JP2009146198A - Information management system - Google Patents

Abstract

An information management system is provided in which security is provided for each data item, not for each function, for access to highly confidential business information.
An information management system includes a plurality of clients and a common server connected to each client through a network. The server includes various information tables that define information processing authority for each client. The database 4 that holds 9 to 12 and the various information processing modules 5 to 8 that execute the information processing authority defined in each information table 9 to 12 are provided. Each client 1 accesses the server 2 and holds it in the database 4 When selected business information with high confidentiality is selected, the server 2 selects whether to display the business information as it is for each data item or to display it concealed based on the usage authority individually set for each client 1 Then, the selected content is displayed on the display surface of the accessed client 1.
[Selection] Figure 1

Description

  The present invention relates to an information management system, and in particular, sets the authority to use each data item of business information for each user client that uses server information, and each user client accesses the server to display the business information. The present invention relates to an information management system in which each data item of business information is automatically set to be displayed as it is or concealed based on the use authority of the business information.

  In recent years, with the remarkable development of the information society, various information and data have been collected in various fields, and a large amount of collected information and data has been appropriately stored in information processing equipment such as servers. . These information and data are read from an information processing device such as a server in response to a read request from the user client, and are provided for the convenience of the user client by performing necessary processing on the read information and data. In this case, information and data provided for the convenience of the user client include information related to business information of the country, local government, or general company, and some of them are highly confidential. Such highly confidential business information is not preferable because access from an external user client may cause information leakage or misuse of information due to alteration of information contents.

  Therefore, in order to prevent such highly confidential business information from being leaked or misused in the national and local governments and general companies, the need to protect highly confidential business information has increased. An information system is already proposed, and one of them is a “data management apparatus” disclosed in Japanese Patent Laid-Open No. 2003-30029.

The data management device disclosed in Japanese Patent Laid-Open No. 2003-30029 is composed of a common server device connected to a plurality of user clients through a network, and the server device stores data to be managed as a database. A storage unit, a user management table that defines which group each user client belongs to, a group authority table that defines access privileges to be given to each group, a table setting unit that sets the contents of those tables, An access control unit that controls access from the user client. When there is an access from any of the user clients, the access control unit recognizes the group to which it belongs by referring to the user management table, and then refers to the group authority table It recognizes the access rights in the group Te, with the resulting access the authorization is intended that to allow access to the product data.
Japanese Patent Laid-Open No. 2003-30029

  The proposed data management apparatus is capable of performing registration / inquiry for business information, and restricting access to business information in units of screens, that is, providing an access function of a user client by an access authority definition table. It can be limited. However, in recent years, the business forms have become increasingly complex, and the data management apparatus provided with security only for the access function corresponding to the complicated business forms has insufficient protection content. Consequently, there is a need for a device that inevitably provides security for each data item.

  The present invention has been made in view of such a technical background, and its purpose is not to provide security for each access function but to provide security for each data item for access to highly confidential business information. It is to provide an information management system provided.

  In order to achieve the above object, an information management system according to the present invention comprises a plurality of user clients and a server common to each user client connected to each user client through a communication network. A database device that holds various information tables that define information processing rights for each user client, and various information processing modules that execute information processing rights that are defined in the various information tables. When a server accesses a server through a communication network and selects highly confidential business information stored in the database device, the server selects the business information based on the usage rights individually set for each user client in advance. For each data item. Choose to display in a state or concealed to view in a state, which comprises a main constituent unit to be displayed on the display surface of the user client that accesses the selection.

  In the main configuration means, the various information tables of the database device include a system user information table storing user IDs, passwords, and usage authority categories of the information management system set for each system user client. Stored item-specific information protection classification table storing information protection classification corresponding to each item, business information table storing business information, each usage authority classification, and information protection classification of those classifications It consists of an information protection classification table by system user usage authority.

  According to the information management system including the main configuration means, when each user client accesses the server through a communication network and selects highly confidential business information held in the database device at that time, the server , Select whether to display the business information as it is or hide it for each data item based on the usage rights individually set for each user client in advance, Since it is displayed on the display screen of the accessed user client, the system automatically selects whether to display each data item of highly confidential business information as it is or hidden. Security for each data item of highly confidential business information. It is possible to sufficiently hold.

  Embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a block configuration diagram showing a main configuration of an information management system according to the present invention.

  As shown in FIG. 1, this information management system includes a plurality of user clients 1 (only one is shown in FIG. 1 but actually a plurality of user clients 1), a server 2, It comprises a communication network 3 that connects a plurality of user clients 1 and a server 2. The server 2 also includes a database 4 having a user information table 9, an item-specific information protection classification table 10, a business information table 11, and a user authority-specific information protection classification table 12, a user authentication module 5, and an item-specific information protection classification. The acquisition module 6, the business information search module 7, and the inquiry result display module 7 are provided.

  Here, FIG. 2 is a flowchart showing an example of the operation history of the information management system shown in FIG. In this flowchart, steps S1 to S3 are performed by the user authentication module 5, steps S4 and S5 are performed by the item-specific information protection category acquisition module 6, and step S6 is a business information search module. The processing by the inquiry result display module 8 is performed in steps S7 to S10.

  FIG. 3 is an explanatory diagram showing an example of various types of stored information in the user information table 9. As items of stored information, the user ID and password assigned to the target user client and the user authority classification of the user client Are stored in a corresponding form.

  FIG. 4 is an explanatory diagram showing an example of various types of stored information in the item-specific information protection classification table 10. As items of stored information, a business ID, a business name, an item name, and a task ID assigned to each selected business are shown. Information protection classification is stored in a corresponding form.

  FIG. 5 is an explanatory diagram showing an example of the business information stored in the business information table 11, and for the business information items, item names and data are stored in correspondence with each other.

  FIG. 6 is an explanatory diagram showing an example of information protection information stored in the information protection classification table 12 classified by user authority. The information protection information items are stored in a form in which the user authority classification and the information protection classification correspond to each other. Has been.

  Further, FIG. 7 is an explanatory diagram showing an example of the business information inquiry screen formed by the server 2, in which the business information item selected and acquired from the business information table 11 is partially hidden (blacked out) in the upper part. In the lower part, the item specified for the job A selected and acquired from the item-specific information protection classification table 10 is displayed in a partially hidden form (blacked out).

  The operation of the information management system will be described below with reference to the explanatory diagrams shown in FIGS. 3 to 7 according to the flowchart shown in FIG.

  Now, when access to the business information inquiry from one of the user clients 1 through the communication network 3 arrives at the server 2 at a certain point in time, the operation of this information management system is started.

  First, in step S1, the user authentication module 5 obtains the user ID and password input by the user client side and necessary business information when accessing the business information inquiry.

  Next, in step S2, the user authentication module 5 searches the user information table 9 shown in FIG. 3 using the acquired user ID and password as keys.

  Next, in step S <b> 3, the user authentication module 5 determines whether or not a user ID and password pair that respectively matches the user ID and password acquired in step S <b> 1 exists in the user information table 9. If the user ID and password match are confirmed by this determination, it is determined that the user client is authorized to access, and the user assigned to the user client stored in the user information table 9 is determined. The authority classification is extracted, and the process proceeds to the next step S4. On the other hand, if either of the user ID and the password do not match, or if both do not match, it is determined that the user client is not authorized to access, and the process returns to the first step S1.

  In step S4, the item-specific information protection classification acquisition module 6 acquires the business information selected by the access of the user client.

  Subsequently, in step S5, the item-specific information protection category acquisition module 6 refers to the item-specific information protection category table 10 shown in FIG. 4 by using the business ID assigned as the selected business information as a key, and refers to it. The item name and information protection classification required in the business obtained by the above-mentioned business, for example, business A, are extracted.

  Next, in step S6, the business information search module 7 refers to the business information table 11 shown in FIG. 5 using the business A, which is the business information selected by the access of the user client, as a key. The item name and data obtained from the reference are extracted.

  Next, in step S7, the inquiry result display module 8 can refer to the user authority classification information protection classification table 12 using the user authority classification extracted in step S3 as a key, and can refer to the user authority classification as a key by the reference. Extract information protection category.

  In step S8, the inquiry result display module 8 determines whether or not the extracted business information can be referred to. At that time, the information protection classification extracted in step S7 and the information protection classification extracted in step S5 are compared, and the item names matched by the comparison are classified as having reference authority, and the process proceeds to the subsequent step S10. The item names that do not match are classified without reference authority, and the process proceeds to the next step S9.

  Subsequently, in step S9, the inquiry result display module 8 hides (black) the data of the item names classified in step S8 as having no reference authority.

  Finally, in step S10, the inquiry result display module 8 stores the data of the item names classified as having the reference authority in step S8 and the item names classified without the reference authority concealed (blacked out) in the previous step S9. Together with the data, as shown in FIG. 7, it is displayed as a business information inquiry screen on the display surface of the target user client. In this case, in the display example of the business information inquiry screen shown in FIG. 7, the name and address data are concealed (blacked out) as item names in the upper part, and the five data of the work A are respectively displayed in the lower part. It is concealed (black paint). And after this business information inquiry screen display is performed, this series of system operation | movement is complete | finished.

  Thus, according to the information management system according to this embodiment, the system automatically selects whether to display each data item of highly confidential business information as it is or hidden. Therefore, it is possible to sufficiently maintain security for each data item of highly confidential business information.

  When developing a system that handles highly confidential business information, the function of the present invention can be applied.

It is a block block diagram which shows the principal part structure of the information management system by this invention. 2 is a flowchart illustrating an example of an operation history of the information management system illustrated in FIG. 1. It is explanatory drawing which shows an example of the various storage information in a user information table. It is explanatory drawing which shows an example of the various storage information in the information protection classification table classified by item. It is explanatory drawing which shows an example of the business information stored in the business information table. It is explanatory drawing which shows an example of the information protection information stored in the information protection classification table classified by user authority. It is explanatory drawing which shows an example of the business information inquiry screen formed by the server.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 User client 2 Server 3 Communication network 4 Database 5 User authentication module 6 Item-specific information protection classification acquisition module 7 Business information retrieval module 8 Query result display module 9 User information table 10 Item-specific information protection classification table 11 Business information table 12 User authority Separate information protection classification table

Claims (4)

An information management system comprising a plurality of user clients and a server common to each user client connected to each user client through a communication network, wherein the server defines various information processing authorities for each user client. A database device that holds the information table, and various information processing modules that execute the information processing authority defined in the various information tables, each user client accesses the server through the communication network, When the highly confidential business information stored in the database device is selected, the server stores the business information as it is for each data item based on the usage authority individually set for each user client in advance. Display with the status Information management system, characterized in that selects whether to display Luke or concealed state on the display surface of the user client that accesses the selection. The various information tables of the database device include a user information table storing user IDs and passwords set for each system user client, usage authority classifications of the information management system, item names corresponding to each business information, and items. Information protection classification table by item that stores information protection classification equivalent to, business information table that stores business information, each usage authority classification, information protection classification table by user usage authority that stores the information protection classification of those classifications The information management system according to claim 1, comprising: Selection of display or concealment display for each data item of the business information performed in the server includes the user information table, the item-specific information protection classification table, the user information table, the business information table, and the user usage authority. The information management system according to claim 2, wherein the information management system is performed based on a correlation between items stored in the information protection classification table. Selection of display or concealment display for each data item of the business information performed in the server is displayed according to the business information to be accessed even if the same data item is stored in the item-specific information protection classification table. 3. The information management system according to claim 2, wherein selection of concealment display is different.

Images