JP2009080560A - Access authority control system - Google Patents

Abstract

【Task】
It is an object of the present invention to provide an access authority control system that performs the determination by referring to the operation log information of the file when determining the access authority of the file.
[Solution]
An inquiry reception unit that receives an inquiry about whether or not a user can access a file and file identification information of the file, an operation log information storage unit that stores at least operation log information for the file, and a response based on the received file identification information An operation log information acquisition unit that acquires operation log information from the operation log information storage unit, an access permission determination unit that determines access authority to a file by a user using at least the acquired operation log information, and an access as a determination result When it is determined that there is no authority, the access authority control system includes a warning notification unit that issues a warning display instruction to a predetermined computer terminal.
[Selection] Figure 1

Description

The present invention relates to an access authority control system that controls access authority of files and the like. In particular, the present invention relates to an access authority control system that performs a determination by referring to operation log information of a file when determining the access authority of the file, and performs a predetermined display when it is determined that there is no access authority.

  When a file is used in an organization such as a company, since there are files including confidential information, it is common that access authority is set for each file. For example, general files such as company newsletters are set to the lowest access level (for example, all employees) because there is no particular problem for anyone to see, and files such as personnel appraisal are evaluated for individual employees. Because it is included, it is set to a high access authority level that can only be seen by the personnel department and responsible manager, etc., and files related to the top secret project are set to an extremely high access authority level that only those who are involved in the project can access Yes.

  As described above, management of access authority to a file is very important, and there are Patent Document 1 and Patent Document 2 described below as systems for automatically managing the access authority.

  The invention of Patent Document 1 records both log information and access authority with respect to access authority when referring to log information that is a file, and log information only for a user having access authority included in the log information. It is a system that permits reference to

  In the invention of Patent Document 2, the access authority when referring to log information that is a file is recorded in different files so that the access authority is referred to when referring to the log information. It is a system that reflects even if it is changed.

JP 2000-29751 A JP 2006-23924 A

  The systems of Patent Document 1 and Patent Document 2 described above are useful in that they can manage access authority.

  However, if information about a file subject to access authority, such as a file name, has been changed, the access authority of the original file cannot be confirmed, and the file can be opened as it is.

  For example, when the “reference file” is opened after changing the file name “HR evaluation” to a file name “reference file” by some method, the inventions of Patent Document 1 and Patent Document 2 may be used. Because the access authority corresponding to the “reference file” is not set, even if the file is the same as the “Personnel Review” file, even if the user does not have access authority You can refer to the file.

  In order to prevent such a situation, processing related to a file, such as a file name change by a user who does not have access authority, cannot be executed. However, for example, a user with access authority leaves the file while using the file, and a third party without access authority changes the file name during that time, or a user with access authority mistakes the file name. May be changed and saved. In such a case, it is not possible to cope with the conventional method.

  Therefore, the present inventor does not simply check the access authority as in the past, but checks the operation history for the file by referring to the log information of the file to be referred to, and the progress of the process for the file. Based on this, we invented an access authority control system that determines access authority. In addition, as a result of the determination of the access authority, when the user tries to access a file without the access authority, an access authority control system that notifies the administrator of this is adopted.

  The invention of claim 1 is an access authority control system for determining access authority using operation log information for a file, the access authority control system including an inquiry about whether or not the user can access the file and the file An inquiry receiving unit that receives file identification information, an operation log information storage unit that stores at least operation log information for a file, and corresponding operation log information based on the received file identification information from the operation log information storage unit An operation log information acquisition unit to be acquired, an access permission determination unit that determines access authority to the file by the user, using at least the acquired operation log information, and determination that there is no access authority as the determination result If a warning is displayed, a warning is displayed on the specified computer terminal. A warning notification unit that performs shows a access control system having a.

  By using the present invention, instead of simply determining whether or not there is an access right as in the prior art, processing is performed after confirming operation log information which is an operation history for the file. As a result, the access authority can be determined in consideration of the progress of the processing for the file. In addition, since the administrator can know the user who is trying to access a file for which the user does not have access authority, it is possible to focus on the operation content of the user and prevent illegal acts.

  In the invention of claim 2, the access authority control system further includes a user information storage unit that stores at least user identification information and access authority level information of each user, and the inquiry reception unit includes: When making an inquiry, the user identification information of the user is further received, and the access permission determination unit is configured to use the user information storage unit based on the user identification information of the file creator or the file editor in the acquired operation log information. The access authority level of the user stored in the user information storage unit is extracted based on the user identification information of the user accepted by the inquiry accepting unit. Level information is extracted, and the access authority level of the extracted user and the extraction are extracted. By comparing the file's creator or file editor level of access information, and determines the access rights, an access control system.

  There are various methods for determining access authority using operation log information, and the method of the present invention can be used. This eliminates the need to set access authority for the file itself. That is, if the file can be identified, the operation log information of the file can be specified, so that the creator or editor can be specified. And, of course, the creator and editor usually have access rights to the file, so if the user's access authority level is higher than those people, you can allow access to the file. It is considered good. Then, by comparing the access authority level of the creator or editor and the access authority level of the user in this way, it is not necessary to store the access authority level information for the file as in the conventional case. Changing the name etc. has no effect.

  In the invention of claim 3, the access permission determination unit, when the corresponding operation log information cannot be acquired from the operation log information storage unit based on the file identification information received by the inquiry reception unit, It is an access authority control system that judges that there is no.

  There are various methods for determining access authority using operation log information, and the method of the present invention can be used. When the operation log information of the file does not exist, it is assumed that the file is brought in from the outside by a portable storage medium such as a USB memory. Accordingly, there is a possibility that a file infected with a virus, a file that should not be permitted to be used, such as a key logger or file exchange software, may be executed on the user's client terminal. However, as in the present invention, a file without operation log information does not have access authority and can be disabled at the client terminal, so that it is possible to prevent the file from being brought in from the outside.

  In the invention of claim 4, when there is information indicating a change of file identification information in the acquired operation log information, the access permission determination unit first determines access authority using the file identification information after the change. When the access authority cannot be determined using the file identification information after the change, the access authority control system performs the access authority determination using the file identification information before the change.

  There are various methods for determining access authority using operation log information, and the method of the present invention can be used. The file name may be changed by some method. In such a case, the conventional access privilege control method can only set the access privilege with a new file name, or change the original file name to a new file name and update the access privilege. . However, setting the access authority is complicated and may be forgotten. In that case, no access authority is set for the new file name after the change, and anyone can access it. However, according to the present invention, the operation log information can identify the operation history indicating that the file identification information such as the file name has been changed, so that the conventional work as described above need not be performed.

  In the invention of claim 5, the access authority control system further includes a user information storage unit that stores at least user identification information and access authority level information of each user, and the access permission determination unit includes: If there is information indicating the change of the file identification information in the acquired operation log information, it is determined whether the access authority level is stored from the user information storage unit using the changed file identification information, and stored. If so, the access authority level is determined using the access authority level, and if not stored, the file identification information before the change is used to determine whether it is stored in the user information storage unit. If so, the access authority control system determines the access authority using the access authority level.

  There are various methods for determining access authority using operation log information, and the method of the present invention can be used. The invention of claim 4 can obtain the same effect even if it is configured as in the present invention.

  In the invention of claim 6, the inquiry receiving unit further receives information on the creation date / time or update date / time of the file at the time of the inquiry, and the access permission determination unit is configured to determine whether the file in the acquired operation log information An access authority control system that compares information on creation date / time or update date / time with information on file creation date / time or update date / time received by the inquiry reception unit, and determines access authority based on whether or not they match. It is.

  There are various methods for determining access authority using operation log information, and the method of the present invention can be used. If the received file creation date and update date information does not match the file creation date and update date information in the file operation log information, it is inferred that some operation other than the client terminal has been performed. And it is guessed that the user brought the file after the operation from the outside with a portable storage medium such as a USB memory. Therefore, the file may be infected with a virus. However, as in the present invention, a file without operation log information does not have access authority and can be disabled at the client terminal, so that it is possible to prevent the file from being brought in from the outside.

  In the invention of claim 7, the access permission determination unit stores an access authority determination method for each user identification information, and the access authority determination method is based on the user identification information received by the inquiry reception unit. It is an access authority control system to identify.

  Although the above-described determination methods can be used for the determination of access authority, the present invention is not limited to this, and a plurality of determination methods may be used. In that case, the determination method may be changed for each user. For example, in the case of a user who has a history of bringing files from the outside using a USB memory or the like, a determination method that can determine such a situation (for example, the method of the invention of claim 3) is used, and the determination of the access authority level is simply simplified When it is desired to make it, it may be a determination method capable of determining it (for example, the method of the invention of claim 2).

  In the invention of claim 8, the access authority control system further includes a result transmission unit that transmits a control instruction based on the determination result to an access control unit that executes an access control process for the file, The access control unit is an access authority control system that controls the file based on a control instruction received from the result transmission unit.

  The client terminal desirably performs access control to the file based on a control instruction from the management server.

  In the invention of claim 9, when the warning notification unit determines that there is no access authority as the determination result, among the operation screen information of each client terminal displayed on the display device of the computer terminal, This is an access authority control system that highlights the operation screen information of the determined user.

  By configuring as in the present invention, an administrator or the like who monitors the display screen of the list of operation screen information of each client terminal confirms the unauthorized operation of the user by confirming the highlighted display. Can be allowed to monitor.

  11. The inquiry reception unit according to claim 10, wherein a computer storing at least operation log information for a file in a storage device receives an inquiry as to whether or not the user can access the file and file identification information of the file from a client terminal. , Based on the received file identification information, an operation log information acquisition unit that acquires corresponding operation log information from the storage device, at least using the acquired operation log information, the user's authority to access the file An access authority control program that functions as an access permission determination unit that performs a determination, and a warning notification unit that issues a warning display instruction to a predetermined computer terminal when it is determined that there is no access authority as the determination result.

  By executing the program of the present invention on a predetermined computer, the above-mentioned access authority control system can be realized.

  According to the present invention, instead of simply determining access authority as in the past, the operation history for the file is confirmed by referring to the log information of the file to be referred to, and the progress of processing for the file is also taken into consideration In addition, the access authority is determined. This allows you to check the original file name from the operation history of the log information, even if a user with access rights accidentally changes and saves the file name. It is possible to prevent a user who does not have a file from being referred to.

In addition, when the user tries to access a file without access authority, the administrator is notified of this. As a result, the administrator who has received this notification can also monitor the operation to determine whether the user is cheating.

  FIG. 1 shows an overall conceptual diagram of the present invention, and FIG. 2 shows a conceptual diagram of a system configuration. In the description of the access authority control system 1 of the present invention, the user accesses information on any file or folder (generically referred to as “file” in this specification) on the client terminal 3 (opens a file, etc.). At this time, a case will be described in which it is determined whether or not the user has access authority to the file in the management server 2 and the result is returned to the client terminal 3 used by the user. Furthermore, in the access authority control system 1 according to the present invention, when the user is trying to access a file without access authority at the client terminal 3, if the management server 2 determines that the access authority is not present, A case will be described in which this is displayed on the display device 22 or the display device 22 of the computer terminal (administrator terminal 4) used by the administrator.

  The management server 2 includes an inquiry reception unit 5, an operation log information storage unit 6, an operation log information acquisition unit 7, a user information storage unit 8, an accessibility determination unit 9, a result transmission unit 10, and a warning notification unit 11. The management server 2 can exchange information with the client terminal 3 used by the user. Although only one client terminal 3 is shown in FIGS. 1 and 2, there are actually a plurality of client terminals 3.

  An administrator who manages and monitors each client terminal 3 may use the management server 2 or may use an administrator terminal 4 capable of transmitting / receiving information to / from the management server 2.

  The management server 2, the client terminal 3, and the administrator terminal 4 include a calculation device 20 such as a CPU that executes program calculation processing, a storage device 21 such as a RAM or a hard disk that stores information, and processing results of the calculation device 20. It has at least a communication device 24 that transmits and receives information stored in the storage device 21 via a network such as the Internet or a LAN. Each function (each unit) realized on the computer is executed when a unit (program, module, etc.) for executing the process is read into the arithmetic unit 20. When using the information stored in the storage device 21 in the processing, each function reads the corresponding information from the storage device 21 and uses the read information for processing in the arithmetic device 20 as appropriate. The computer may include an input device 23 such as a keyboard, a mouse, and a numeric keypad, and a display device 22 such as a display (screen). FIG. 4 schematically shows an example of the hardware configuration of the management server 2. Further, the management server 2 may have its functions distributed in a plurality of computer terminals or servers.

  The means in the present invention are only logically distinguished in function, and may be physically or virtually the same area. Further, as a storage method of each storage means (storage unit), various methods such as a database and a data file can be used.

  The inquiry reception unit 5 receives an inquiry from the client terminal 3 as to whether or not the user has an access authority to the file when the user accesses the file at the client terminal 3. When the client terminal 3 accesses a file, the inquiry is accepted from the client terminal 3, but when the user tries to access a file in the file server from the client terminal 3, the client terminal 3 or the file server Inquiries may be accepted. At the time of this inquiry, from a predetermined computer terminal such as the client terminal 3 or the file server, the identification information (file name etc.) of the file to be accessed by the user and the user identification information (user name, login name, etc.) are obtained. Receive together.

  The operation log information storage unit 6 stores operation log information for a file that can be referred to by the client terminal 3. For example, file name, file creator (identification information of file creator), creation date / time, editor (identification information of file editor), editing date / time, new file creation, file update, file deletion, file name change, Stores operation log information for the file, such as access authority change, copy creation, and file movement. Further, as described above, the operation log information may include contents such as a user operation on the client terminal 3 and an application execution status in addition to the operation contents for the file. Furthermore, it is preferable that the identification information of the client terminal 3 and the identification information of the user are included.

  These operation log information records operations performed by the user at each client terminal 3, and each client terminal 3 transmits to the management server 2 regularly or irregularly, and acquires it by the management server 2. And stored in the operation log information storage unit 6. The operation log information storage unit 6 preferably stores each operation log information for each client terminal 3.

  The operation log information storage unit 6 stores operation logs of operation history of various files in each client terminal 3 as operation log information.

  When the inquiry reception unit 5 receives an inquiry, the operation log information acquisition unit 7 refers to the operation log information storage unit 6 based on the identification information of the file, and the operation log information storage unit 6 stores the operation log information for the file. Get from. A unique ID (individual identification information) in hardware such as a portable storage medium or a hard disk is acquired as part of the operation log information and stored in the operation log information storage unit 6, and an inquiry is received in the inquiry reception unit 5. When the file identification information and the unique ID are received, the operation log information for the file may be acquired by referring to the operation log information storage unit 6 using them.

  The user information storage unit 8 stores attribute information for each user, for example, user identification information such as a user name and a login name, information such as an access authority level and affiliation. The access authority level may be one for each user, or may be stored for each file.

  The access permission determination unit 9 uses the operation log information acquired by the operation log information acquisition unit 7 (preferably further using the identification information of the user received by the inquiry reception unit 5) for the file. It is determined whether the user has access authority. There are various methods for this determination. For example, there are the following four methods. In each of the following judgment methods, what operation is performed in the operation log information is determined in advance by the OS, etc., so it is specified what operation has been performed by identification information for identifying the operation. I can do it.

  As a first method, based on the file creator information (file creator user identification information) in the operation log information of the file acquired by the operation log information acquisition unit 7 from the operation log information storage unit 6 (created) The user's access authority level information stored in the user information storage unit 8 is extracted and received by the inquiry reception unit 5. Based on the user identification information of the user, information on the access authority level of the user stored in the user information storage unit 8 is extracted. Then, the access authority level of the file creator is compared with the access authority level of the user. If the access authority level of the user is equal to or higher than the access authority level of the file creator, it is determined that there is an access authority. On the other hand, if the access authority level of the user is lower than the access authority level of the file creator, it is determined that there is no access authority.

  As a second method, when the operation log information acquisition unit 7 cannot acquire the operation log information based on the identification information of the file received by the inquiry reception unit 5 from the operation log information storage unit 6, the client terminal 3 It is determined that there is no access authority regardless of the access authority level of the user as a file that is not permitted to be used. On the other hand, when the operation log information is acquired, it is determined by another three methods or it is determined that the user has access authority. In the case of this method, for example, it is effective when a user brings in a portable storage medium such as a USB memory and restricts access to a file stored therein. In addition to the USB memory, the portable storage medium includes a magnetic disk, a magneto-optical disk, an optical disk, and the like.

  As a third method, as a result of the operation log information acquisition unit 7 acquiring operation log information based on the identification information of the file received by the inquiry reception unit 5 from the operation log information storage unit 6, file name change information If there is a file name, the access authority level of the user for the file stored in the user information storage unit 8 is determined using the file name after change and / or the file name before change. First, it is determined whether or not the access authority level is stored in the user information storage unit 8 based on the changed file name (file identification information), and if it is stored, the access authority level is determined using the information. . If the access authority level based on the changed file name (file identification information) is not stored, it is determined whether the access authority level is stored in the user information storage unit 8 with the file name (file identification information) before the change. If it is stored, the information is used to determine the access authority level. By using such a determination method, the access authority level can be easily determined even if the file name has been changed. This method is effective, for example, when the access authority level is set for each file. When the access authority level for the file is not stored in the user information storage unit 8 and the access authority level is stored in other storage units, the above-described processing is performed on the storage unit. Become.

  As a fourth method, the file creation date and the latest update date and time information acquired from the operation log information storage unit 6 by the operation log information acquisition unit 7 based on the identification information of the file received by the inquiry reception unit 5 And information on the creation date and latest update date and time of the file to be accessed by the user (this information is determined by the inquiry reception unit 5 in accordance with a predetermined computer terminal (client terminal 3, file server, portable storage device). If they do not match, the file is not permitted to be used in the client terminal 3 regardless of the access authority level of the user. It is determined that there is no authority. If they match, it is further determined that each of the above methods is used, or it is determined that the user has access authority. In the case of this method, for example, it is effective when a user brings in a portable storage medium such as a USB memory and restricts access to a file stored therein.

  In addition to the four determination methods exemplified above, the access permission determination unit 9 can determine the access authority using the operation log information, and is not limited to the above method. Further, the administrator of the management server 2 can arbitrarily set which determination method is adopted by the accessibility determination unit 9, and may use a plurality of determination methods instead of one determination method. In addition, a determination method is set for each user (for each user identification information), the determination method is specified based on the user identification information received by the inquiry reception unit 5, and access authority determination processing is performed by the specified determination method. It may be configured to execute.

  The result transmission unit 10 transmits the result determined by the access permission determination unit 9 to an access control unit (not shown) provided in the client terminal 3 or the like. That is, if the access permission determination unit 9 determines that there is access authority, an access permission instruction is transmitted, and if the access permission determination unit 9 determines that there is no access authority, an access permission instruction is transmitted. Will be. The access control unit such as the client terminal 3 receives this instruction, and when the access permission instruction is received, the access to the file is permitted, and when the access non-permission instruction is received, the access to the file is not permitted. . The access control unit may be provided in the client terminal 3 as described above, or may be provided in another computer terminal (including a server). Then, the access control unit executes control processing for permitting or not permitting access to the file in the computer terminal equipped with the access controller.

  When the warning notification unit 11 determines that the access permission determination unit 9 does not have access authority, the warning notification unit 11 accesses the file to which the user does not have access authority on the display device 22 of the management server 2 or the display device 22 of the administrator terminal 4. A warning control instruction is displayed to display information about what is going to be done. That is, the administrator is notified of a warning display instruction for displaying a warning that the user is trying to access a file for which the user does not have access authority.

  Note that which user is trying to access a file to which the user does not have access authority has received the operation log information from the client terminal 3 used by the user, so the user identification information in the operation log information or the client terminal identification information It is possible to determine based on the above.

  An example of warning display by the warning notification unit 11 is shown in FIGS. FIG. 5 shows a state in which a message “User is trying to access a file for which user XXX does not have access authority” is displayed on the screen of the display device 22, and FIG. A screen for displaying a list of operation screen information displayed on the display device 22 of the terminal 3 is displayed, and the operation screen information of the user (a user accessing a file with no access authority) is highlighted. Is the case. For highlighting, change the frame color of the user's operation screen information, change the thickness of the frame, blink the operation screen information or the frame, enlarge the operation screen information, and display the operation screen information in a separate window There is a pop-up display etc., but it is not limited to them. FIG. 7 shows a case where the operation screen information of the user is enlarged and displayed. FIG. 8 shows a case where the operation screen information of the user is displayed in a pop-up in another window.

  The warning notification unit 11 controls the display device 22 of the management server 2 to display a warning display instruction in order to display such a warning display on the display device 22 of the management server 2 or the display device 22 of the administrator terminal 4. Alternatively, the administrator terminal 4 is notified. Accordingly, the computer terminal such as the administrator terminal 4 that has received the warning display instruction displays the warning as described above on the display device 22 based on the notification. This warning display instruction may include identification information of the user or the client terminal 3, contents of warning display, and the like.

  In this case, the management server 2 receives the operation screen information displayed on the display device 22 from each client terminal 3, transmits them to the administrator terminal 4, and displays a list on the display device 22 of the administrator terminal 4. It is displayed. Therefore, in this case, each client terminal 3 has a function of capturing the screen of the display device 22 of the client terminal 3 and transmitting it to the management server 2 regularly or irregularly. In order to capture the screen, for example, the operation screen information displayed on the screen may be read from a display information storage device that stores information to be displayed on the screen, such as a VRAM, and transmitted as operation screen information. The management server 2 also has a function (operation screen information processing unit) that receives operation screen information from each client terminal 3 and transmits it to the administrator terminal 4.

  Note that the administrator's e-mail address may be stored in advance in the management server 2, and the administrator may be notified by e-mail to the e-mail address. A pop-up message may also be used.

  Next, an example of a processing process in the access authority control system 1 of the present invention will be described with reference to the flowchart of FIG.

  When a user wants to access a file stored in a client terminal 3, a file server, or a portable storage device (such as a USB memory) connected to the client terminal 3, by performing a predetermined operation on the client terminal 3, An instruction to access the file is input to the client terminal 3 (S100). In response to the input, the client terminal 3 transmits an access authority inquiry to the management server 2 before opening the file on the client terminal 3 (S110). As described above, the access authority inquiry may be made to the management server 2 from a predetermined computer terminal such as a file server in addition to the client terminal 3.

  In this inquiry, it is desirable that user identification information, file identification information of a file to be accessed by the user, and the like are transmitted together. Furthermore, information such as the creation date and time or the latest update date and time of the file may be transmitted.

  When the inquiry reception unit 5 receives an access authority inquiry, the operation log information acquisition unit 7 acquires operation log information for the file stored in the operation log information storage unit 6 based on the received file identification information. (S120). At this time, all operation log information for the file may be acquired, or a part of operation log information such as a preset period may be used.

  When the operation log information acquisition unit 7 acquires operation log information for the file from the operation log information storage unit 6 in this manner, the access permission determination unit 9 uses the operation log information to allow the user to determine whether the user It is determined whether there is an access right (S130).

  In addition to the above four determination methods, various methods can be used for this determination.

  As a result of the access authority determination by the access permission determination unit 9, if it is determined that there is an access authority, the result transmission unit 10 transmits an access permission instruction to the client terminal 3. As a result of the determination, if it is determined that there is no access authority, the result transmitting unit 10 transmits an access non-permission instruction to the client terminal 3 (S140).

  When this access permission instruction is received by the access control unit of the client terminal 3, the client terminal 3 executes a process for opening the file for which the access instruction has been received in S100. On the other hand, when the access control unit of the client terminal 3 receives an access non-permission instruction, the access control unit of the client terminal 3 cancels the file opening process for the file for which the access instruction has been received in S100, and the “access authority” Notify the user by displaying a message such as "Cannot open because there is no". When the access control unit of the client terminal 3 receives an access non-permission instruction, the process of opening the file is stopped, and the use of the portable storage medium itself such as a USB memory for storing the file is stopped. You can also

  If it is determined that there is no access authority as a result of the determination of the access authority in the access permission / inhibition determination unit 9, the warning notification unit 11 is displayed on the display device 22 of the management server 2 or the display device 22 of the administrator terminal 4. Displays information indicating that the user is trying to access a file without access authority (S140). As a result, the administrator of each client terminal 3 can know that the user is trying to access a file for which the user does not have access authority. It is possible to monitor whether or not the user is cheating.

  Rather than simply determining access privileges as in the past, check the operation history for the file by referring to the log information of the file to be referenced, and access it after taking into account the progress of processing for the file. The authority will be determined. This allows you to check the original file name from the operation history of the log information, even if a user with access rights accidentally changes and saves the file name. It is possible to prevent a user who does not have a file from being referred to.

In addition, when the user tries to access a file without access authority, the administrator is notified of this. As a result, the administrator who has received this notification can also monitor the operation to determine whether the user is cheating.

1 is an overall conceptual diagram of the present invention. It is a conceptual diagram which shows an example of the system configuration | structure of this invention. It is a flowchart which shows an example of the processing process of this invention. It is a figure which shows an example of hardware constitutions, such as a management server. It is an example of the display by a warning notification part. It is another example of the display by a warning notification part. It is another example of the display by a warning notification part. It is another example of the display by a warning notification part.

Explanation of symbols

1: Access authority control system 2: Management server 3: Client terminal 4: Administrator terminal 5: Inquiry reception unit 6: Operation log information storage unit 7: Operation log information acquisition unit 8: User information storage unit 9: Access permission determination unit 10: Result sending unit 11: Warning notification unit

Claims (10)

An access authority control system for determining access authority using operation log information for a file,
The access authority control system includes:
An inquiry reception unit for receiving an inquiry about whether or not the user can access the file and file identification information of the file;
An operation log information storage unit for storing operation log information for at least the file;
An operation log information acquisition unit that acquires corresponding operation log information from the operation log information storage unit based on the received file identification information;
Using at least the acquired operation log information, an access permission determination unit that determines access authority to the file by the user;
When it is determined that there is no access authority as the determination result, a warning notification unit that issues a warning display instruction to a predetermined computer terminal;
An access authority control system comprising: The access authority control system further includes:
A user information storage unit that stores at least user identification information and access authority level information of each user;
The inquiry reception unit further receives user identification information of the user at the time of the inquiry,
The accessibility determination unit
Based on the user identification information of the file creator or file editor in the acquired operation log information, information on the access authority level of the file creator or file editor stored in the user information storage unit is extracted, and the inquiry Based on the user identification information of the user received by the reception unit, information on the access authority level of the user stored in the user information storage unit is extracted, and the extracted access authority level of the user and the extracted file creator Alternatively, the access authority is determined by comparing with the access authority level information of the file editor.
The access authority control system according to claim 1. The accessibility determination unit
If the corresponding operation log information cannot be acquired from the operation log information storage unit based on the file identification information received by the inquiry reception unit, it is determined that there is no access authority.
The access authority control system according to claim 1 or 2, characterized by the above. The accessibility determination unit
If there is information indicating the change of the file identification information in the acquired operation log information, the access authority is first determined using the changed file identification information, and the access authority is determined based on the changed file identification information. If it is not possible to determine the access authority using the file identification information before the change,
The access authority control system according to any one of claims 1 to 3, wherein The access authority control system further includes:
A user information storage unit that stores at least user identification information and access authority level information of each user;
The accessibility determination unit
If there is information indicating the change of the file identification information in the acquired operation log information, it is determined whether the access authority level is stored from the user information storage unit using the changed file identification information, and stored. If so, the access authority level is determined using the access authority level, and if not stored, the file identification information before the change is used to determine whether it is stored in the user information storage unit. If so, the access authority level is determined using the access authority level.
The access authority control system according to any one of claims 1 to 4, wherein The inquiry receiving unit further receives information on the creation date or update date of the file at the time of the inquiry,
The accessibility determination unit
The file creation date or update date information in the acquired operation log information is compared with the file creation date or update date information received by the inquiry reception unit, and the access authority depends on whether or not they match. Judgment of
The access authority control system according to any one of claims 1 to 5, wherein The accessibility determination unit
An access authority determination method is stored for each user identification information, and an access authority determination method is specified based on the user identification information received by the inquiry reception unit.
The access authority control system according to any one of claims 1 to 6, wherein The access authority control system further includes:
A result transmission unit that transmits a control instruction based on the determination result to an access control unit that executes an access control process for the file;
The access control unit
The file is controlled based on the control instruction received from the result transmission unit.
The access authority control system according to any one of claims 1 to 7, wherein The warning notification unit
When it is determined that there is no access authority as the determination result, the operation screen information of the determined user is highlighted among the operation screen information of each client terminal displayed on the display device of the computer terminal.
The access authority control system according to any one of claims 1 to 8, wherein At least a computer storing operation log information for a file in a storage device,
An inquiry reception unit that receives an inquiry about whether or not the user can access the file and file identification information of the file from a client terminal;
An operation log information acquisition unit that acquires corresponding operation log information from the storage device based on the received file identification information;
Using at least the acquired operation log information, an access permission determination unit that determines access authority to the file by the user;
If it is determined that there is no access authority as the determination result, a warning notification unit that issues a warning display instruction to a predetermined computer terminal;
An access authority control program characterized by functioning as

Images