JP2009110241A - Electronic file management device - Google Patents

Abstract

An electronic file can be accessed without being restricted by the hierarchical structure of the file system.
An electronic file management apparatus 10 accessible from an information processing terminal 30 includes category information describing a relationship between a plurality of categories and file names of electronic files belonging to the categories, user information, and the information Access control information describing the relationship with categories accessible by user information, databases 51, 61, 71 storing the electronic files, and categories corresponding to user information input from the information processing terminal A screen that is acquired using access control information, acquires an electronic file name belonging to the acquired category using the category information, and displays the acquired electronic file name on the information terminal device 30 as an accessible electronic file And a control unit 40.
[Selection] Figure 1

Description

  The present invention performs access control independent of this hierarchical structure for an electronic file managed in a hierarchical structure, and the access control allows access to a desired electronic file without being restricted by this hierarchical structure. It relates to the technology to be made possible.

  For example, Patent Documents 1 to 3 are known as conventional techniques related to electronic file management in a computer file system. Patent Document 1 discloses a network layer that manages the link relation of node information for shared resources, an information capsule layer that manages the location of an entity (electronic file) corresponding to the node information, and an entity that identifies the electronic file to be managed By managing with the layer, even if the link relationship between information and the information electronic file itself are changed, it is reflected in all the related information, and multiple linked information A technique for displaying a shared resource of server device information as a tree on an information processing device so that it can be easily traced from either parent or child direction is disclosed.

  Patent Document 2 defines arbitrary information according to the management purpose in a plurality of types of information resources generated in a wide range on a plurality of types of platforms, and wraps the information with XML tags and stores them in an XML database. A technique is disclosed in which when there is an information request, the information resource in the XML database is read through the information defined by the XML tag, and the content of the read information resource is output to the browser of the requesting data terminal in a unified format. ing.

  Patent Document 3 discloses a technique for facilitating reference of data to be associated with each other by adding pointer information for referring to each other's data to both of the two data to be associated with each other.

JP 2002-328829 A JP 2002-175297 A JP 2002-244915 A

  By the way, in a computer file system, electronic files are generally stored in folders, and a set of folders is managed by a tree-like hierarchical structure. Since this tree-like hierarchical structure is similar to the form of a business department composed of departments or sections in a company organization, folders containing electronic files managed by each department or section are composed of departments or sections. A file system arranged according to the hierarchical structure of a business department may be constructed.

  In the file system as described above, a user may manage access to an electronic file using a user ID and a category. The user ID is for identifying individual users, and the category is a range that defines the range of folders and electronic files that can be accessed by a specific user. This category is often set according to the hierarchical structure of the file system that has a tree shape from the top to the bottom. In particular, if the file system has a hierarchical structure that matches the form of an organization such as a business unit, set the category from the desired upper folder to the lower folder according to the hierarchical structure, and belong to a business unit The user can set a category that allows access to even the electronic files managed by the departments belonging to the lower level of the business division.

  However, if a category according to the hierarchical structure is set as described above, a user belonging to a certain business department cannot use an electronic file managed as belonging to another category by another business department. Therefore, when using an electronic file belonging to another category, a user ID that can access the other category is separately assigned to the user to use the electronic file. The administrator assigns the user ID. However, if this operation occurs frequently, there is a problem in that it is not convenient for operation and security is lowered.

  On the other hand, apart from management by category, it may be possible to individually set users who can access a desired electronic file, but there is a problem that management is complicated and lacks operational convenience. For this reason, when a project team involving multiple business departments is established, the category setting according to the hierarchical structure gives specific users the authority to use the electronic files of each department involved in the project. It was difficult to have it.

  As described above, in the conventional computer file system, when the user is given access authority to an electronic file without being restricted by the tree-like hierarchical structure, individual links are set to the nodes and electronic file entities. There is a problem that such complicated work is required.

  However, the conventional techniques described in Patent Documents 1 and 2 describe a multidimensional information structure necessary for classification and management of information in an electronic file in XLM. A technique for describing the relationship is not disclosed. In addition, in the related art described in Patent Document 3, information indicating the location of the other electronic file is registered in the pointer information of one electronic file of two related data (electronic files), and the pointer of the other electronic file is registered. Information indicating the location of one electronic file is registered in the information, and a description for registering the relationship between the access authority of the electronic file and the user information is not disclosed. Therefore, in the prior arts of Patent Documents 1 to 3, when the access authority to the electronic file is given to the user without being restricted by the tree-like hierarchical structure in the conventional computer file system, the node or the electronic file It is impossible to solve the problem that a complicated operation such as setting a link for each entity is necessary.

  The present invention has been made in view of the above, and does not require a complicated operation of individually setting a link to a node or an entity of an electronic file, and has a simpler structure and a tree-like hierarchical structure. An object of the present invention is to obtain an electronic file management device that can access an electronic file without being restricted by the above-described security and that also takes security into consideration.

  In order to solve the above-described problems and achieve the object, the present invention is an electronic file management apparatus accessible from an information processing terminal, and a relationship between a plurality of categories and file names of electronic files belonging to the respective categories Is input from the information processing terminal, a database storing the user information and access control information describing the relationship between the user information and a category accessible by the user information, and the electronic file. A category corresponding to user information is acquired using the access control information, an electronic file name belonging to the acquired category is acquired using the category information, and the acquired electronic file name is used as an accessible electronic file. And a control means for displaying on the information terminal device.

  According to this invention, the access of the electronic file from the information processing terminal is performed using user information, category information describing the relationship between a plurality of categories and file names of electronic files belonging to the respective categories, and the user information By granting permission based on access control information that describes the relationship with accessible categories, it is simpler than before without the need for complicated tasks such as setting links individually to the entities of nodes and electronic files. With the configuration, it is possible to obtain an electronic file management apparatus that allows access to an electronic file without being restricted by a tree-like hierarchical structure and that also takes security into consideration.

  Embodiments of an electronic file management apparatus according to the present invention will be described below in detail with reference to the drawings. Note that the present invention is not limited to the embodiments.

Embodiment.
FIG. 1 is a block diagram showing the configuration of an electronic file management apparatus according to the present invention. The electronic file management apparatus according to the present embodiment is used by being connected to an information processing terminal 30 operated by a user of the electronic file management apparatus 10 via a network 20 such as an intranet. A user information management unit 50, an access control information management unit 60, an electronic file management unit 70, a user information database 51, an access control information database 61, and a file database 71. The user information management unit 50 includes a user information database. 51, an access control information database 61 is connected to the access control information management unit 60, a file database 71 is connected to the electronic file management unit 70, and a user information management unit 50 and access control information are connected to the screen control unit 40. Management unit 60 and electronic file management unit 70 There has been connected. In FIG. 1, there is one information processing terminal 30, but actually, a plurality of information processing terminals 30 are connected to the network 20.

  The user information management unit 50 manages the user information database 51 in which the user information 81 shown in FIG. 2 is stored.

  Here, the user information 81 stored in the user information database 51 includes a user ID and a password for identifying the user. As shown in FIG. 2, for example, “XXYY” is used as the user ID and “*” is used as the password. Characters or symbols such as “***” are described in XML. Thus, in the user information 81, user IDs and passwords for a plurality of users who can access the electronic file management apparatus 10 are registered.

  Further, the access control information management unit 60 manages the access control information database 61 in which the access control information 82 shown in FIG. 3 is stored.

  Here, the access control information 82 stored in the access control information database 61 can be a user ID, a category accessible by this user ID (category ID), and an electronic file belonging to this category with this user ID. Operation information (hereinafter referred to as possible operation information). FIG. 3 is an example of the access control information 82 described in XML. “XYY” is the user ID in the third line, and category ID “WWZZ” is the identification information of the category accessible by this user ID in the seventh line. Is described. By enclosing the description of this category with tags of “<write>” and “</ write>”, an operation of writing to an electronic file belonging to this category becomes possible. In addition, by enclosing the description of this category with tags "<view>" and "</ view>", it is possible to read electronic files belonging to this category. ”And“ </ delete> ”tags can be used to delete electronic files belonging to this category.

  The electronic file management unit 70 manages a file database 71 in which electronic files and category information 83 are stored.

  Here, the category information 83 stored in the file database 71 is as shown in FIG. 4, and indicates the name of the electronic file belonging to the category whose category ID is “WWZZ” and the location of the electronic file in the hierarchical structure. A path is described for each electronic file. For example, if the name of the electronic file to be accessed is “f1” and the path of the electronic file f1 is “¥ E ¥ F”, the description of the name of the electronic file f1 in FIG. 4 is “<filename> f1 </ filename”. > ”And the path description is“ <path> ¥ E ¥ F </ path> ”. Hereinafter, the file name including the path and file name of the electronic file will be referred to.

  Further, the screen control unit 40 receives an instruction from the information processing terminal 30 via the network 20, and transfers this instruction to the user information management unit 50, the access control information management unit 60, and the electronic file management unit 70. The execution result in the user information management unit 50, the access control information management unit 60, or the electronic file management unit 70 based on the received instruction is displayed on the information processing terminal 30 via the network 20.

  Here, a hierarchical structure of a conventional tree-like file system will be described. FIG. 5 shows an example of a conventional tree-like hierarchical structure. There are a folder A and a folder E below the \ folder which is the highest folder, and the folder A has folders B, C and D as lower folders, and the folder E has folders F, G and H as lower folders. Therefore, the hierarchy below folder A and the hierarchy below folder B are independent from each other. In the past, electronic files of each business division were stored in such independent systems, and users belonging to the business division were allowed to access the electronic files stored in that system. . For example, in FIG. 6, when a user who has the authority to access only the hierarchy below folder A is set to a user, this user can access the hierarchy below folder A surrounded by a broken line. On the other hand, this user cannot access the hierarchy below folder E. For this reason, when a project team involving a plurality of different business departments is established, it is difficult for even a member of the project team to access an electronic file other than the business department to which he belongs.

  On the other hand, in the present embodiment, as described above, the category information 83 describing the accessible folder and file name is set, stored in the file database 71, and further, the user sets the category information related to the category information. By setting the access control information 82 so as to allow access such as writing or reading and storing it in the access control information database 61, a specific folder in the hierarchy below the folder A and the hierarchy below the folder E And access to electronic files. For example, a category including an electronic file stored in folder A and folder A, an electronic file stored in folder E and folder E, and an electronic file stored in folder F and folder F is provided. When the category information 83 is set and the access control information 82 is set so that the user can access the category such as writing or reading, the screen control unit 40 uses the category information 83 and the access control information 82 to The information on the electronic file accessible by the registered user can be displayed on the information processing terminal 30 in a tree structure as shown in FIG. 6, for example.

  The tree structure shown in FIG. 6 is an example displayed on the information processing terminal 30. The category information 83 described above is set for a separate category, stored in the file database 71, and written by the user for the separate category. Alternatively, a plurality of different tree structures may be displayed on the information processing terminal 30 by setting the above-described access control information 82 so as to allow access such as reading and storing it in the access control information database 61. Is possible.

  Next, a process in which the electronic file management apparatus according to the present embodiment permits a user to access an electronic file registered in the file database 71 will be described. FIG. 7 is a flowchart showing a process of permitting a user access to an electronic file registered in the file database. First, the user ID and password input as user information by the user from the information processing terminal 30 are received by the screen control unit 40 (step S11), and the screen control unit 40 further receives the received user ID and password in the user information management unit 50. Deliver. Next, the user information management unit 50 searches the user information 81 registered in the user information database 51 for the user ID (step S12). As a result of this search, when the user ID related to the search is detected from the user information database 51 and the password of the detected user ID matches the password entered by the user, the user information management unit 50 selects the user who has accessed. It is determined that the user is a registered user of the electronic file management apparatus 10 and notifies the screen control unit 40 to that effect.

  Next, the screen control unit 40 delivers the user information 81 of the user determined to be a registered user to the access control information management unit 60. The access control information management unit 60 acquires access control information (category ID and possible operation information for the category ID) corresponding to the user information 81 acquired from the screen control unit 40 from the access control information database 61 (step S13). Then, the acquired category ID and possible operation information for the category ID are delivered to the screen control unit 40.

  In addition, the screen control unit 40 passes the acquired category ID and possible operation information to the category ID to the electronic file management unit 70. The electronic file management unit 70 acquires category information 83 (relation between the category ID and the file name of the electronic file belonging to the category ID) corresponding to the acquired category ID from the file database 71 (step S14), and the acquired category information 83 is delivered to the screen control unit 40.

  Subsequently, the screen control unit 40, based on the access control information 82 acquired from the access control information management unit 60 and the category information 83 acquired from the electronic file management unit 70, obtains information on electronic files accessible by registered users. By displaying on the information processing terminal 30 as shown in FIG. 6 (step S15), the process of permitting the user access to the electronic file registered in the file database 71 is terminated.

  Next, a description will be given of processing when the user selects a desired electronic file from the list of accessible electronic files displayed on the information processing terminal 30 and requests an operation such as reading or writing on the selected electronic file. To do. FIG. 8 is a flowchart showing the procedure of the electronic file operation process based on the request from the user. First, the screen control unit 40 passes a request from the user to the electronic file management unit 70. The electronic file management unit 70 determines whether or not the request is an operation instruction such as writing to or reading from the electronic file (step S21), and when the request is an operation instruction to the electronic file (step S21: Yes), the procedure is shifted to step S22. On the other hand, when the request is not an operation on the electronic file (step S21: No), the procedure is returned to step S21 or earlier.

  In step S22, the electronic file management unit 70 calls the electronic file related to the operation request from the file database 71, executes the operation on the electronic file called according to the operation request, and stores the electronic file according to the request from the user. The processing of the operation ends.

  Next, a procedure for setting the access control information 82 of the registered user will be described. FIG. 9 is a flowchart showing a procedure for setting the access control information 82 of the registered user. First, when a request for setting the access control information 82 of a registered user is made by the administrator from the information processing terminal 30, the screen control unit 40 delivers the request to the user information management unit 50. Based on this request, the user information management unit 50 acquires a list of registered user information from the user information database 51 (step S31), and delivers the acquired list of registered user information to the screen control unit 40.

  Subsequently, the screen control unit 40 passes the request for setting the access control information 82 and the list of acquired user information to the access control information management unit 60. Then, the access control information management unit 60 searches the access control information 82 stored in the access control information database 61 using the user ID in the acquired user information list as a search key (step S32). The access control information 82 is extracted in association with each user ID. Furthermore, the access control information management unit 60 delivers the access control information 82 associated with each user ID to the screen control unit 40.

  Further, the screen control unit 40 delivers a request for setting the access control information 82 to the electronic file management unit 70 and the access control information 82 associated with each user ID, and the electronic file management unit 70 receives each user ID. The category information 83 of the category ID described in the associated access control information 82 is acquired from the file database 71 (step S33), and the acquired category information is delivered to the screen control unit 40.

  Next, the screen control unit 40 obtains access control information from the list of user information, the access control information 82 associated with each user ID, and the category information of the category ID described in the access control information. Is displayed on the information processing terminal 30 (step S34). The administrator selects a desired user ID on the screen displayed in step S34, and sets the access control information 82 for the selected user ID.

  Here, when the access control information 82 has already been set for the user ID selected by the administrator, in step S38, an operation for changing the already set access control information is performed. Specifically, a category ID of a category accessible by the user ID is added or deleted, and further, an operation that can be performed by the user ID for an electronic file belonging to the category, for example, reading and writing of the electronic file, etc. Change the operation settings.

  On the other hand, if the access control information 82 has not been set for the user ID selected by the administrator, the access control information 82 is newly set for the user ID. Specifically, a category ID of a category that can be accessed by the user ID is specified, and operations that can be performed by the user ID, for example, operations such as reading and writing of the electronic file, are set for the electronic files belonging to the category.

  The content set or changed by the administrator on the screen displayed in step S34 is transferred from the screen control unit 40 to the access control information management unit 60, and the access control information management unit 60 describes the content of the setting in XML. When the access control information 82 is converted and registered in the access control information database 61 (step S35), the procedure for setting the access control information 82 for the registered user is completed.

  Next, a procedure for registering an electronic file in the file database 71 will be described. FIG. 10 is a flowchart showing a procedure for registering an electronic file in the file database 71. First, when the administrator transmits an electronic file to be registered in the file database 71 from the information processing terminal 30 to the screen control unit 40, the screen control unit 40 indicates that the administrator has transmitted the electronic file. 70 (step S41), the electronic file management unit 70 delivers the list of category information acquired from the file database 71 to the screen control unit 40.

  Next, the screen control unit 40 displays a screen for setting category information on the information processing terminal 30 based on the list of category information acquired from the electronic file management unit 70 (step S42). When the category ID of the category to which the electronic file registered by the administrator belongs and the file ID of the electronic file to be registered, the file name, and the path are designated on the screen for setting the category information, the screen control unit 40 displays the category ID. These designated contents and the electronic file to be registered are delivered to the electronic file management unit 70. Note that the category ID is specified in step 42 in principle by selecting an existing category ID on the screen in the category information list, but a new category is defined by inputting a new category ID. You can also do that.

  Thereafter, the electronic file management unit 70 changes the description of the category information 83 registered in the file database 71 on the basis of the content designated by the administrator, and the administrator steps the electronic file acquired from the screen control unit 40. The procedure for registering in the file database 71 with the path specified in S51 (step S43) is completed.

  Next, a procedure for deleting an electronic file from the file database 71 will be described. FIG. 10 is a flowchart showing a procedure for deleting an electronic file from the file database 71. First, when the administrator makes a request from the information processing terminal 30 to delete a desired electronic file from the file database 71, the screen control unit 40 passes the administrator's request to the electronic file management unit 70, and performs electronic file management. The unit 70 deletes the electronic file from the file database 71 according to the request (step S51), and the procedure for deleting the electronic file from the file database 71 ends.

  The electronic file management apparatus according to the present invention is useful when accessing a desired electronic file without being restricted by a tree-like hierarchical structure. Suitable for accessing electronic files managed by each department.

It is a block diagram which shows the structure of the electronic file management apparatus concerning this invention. It is a figure which shows an example of user information. It is a figure which shows an example of access control information. It is a figure which shows an example of category information. It is a figure which shows the example of the conventional tree-like hierarchical structure. It is a figure which shows an example of the display of the information of the electronic file which a user can access. 6 is a flowchart illustrating a process of permitting a user access to an electronic file. It is a flowchart which shows the procedure of the process of the operation of an electronic file based on the request | requirement from a user. It is a flowchart which shows the procedure which sets access control information. It is a flowchart which shows the procedure which registers an electronic file into a file database. It is a flowchart which shows the procedure which deletes an electronic file from a file database.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Electronic file management apparatus 20 Network 30 Information processing terminal 40 Screen control part 50 User information management part 51 User information database 60 Access control information management part 61 Access control information database 70 Electronic file management part 71 File database 81 User information 82 Access control information 83 Category information

Claims (1)

An electronic file management device accessible from an information processing terminal,
Category information describing a relationship between a plurality of categories and file names of electronic files belonging to each category, access control information describing a relationship between user information and a category accessible by the user information, and the electronic A database where files are stored,
A category corresponding to user information input from the information processing terminal is acquired using the access control information, an electronic file name belonging to the acquired category is acquired using the category information, and the acquired electronic file name Control means for displaying the information terminal device as an accessible electronic file;
An electronic file management apparatus comprising:

Images