 4 receives an access request for data stored in the database via the information processing apparatus from a database storing data for the information processing apparatus and a user operating the information processing apparatus. An access control means for determining an access right of the user to the data and permitting the user to access the data according to the determined access right, and determining that the user has an access right Receiving means for receiving a take-out request from the user to the portable terminal via the information processing apparatus, and obtaining means for acquiring specific information of the take-out portable terminal corresponding to the take-out request In response to the take-out request, the data subject to the request is converted into the data format for the portable terminal. Conversion means, temporary storage means for temporarily storing the conversion result data converted by the conversion means in association with the unique information of the take-out portable terminal acquired by the acquisition means, and the temporary storage means Generating code information representing access information for accessing the conversion result data stored in the information processing means, providing the information to the information processing apparatus, and reading the code information displayed by the information processing apparatus A request receiving means for receiving a data request including the access information and the unique information of the portable terminal from a portable terminal, unique information included in the data request received by the request receiving means, and the temporary storage means Based on the conversion-specific data corresponding to the access information and the specific information of the portable terminal to be taken out, the conversion is performed. And providing control means for controlling whether to provide results data to the portable terminal, a data providing system comprising a.

  According to a fifth aspect of the present invention, there is provided an access request for data stored in the database via the information processing apparatus from a user operating the information processing apparatus and a database storing data for the information processing apparatus. An access control means for determining an access right of the user to the data and permitting the user to access the data according to the determined access right, and the user has an access right. With respect to the determined data, an accepting means for accepting a take-out request from the user to the portable terminal via the information processing apparatus, and an acquisition means for obtaining specific information of the take-out portable terminal corresponding to the take-out request In response to the take-out request, the data subject to the request is changed to the data for the portable terminal. Conversion means for converting to an expression; temporary storage means for temporarily storing the conversion result data converted by the conversion means in association with the unique information of the take-out portable terminal acquired by the acquisition means; and the temporary storage Code information representing access information for accessing the conversion result data stored in the means is generated, access information providing means provided to the information processing apparatus, and the code information displayed by the information processing apparatus is read. Request receiving means for receiving a data request including the access information and unique information of the portable terminal from a portable terminal, unique information included in the data request received by the request receiving means, and the temporary storage means in the temporary storage means Based on the unique information of the portable terminal of the take-out destination stored in association with the conversion result data corresponding to the access information, the conversion The result data is a program for causing the provided control means function as, for controlling whether to provide to the mobile terminal.

  According to the first, fourth, or fifth aspect of the present invention, it is possible to prevent data for the information processing apparatus from being acquired from other than the portable terminal designated as the take-out destination.

  According to the second aspect of the present invention, the data export destination can be limited to users who have access rights to the data.

  According to the invention described in claim 3, it is possible to reduce the possibility of leakage of the conversion result data after the provision of data to the take-out destination is completed.

  As illustrated in FIG. 1, the content providing system of this embodiment includes an ECM (Enterprise Contents Management) server 10, a conversion server 30, a portable terminal server 40, and a temporary storage repository 45.

  The ECM server 10 manages content (office documents, images, moving images, etc.) used in an organization such as a company. The content stored in the ECM server 10 has a data format and a size that are assumed to be used on a PC or a workstation. The ECM server 10 accepts content registration from the user and provides managed content in response to a user request.

  However, regarding the provision of content, the ECM server 10 provides only content to which the user has access rights. For example, the system administrator or the user who registered the content sets the information on the access right of each user with respect to the content, and the ECM server 10 refers to the access right information to permit access to the content from the user. Determine whether or not. For such access control, the ECM server 10 has a user authentication function. The user authentication function authenticates a user who has accessed the ECM server 10 using, for example, a user ID and password, biometric authentication information such as a fingerprint, an IC card storing user authentication information, and the like. In addition, since a conventionally well-known mechanism can be used as the above-described access control or user authentication mechanism, further detailed description is omitted.

  The ECM server 10 provides the user with a user interface (UI) screen 100 including a display column 120 for a list of managed content groups, accepts selection from the user for the content in the list, and is selected. Operation instructions for received content are accepted. In the example of FIG. 1, the content database in the ECM server 10 has a tree-like directory structure, and the UI screen 100 includes a display column 110 of the directory structure. A list of contents and directories included in the directory (also referred to as a folder) selected in the directory structure display field 110 is displayed in the list display field 120. The operation instruction for the content received by the ECM server 10 includes “take-out” of the content to the portable terminal 50 in addition to conventionally known ones such as downloading the content and changing access right information for the content. is there. “Taking out” is an operation that allows the mobile terminal 50 to browse the content.

  In this example, the ECM server 10 stores a list of user IDs and portable terminal IDs of the respective users registered in the ECM server 10 (referred to as a “mobile terminal list”, see FIG. 2). The user ID is user identification information. As the user ID, for example, the user name of the user registered in the ECM server 10 can be used. The mobile terminal ID is identification information unique to the mobile terminal held by the user. In the figure, one mobile terminal ID is registered for one user, but a plurality of mobile terminal IDs may be registered for one user. As the mobile terminal ID, for example, the manufacturing number of the mobile terminal can be used. For example, the serial number of the mobile phone can be obtained via the operating system of the mobile phone. In addition, as the mobile terminal ID, a telephone number assigned to the mobile terminal may be used. In addition, instead of the mobile terminal list illustrated in FIG. 3, the ID of the mobile terminal held by the user is registered and used in the user information database referred to by the ECM server 10 as one item of the user attribute information. Also good.

  Based on the mobile terminal list, the ECM server 10 generates information on a user interface (UI) screen for selecting a user of a content take-out destination (providing destination) for mobile terminals, and provides the information to the ECM client 20. And the user (mobile terminal) of the take-out destination selected using the UI screen is recognized. A list of recognized take-out destination users (portable terminals) (referred to as “take-out destination list”) is a determination material for determining whether or not the mobile terminal server 45 described later provides content to the mobile terminal 50. Used as

  The ECM client 20 is a client program that receives a content management service from the ECM server 10. Although only one ECM client 20 is shown in the figure, the ECM server 10 can provide services to a plurality of ECM clients 20.

  The ECM client 20 is installed in a computer such as a PC or a workstation connected to the ECM server 10 via a data communication network such as a LAN (local area network) or the Internet. The ECM client 20 generates a UI screen 100 as illustrated in FIG. 1 based on information provided from the ECM server 10, detects a user instruction for the UI screen 100, and transmits the UI screen 100 to the ECM server 10. It has a function. Further, the ECM client 20 receives information on a UI screen for selecting a user (portable terminal) as a content take-out destination, detects a user instruction on the UI screen, and transmits the detected instruction to the ECM server 10.

  The conversion server 30 converts the content stored in the ECM server 10 (hereinafter referred to as “PC content”) into data for the mobile terminal 50 (hereinafter referred to as “portable content”). Since the PC content is often in a data format that cannot be handled by the mobile terminal 50 or has a large size that cannot be handled by the memory capacity of the mobile terminal 50, the conversion server 30 can convert the PC content to the mobile terminal 50. Data format and data size can be handled by For example, when the PC content is a file of various office applications such as a word processor or a spreadsheet, the conversion server 30 converts it into a data format that can be handled by the portable terminal 50 such as a PDF (Portable Document File) format. Note that PDF is merely an example, and the data format of the conversion destination may be any data format that can be widely used in the assumed mobile terminal. In addition, when the PC content is photographic image data having a large data size that is assumed to be printed or viewed on a PC screen, the conversion server 30 performs processing for reducing the data amount such as thinning, so that the PC content is processed. The content is converted into image data having a size suitable for the memory capacity or screen size of the portable terminal 50. If the PC content is a moving image content in a data format (for example, MPEG) that is not supported by the portable terminal 50, the conversion server 30 converts the content to a moving image data format (for example, the 3GPP format) supported by the portable terminal 50. Convert.

  The mobile terminal server 40 is a server that provides mobile content to the mobile terminal 50. The mobile terminal server 40 has, for example, a Web server function, accepts a content request from the mobile terminal 50 by HTTP (HyperText Transfer Protocol), and returns a mobile content corresponding to the request. The portable terminal server 40 receives the portable content generated by the conversion server 30 and stores the portable content in the temporary storage repository 45 in preparation for a subsequent request from the portable terminal 50. The portable terminal server 40 receives the portable content take-out destination list directly from the ECM server 10 or via the conversion server 30 and stores it in the temporary storage repository 45 in association with the portable content. Then, when portable content is requested from the portable terminal 50, it is determined whether or not the content can be provided with reference to a take-out destination list corresponding to the content.

  The conversion server 30 and the mobile terminal server 40 are managed by the same organization as the ECM server 10, and communication between them is protected so as not to be recognized from the outside. For example, these servers 10, 30 and 40 may be mounted on the same computer device or may be arranged on a network of the same organization. In the latter case, for example, the ECM server 10 is provided on the intranet of the organization, whereas the mobile terminal server 40 is provided in a DMZ (DeMilitarized Zone), and one of the network interfaces is connected to the intranet and another network interface. Are connected to the Internet respectively. Further, if communication between the servers 10, 30, and 40 is protected by encryption or the like, the servers may be distributed on the Internet.

  The portable terminal 50 is a portable terminal device such as a cellular phone or a PDA, and has a Web client function. In addition, the mobile terminal 50 has a camera and a decoding function of a two-dimensional code (for example, QR code (registered trademark)). The two-dimensional code displayed on the printed matter or the PC screen is read by the camera, and the code represents the code. Data content can be obtained. A program such as a Web client on the mobile terminal 50 has a function of reading a mobile terminal ID unique to the mobile terminal 50 from, for example, an operating system. The read portable terminal ID is sent from the portable terminal 50 to the portable terminal server 40 together with the identification information of the target content included in the URL of the recognition result of the two-dimensional code.

  Next, an example of a processing procedure executed by the ECM server 10 will be described with reference to FIG. In this example, when receiving a login request from the ECM client 20 (S1), the ECM server 10 requests the ECM client 20 to input authentication information for user authentication, and is sent from the ECM client 20 in response to the request. User authentication is executed based on the authentication information (S2), and it is determined whether the authentication is successful (S3).

  Here, for example, when the ECM server 10 provides the ECM client 20 with a screen for inputting the user ID and password, and the user inputs his / her user ID and password on the screen and instructs transmission, The password is transmitted to the ECM server 10. If the user ID and password are correct combinations registered in advance, the ECM server 10 determines that the login is from the correct user (authentication success). The user authentication is not limited to password authentication, and any conventionally known authentication method may be used.

  When the user authentication fails, the ECM server 10 executes error processing such as notifying the ECM client 20 of the authentication failure (S4).

  If the user authentication is successful, the ECM server 10 permits the user to log in. When the login is permitted, the ECM server 10, for example, includes information on the user interface screen 100 including a column 110 displaying a directory to which the user has an access right in the directory structure of the content database managed by the server 10. Is generated and provided to the ECM client 20. When the user selects a desired directory in the column 110 of the provided screen 100, the ECM server 10 searches for contents in the selected directory that the user has the access right, and displays each of the search results. Information in a column 120 listing content icons is generated, and the information is provided to the ECM client 20 for display (S5). The ECM client 20 displays the UI screen 100 including the column 120 based on the information. The user selects an operation target content from a list of contents that the user has access rights displayed in the column 120 using an input device such as a pointing device, and further instructs an operation on the selected content. The operations on the content include, for example, browsing and printing of the content, registration of editing results, and changing access right settings. For example, when one content is selected on the list in the column 120, a menu listing operation items that can be selected for the content is displayed, and the user selects a desired operation from the menu. Further, after the user selects and opens one content on the list, an operation item that can be selected for the content may be presented on the screen displaying the content, and the user may select it. When an operation for the content is instructed as described above, the ECM client 20 executes processing for the content in accordance with the instruction (S7).

  Here, in the system of this example, the ECM server 10 can accept an instruction of “take out portable content” operation as an operation on the content, and can execute processing according to the instruction. This instruction is also selected from the operation menu for the content selected on the list display of the ECM client 20 or from the operation menu on the content display screen opened by selecting from the list, as in the above-described operation items. do it.

  When the ECM client 20 instructs “take out portable content” to the PC content displayed on the UI screen 100 ((1) in FIG. 1), the ECM server 10 performs the processing in steps S10 to S14 in FIG. Execute.

  In this processing procedure, upon receiving a take-out instruction for content, the ECM server 10 generates UI screen information for taking-out destination designation based on a mobile terminal list, that is, a list of mobile terminal IDs of each user, and an ECM client. 20 (S10). Here, the take-out destination candidate users displayed on the UI screen may be limited to users who have access rights to the content to be taken out, rather than all users registered in the ECM server 10. A user who has an access right to the content can make a determination using the access right control function of the ECM server 10. The user who has instructed taking out selects one or more users to be taken out from the list on the UI screen displayed on the ECM client 20, and transmits the selection result to the ECM server 10.

  The ECM server 10 that has received the selection result passes the portable terminal ID (referred to as “take-out destination list”) of each user of the selection result and the PC content designated as the take-out target to the conversion server 30. A request is made to convert to portable content (S11, (2) in FIG. 1). Since the hardware performance and standard software of mobile terminals in the world are common to some extent, data format requirements for portable content according to such common hardware performance and software are determined in advance and converted. The server 30 may perform content conversion according to the requirements. The data format requirement may be, for example, that an office document file is converted to a PDF file, an image is converted to JPEG data having an image data size of QVGA, and the like. In addition, in order to perform detailed data conversion according to the performance of the mobile terminal of each user, for example, information on the data format corresponding to the mobile terminal of the user is registered in the ECM server 10, and the ECM server 10 The information may be passed to the conversion server 30 to perform conversion according to the data format.

  On the other hand, as shown in FIG. 4, the conversion server 30 having received this request (S21) converts the target PC content into the data format for the portable terminal in accordance with the request (S22). Then, the portable terminal server 40 is requested to register the portable content obtained as a result of the conversion in the temporary storage repository 45, and the take-out destination list is associated with the content and passed to the portable terminal server 40 (S23). (3) of FIG.

  Upon receiving this request, the portable terminal server 40 stores the portable content in the temporary storage repository 45 (S31), and generates the URL of the stored portable content (S32). This URL is information used to access the content in the temporary storage repository 45 from the mobile terminal 50, and is associated with the mobile content in the repository 45. Here, a part corresponding to information in the repository 45 (for example, the file name of the content in the repository 45) in the generated URL, such as “http://mobile.example.co.jp/EA3Xz4ro0Z” By using a random character string, it may be difficult for a third party to predict the URL of the content. In this case, the mobile terminal server 40 may store the correspondence between the file name indicated as a random character string and the actual content file in the repository 45. When an access request using the URL comes from the user, the file that is the target of the request may be specified using the correspondence.

  Next, the mobile terminal server 40 notifies the ECM server 10 of the URL generated for the stored mobile content directly or via the conversion server 30 (S33, (4) in FIG. 1).

  The mobile terminal server 40 registers the content ID stored in the temporary storage repository 45 and each mobile terminal ID in the take-out list received from the conversion server 30 in the access management table (S34). The access management table is a table serving as basic information for determining whether the mobile terminal server 40 provides content in response to a request from the mobile terminal 50.

  FIG. 5 shows an example of the data contents of the access management table. In the example of FIG. 5, the ID of the portable terminal designated as the take-out destination of the content (“take-out destination ID”) is registered in the access management table in association with the ID of the portable content in the repository 45. . Then, a “providing flag” is associated with each take-out destination ID. The provision flag indicates whether portable content having the content ID is provided to the portable terminal corresponding to the take-out destination ID. In the illustrated example, “1” has been provided, and “0” has not been provided. The provision flag is set to an initial value “0” when a pair of content ID and take-out destination ID is newly registered in the access management table. Note that the content ID uniquely corresponds to the URL of the portable content. In the illustrated example, a unique file name of portable content in the repository 45 is used as the content ID. In the illustrated example, two portable terminals (two users) are designated as take-out destinations for portable content “aaa.pdf”, one of which is already “aaa.pdf”. Has been provided.

  Returning to the description of FIG. 3, the ECM server 10 that has received the notification in step S33 acquires the URL of the portable content included in the notification (S12), and a two-dimensional code (for example, QR code (registration)) representing the URL. Trademark)) is generated (S13). This generation may be performed using a conventional technique. Although the two-dimensional code is illustrated here, the image code is not limited to the two-dimensional code, and other types of image codes that can be recognized by machine reading (for example, a one-dimensional barcode) may be used. Then, the ECM server 10 sends the generated two-dimensional code to the ECM client 20 that made the “take-out” request (S14, (5) in FIG. 1).

  The ECM client 20 displays the two-dimensional code in the code display field 130 of the UI screen 100 based on the information. When the user operating the ECM client 20 captures the two-dimensional code in the code display field 130 with the camera of his / her portable terminal 50 ((6) in FIG. 1), the decoding function in the portable terminal 50 is The dimension code is decoded, and the URL character string represented by the code is obtained. The Web client program of the portable terminal 50 generates an HTTP request for requesting the content represented by the URL, and transmits it to the portable terminal server 40 via the Internet ((7) in FIG. 1). Here, the portable terminal 50 reads out its own portable terminal ID, incorporates it into the HTTP request, and transmits it to the portable terminal server 40.

  Note that when the user instructing take-out (referred to as “instruction source user”) designates a user other than himself as the take-out destination, the instruction source user prints an image of a two-dimensional code displayed on the ECM client 20, for example. Then, it is sufficient to give the print result to the take-out user. As another method, an image of the displayed two-dimensional code may be taken by the portable terminal 50, and the image may be transmitted to a take-out user by e-mail or the like. Instead of shooting with the portable terminal 50, the image may be selected on the ECM client 20 and transmitted to the user at the takeout destination. The user who has taken out the two-dimensional code print result and the image data can request the content from the portable terminal server 40 by photographing it with the camera of his portable terminal 50. In this case, even if a third party obtains an image of the two-dimensional code, the third party's mobile terminal ID is not registered in the access management table as the take-out destination of the content. Cannot be obtained. If the third-party mobile terminal does not have the function of acquiring the mobile terminal ID of the terminal and creating the request data in a predetermined format together with the content ID indicated by the two-dimensional code reading result, the third The person cannot get the content.

  As shown in FIG. 6, the portable terminal server 40 waits for an HTTP request from the portable terminal 50 (S41). When an HTTP request is received, the content ID of the portable content that is the target of the request is specified based on information for specifying the target content in the request (for example, a file path name or an encrypted version thereof). . Then, a take-out destination ID group corresponding to the specified content ID is obtained from the access management table, and based on the ID group and the portable terminal ID that is in the HTTP request, whether the requesting portable terminal 50 can access the portable content It is determined whether or not (S42). For example, if the content take-out destination ID group matches the portable terminal ID that is requesting HTTP, the request source may determine that the content can be accessed. On the other hand, if there is no match, it is determined that access is impossible, and the mobile terminal server 40 notifies the requesting mobile terminal 50 that access is not possible (S43), and the process returns to step S41.

  If it is determined that access is possible, the portable terminal server 40 retrieves the target portable content from the temporary storage repository 45 and transmits it to the portable terminal 50 (S44). Through the flow described above, a user designated as a content take-out destination can browse portable content corresponding to the content on his / her portable terminal.

  Further, after step S44, the portable terminal server 40 indicates that the provision flag corresponding to the pair of the portable content ID and the portable terminal 50 ID has been provided on the access management table. It is set to “1” (S45).

  Then, the mobile terminal server 40 checks the take-off destination provision flag corresponding to the mobile content on the access management table, and has the content provision to all of the take-out destinations completed? It is determined whether or not (S46). If not completed, the process returns to step S41. If completed, the portable content is deleted from the temporary storage repository 45 (S47), and the process returns to step S41. At this time, the entry corresponding to the portable content may be deleted from the access management table. Note that the determination in step S46 is not necessarily performed immediately after the portable content is transmitted to the portable terminal. For example, the processing may be such that the portable terminal server 40 periodically checks the access management table and finds portable content for which all corresponding take-out destination provision flags are 1, and deletes the content.

  The portable content in the temporary storage repository 45 is open to the Internet, so if it is downloaded to all users specified as take-out destinations, it can be deleted to prevent information leakage to third parties. Risk is reduced. In order to prevent information leakage, an upper limit period for the content storage period in the temporary storage repository 45 is set, and when the upper limit period elapses after the content is stored and not downloaded, the content is deleted. May be.

  In the system described above, the ECM server 10 authenticates the user based on the authentication information from the ECM client 20, accepts a request for “take-out” to the mobile terminal for PC content to which the user has access rights, and takes out the content. The user (mobile terminal) to be the destination is specified. And when a portable terminal requests | requires portable content, the server 40 for portable terminals will provide the content to the portable terminal based on whether the portable terminal corresponds to the take-out destination of the content. To control. Therefore, even when a two-dimensional code indicating the URL of the portable content leaks out, the content cannot be downloaded from other than the portable terminal being taken out, so there is little risk of leakage to a third party. Further, in the above-described example, since the mobile terminal content is provided to all take-out destinations and then deleted from the temporary storage repository 45, the risk of information leakage can be reduced.

  In the above example, the user has selected the content take-out destination from the list provided by the ECM server 10, but this is only an example. For example, if the portable content only needs to be provided to the user who has instructed to take out the content, for example, the ID of the portable terminal of the user is registered in the ECM client 20, and this is used as the takeout destination in the ECM server 10. You may be notified. Also, the mobile terminal 50 notifies the computer of the mobile terminal ID via an infrared communication device provided in the computer of the ECM client 20 or a wireless communication device such as Bluetooth, and the ECM client 20 sends the ID to the ECM server 10. You may make it notify.

  The ECM server 10, the conversion server 30, and the portable terminal server 40 exemplified above are realized by causing a general-purpose computer to execute a program representing the processing of each functional module described above, for example. Here, for example, as shown in FIG. 7, the computer includes, as hardware, a microprocessor such as a CPU 1000, a memory (primary storage) such as a random access memory (RAM) 1002 and a read-only memory (ROM) 1004, an HDD ( HDD controller 1008 that controls (hard disk drive) 1006, various I / O (input / output) interfaces 1010, network interface 1012 that performs control for connection to a network such as a local area network, etc. are connected via bus 1014, for example. Circuit configuration. In addition, for example, a disk drive 1016 for reading from and / or writing to a portable disk recording medium such as a CD or a DVD, a portable memory of various standards, such as a flash memory via the I / O interface 1010 to the bus 1014. A memory reader / writer 1018 for reading from and / or writing to the nonvolatile recording medium may be connected. A program in which the processing contents of each functional module exemplified above are described is stored in a fixed storage device such as a hard disk drive via a recording medium such as a CD or DVD, or via a communication means such as a network, and stored in a computer. Installed. The program stored in the fixed storage device is read into the RAM 1002 and executed by a microprocessor such as the CPU 1000, whereby the functional module group exemplified above is realized. Some or all of these functional module groups are used as hardware circuits such as dedicated LSI (Large Scale Integration), ASIC (Application Specific Integrated Circuit), or FPGA (Field Programmable Gate Array). It may be configured.

It is a figure which shows schematic structure of the content provision system of embodiment. It is a figure which shows an example of the data content of a portable terminal list. It is a flowchart which shows an example of the process sequence which an ECM server performs. It is a flowchart which shows an example of the process sequence which the conversion server and the server for portable terminals perform. It is a figure which shows an example of an access management table. It is a flowchart which shows an example of the process sequence which the server for portable terminals performs. It is a figure which shows an example of the hardware constitutions of a computer.

Explanation of symbols

  10 ECM server, 20 ECM client, 30 conversion server, 40 server for mobile terminal, 45 temporary storage repository, 50 mobile terminal.

Claims (5)

Including an information processing device, a data providing system, and a portable terminal,
The data providing system includes:
A database for storing data for the information processing apparatus;
When an access request for data stored in the database is received from the user who operates the information processing apparatus via the information processing apparatus, the access right of the user for the data is determined, and the determined access right Access control means for permitting access to the data according to the user,
Accepting means for accepting a take-out request from the user to the portable terminal for the data determined that the user has access right through the information processing apparatus;
An acquisition means for acquiring unique information of a portable terminal at the take-out destination corresponding to the take-out request;
In response to the take-out request, conversion means for converting the data that is the target of the request into a data format for the mobile terminal;
Temporary storage means for temporarily storing the conversion result data converted by the conversion means in association with the specific information of the portable terminal taken out acquired by the acquisition means;
Access information providing means for generating code information representing access information for accessing the conversion result data stored in the temporary storage means and providing the information to the information processing apparatus;
Request receiving means for receiving a data request including the access information and unique information of the mobile terminal from the mobile terminal that has read the code information displayed by the information processing apparatus;
Based on the unique information included in the data request received by the request receiving means, and the unique information of the take-out portable terminal stored in the temporary storage means in association with the conversion result data corresponding to the access information, Providing control means for controlling whether to provide the conversion result data to the portable terminal;
With
The information processing apparatus includes:
Transmitting means for transmitting a take-out request to bring the data stored in the database to a portable terminal;
Display means for displaying the code information received from the data providing system in response to the take-out request;
With
The portable terminal is
Storage means for storing unique information of the mobile terminal;
Transmission for transmitting a data request including the access information obtained by reading the code image displayed on the display unit of the information processing apparatus and the unique information stored in the storage unit to the data providing system Means,
Comprising
A data management system characterized by that. The acquisition means of the data providing system includes:
List storage means for storing a list of unique information of each user's mobile terminal;
User interface information for selecting a take-out destination including a list of users who have access rights to the data to be taken out of the list stored in the list storage means in response to the take-out request accepted by the accepting means Generating and providing to the information processing apparatus;
Means for acquiring from the information processing apparatus information on one or more take-out destinations selected by the user who issued the take-out request using the user interface information;
With
The temporary storage means temporarily stores the specific information of one or more portable terminals taken out by the acquisition means in association with the conversion result data;
The data management system according to claim 1, wherein: For each portable terminal at the take-out destination stored in association with the conversion result data in the temporary storage means, if the data providing means provides the conversion result data to the portable terminal at the take-out destination, the fact that it has been provided Recording means for recording,
Deletion that deletes the conversion result data from the temporary storage means when the recording means records that it has been provided to all the portable terminals that are stored in association with the conversion result data Means,
The data management system according to claim 2, further comprising: A database for storing data for the information processing apparatus;
When an access request for data stored in the database is received from the user who operates the information processing apparatus via the information processing apparatus, the access right of the user for the data is determined, and the determined access right Access control means for permitting access to the data according to the user,
Accepting means for accepting a take-out request from the user to the portable terminal for the data determined that the user has access right through the information processing apparatus;
An acquisition means for acquiring unique information of a portable terminal at the take-out destination corresponding to the take-out request;
In response to the take-out request, conversion means for converting the data that is the target of the request into a data format for the mobile terminal;
Temporary storage means for temporarily storing the conversion result data converted by the conversion means in association with the specific information of the portable terminal taken out acquired by the acquisition means;
Access information providing means for generating code information representing access information for accessing the conversion result data stored in the temporary storage means and providing the information to the information processing apparatus;
Request receiving means for receiving a data request including the access information and unique information of the mobile terminal from the mobile terminal that has read the code information displayed by the information processing apparatus;
Based on the unique information included in the data request received by the request receiving means, and the unique information of the take-out portable terminal stored in the temporary storage means in association with the conversion result data corresponding to the access information, Providing control means for controlling whether to provide the conversion result data to the portable terminal;
A data providing system comprising: Computer
A database for storing data for an information processing device,
When an access request for data stored in the database is received from the user who operates the information processing apparatus via the information processing apparatus, the access right of the user for the data is determined, and the determined access right Access control means for allowing access to the data according to the user,
Accepting means for accepting a request for taking out the data from the user to the portable terminal via the information processing apparatus for the data determined to have the access right by the user;
An acquisition means for acquiring specific information of a portable terminal that is a take-out destination corresponding to the take-out request;
A conversion means for converting the data subject to the request into a data format for the portable terminal in response to the take-out request;
Temporary storage means for temporarily storing the conversion result data converted by the conversion means in association with the unique information of the take-out portable terminal acquired by the acquisition means;
Access information providing means for generating code information representing access information for accessing the conversion result data stored in the temporary storage means and providing the information to the information processing apparatus;
Request receiving means for receiving a data request including the access information and unique information of the mobile terminal from the mobile terminal that has read the code information displayed by the information processing apparatus;
Based on the unique information included in the data request received by the request receiving means, and the unique information of the take-out portable terminal stored in the temporary storage means in association with the conversion result data corresponding to the access information, Providing control means for controlling whether to provide the conversion result data to the portable terminal;
Program to function as.