JP2017182122A - Data provision system, access right management device, data provision method, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To manage access right to a file based on policy more easily than before.SOLUTION: In a case where access right to a file 5 is not set when the file 5 stored in a document storage area 10R is requested from a user, an authority policy setting unit 215 analyzes content or attribution of a document reproduced by the file 5 to set the access right based on analysis results. Then, a file provision unit 103 provides the file 5 with a user according to the access right.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a technique for managing data access rights.

  Conventionally, in order to prevent unauthorized access to data for displaying or printing a document, a technique for allowing access to data only by a specific user has been proposed. Specifically, an apparatus that manages data (for example, a file server) grants data access rights only to specific users. Then, the use of data by a specific user is permitted within the scope of the access right.

  Further, the following techniques have been proposed as data providing techniques in view of security protection. A client that is an information processing terminal includes a data communication processing device mounted on a PC and a confidential information transfer device, and further includes a communication management device, an AP, and a transmission result presentation device. In addition, the confidential information transfer apparatus includes a confidential route determination unit that determines the confidential route level of a plurality of communication channels, an optimum route determination unit, a confidential keyword definition DB, and a morpheme analysis unit. A confidential data determination unit that determines the level and an optimal route determination unit that selects an optimal communication path based on the confidential route level and the confidential data level are configured (Patent Document 1).

  In the composite apparatus, the feature amount analysis unit extracts the feature amount from the electronic document captured by the image input / output unit, and the distribution destination determination unit determines the distribution destination of the electronic document based on the feature amount. The management unit obtains document provider information, stores the document provider information of the electronic document, the feature amount, and the distribution destination related information related to the distribution destination as document related information, and stores the distribution information And the electronic document is distributed from the transmission / reception unit to the distribution destination. When the output request of the electronic document is from the output request source device, the document management unit acquires the output request source information of the output request source device, and there is an output request of the output request source information and the document related data storage unit Output permission / non-permission of the electronic document is controlled based on the document related information of the electronic document and the document related information input in the request (Patent Document 2).

  In addition, when a document file is newly stored, a technique for giving an access right to the file based on a predetermined policy is known.

JP 2002-135351 A JP 2014-115748 A

  However, access rights are often not set for data stored when there is no policy, unless the administrator or document creator has set the access rights.

  Therefore, after the policy is determined, in order to comply with the policy for these data, an administrator or a creator must set an access right.

  When the policy is changed, it may be necessary to review the access right of the existing data and reset the access right according to the changed policy.

  However, according to the conventional technique, the troublesomeness of these operations related to the data access right cannot be eliminated.

  The present invention has been made in view of such problems, and it is an object of the present invention to manage data access rights based on policies more easily than in the past.

  A data providing system according to an aspect of the present invention is a data providing system that provides document data stored in a storage unit, and has an access right to the data when requested by the user. A setting unit configured to analyze the content or attribute of the document related to the data and to set the access right of the data based on the content or the attribute analyzed by the analyzing unit, if not set yet And means for providing the data to the user according to the access right when the access right is set by the setting means after the data is requested by the user.

  Preferably, the data can be shared by a plurality of users, and the setting unit sets the access right for each of the plurality of users.

  Or, if the access right is already set when the data is requested from the user, the update means updates the access right based on a predetermined rule. After the data is requested by the user, when the access right is updated by the updating unit, the data is provided to the user according to the updated access right.

  Alternatively, the data may be shared by a plurality of users, and the setting means is allowed to use the data only for some of the plurality of users. The access right is set, and the updating means updates the access right so that the restriction becomes looser as the number of updates increases.

  According to the present invention, it is possible to manage data access rights based on policies more easily than in the past.

It is a figure which shows the example of the whole structure of a document sharing system. It is a figure which shows the example of the hardware constitutions of a document management server. It is a figure which shows the example of user data. It is a figure which shows the example of the hardware constitutions of a terminal device. It is a figure which shows the example of a functional structure of each of a document management server, an authority policy management server, and a user management server. It is a figure which shows the example of authority policy data. It is a flowchart explaining the example of the flow of the whole process in a document management server. It is a flowchart explaining the example of the flow of the whole process in an authority policy management server. It is a flowchart explaining the modification of the whole process flow in a document management server. It is a flowchart explaining the modification of the whole process flow in a document management server.

  FIG. 1 is a diagram illustrating an example of the overall configuration of the document sharing system 100. FIG. 2 is a diagram illustrating an example of a hardware configuration of the document management server 1. FIG. 3 is a diagram illustrating an example of the user data 6A. FIG. 4 is a diagram illustrating an example of a hardware configuration of the terminal device 3.

  As shown in FIG. 1, the document sharing system 100 includes a document management server 1, an authority policy management server 21, a user management server 23, a terminal device 3, a communication line 4, and the like.

  The document management server 1, authority policy management server 21, user management server 23, and terminal device 3 can communicate via the communication line 4. As the communication line 4, the Internet, a LAN (Local Area Network), a public line, a dedicated line, or the like is used.

  The document sharing system 100 is a system for using a document (document) constituted by a document, a diagram, a photograph, an illustration, or the like by a plurality of users.

  Hereinafter, a case where the document sharing system 100 is used in a certain company will be described. Therefore, an employee of this company is a user of the document sharing system 100. Each user is given one user account. A unique user code is attached to the user account.

  The document management server 1 manages documents in units of files. Then, based on the request from the terminal device 3, the file is provided to the terminal device 3. A so-called server machine or NAS (Network Attached Storage) is used as the document management server 1.

  As shown in FIG. 2, the document management server 1 includes a CPU (Central Processing Unit) 10a, a RAM (Random Access Memory) 10b, a ROM (Read Only Memory) 10c, a mass storage device 10d, and a NIC (Network Interface Card). 10e.

  The NIC 10e communicates with the authority policy management server 21, the user management server 23, the terminal device 3, and the like via the communication line 4 by a protocol such as TCP / IP (Transmission Control Protocol / Internet Protocol).

  The large-capacity storage device 10d is provided with a document storage area 10R (see FIG. 5) for storing the file 5 of each document. The file 5 is a file for reproducing a document, and is a PDF (Portable Document Format) file, a text file, or a file in a format for various applications (for example, Microsoft Word, Excel, or PowerPoint). is there.

  Furthermore, a file management program 10P (see FIG. 5) for managing the file 5 is stored in the ROM 10c or the mass storage device 10d.

  The file management program 10P is loaded into the RAM 10b and executed by the CPU 10a. A hard disk, SSD (Solid State Drive), or the like is used as the mass storage device 10d.

  The authority policy management server 21 manages the authority policy of each file 5. The “authority policy” is a policy (rule) regarding each user's access to the file 5. Specifically, the authority policy defines the access right of the file 5 for each user.

  The hardware configuration of the authority policy management server 21 is basically the same as that of the document management server 1 and is as shown in FIG.

  However, an authority policy management program 21P (see FIG. 5) for managing authority policies is stored in the ROM or the mass storage device. The authority policy management program 21P is loaded into the RAM and executed by the CPU.

  The user management server 23 manages information such as the user account, department, job class (for example, general manager, section manager, general employee, etc.) and contact information of each user.

  The hardware configuration of the user management server 23 is basically the same as that of the document management server 1 and is as shown in FIG.

  However, the mass storage device is provided with a user data storage area 23R. As shown in FIG. 3, user data 6A for each user is stored in the user data storage area 23R. The user data 6A indicates the user code of the user, the department to which the user belongs (currently the department to which he belongs), the job class, and the contact information.

  The user data 6A is created by the administrator when a user (employee) enters the company and is stored in the user data storage area 23R.

  Further, every time a user changes, the user's user data 6A is updated by the administrator so that the department to which the change is made is indicated. Further, every time a user's job class or contact information is changed, the user's user data 6A is updated by the administrator so that a new job class or contact information is indicated.

  Further, a change notification program 23P (see FIG. 5) is stored in the ROM or the mass storage device. The change notification program 23P is loaded into the RAM and executed by the CPU.

  The terminal device 3 is a device for a user to access the file 5 to view or edit a document. As the terminal device 3, a smart phone, a tablet computer, a mobile phone terminal, a personal computer, or the like is used. Hereinafter, a case where a personal computer is used as the terminal device 3 will be described as an example.

  As shown in FIG. 4, the terminal device 3 includes a CPU 30a, a RAM 30b, a ROM 30c, an auxiliary storage device 30d, a liquid crystal display 30e, a NIC 30f, a keyboard 30g, a pointing device 30h, and the like.

  In addition to the document, a screen for giving a command to the terminal device 3 is displayed on the liquid crystal display 30e.

  The NIC 30f communicates with the document management server 1 and the like via the communication line 4 by a protocol such as TCP / IP.

  The keyboard 30g and the pointing device 30h are used for a user to input information and commands.

  The ROM 30c or the auxiliary storage device 30d stores an operating system, a web browser, a driver for the document management server 1, and the like. These programs are loaded into the RAM 30b as necessary and executed by the CPU 30a. A hard disk, SSD, or the like is used as the auxiliary storage device 30d.

  By the way, at least a part of the files 5 is stored in the document storage area 10R before the operation of the file management program 10P and the authority policy management server 21 is started. In such a file 5, the authority policy is not set when the operation is started.

  Conventionally, when an authority policy is not set for the file 5, the administrator or the creator of the file 5 must perform an operation for setting the authority policy.

  However, according to the file management program 10P, the authority policy management program 21P, and the change notification program 23P, the authority policy can be set without performing work. Hereinafter, this mechanism will be described.

  FIG. 5 is a diagram illustrating examples of functional configurations of the document management server 1, the authority policy management server 21, and the user management server 23.

  According to the file management program 10P, functions such as the file list notification unit 101, the access right inquiry unit 102, and the file provision unit 103 shown in FIG.

  According to the authority policy management program 21P, an update date storage unit 211, an update date rewrite unit 212, an authority policy storage unit 213, an authority policy search unit 214, an authority policy setting unit 215, an authority policy update unit 216, an access right identification unit 217, Functions such as the access right answering unit 218 are realized in the document management server 1.

  According to the change notification program 23P, functions such as the update detection unit 231 and the update notification unit 232 are realized in the document management server 1.

[Processing related to human resources]
In the update date storage unit 211, update date data 6B is stored. The update date / time data 6 </ b> B indicates the date / time when the user information was recently updated. The default value is “Null”. The update date / time data 6B is rewritten as follows.

  In the user management server 23, when a user is transferred or a job class is changed, the user data 6A (see FIG. 3) of the user is updated by the administrator as described above.

  The update detection unit 231 constantly monitors the user data storage area 23R and detects that the user data 6A has been updated.

  Then, the update notification unit 232 transmits update notification data 6C indicating the date and time when the user data 6A was updated to the authority policy management server 21.

  The user data 6A of a plurality of users may be updated at the same time (for example, the same day). In such a case, after the last of the user data 6A is updated, only one data indicating the date and time when the last user data 6A is updated may be transmitted as the update notification data 6C. The last update may be notified to the user management server 23 by the administrator entering a predetermined command.

  In the authority policy management server 21, upon receiving the update notification data 6C, the update date / time rewriting unit 212 rewrites the date / time indicated in the update date / time data 6B to the date / time indicated in the update notification data 6C. As a result, the update date / time data 6B indicates the date / time when the user information was recently updated.

[Processing related to file 5]
FIG. 6 is a diagram illustrating an example of the authority policy data 6D.

  In the authority policy management server 21, authority policy data 6D for each file 5 is stored in the authority policy storage unit 213 as shown in FIG. The authority policy data 6D shows the file name of the file 5, the user code of the user having the R / W right, the user code of the user having the R right, the expiration date, and the update date / time.

  The “R / W right” is an authority including both the read right and the write right of the file 5, and the “R right” is an authority including only the read right of the read right and the write right of the file 5. is there. According to the read right, the file 5 can be opened with an application or the like to view the document, but cannot be edited. On the other hand, according to the write right, the document can be edited.

  The “expiration date” is a date when these R / W rights and R rights are valid. That is, after the expiration date, these R / W rights and R rights become invalid. “Update date and time” is the date and time when the authority policy data 6D was last updated. However, at the time when the authority policy data 6D is created, the created date and time is indicated as the update date and time.

  The authority policy data 6D of some files 5 is not yet stored in the authority policy storage unit 213, but is generated by the authority policy setting unit 215 described later and stored in the authority policy storage unit 213.

  The user can access the file 5 using the terminal device 3 to view or edit the document as follows.

  The user logs in to the terminal device 3 in advance with his / her user account. The web browser of the terminal device 3 is activated, and the URL (Uniform Resource Locator) of the document storage area 10R of the document management server 1 is input to the web browser.

  Then, the web browser requests the web page from the document management server 1 based on the input URL.

  In the document management server 1, the file list notifying unit 101 transmits list data 6 </ b> E to the terminal device 3 in accordance with a request from the terminal device 3. The list data 6E shows the file names of all the files 5 stored in the document storage area 10R.

  When receiving the list data 6E, the web browser displays the list screen 7A based on the list data 6E. On the list screen 7A, the file names shown in the list data 6E are arranged.

  The user selects the file name of the file 5 of the document to be viewed or edited from the list screen 7A.

  Then, the web browser transmits the request data 6F to the document management server 1. The request data 6F indicates the selected file name, the user code of the user, and the request for the file 5.

  In the document management server 1, when the access right inquiry unit 102 receives the request data 6F, the access right inquiry unit 6G sends the inquiry data 6G to the authority policy management server 21, thereby giving the access right of the file 5 given to the user. Inquire. In the inquiry data 6G, the file name and user code indicated in the request data 6F and a request for answering the access right are indicated.

  When the inquiry data 6G is transmitted in the authority policy management server 21, processing for specifying and answering the access right of the user is performed by the authority policy searching section 214 or the access right answering section 218 as follows.

  The authority policy search unit 214 searches the authority policy storage unit 213 for authority policy data 6D indicating the file name indicated in the inquiry data 6G.

  When such authority policy data 6D is not stored in the authority policy storage unit 213, that is, when the authority policy search unit 214 has not searched, the authority policy setting unit 215 performs processing for setting the authority policy. Is executed as follows.

  The authority policy setting unit 215 downloads the file 5 having the file name indicated in the inquiry data 6G from the document management server 1. The authority policy management server 21 is given in advance an access right to a file stored in the document storage area 10R of the document management server 1.

  The authority policy setting unit 215 determines whether to give the user the R / W right and R right of the file 5 (access right granting method) to one of the following levels_1, level_2, and level_3 Decide on the level method.

  (Level_1) It is determined that the R / W right of the file 5 is given to the user (creator) who created the document (target document) reproduced by the file 5.

  (Level_2) It is determined that the R / W right of the file 5 is given to the creator, and it is decided that the R right of the file 5 is given to the user who belongs to the same department as the creator.

  (Level_3) Determines to give the creator the R / W right of the file 5, and has the R / W right or R right of a document (similar document) belonging to the same department as the creator or similar to the target document It decides to give the R right of the file 5 to the user.

  Thus, the higher the level, the more types of users to whom access rights are given.

  The authority policy setting unit 215 specifies the creator based on the property of the file 5. Alternatively, a predetermined word such as “author”, “author”, “writer”, or “author” is searched from the document (character string) shown in the file 5 and is displayed immediately after the predetermined word. It may be specified that the person to be created is the creator. Alternatively, when the document shown in the file 5 has a predetermined format, it may be specified that the person shown at the predetermined position is the creator.

  In addition, the authority policy setting unit 215 identifies the user of the department to which the creator belongs as follows. Based on the user data 6A of the creator (user data 6A indicating the user code of the creator), the department of the creator is determined. Then, user data 6A indicating the department is searched, and it is specified that the user of the user code indicated in each searched user data 6A is a user of the department to which the creator belongs.

  Also, the authority policy setting unit 215 specifies a similar document and the R / W right or the user having the R right as follows.

  The authority policy setting unit 215 extracts keywords from the target document based on a predetermined rule. For example, the most frequently used word may be extracted as a keyword. Alternatively, words included in the file name of the file 5 may be extracted as keywords. Alternatively, when the target document has a predetermined format, a word indicated at a predetermined position (for example, a predetermined field) of the target document may be extracted as a keyword.

  Next, the authority policy setting unit 215 searches the extracted keywords from the documents indicated in the respective files 5 stored in the document storage area 10R. Alternatively, the file name of each file 5 may be searched. Then, the document of the file 5 in which the extracted keyword is hit is specified as a similar document.

  Then, the authority policy setting unit 215 specifies a user who has the R / W right or R right of the similar document based on the authority policy data 6D of the similar document.

  When the access right granting method is determined, the authority policy setting unit 215 generates authority policy data 6D accordingly.

  Regardless of the access right granting method, the following information is shown in each field of the right policy data 6D. In the “file name” field, the file name of the file 5 of the target document is shown. In the “R / W right” field, the user code of the creator is shown. In the “expiration date” field, the date and time after a predetermined time (for example, four months later) from the present is indicated. The “update date / time” field indicates the current date / time.

  If the access right granting method is determined to be level_2, the user code of each user of the department to which the creator belongs (excluding the creator) is further indicated in the “R right” field of the right policy data 6D. It is.

  If the access right granting method is determined to be level_3, the user code of each user who has the R / W right or R right of the similar document is further shown in the “R right” field of the right policy data 6D. .

  Then, the authority policy setting unit 215 stores the generated authority policy data 6D in the authority policy storage unit 213.

  When the authority policy search unit 214 searches the authority policy data 6D indicating the file name indicated in the inquiry data 6G, but the authority policy data 6D is invalid, the authority policy update part 216 displays the authority policy data. The process of updating 6D is executed as follows.

  The authority policy update unit 216 indicates that the current date has passed the expiration date indicated in the authority policy data 6D, or the update date indicated in the authority policy data 6D is indicated in the update date data 6B. If it is before, it is determined that the authority policy data 6D is invalid. Otherwise, it is determined to be valid.

  The authority policy update unit 216 determines the user who is given the R / W right or R right by the access right granting method of any one of the level_1, level_2, and level_3 listed above.

  Then, the authority policy updating unit 216 updates the fields of the authority policy data 6D as follows. The “R / W right” field is updated to indicate the user code of the user who has decided to give the R / W right, and the user code of the user who has decided to give the R right is updated in the “R right” field. Update as shown. Further, the “expiration date” field is updated to indicate the date and time after a predetermined time (for example, four months later) from the present time, and the “update date and time” field is updated to indicate the current date and time. .

  The access right specifying unit 217 specifies the access right of the file 5 having the file name indicated in the inquiry data 6G of the user having the user code indicated in the inquiry data 6G as follows.

  When the user code is indicated in the “R / W right” of the right policy data 6D of the file 5, the access right specifying unit 217 specifies the access right of the user as the R / W right. In the case of “R right”, the access right of the user is specified as the R right. When neither “R / W right” nor “R right” is indicated, it is specified that the user does not have access right.

  The access right answering unit 218 transmits response data 6H indicating the access right specified by the access right specifying unit 217 to the document management server 1.

  In the document management server 1, when the file providing unit 103 receives the response data 6H, based on the response data 6H, the file 5 requested by the terminal device 3 (the file 5 having the file name indicated in the request data 6F) For example, it is provided to the terminal device 3 as follows.

  When the R / W right is indicated in the answer data 6H, the file providing unit 103 transmits the file 5 in an editable mode.

  In the terminal device 3, the web browser displays a document on the liquid crystal display 30 e based on the file 5. When the user performs an operation for editing the document, the content of the operation is transmitted to the document management server 1. Then, the file providing unit 103 updates the file 5 according to the content of the operation.

  Alternatively, when the R right is indicated in the answer data 6H, the file providing unit 103 transmits the file 5 in a mode in which editing is not possible (read-only mode).

  In the terminal device 3, the web browser causes the liquid crystal display 30 e to display a screen on which the document is arranged based on the file 5. No user interface is provided for editing the document.

  Alternatively, when the answer data 6H indicates that there is no access right, the file providing unit 103 transmits a message to the terminal device 3 indicating that the file 5 cannot be accessed.

  In the terminal device 3, when the web browser receives the message, the web browser displays the message on the liquid crystal display 30e.

  By the way, as described above, the authority policy setting unit 215 determines a user who gives an R / W right or an R right according to any one of level_1, level_2, and level_3. The authority policy update unit 216 determines in the same manner. Here, an example of a determination method will be described by taking as an example a case where the authority policy data 6D of a certain file 5 is generated and then the authority policy data 6D is updated.

  The authority policy setting unit 215 determines the level of the access right assignment method for the file 5 according to the importance of the file 5. The importance can be obtained based on the document indicated in the file 5. For example, the importance may be obtained according to the number or ratio of specific words (such as “secret”, “confidential”, “handling”, or “important”) included in the document. Alternatively, the importance may be defined in advance for each specific word and the importance may be obtained according to the specific word included in the file name.

  Alternatively, the authority policy setting unit 215 may determine a predetermined level (for example, level_1) regardless of the importance of the file 5.

  When the timing for updating the authority policy data 6D comes after the authority policy data 6D for the file 5 is generated, the authority policy update unit 216 determines the level of the access right granting method for the file 5 last time. Decide on a level one level higher than the previous level. For example, if the authority policy setting unit 215 has previously determined level_1, the authority policy update unit 216 determines level_2.

  Thereafter, when the timing for updating the authority policy data 6D arrives, the authority policy update unit 216 similarly advances the level of the access right granting method for the file 5 by one from the previously determined level. Decide on the level. For example, if it was previously determined to be level_2, it is determined to be level_3. However, if the highest level was previously determined, the same level is determined this time.

  As described above, the authority policy update unit 216 increases the types of users to which access rights are given every time the authority policy data 6D is updated.

  FIG. 7 is a flowchart for explaining an example of the overall processing flow in the document management server 1. FIG. 8 is a flowchart illustrating an example of the overall processing flow in the authority policy management server 21.

  Next, the overall processing flow of each of the document management server 1 and the authority policy management server 21 will be described with reference to flowcharts.

  The document management server 1 executes processing according to the procedure shown in FIG. 7 based on the file management program 10P.

  When the web page of the document storage area 10R is requested from the terminal device 3 (Yes in # 11 of FIG. 7), the document management server 1 transmits the list data 6E to the terminal device 3 (# 12).

  Alternatively, when the request data 6F is received from the terminal device 3, that is, when the file 5 is requested (Yes in # 13), the document management server 1 transmits the inquiry data 6G to the authority policy management server 21. The access right of the file 5 given to the requesting user is inquired (# 14). Then, the response data 6H is received as a response to the inquiry (# 15).

  When the response data 6H indicates that the R / W right is given as the access right (Yes in # 16), the document management server 1 provides the requested file 5 to the terminal device 3 in the edit mode. (# 17).

  Alternatively, when the answer data 6H indicates that the R right is given as the access right (No in # 16, Yes in # 18), the document management server 1 uses the terminal device in the read-only mode for the file 5 3 (# 19).

  Alternatively, when the answer data 6H indicates that there is no access right (No in # 16, No in # 18), the document management server 1 transmits a message indicating that the file 5 cannot be accessed to the terminal device 3. (# 20).

  The document management server 1 appropriately executes the above-described processing while providing the file 5 sharing service.

  The authority policy management server 21 executes processing according to the procedure shown in FIG. 8 based on the authority policy management program 21P.

  When the inquiry data 6G is received from the document management server 1 (Yes in # 31), the authority policy data 6D indicating the file name indicated in the inquiry data 6G is searched (# 32). That is, the authority policy of the file 5 with the file name is searched.

  If the authority policy data 6D is not found (No in # 33), the authority policy management server 21 generates and stores the authority policy data 6D of the file 5 (# 34).

  When the authority policy data 6D is found (Yes in # 33), the authority policy management server 21 determines whether the authority policy data 6D is valid or invalid (# 35).

  If the authority policy data 6D is invalid (No in # 36), the authority policy management server 21 updates the authority policy data 6D (# 37).

  The authority policy management server 21 specifies the access right to the file 5 of the user of the user code indicated in the inquiry data 6G (# 38). If the authority policy data 6D is generated in step # 34, the authority policy data 6D is specified based on the authority policy data 6D. When the authority policy data 6D is updated in step # 37, the authority policy data 6D is specified based on the updated authority policy data 6D. If the search of the authority policy data 6D is successful and valid in step # 32, the authority policy data 6D is specified based on the authority policy data 6D.

  Then, the authority policy management server 21 transmits data indicating the specified access right to the document management server 1 as response data 6H (# 39).

  Alternatively, when the update notification data 6C is received from the user management server 23 (Yes in # 40), the authority policy management server 21 rewrites the update date / time data 6B so that the date / time indicated in the update notification data 6C is indicated. (# 41).

  The authority policy management server 21 appropriately executes the above-described process while providing a service for responding to the access right inquiry.

  According to this embodiment, management of the access right of the file 5 based on the policy can be performed more easily than in the past. That is, when access to the file 5 is requested, the authority policy (access authority for each user) of the file 5 is newly set or updated. Therefore, even if a policy relating to security or the like is newly determined or changed, the authority policy of the file 5 may be newly set or updated at a timing when necessity arises.

  FIG. 9 to FIG. 10 are flowcharts for explaining modifications of the overall processing flow in the document management server 1.

  In the present embodiment, the authority policy management server 21 selects one of the three levels of level_1, level_2, and level_3, but one of the four or more levels of access right granting methods. May be selected. In this case, for example, the following level of access right granting method is prepared.

  (Level_1) It is determined that the R / W right of the file 5 is given to the creator.

  (Level_2) It is decided to give the creator the R / W right and the print right of the file 5, and decide to give the R right of the file 5 to the user who belongs to the same department as the creator.

  (Level_3) Determined to give the creator the R / W right, print right, and copy right for the file 5, and decided to give the file 5 R / W right to the user belonging to the same department as the creator Then, it is determined that the R right of the file 5 is given to the user having the R / W right or the R right of the similar document.

  (Level_4) It is determined that the creator is given the R / W right, print right, and copy right of the file 5, and the R / W right and print right of the file 5 are given to the user who belongs to the same department as the creator. It is determined that the file 5 is to be given, and the R / W right of the file 5 is given to the user having the R / W right of the similar document or the R right.

  The “printing right” is the right to print a document using the file 5. “Copy right” is the right to copy the file 5.

  Then, the authority policy management server 21 generates or updates the authority policy data 6D using the access right granting method at a level selected from the four levels.

  In this embodiment, the authority policy management server 21 gives the access right of the file 5 to a user who belongs to the same department as the creator, but may also give it to other types of users.

  For example, the authority policy management server 21 may grant an access right to a user whose job class is higher than that of the creator. Alternatively, for each user, a dictionary indicating keywords related to the business he / she is engaged in may be prepared in advance, and access rights may be given to users whose keywords are included in the document of the file 5.

  In this embodiment, the authority policy management server 21 grants the access right to the creator at any level. However, if the department of the creator changes, the authority policy management server 21 stops giving the access right to the creator. Also good. The change of the creator's department can be detected by the user management server 23 monitoring the creator's user data 6A.

  In the present embodiment, the authority policy management server 21 discriminates another document (similar document) similar to a certain document based on the keyword, but may discriminate based on the layout. For example, if the document layout is a two-column layout, another document having a two-column layout may be determined as a similar document.

  When the user who should be given the access right cannot be specified by the determined access right granting method, the right policy management server 21 may inquire the administrator or the creator about the user who should be given the access right. Then, an access right may be given to a user designated by the administrator or the creator.

  The authority policy management server 21 deletes the access right given to the user if the user has not accessed the file 5 for a predetermined period after giving the access right of the file 5 to the user. May be. The presence or absence of access may be determined by referring to the log.

  The access right may be deleted when the file 5 is requested. Specifically, when the authority policy management server 21 updates the authority policy data 6D of the file 5, the authority policy management server 21 determines a user who is given an access right by any one of the above-described access right granting methods. Among the determined users, a user who has been given access right to the file 5 before but has not accessed the file 5 for a predetermined period or more until now is determined. Then, the authority policy data 6D is updated by discriminating and excluding the user from the determined user.

  The authority policy management server 21 may notify the administrator or creator of the user to whom the access right is given before generating or updating the authority policy data 6D. Then, when the administrator or the creator permits, the authority policy data 6D may be generated or updated.

  In the present embodiment, a file for reproducing a document has been described as an example of the file 5, but the present invention can also be applied to a case where a file for reproducing audio or moving images is used.

  In the present embodiment, the function shown in FIG. 5 is realized by being distributed to the document management server 1, the authority policy management server 21, and the user management server 23, but may be integrated into the document management server 1.

  In this case, the file management program 10Q is stored in the ROM 10c or the large capacity storage device 10d of the document management server 1 instead of the file management program 10P.

  Then, the document management server 1 executes processing according to the procedure shown in FIGS. 9 to 10 based on the file management program 10Q.

  When requested by the terminal device 3 for a web page in the document storage area 10R (Yes in # 51 of FIG. 9), the document management server 1 transmits the list data 6E to the terminal device 3 (# 52).

  Alternatively, when the request data 6F is received from the terminal device 3 (Yes in # 53), the document management server 1 searches the authority policy data 6D indicating the file name indicated in the request data 6F (# 54).

  If the authority policy data 6D is not found (No in # 55), the document management server 1 generates and stores the authority policy data 6D of the file 5 (# 56).

  If the authority policy data 6D is found (Yes in # 55), the document management server 1 determines whether the authority policy data 6D is valid or invalid (# 57).

  If the authority policy data 6D is invalid (No in # 58), the document management server 1 updates the authority policy data 6D (# 59).

  The document management server 1 specifies the access right of the file 5 of the user of the user code indicated in the request data 6F (# 60). The authority policy data 6D used specifically is the same as the authority policy data 6D used in step # 38 of FIG.

  If the specified access right is the R / W right (Yes in # 61 in FIG. 10), the document management server 1 provides the requested file 5 to the terminal device 3 in the edit mode (# 62).

  If the identified access right is the R right (No in # 61, Yes in # 63), the document management server 1 provides the file 5 to the terminal device 3 in the read-only mode (# 64).

  If there is no access right (No in # 61, No in # 63), the document management server 1 transmits a message indicating that the file 5 cannot be accessed to the terminal device 3 (# 65).

  Alternatively, when it is detected that the user data 6A has been updated (Yes in # 66), the document management server 1 rewrites the update date / time data 6B so that the updated date / time is indicated (# 67).

  The document management server 1 appropriately executes the above-described processing while providing the file 5 sharing service.

  In addition, the document sharing system 100 and the document management server 1. The configuration of the whole or each part of the authority policy management server 21 and the user management server 23, the content of processing, the order of processing, the configuration of data, and the like can be appropriately changed in accordance with the spirit of the present invention.

100 Document sharing system (data provision system)
103 File providing section (providing means)
10R Document storage area (storage means)
21 Authority Policy Management Server (Access Rights Management Device)
215 Authority policy setting section (analysis means, setting means)
216 Authority policy update unit (update means)
5 files (data)
6D authority policy data

Claims (12)

A data providing system for providing document data stored in a storage means,
An analysis means for analyzing the content or attribute of the document related to the data when an access right of the data is not yet set when the data is requested by the user;
Setting means for setting the access right of the data based on the contents or attributes analyzed by the analyzing means;
Providing means for providing the data to the user according to the access right when the access right is set by the setting means after the data is requested by the user;
A data providing system comprising: The data can be shared by multiple users;
The setting means sets the access right for each of the plurality of users;
The data providing system according to claim 1. An update means for updating the access right based on a predetermined rule if the access right is already set when the data is requested by the user;
Have
The providing means provides the data to the user according to the updated access right when the access right is updated by the updating means after the data is requested from the user.
The data providing system according to claim 1. The data can be shared by multiple users;
The setting means sets the access right so that it is permitted to use the data only for some of the plurality of users.
The update means updates the access right so that the restriction becomes looser as the number of updates increases.
The data provision system according to claim 3. The update means updates the access right so that the number of the plurality of users allowed to use the data increases as the number of times increases.
The data provision system according to claim 4. The data is for reproducing a document,
The setting means sets the access right so that the creator of the document among the plurality of users is permitted to use the data;
The data provision system according to claim 4 or 5. The update means updates the access right so that it is permitted to use the data for a user belonging to the same department as the document creator of the plurality of users.
The data providing system according to claim 6. The updating means updates the access rights so that it is permitted to use the data for a user associated with the document of the plurality of users;
The data provision system according to claim 6 or 7. The updating means, for the users who have previously been allowed to use the data among the plurality of users but have not used the data for a predetermined period or more until now, Update the access rights so that they are not allowed to use,
The data provision system according to any one of claims 4 to 8. An access right management device that manages access rights of document data stored in a storage means,
An analysis means for analyzing the content or attribute of the document related to the data when the access right is not yet set when the user requests the data;
Setting means for setting the access right of the data based on the contents or attributes analyzed by the analyzing means;
An access right management apparatus comprising: A data providing method for providing document data stored in a storage means,
When an access right to the data is not yet set when requested by the user, the content or attribute of the document related to the data is analyzed,
Set the access right of the data based on the analyzed content or attribute,
Providing the data to the user according to the access right when the access right is set after the data is requested by the user;
A data providing method characterized by the above. A computer program used in a computer for managing access rights of document data stored in a storage means,
In the computer,
When the user requests the data, if the access right is not yet set, the analysis process to analyze the content or attribute of the document related to the data,
Setting the access right of the data based on the contents or attributes analyzed by the analysis process, causing a setting process to be executed;
A computer program characterized by the above.

Images