JP2008250412A - Electronic document management device, computer program - Google Patents

Abstract

An electronic document management apparatus for distributing necessary document information while maintaining confidentiality is provided.
An apparatus for pasting document information from a first electronic document to a second electronic document each including document information and a header in which a confidentiality level indicating the confidentiality of the document information is set. This apparatus stores the document information of the first electronic document together with the security level set for the first electronic document together with the file protection clipboard 26 and the security level and file protection clipboard 26 set for the second electronic document. Compared with the stored confidential level, if the former confidential level is higher than the latter confidential level, the document information stored in the file protection clipboard 26 can be pasted to the second electronic document. And a document editing unit 23 that additionally writes the pasting position of the document information in the second electronic document and the confidential level stored in the file protection clipboard 26 to the header of the second electronic document.
[Selection] Figure 2

Description

  The present invention prevents leakage of document information due to an electronic document (hereinafter referred to as “electronic document”) having information (hereinafter referred to as “document information”) represented by characters, images, and the like. Regarding technology.

  An enterprise may set and manage a confidentiality level representing high confidentiality in a document in order to maintain confidentiality. For example, the confidential level “1”, the confidential level “2”,... (In this specification, it is assumed that the larger the confidential level number, the higher the confidentiality and the limited users who can use the document). Confidentiality is maintained by setting the confidentiality level and handling according to the confidentiality level. If the document is a paper medium, for example, it is classified for each security level, and confidentiality is maintained by managing the document in a library or the like. In the case of an electronic document, confidentiality is maintained by managing the electronic document separately for each security level, for example, on a medium on which the electronic document is recorded, a recording location (folder, or the like). When document information leaks, the electronic document spreads faster and more widely than a paper medium document, so special attention must be paid to maintaining confidentiality.

In an electronic document, document information can be copied to another electronic document. This raises a problem in maintaining the confidentiality of electronic documents. For example, when copying document information of an electronic document with a high confidentiality level to an electronic document with a low confidentiality level, a user who cannot inherently browse an electronic document with a high confidentiality level through an electronic document with a low confidentiality level, The document information may be browsed. For example, when the user A is permitted to view the electronic documents with the security levels “1” and “2”, and the user B is permitted to view only the electronic document with the security level “1”, the user A has the security level. A part of the document information of the electronic document 2 is copied to the electronic document of the confidential level 1. Since the user B can browse the electronic document of the confidential level 1, the user B can browse the document information of the electronic document of the confidential level 2 copied to the electronic document of the confidential level 1.
For example, techniques disclosed in Patent Documents 1 and 2 have been proposed to deal with the problem of maintaining confidentiality of electronic documents by copying such document information.
JP 2006-155155 A JP 2006-318370 A

  In Patent Document 1, when the document information of an encrypted electronic document in a protection target folder is copied to another unencrypted electronic document that is not a protection target, the same encryption as that of the copy source electronic document is performed. Has also been proposed for a technique for preventing leakage of document information by performing the process on an electronic document as a copy destination.

  In Patent Document 2, a usage rule (for example, a rule that can be edited only by managers and that it can be viewed only by the person in charge A) is defined for each electronic document, and a technique for managing the rules by a usage right management server is proposed. . When the document information of the copy source electronic document is copied to another electronic document, the electronic document is protected by adding the copy source electronic document use rule to the copy destination electronic document use rule. . For example, the document information of the copy source electronic document whose usage agreement is “viewable only for managers” is pasted on the electronic document of the copy destination whose usage agreement is “viewable only for A person in charge”. Then, the usage rule for the copy source electronic document is added to the usage rule for the copy destination electronic document, and the user who can view the copy destination electronic document becomes “A person in charge and manager”.

  However, another problem may occur when document information is copied to another electronic document from an electronic document in which document information is copied from another electronic document. For example, first, document information of an electronic document with a confidential level “1” is copied to an electronic document with a confidential level “3”. Next, the document information including the portion where the electronic document of the confidential level “1” of the electronic document of the confidential level 3 is pasted is copied to the electronic document of the confidential level “2”. Originally, copying of document information from an electronic document with a security level “3” to an electronic document with a security level “2” should be prohibited. In this case, the original security level is included in a part of the document information to be copied. The document information that was “1” is included. In order to activate the distribution of the document information, it is better to permit the copy of the document information originally having the confidential level “1” to the electronic document having the confidential level “2”.

  Patent Documents 1 and 2 cannot deal with such a case. This is because Patent Documents 1 and 2 each consider the confidentiality of the electronic document unit, but do not consider the confidentiality of the document information unit described in the electronic document.

  An object of the present invention is to provide an electronic document management technique that can distribute necessary document information while keeping the risk of information leakage low.

  An electronic document management apparatus according to the present invention for solving the above-described problems is provided with a first electronic document and a second electronic document each including document information and a header in which a confidential level indicating the confidentiality of the document information is set. Acquisition means for acquiring an electronic document, storage means for storing document information included in the acquired first electronic document together with the security level set in the header of the first electronic document, and the acquired second electronic document The confidential level set in the header of the document is compared with the confidential level stored in the storage means, and if the former confidential level is higher than the latter confidential level, the document information stored in the storage means The second electronic document can be pasted on the second electronic document, and the position where the document information is pasted on the second electronic document and the confidential level stored in the storage means are set. Comprising comprising an editing means for additionally written to the header, the.

In the present invention, when the confidential level is set for each electronic document and the document information is pasted to another electronic document by copying or the like between the electronic documents, first, the confidential level of the second electronic document to be copied is set. And the confidential level of the first electronic document of the copy source. As a result of the comparison, pasting is permitted when the confidential level of the second electronic document is equal to or higher than the confidential level of the first electronic document. For this reason, document information with a high security level is not leaked by being pasted on an electronic document with a low security level.
In the present invention, the confidential level of the pasted document information is also retained in the copy-destination second electronic document. That is, document information can be distributed at the original confidential level. Therefore, when the copied document information is further pasted on another electronic document, it is possible to compare the confidential levels of the document information units. As a result, when copying is performed a plurality of times, it is possible to activate the distribution of document information without prohibiting copying more than necessary.

In such an electronic document management apparatus of the present invention, for example, the first electronic document includes a plurality of pieces of document information, and the security level is set for each piece of document information. For example, when document information is pasted from another electronic document, the confidential level set in the pasted document information is added to the header of the first electronic document as a pasting history, so that one Multiple security levels are set for the electronic document.
In such a case, the storage unit stores each of the plurality of document information in association with a confidential level of the document information, and the editing unit stores the first information among the plurality of document information. (2) Document information in which a security level lower than the security level set for the electronic document is set is extracted from the storage means, and the extracted document information can be pasted. Since all the confidential levels of the plurality of document information and the confidential level of the second electronic document are compared to determine whether or not the pasting is possible, the document information with a high confidential level is originally pasted to the electronic document with a low confidential level. Nothing will happen.

  Moreover, in such an electronic document management apparatus of the present invention, the storage means stores a first storage area for storing the document information to be pasted among the plurality of document information, and the first storage area. A second storage area for storing, in association with the stored document information, the document information determined to be pastable to the second electronic document and the confidential level set in the document information; May be configured. In this case, for example, when the document information to be pasted is stored in the first storage area, the editing unit starts comparing the confidential level of the document information with the confidential level of the second electronic document. When the document information is stored in the second storage area, the document information is deleted from the first storage area and the second electronic document can be read from the second storage area. .

  A computer program according to the present invention provides a computer including an information recording apparatus, a first electronic document and a first electronic document each including document information and a header in which a confidential level indicating the confidentiality of the document information is set. 2 acquisition means for acquiring an electronic document, storage means for storing document information included in the acquired first electronic document in the information recording apparatus together with the security level set in a header of the first electronic document, the acquired The security level set in the header of the second electronic document is compared with the security level stored in the information recording device, and when the former security level is higher than the latter security level, the security level is stored in the information recording device. The pasted document information can be pasted to the second electronic document, the pasting position of the document information in the second electronic document, and the information recording Editing means additionally writes security level stored in the location to the header of the second electronic document, to function as a computer program.

  According to the present invention as described above, the original confidentiality level can be known even in the document information pasted on other electronic documents. Therefore, necessary document information is maintained while keeping the risk of information leakage low. Can be distributed.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

FIG. 1 is a hardware configuration diagram of an information processing apparatus 1 for realizing an electronic document management apparatus according to the present invention. The information processing apparatus 1 can be realized by, for example, a general-purpose personal computer.
The information processing apparatus 1 includes a CPU (Central Processing Unit) 10, a main memory 11, a ROM (Read Only Memory) 12, a mass storage device 13, a NIC (Network Interface Card) 14, and an I / O (Input / Output) interface 15. , And the media drive 16 are connected to the bus B, respectively.

At startup, the CPU 10 reads and executes a boot program from the ROM 12 and reads and executes an operating system from the mass storage device. Moreover, while controlling operation | movement of each component in the information processing apparatus 1, the various processes by a predetermined program are performed.
The main memory 11 is a RAM (Random Access Memory) for storing data and programs when various processes are executed by the CPU 10. The ROM 12 stores various programs and data used for the operation of the information processing apparatus 1 in addition to the boot program.

  The mass storage device 13 is an HDD (Hard Disk Drive), for example, and stores a program for managing the electronic document of the present invention, an electronic document, and various data in addition to the operating system. .

  The NIC 14 is used for transmitting / receiving data, programs, and the like to / from an external device (not shown) such as another similar information processing device or network disk via a network (LAN (Local Area Network), the Internet, etc.) not shown. It is a device that controls the interface. The NIC 14 can transmit / receive an electronic document to / from an external device.

  The I / O interface 15 performs interface control between the input device 2 and the output device 3 connected to the information processing device 1. The input device 2 is, for example, a general-purpose keyboard or mouse. The output device 3 is a general-purpose display, a printer, or the like.

  The media drive 16 is a device for reading / writing data, programs, and the like from various media such as a flexible disk, a compact disk, and a DVD. An electronic document can be acquired by the media drive 16.

In the information processing apparatus 1 configured as described above, the CPU 10 reads and executes a predetermined program from the mass storage device 13, the medium, the external device, etc. A document editing unit 23 having a unit 21, an output unit 22, a monitoring unit 27, a comparison unit 28, and an extraction unit 29, a storage unit 24, a clipboard unit 25, and a file protection clipboard unit 26 are formed.
The information processing apparatus 1 in which such functional blocks are formed can edit an electronic document. In particular, such an information processing apparatus 1 prevents document information from leaking by including the pasting history in a predetermined electronic document when the document information is pasted from another electronic document. Can be planned.

FIG. 3 is an example of an electronic document edited by the information processing apparatus 1 using these functional blocks. The electronic document includes document information such as characters and images that are output to the output device 3, and an electronic document header in which the confidential level and pasting history of the electronic document are written. The electronic document header is usually a portion that is not output by the output device 3. The pasting history includes the position of document information pasted from another electronic document and the security level of the pasted document information.
In FIG. 3, the security level of the electronic document is set in the electronic document header between <Level></Level>. The security level of the electronic document in FIG. 3 is “3”. This security level is appropriately assigned by the user who created the electronic document. Also, a pasting history relating to document information pasted from another electronic document is recorded between <History></History>. In the example of FIG. 3, document information is pasted twice from another electronic document (<Part1></Part1>,<Part2></Part2>). In the pasting history, the pasting position of pasted document information and the confidential level of the document information are recorded. At the time of pasting for the first time, the document information from the electronic document with the security level “1” becomes <Start></Start> and <End></, as shown between <Level></Level>. As shown between End>, it is pasted from 35 bytes to 40 bytes. Similarly, at the time of pasting for the second time, the document information from the electronic document of the confidential level “2” is pasted from 82 bytes to 98 bytes.

Returning to the description of FIG. The input unit 21 accepts various operations input by the user from the input device 2 when editing an electronic document. By inputting from the input device 2, an electronic document to be edited can be acquired, and editing and saving such as copying and pasting document information can be performed.
The output unit 22 causes the output device 3 to output document information of the electronic document being edited. The user can edit the electronic document while viewing the document information of the electronic document output to the output device 3.

The document editing unit 23 acquires, edits, and stores an electronic document to be edited in response to various operations from the input device 2 received by the input unit 21. When an electronic document to be edited is instructed to be read, the document editing unit 23 acquires the electronic document to be edited from, for example, the mass storage device 13 and stores it in the storage unit 24. Editing by the document editing unit 23 is performed on the electronic document stored in the storage unit 24. When editing is completed, the original electronic document stored in the mass storage device 13 is updated to the edited electronic document stored in the storage unit 24, and the edited electronic document is deleted from the storage unit 24. The electronic document may be acquired from an external device via the NIC 14 in addition to being acquired from the mass storage device 13, or may be acquired from a medium by the media drive 16.
The monitoring unit 27, the comparison unit 28, and the extraction unit 29 included in the document editing unit 23 copy or move document information from one of the two electronic documents to the other (so-called copy and paste, cut and paste. This is used together with the clipboard unit 25 and the file protection clipboard 26 when called “copy”.

The clipboard unit 25 is used when the electronic document is edited by the document editing unit 23, and is a storage device for temporarily storing document information to be copied in the electronic document.
Similar to the clipboard unit 25, the file protection clipboard unit 26 is used when the electronic document is edited by the document editing unit 23, and is a storage device for temporarily storing document information to be copied in the electronic document and its security level.
The clipboard unit 25 is normally prepared by an OS (Operating System) and does not have a function necessary for the present invention. In order to realize the present invention, a file protection clipboard 26 is used. As will be described later, in this embodiment, the document information is temporarily saved in the clipboard unit 25 and then saved again in the file protection clipboard 26. However, the document information is directly saved in the file protection clipboard 26 without using the clipboard unit 25. You may make it preserve | save. In this case, the clipboard unit 25 is not essential.
The storage unit 24, the clipboard unit 24, and the file protection clipboard unit 25 are formed, for example, by securing a storage area having a predetermined capacity on the main memory 11, for example.

The monitoring unit 27 monitors the clipboard unit 25 and the file protection clipboard 26. When the document information is copied from the electronic document to the clipboard unit 25, the monitoring unit 27 acquires the confidential level of the copy source electronic document, and combines the document information copied to the clipboard unit 25 with the confidential level. The file is saved in the file protection clipboard unit 26. At this time, the document information copied to the clipboard unit 25 is deleted.
In addition, the monitoring unit 27 acquires the confidential level of the copy destination electronic document when the document information of the file protection clipboard unit 26 is pasted on the copy destination electronic document.

The comparison unit 28 compares the security level of the copy source electronic document with the security level of the copy destination electronic document to determine whether copying is permitted. For example, copying is permitted when the confidential level of the copy destination electronic document is equal to or higher than the confidential level of the copy source electronic document. This is because in this case, leakage of document information can be prevented.
The extraction unit 29 extracts only document information that can be pasted from the file protection clipboard unit 26 based on the result determined by the comparison unit 28.

An operation of copying document information between electronic documents by the information processing apparatus 1 having such a configuration will be described with reference to FIGS.
FIG. 4 is a processing flowchart when at least a part of document information is copied from one of two electronic documents to the other. Prior to the start of the processing of FIG. 4, these two electronic documents are stored in the storage unit 24 of the information processing apparatus 1 and are in an editable state. The electronic document is acquired from an external device by the mass storage device 13, media mounted in the media drive 16, or the NIC 14. In the following description, an electronic document that is a copy source is a first electronic document, and an electronic document that is a copy destination is a second electronic document. FIG. 5 schematically shows the movement of the document information and the secret level among the storage unit 24, the clipboard unit 25, and the file protection clipboard 26 when the document information is copied from the first electronic document to the second electronic document. FIG.

  When the input device 2 inputs an instruction to copy the document information of the first electronic document to the second electronic document, the document editing unit 23 saves the document information of the first electronic document in the clipboard unit 25 (step) S10). Next, the monitoring unit 27 acquires the confidential level of the first electronic document from the electronic document header of the first electronic document. The monitoring unit 27 sets the acquired confidential level and the document information stored in the clipboard unit 26 as a set, and stores them in the file protection clipboard unit 26 (step S20). At this time, the document information previously stored in the clipboard unit 25 is deleted. When the document information to be copied includes not the document information originally included in the first electronic document but the added document information, the monitoring unit 27 acquires the security level of the part from the pasting history. Since the position and the confidential level of the added document information are recorded in the pasting history, the monitoring unit 27 stores the confidential level and the document information stored in the clipboard unit 26 as a set in the file protection clipboard 26. When doing this, check the pasting history.

  In the example of FIG. 5, the confidential level of the first electronic document is “3”, and the confidential levels of the added document information are “1” and “2”. When the document information to be copied includes at least a part of 35 bytes to 40 bytes of the first electronic document, the confidential level “1” is paired with the document information stored in the clipboard unit 26 and the file protection clipboard. Stored in the unit 26. When the document information to be copied includes at least a part of 82 bytes to 98 bytes of the first electronic document, the confidential level “2” is paired with the document information stored in the clipboard unit 26 and the file protection clipboard. Stored in the unit 26. That is, in the example of FIG. 5, the confidentiality level paired with the document information stored in the clipboard unit 26 is at least one of “1”, “2”, and “3” according to the position of the document information to be copied. Including one. FIG. 6A to FIG. 6F are exemplary diagrams of a set of confidential level and document information that may be stored in the file protection clipboard unit 26 by the first electronic document of FIG.

  The monitoring unit 27 acquires the confidential level of the second electronic document from the electronic document header of the second electronic document (step S30). The comparison unit 28 compares the security level stored in the file protection clipboard unit 26 with the security level of the second electronic document acquired in step S30 (step S40). When a plurality of security levels are stored in the file protection clipboard unit 26, each security level is compared with the security level of the second electronic document. It is determined whether the document information can be pasted on the second electronic document according to the comparison result. As a result of the determination, if there is no document information that can be pasted, the process ends.

  In the example of FIG. 5, since the confidential level of the second electronic document is “2”, document information having a confidential level of “2” or lower can be pasted. Since the first electronic document has a confidentiality level “3” and the document information added by editing is the confidentiality level “1” or “2”, only the added document information can be pasted to the second electronic document. It is.

  The extraction unit 29 extracts the document information to be pasted on the second electronic document from the file protection clipboard 26 according to the comparison result by the comparison unit 28 (step S50). The document editing unit 23 pastes the document information extracted by the extraction unit 29 at a predetermined position of the second electronic document designated by the input device 2 (step S60). Next, the document editing unit 23 updates the pasting history of the electronic document header of the second electronic document. In the pasting history, the position where the document information is pasted and the confidential level of the document information are recorded (step S70).

  FIG. 7 is an exemplary view of the second electronic document to which the document information is pasted in this way. In this example, it can be seen from the pasting history that the document information of the confidential level “1” is pasted at 110 bytes to 115 bytes of the second electronic document.

  In the above description, the copy operation has been described. However, the present invention can be applied to other operations such as cut and paste in addition to the copy operation as long as the document information is conventionally transferred via the clipboard. Is possible. Further, it is not always necessary to provide two clipboards like the clipboard unit 25 and the file protection clipboard unit 26, and two areas of one clipboard may be used.

In this way, by adding the pasting information including the pasting position of the pasted document information and its security level to the electronic document, it is possible to know what type of security information exists in which part of the electronic document. It is like that. Therefore, when copying document information of an electronic document to another electronic document, the confidential level of the document information to be copied can be compared with the confidential level of the other electronic document, and the document information permitted to be copied Can only be pasted into other electronic documents.
In particular, since the confidentiality level can be set in units of document information of electronic documents, necessary document information can be distributed while keeping the risk of document information leakage low.

The hardware block diagram of information processing apparatus. The figure showing the structure of the functional block formed in information processing apparatus. 6 is an exemplary diagram of an electronic document that can be edited by the information processing apparatus. FIG. 6 is a processing flowchart when document information is copied between two electronic documents. The figure which represented typically the movement of the document information at the time of copying document information between two electronic documents. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 6 is an exemplary diagram of a set of a confidential level and document information. FIG. 5 is a view showing an example of a second electronic document with document information pasted thereon.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Information processing apparatus, 2 ... Input device, 3 ... Output device, 10 ... CPU, 11 ... Main memory, 12 ... ROM, 13 ... Mass storage device, 14 ... NIC, 15 ... I / O interface, 16 ... Media Drive, 21 ... input unit, 22 ... output unit, 23 ... document editing unit, 24 ... storage unit, 25 ... clipboard unit, 26 ... file protection clipboard unit, 27 ... monitoring unit, 28 ... comparison unit, 29 ... extraction unit , B ... Bus

Claims (5)

An acquisition means for acquiring a first electronic document and a second electronic document each including document information and a header in which a confidentiality level indicating the confidentiality of the document information is set;
Storage means for storing the document information included in the acquired first electronic document together with the security level set in the header of the first electronic document;
The confidential level set in the header of the acquired second electronic document is compared with the confidential level stored in the storage means. When the former confidential level is equal to or higher than the latter confidential level, the confidential means is stored in the storage means. The document information stored can be pasted on the second electronic document, and the position where the document information is pasted on the second electronic document and the confidential level stored in the storage means are set on the second electronic document. Editing means for appending to the header of the document,
Electronic document management device. The first electronic document includes a plurality of pieces of document information, and the confidentiality level is set for each piece of document information.
The storage means stores each of the plurality of document information in association with a confidential level of the document information,
The editing unit extracts from the storage unit document information in which a security level equal to or lower than a security level set for the second electronic document is extracted from the plurality of document information, and pastes the extracted document information Enable,
The electronic document management apparatus according to claim 1. The plurality of document information includes document information pasted from the other electronic documents to the first electronic document,
In the header of the first electronic document, a confidential level set in the pasted document information is added as a pasting history,
The electronic document management apparatus according to claim 2. The storage means includes a first storage area for storing document information to be pasted among the plurality of document information;
Of the document information stored in the first storage area, the document information determined to be pastable to the second electronic document and the confidential level set in the document information are stored in association with each other And a second storage area,
When the document information to be pasted is stored in the first storage area, the editing unit starts comparing the confidential level of the document information with the confidential level of the second electronic document, and the document information When stored in the second storage area, the document information is deleted from the first storage area and the second electronic document can be read from the second storage area;
The electronic document management apparatus according to claim 3. A computer equipped with an information recording device
An acquisition means for acquiring a first electronic document and a second electronic document each including document information and a header in which a confidentiality level indicating the confidentiality of the document information is set;
Storage means for storing the document information included in the acquired first electronic document in the information recording apparatus together with the security level set in the header of the first electronic document;
The confidential level set in the header of the acquired second electronic document is compared with the confidential level stored in the information recording device, and the information recording is performed when the former confidential level is equal to or higher than the latter confidential level. The document information stored in the apparatus can be pasted to the second electronic document, and the position where the document information is pasted in the second electronic document and the security level stored in the information recording apparatus are set. A computer program that functions as an editing unit that adds information to the header of a second electronic document.

Images