JP2005316528A - Electronic data providing apparatus with operation authority function, electronic data providing method with operation authority function, electronic data providing program with operation authority function, and computer-readable recording medium recording electronic data providing program with operation authority function - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enhance security of electronic data.
An information storage unit 14 and a processing unit 15 for controlling the information storage unit 14 are provided. The information storage unit 14 stores the operation authority type of the user for each element constituting the electronic data for the electronic data to be managed. Further, the processing unit 15 refers to the information storage unit 14 in response to a request from the input unit 11, and provides electronic data to the display unit 12 according to the operation authority type of the user for each element.
[Selection] Figure 1

Description

  The present invention relates to an electronic data providing apparatus, and more particularly to an electronic data providing apparatus with an operation authority function.

In addition to password authentication technology, encryption technology, digital watermark technology, and digital certificate technology, the following methods are employed as methods for ensuring the security of electronic data.
As a first method, there is a method of embedding a portion to be concealed in a document in a mask image (for example, see Patent Document 1).
As a second method, there is a method of assigning various authority for displaying and printing document data in units of elements constituting the document data (see, for example, Patent Document 2).
As a third method, there is a method of assigning various authority to display and edit a memo assigned to document data to the memo (see, for example, Patent Document 3).

Japanese Patent Laying-Open No. 2003-298732 (paragraphs 0003 to 0004, FIG. 6) JP 2001-325249 A (paragraphs 0015 to 0030, FIG. 2) JP-A-6-282545 (paragraphs 0017 to 0020, FIG. 2)

However, according to Patent Document 1, the entire document is only displayed or hidden, and the display authority cannot be assigned to each element obtained by subdividing the document. Also, other authority than display, for example, editing authority could not be assigned. Therefore, the document security was insufficient.
According to Japanese Patent Application Laid-Open No. 2004-260688, other authority than display and printing, for example, authority such as deletion cannot be assigned to the document data, and the security of the document data is insufficient.
According to Patent Document 3, since various authorities are assigned to the entire memo, the various authorities cannot be assigned to the unit of elements obtained by subdividing the memo, and the security of the memo is insufficient.

  Accordingly, the present invention has been made to solve the above-described problems, and an object of the present invention is to provide an operation authority-compatible electronic data providing apparatus, electronic data providing method, electronic data that can enhance security of electronic data. To provide a computer-readable recording medium in which a data providing program and an electronic data providing program are recorded.

  In order to solve the above-described problems, the present invention includes an information storage unit and a processing unit, and the information storage unit stores the operation authority type of the user for each element constituting the electronic data for the electronic data to be managed. To do. Then, the processing unit refers to the information storage unit in response to a request from the input unit, and provides the output unit with electronic data according to the user's operation authority type for each element.

  According to the present invention, since each element of electronic data is provided according to the operation authority type for each user, the security of the electronic data can be enhanced.

  BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, “electronic data providing apparatus with operation authority function”, “electronic data providing method with operation authority function”, “electronic data providing program with operation authority function” and “operation authority” are the best modes for carrying out the present invention. A “computer-readable recording medium recording a function-provided electronic data providing program” will be described.

[Embodiment 1]
FIG. 1 is a block diagram showing an electronic data providing apparatus with an operation authority function according to the first embodiment (hereinafter simply referred to as “electronic data providing apparatus”). Here, a case where CAD drawing data (hereinafter simply referred to as “drawings”) used for product production support is electronic data will be described as an example.

  In FIG. 1, a plurality of electronic data providing devices 10 are connected to a LAN (Local Area Network) 20. Each electronic data providing apparatus 10 is, for example, a CAD apparatus, and is installed in a product design department, a management department, a customer department, or the like.

Each electronic data providing apparatus 10 includes an input unit (input unit) 11, a display unit (output unit) 12, a communication unit 13, an information storage unit 14, and a processing unit 15 that controls them.
The input unit 11 is a pointing device such as a mouse or a keyboard. The display unit 12 is a display device such as a display. The communication unit 13 is a communication device such as an input / output interface.

The information storage unit 14 is a storage device such as a memory or a hard disk. As shown in FIG. 2A, the information storage unit 14 is associated with each item of a department d1, a user d2, and an authentication password d3.
The department d1 is information for identifying a department such as design and management. For example, a department code is used for the department d1.
The user d2 is information for identifying the user. For example, a name code is used for the user d2.
The authentication password d3 is a password used when using the electronic data providing apparatus 10.

Further, as shown in FIG. 2B, the information storage unit 14 associates items of the user d2, the figure number d4, the element d5, and the operation authority level d6 with each other.
The figure number d4 is information for specifying the drawing, and for example, “A100” or the like is used for the figure number d4.
The element d5 is an element such as a circuit, a diagram, a character string, or the like constituting the drawing. Here, a layer number is used as the element d5. This is because each element such as a circuit is created for each layer.
The operation authority level d6 is a pattern formed by combining operation authority types such as copying, and for example, a class such as level C is used as the operation authority level d6.

Furthermore, as shown in FIG. 2C, the information authority 14 is associated with the operation authority level d6 and the operation authority type d7. The operation authority type d7 indicates the type of operation authority. The operation authority type d7 includes, for example, types such as copy, delete, move, print, display, and move. In other words, operations other than the types indicated in the operation authority type d7 are prohibited matters. For example, since the operation authority level d6 of level A shown in FIG. 2C includes two types of copying and movement as the operation authority type d7, in level A, operations other than the two types, for example, display Is a prohibited matter.
As a method for prohibiting printing, for example, there is a method in which an electronic filter is set to the corresponding element d5 so that the element d5 is not printed.

  Further, the information storage unit 14 stores the drawing of the drawing number d4 shown in FIG.

  Returning to FIG. The processing unit 15 is a CPU, for example, and has the following functions. That is, the processing unit 15 includes an authority setting function 151, a password setting function 152, a password verification function 153, an authority extraction function 154, a document provision function 155, and an authority release function 156. These functions 151 to 156 will be described later.

Next, operation | movement of the electronic data provision apparatus 10 is demonstrated based on drawing. The electronic data providing apparatus 10 operates according to an electronic data providing program with an operation authority function recorded on a recording medium such as a CD-ROM.
[Operation authority level d6 setting process]
First, the operation authority level d6 setting process will be described with reference to FIGS. Here, a designer with a design unit operates the input unit 11 of the electronic data providing apparatus 10 to, for example, each element d5 included in the drawing on the display screen d100 shown in FIG. An example in which the operation authority level d6 is sequentially set in the electric circuit A10 and the comment A20 in the comment (character string) A20 and the chart A30 will be described as an example.

FIG. 4 is a diagram showing a processing procedure of the processing unit 15 of the electronic data providing apparatus 10 and a processing procedure related to setting of the operation authority level d6.
First, the designer operates the input unit 11 and inputs, for example, the figure number d4 of the drawing shown in FIG.
Then, the processing unit 15 registers the figure number d4 input by the input unit 11 in the information storage unit 14 and specifies the drawing shown in FIG. 3 (S101).

Subsequently, the designer operates the input unit 11 to input the layer number of the layer to which the electric circuit A10 illustrated in FIG. 3 belongs.
Then, the processing unit 15 registers the electric circuit A10 belonging to the layer number input by the input unit 11 in the information storage unit 14 in association with the drawing number d4 of the drawing specified in S101, and displays the drawing shown in FIG. The electric circuit A10 that is the element d5 is specified (S102). In this way, the designer determines the element d5 that restricts the operation to a third party.

Next, the processing unit 15 displays a display screen d200 including the operation authority setting function button B10 shown in FIG.
When the designer clicks the operation authority setting function button B10 shown in FIG. 5 using the input unit 11, the processing unit 15 pops up the operation authority setting screen d300 shown in FIG.
Then, the designer operates the input unit 11 to set the operation authority level (here, level A) d6 and the users (here, all local workers) d2 on the operation authority setting screen d300 shown in FIG. Select sequentially. In FIG. 5, as a method for selecting the operation authority level d6 and the user d2, for example, a method of selecting an arbitrary item from a pull-down menu is adopted.
Then, the designer clicks the setting button B30 on the operation authority setting screen d300 shown in FIG.

  Then, the processing unit 15 first associates the operation authority level d6 selected by the input unit 11 with the drawing number d4 and the electric circuit A10 specified in S101 and S102, and the information storage unit 14 (FIG. 2B). )) (S103: This is called “authority setting function 151” shown in FIG. 1).

  Next, the processing unit 15 associates the user d2 selected by the input unit 11 with the drawing number d4 and the electric circuit A10 specified in S101 and S102, and with the operation authority level d6 set in S103. The information storage unit 14 (see FIG. 2B) is set (S104). In this way, the designer assigns the operation authority level d6 for the specific element d5 to the specific user d2 through various user interfaces (display screens).

Thereafter, the designer operates the input unit 11 and further inputs the layer number of the layer to which the comment A20 in the drawing shown in FIG. 3 belongs.
Then, the processing unit 15 determines that all the elements d5 are not designated (in the case of “NO” in S105), and is a diagram in which the comment A20 belonging to the layer number input by the input unit 11 is identified in S101. The comment A20, which is registered in the information storage unit 14 in association with the number d4 and is the element d5 in the drawing shown in FIG. 3, is specified (S102). In this way, the designer adds an element d5 that restricts the operation to a third party.

After that, the designer uses the input unit 11 to select an operation authority level (here, level B including viewing prohibition) d6 and a user (here, a certain designer, all administrators, all customers d2). To do.
Then, the processing unit 15 sets the operation authority level d6 selected by the input unit 11 in the information storage unit 14 (S103), and sets the user d2 selected by the input unit 11 in the information storage unit 14 ( S104). To describe S103 and S104 in detail, the processing unit 15 associates the operation authority level d6 selected by the input unit 11 and the user d2 with the figure number d4 and the comment A20 of the drawings identified in S101 and S102, and performs information. It sets to the memory | storage part 14 (refer FIG.2 (b)). In this way, the designer also assigns the operation authority level d6 to the specific user d2 for the comment A20 in the drawing shown in FIG. Then, the designer finishes specifying the drawing element d5.

  Then, the processing unit 15 determines that the designation of all the elements d5 has been completed (in the case of “YES” in S105), and temporarily sets the authentication passwords d3 for all the users d2 set in S104. The authentication password d3 of the temporarily set user d2 is displayed on the authentication password confirmation screen d400 shown in FIG. The authentication password d3 may be input by the designer, or may be automatically set by the processing unit 15.

Then, the designer clicks the setting button B40 on the authentication password confirmation screen d400 shown in FIG.
Then, the processing unit 15 determines the authentication password d3 for the temporarily set user d2, and sets the determined authentication password d3 for the user d2 in the information storage unit 14 (see FIG. 2A) (see FIG. 2A). S106: This is called “password setting function 152” shown in FIG. Thus, the processing unit 15 ends the predetermined process. The authentication password d3 is notified to each user by a contact means such as e-mail.

In this way, the processing unit 15 sets the operation authority type d7 of the user d2 included in the operation authority level d6 for each element d5 constituting the drawing in response to a request from the input unit 11. For this reason, a user such as a designer can determine the security level for each element d5 for each user according to the importance of each element d5 viewed from his / her own standpoint.
For example, the designer can impose the following restrictions on all the local workers by assigning the operation authority level A to all the local workers for the electric circuit A10 in the drawing shown in FIG. That is, copying and moving are permitted, but other operations such as display and change are prohibited.
Further, for example, the designer assigns an authority level B (a level for which display is prohibited here) to a certain designer, all managers, and all customers for the comment A20 in the drawing shown in FIG. These users can be prohibited from browsing the comment A20 shown in FIG.

  In addition, after the process of S106, the electronic data provision apparatuses 10 perform the matching process of the data of each information storage part 14. FIG.

[Process for providing drawings]
Next, processing relating to provision of the drawing shown in FIG. 3 will be described with reference to FIGS.
FIG. 7 is a diagram illustrating a processing procedure of the processing unit 15 of the electronic data providing apparatus 10 and a processing procedure related to provision of a drawing. Here, the customer (a user who is prohibited from viewing the comment A20 in the drawing shown in FIG. 3) operates the input unit 11 of the electronic data providing apparatus 10 and browses the drawing shown in FIG. This will be described as an example.

First, the customer operates the input unit 11 and inputs, for example, the figure number d4 of the drawing shown in FIG.
Then, the processing unit 15 reads the figure number d4 input by the input unit 11 from the information storage unit 14, and specifies the drawing of the drawing number d4, that is, the drawing of FIG. 3 (S201).

  Then, the customer operates the input unit 11 to display the authentication password d3 (here, the authentication password d3 assigned to the customer in S106 of FIG. 4) and the customer on the display screen d500 shown in FIG. The user d2 is input. Then, the customer uses the input unit 11 to click the execution button B50 on the display screen d500 shown in FIG.

  Then, the processing unit 15 receives the authentication password d3 associated with the user d2 input by the input unit 11 (S202), refers to the information storage unit 14 (FIG. 2A), and the authentication password The verification of d3 is performed (S203: this is called “password verification function 153” shown in FIG. 1).

  As a result of the authentication processing in S203, when the authentication password d3 in the information storage unit 14 matches the authentication password d3 of the user d2 received in S202 (in the case of “YES” in S204), the processing unit 15 With reference to the information storage unit 14 (FIGS. 2A and 2B), the operation authority level (level B that prohibits display etc.) d6 of the user d2 whose authentication password d3 matches is specified in S201. The elements in the drawing of FIG. 3 (here, only the comment A20 in FIG. 3) are extracted for each d5 (S205: this is called the “authority extraction function 154” shown in FIG. 1).

  Next, the processing unit 15 reads the drawing of FIG. 3 specified in S201 from the information storage unit 14, and provides the drawing of FIG. 3 according to the operation authority level d6 extracted in S205 (S206: FIG. 1). (Referred to as “document providing function 155”). Specifically, when providing the drawing of FIG. 3, the processing unit 15 removes the comment A20 that is the element d5 extracted in S205 out of the electric circuit A10, the comment A20, and the chart A30 included in the drawing of FIG. 3. Display (corresponding to the operation authority level B prohibiting display) is provided to the display unit 12.

  FIG. 9 shows a display screen d600 provided by the processing unit 15 and showing the drawing of FIG. According to the display screen d600 shown in FIG. 9, the electric circuit A10 and the chart A30 in the drawing shown in FIG. 3 are displayed, but the comment A20 in the drawing shown in FIG. It is displayed. Thereby, the customer cannot browse only the comment A20 of the drawing shown in FIG. Accordingly, the drawing shown in FIG. 3 is provided to the customer according to the operation authority level d6 assigned to the designer, and the security of the drawing is ensured for the customer.

  From the above, by setting the operation authority level d6 for every user d2 and for each element d5 of the drawing, the security of the drawing, which is electronic data, is enhanced as compared with the conventional case. For example, the user cannot view or tamper with an element d5 in the drawing. Further, for example, the user cannot perform printing, moving, deleting, or other operations on an element d5 in the drawing.

[Processing for Canceling Operation Authority Level d6]
Next, processing related to the release of the operation authority level d6 will be described with reference to FIG.
For example, a designer or administrator user operates the input unit 11 to input a release password assigned in advance. Note that the cancellation password is a password for canceling the operation authority type d7 of the user d2.
Then, the processing unit 15 receives the release password and permits the operation authority type d7 of the user d2 to be released from the information storage unit 14. As a result, the designer or administrator user operates the input unit 11, for example, the operation authority type of the specific user (for example, field worker) d2 set in the information storage unit 14 (for example, D7 can be deleted.

[Embodiment 2]
Next, an electronic data providing apparatus according to Embodiment 2 will be described with reference to the drawings. In addition, about the same part as Embodiment 1, the same code | symbol as the case of Embodiment 1 is attached | subjected, and the duplication description is abbreviate | omitted.
FIG. 10 is a block diagram showing an overall system configuration including the electronic data providing apparatus according to the second embodiment. Here, a case where web document data (hereinafter simply referred to as “document”) is electronic data will be described as an example. However, as in the first embodiment, the drawing may be electronic data.

In FIG. 10, the electronic data providing apparatus 10 </ b> A is connected to a plurality of user terminals (input means and output means) 40 via the communication network 30.
The electronic data providing apparatus 10A includes a communication unit 13, an information storage unit 14A, and a processing unit (CPU) 15A. However, the following points are different from the electronic data providing apparatus 10 according to the first embodiment described above. This point will be described.
A usage fee calculation function 157 and a usage fee billing function 158 are added to the processing unit 15A (detailed in FIG. 10 described later).
The information storage unit 14A stores an association between the user d2 and the authentication password d3 instead of the association between the department d1, the user d2, and the authentication password d3 shown in FIG. In addition, in this information storage unit 14A, instead of the association of the user d2, the figure number d4, the element d5, and the operation authority level d6 shown in FIG. 2B, a user (here, each user) is stored. The association of the user 40 for the user 40) d2, the document number (for specifying the document), the element (here, the character in the document specified by the tag) d5 and the operation authority level d6 is stored.

  Each user terminal 40 is a personal computer, for example, and is installed in a company, a private house, or the like.

Next, processing related to the provision of the document will be described with reference to FIG.
FIG. 11 is a diagram showing a processing procedure of the electronic data providing apparatus 10A and the user terminal 40 and a processing procedure related to document provision. Here, it is assumed that the association instead of the above-described FIGS. 2A and 2B, the association of FIG. 2C and the document are registered in advance in the information storage unit 14A of the electronic data providing apparatus 10A. explain.

For example, a certain user operates the user terminal 40 to access the electronic data providing apparatus 10A, and transmits a specific document number to the electronic data providing apparatus 10A via the communication network 30.
Then, in S301, the processing unit 15A of the electronic data providing apparatus 10A specifies the document (here, a book) having the transmitted document number.

  Next, in S <b> 302, the processing unit 15 </ b> A requests the user terminal 40 to transmit the authentication password d <b> 3 via the communication network 30.

  Then, the processing unit 15A accepts the requested authentication password d3 from the user terminal 40 in association with the user d2 via the communication network 30 (S303).

  Then, the processing unit 15A, when the received authentication password d3 of the user d2 matches the authentication password d3 of the information storage unit 14A, the operation authority of the user d2 associated with the matched authentication password d3. The level (for example, the level for prohibiting display) d6 is extracted from the information storage unit 14A for each element of the document specified in S301 (for example, only the character string of the document specified by the tag) (S304).

Next, the processing unit 15A calculates the usage fee with reference to the usage fee calculation condition (the fixed amount is set here) stored in the predetermined area of the information storage unit 14A (S305: This is shown in FIG. 10). (Referred to as “use fee calculation function 157”).
Then, the processing unit 15A transmits the usage fee calculated in S306 to the user terminal 40 via the communication network 30, and charges the user for the usage fee (S306: This is illustrated in FIG. Called the usage fee billing function 158 ”).

  Next, the processing unit 15A reads the document specified in S301 from the information storage unit 14A, and provides the document according to the operation authority level d6 extracted in S304 (S307). More specifically, the processing unit 15A sets an electronic filter (corresponding to the operation authority level d6) to the character string that is an element of the document extracted in S304, and the user specifies the document specified in S301. To the terminal 40 for use. As a result, the user cannot browse only a certain character string included in the document. Therefore, it is possible to provide a document providing service (business) while maintaining the security of the important element d5 in the document.

  In the first and second embodiments, encryption technology and electronic certificate technology may be used in combination. As a result, the security of the drawing or document can be further enhanced.

  In the first embodiment described above, the case where the drawing is the electronic data has been described. However, as in the case of the second embodiment, the document may be the electronic data.

It is a block diagram which shows the structure of the electronic data provision apparatus which concerns on Embodiment 1 of this invention. It is a figure which shows the data structure of the information storage part of FIG. It is explanatory drawing which shows an example of drawing displayed on the display part of FIG. It is a process procedure of the electronic data provision apparatus of FIG. 1, Comprising: It is a figure which shows the process procedure regarding the setting of an operation authority level. It is a figure which shows an example of the operation authority setting screen displayed on the display part of FIG. It is a figure which shows an example of the password confirmation screen for authentication displayed on the display part of FIG. It is a process sequence of the electronic data provision apparatus of FIG. 1, Comprising: It is a figure which shows the process sequence regarding provision of drawing. It is a figure which shows an example of the user input screen displayed on the display part of FIG. It is a figure which shows an example of drawing provided to the display part by the process part of FIG. It is a block diagram which shows the structure of the whole system containing the electronic data provision apparatus which concerns on Embodiment 2. FIG. FIG. 11 is a diagram illustrating a processing procedure related to document provision, which is a processing procedure of the electronic data providing apparatus and the user terminal in FIG. 10.

Explanation of symbols

10, 10A Electronic data providing device 15, 15A Processing unit 30 Communication network 40 User terminal

Claims (8)

For electronic data to be managed, an information storage unit that stores a user's operation authority type for each element constituting the electronic data;
A processing unit that refers to the information storage unit in response to a request from the input unit, and provides the output unit with the electronic data according to the type of operation authority of the user for each element. An electronic data providing apparatus with an operation authority function as a feature. The processor is
The electronic device with operation authority function according to claim 1, wherein the operation authority type of the user is set in the information storage unit for each element constituting the electronic data in response to a request from the input means. Data provision device. The processor is
Permitting the user's operation authority type to be released from the information storage unit on condition that a password for releasing the user's operation authority type is received from the input means. The electronic data providing apparatus with an operation authority function according to claim 1. An electronic device with an operation authority function, comprising an information storage unit and a processing unit that controls the information storage unit, wherein the information storage unit stores an operation authority type of a user for each element constituting the electronic data with respect to electronic data to be managed An electronic data providing method with an operation authority function of a data providing device,
The processor is
Receiving a request from the input means;
In response to the request, the information storage unit is referred to, and the electronic data is provided to the output unit according to the operation authority type of the user for each element of the electronic data. Electronic data provision method with functions. The processing unit further includes:
5. The operation authority according to claim 4, further comprising a step of setting an operation authority type of the user in the information storage unit for each element constituting the electronic data in response to a request from the input means. Electronic data provision method with functions. The processing unit further includes:
Permitting the user to release the operation authority type of the user from the information storage unit on the condition that a password for canceling the operation authority type of the user has been received from the input means. The electronic data providing method with an operation authority function according to claim 4.   The electronic data provision program with an operation authority function for making a computer perform the electronic data provision method with an operation authority function of any one of Claims 4 thru | or 6.   The computer-readable recording medium which recorded the electronic data provision program with the operation authority function for making a computer perform the electronic data provision method with the operation authority function of any one of Claims 4 thru | or 6.

Images