JP7171312B2 - SEARCH DEVICE, SEARCH METHOD AND SEARCH PROGRAM - Google Patents

Description

The present invention relates to a search device, search method and search program.

A search device extracts data that matches a search condition from a plurality of data stored in a source, and includes the extracted data in search results. Further, when performing access control, the search device reflects the access authority in the search results. That is, the search device includes in the search results data that the user is permitted to access by the access authority to be reflected, but does not include in the search results data that the user is not permitted to access by the access authority. . The techniques described in Patent Literatures 1 and 2 are examples thereof.

The following first and second methods are generally used as methods for reflecting access authority on search results.

In the first method, the search device manages access rights. Managed access rights set the sources that the user is allowed to access. The search device includes in the search results data stored in sources that the user is permitted to access by the access rights it manages, but stores data in sources that the user is not permitted to access by the access rights. Do not include data that has been specified in the search results.

In the second method, the source manages access rights. Data that the user is permitted to access is set in the access rights to be managed. When the user logs in, the search device acquires the managed access authority from the source, and includes in the search results data that the user is permitted to access according to the acquired access authority. Search results do not include data that permissions do not allow the user to access.

JP 2013-114331 A JP 2010-160577 A

In the search device, when an event occurs to add, delete, or update data to multiple data stored in the source, the addition, deletion, or update of data is reflected in access control and search results in real time. It is desirable to

However, the conventional search device has the problem that the addition, deletion or update of data cannot be reflected in access control and search results in real time. There is a problem that complicated management of data and access rights must be performed for

The present invention has been made in view of these problems. The problem to be solved by the present invention is to provide a search device, a search method, and a search method that can reflect addition, deletion, or update of data in access control and search results in real time without performing complicated management of data and access authority. It is to provide a search program.

The present invention is directed to a search device.

The present invention includes a receiving section, a data storage section, a data acquisition section, an access authority management section, a login section, an access authority acquisition section, and a search section.

A receiver receives a notification indicating that an event has occurred that adds, deletes, or updates data to a plurality of data stored in at least one source.

The data acquisition unit acquires the plurality of data and stores them in the data storage unit. Further, when the receiving unit receives a notification after acquiring the plurality of data, the data acquisition unit reflects the addition, deletion, or update of data to the plurality of data stored in the data storage unit.

The login unit accepts login by the user. Further, the login unit acquires from at least one source the user's access authority set to the plurality of data stored in the data storage unit and stores it in the access authority management unit when the login is accepted.

The access authority acquisition unit sets to the added, deleted or updated data when the receiving unit receives the notification after acquiring the access authority of the user set to the multiple data stored in the data storage unit. The access authority of the user stored is obtained from at least one source and reflected in the access authority stored in the access authority management unit.

The search unit extracts, from a plurality of data stored in the data storage unit, data that matches a search condition and is permitted to be accessed by the user according to the access authority stored by the access authority management unit.

The present invention is also directed to a search method and a search program.

According to the present invention, the plurality of data stored in at least one source are updated in conjunction with the occurrence of an event that adds, deletes, or updates data to the plurality of data stored in the source. , the stored access rights are updated. Therefore, addition, deletion or update of data can be reflected in access control and search results in real time without performing complicated management of data and access authority.

Objects, features, aspects and advantages of the present invention will become more apparent with the following detailed description and accompanying drawings.

It is a block diagram illustrating the hardware of the search device of the first embodiment. 1 is a block diagram illustrating a search system including the search device of the first embodiment; FIG. It is a figure which illustrates the structure of the access management data managed by the search device of 1st Embodiment. It is a figure which illustrates the structure of several data stored in the search device of 1st Embodiment. 4 is a flow chart illustrating the flow of acquisition of a plurality of data performed by the search device of the first embodiment; 4 is a flow chart illustrating the flow of access authorization acquisition performed in the search device of the first embodiment.

1 Hardware of Search Apparatus FIG. 1 is a block diagram illustrating the hardware of the search apparatus of the first embodiment.

A search device 1000 illustrated in FIG. 1 is a personal computer (PC) in which a search program 1020 is installed. The search device 1000 comprises a central processing unit (CPU) 1040 , a memory 1042 , a hard disk drive 1044 , an input device 1046 and an output device 1048 . The search device 1000 may have elements other than these elements.

A search program 1020 is installed in the hard disk drive 1044 . The search program 1020 is installed on the hard disk drive 1044 by writing data read from an external storage medium 1060 such as a compact disk (CD), a digital versatile disk (DVD), or a universal serial bus (USB) memory to the hard disk drive 1044. Alternatively, data received via network 1080 may be written to hard disk drive 1044 . Hard disk drive 1044 may be replaced with other types of secondary storage devices. For example, hard disk drive 1044 may be replaced with a solid state drive, random access memory (RAM) disk. The hard disk drive 1044, external storage medium 1060, solid state drive, RAM disk, etc. are computer-readable recording media in which the search program 1020 is recorded.

CPU 1040 loads search program 1020 into memory 1042 and executes loaded search program 1020 . Thereby, the PC functions as the search device 1000 .

The input device 1046 is a keyboard, mouse, touch pad, trackball, touch panel, switch, dial, microphone, or the like.

The output device 1048 is a display, printer, speaker, or the like.

2 Search System FIG. 2 is a block diagram illustrating a search system provided with the search device of the first embodiment.

The search system 1200 illustrated in FIG. 2 includes the search device 1000 described above and includes a source 1220 and a user management server 1222 . Search system 1200 may include elements other than these elements. The 4 sources 1220 may be replaced with 3 or less or 5 or more sources.

Source 1220 stores multiple data. Source 1220 is the source to be searched. The plurality of data stored in the source 1220 are the plurality of data to be searched. Each of the four sources 1220 stores data that make up the plurality of data.

The search device 1000 acquires multiple data stored in the source 1220 . Further, the search device 1000 accepts login by the user 1240 and accepts input of search conditions by the user 1240 . In addition, the search device 1000 extracts data that matches the search conditions and is permitted to be accessed by the user 1240 from a plurality of data stored in the source 1220, and presents the extracted data to the user 1240. .

The search device 1000 and the source 1220 use a mechanism such as an active directory, and use a common user management server 1222 to perform common user management. The search device 1000 and the source 1220 set and manage only the users 1240 who can log in, the groups to which the users 1240 belong, and the authorities that the users 1240 have.

3 Search Device The search device 1000 includes a receiving unit 1260, a data storage unit 1262, a data acquisition unit 1264, an access authority management unit 1266, a login unit 1268, an access authority acquisition unit 1270, and a search unit 1272, as shown in FIG. Prepare. The search device 1000 may have elements other than these elements.

Reception unit 1260 , data acquisition unit 1264 , login unit 1268 , access authority acquisition unit 1270 and search unit 1272 are configured by causing CPU 1040 to execute search program 1020 . The data storage unit 1262 and access authority management unit 1266 are configured by at least one of the memory 1042 and the hard disk drive 1044 .

All or part of the processing performed by CPU 1040 may be performed by other types of processing devices. For example, all or part of the processing performed by CPU 1040 may be performed by a graphics processing unit (GPU). All or part of the processing performed by CPU 1040 may be performed by hardware that does not execute programs.

The receiving unit 1260 receives a notification (hereinafter referred to as an “event occurrence notification”) indicating that an event for adding, deleting, or updating data has occurred in a plurality of data stored in the source 1220 . Event occurrence notifications are sent by the source where the event occurred. Receiving notifications happens in the background.

Data acquisition unit 1264 acquires a plurality of data stored in source 1220 . The data acquisition unit 1264 collectively acquires all of the multiple data stored in the source 1220 at a specified time. The specified time is, for example, a fixed time every day at night. When acquiring a plurality of data, the data acquisition unit 1264 acquires a plurality of IDs (identifiers) that respectively identify the plurality of data. Also, the data acquisition unit 1264 stores the acquired data in the data storage unit 1262 .

Further, the data acquisition unit 1264 acquires only the added, deleted, or updated data when the reception unit 1260 receives an event occurrence notification after acquiring a plurality of data. When acquiring added, deleted, or updated data, the data acquisition unit 1264 acquires an ID that identifies the added, deleted, or updated data. Also, the data acquisition unit 1264 reflects addition, deletion, or update of data in a plurality of data stored in the data storage unit 1262 . Adding, deleting, or updating data is reflected repeatedly while the search device 1000 is operating. As a result, multiple data stored in the data storage unit 1262 can be displayed in real time in conjunction with the occurrence of an event that adds, deletes, or updates data to multiple data stored in the source 1220 . It can be updated and the data presented to the user 1240 can be updated in real time.

Login unit 1268 accepts login by user 1240 . The login unit 1268 inquires of the user management server 1222 whether or not the user 1240 can log in, and accepts the login by the user 1240 when the user management server 1222 replies that the user 1240 can log in.

Further, the login unit 1268 collectively acquires from the source 1220 the access authority of the user 1240 set in the plurality of data stored in the data storage unit 1262 when the login is accepted. The access rights obtained include IDs that identify data that user 1240 is authorized to access. Also, the login unit 1268 stores the acquired access authority in the access authority management unit 1266 .

The access authority acquisition unit 1270 acquires the access authority of the user 1240 set in the plurality of data stored in the data storage unit 1262, and when the reception unit 1260 receives the event occurrence notification, adds, deletes, or Acquire from the source 1220 the access rights set for the updated data. Also, the access authority acquisition unit 1270 reflects the acquired access authority on the access authority stored in the access authority management unit 1266 . Reflection of the access authority is repeated while the user 1240 is logged in. As a result, the access authority managed by the access authority management unit 1266 is changed in real time in conjunction with the occurrence of an event that adds, deletes, or updates data to a plurality of data stored in the source 1220. It can be updated and the data presented to the user 1240 can be updated in real time.

The search unit 1272 refers to the access authority stored in the access authority management unit 1266 and extracts data from multiple data stored in the data storage unit 1262 . The extracted data is data that the user 1240 is permitted to access according to the access authority stored in the access authority management unit 1266 that matches the search conditions. The extracted data is included in search results and output by output device 1048 . If output device 1048 is a display, the extracted data is displayed on the display.

According to the search device 1000, in conjunction with the occurrence of an event that adds, deletes, or updates data to a plurality of data stored in the source 1220, a plurality of data stored in the data storage unit 1262 is displayed. The data is updated, and the access authority stored in the access authority management unit 1266 is updated. Therefore, addition, deletion or update of data can be reflected in access control and search results in real time without performing complicated management of data and access authority. Although this effect appears when the search system 1200 has only one source, it is particularly noticeable when the search system 1200 includes multiple sources.

4 Structure of Access Management Data FIG. 3 is a diagram illustrating the structure of access management data managed by the search device of the first embodiment.

The structure of the access management data illustrated in FIG. 3 is the structure of data indicating access rights managed by the access rights management unit 1266 .

In the structure of the access management data illustrated in FIG. 3, a user ID 1300 is associated with an accessible ID 1302 of source 1, an accessible ID 1304 of source 2, and the like. Source 1 accessible ID 1302 is an ID that identifies data that is stored in source 1 and that user 1240 identified by user ID 1300 is permitted to access. Similarly, source 2 accessible ID 1304 is an ID that identifies data stored in source 2 that user 1240 identified by user ID 1300 is permitted to access.

5 Structure of Plural Data FIG. 4 is a diagram illustrating the structure of a plurality of data stored in the search device of the first embodiment.

The structure of the multiple data illustrated in FIG. 4 is the structure of the multiple data stored in the data storage unit 1262 .

In the multiple data structures illustrated in FIG. 4, for source 1, ID 1400 is associated with subject 1402, content 1404, person in charge 1406, and the like. A subject 1402 is the subject of the data identified by the ID 1400 . Content 1404 is the content of the data identified by ID 1400 . Person in charge 1406 is the person in charge of the data identified by ID 1400 .

In the structure of the plurality of data shown in FIG. 4, for source 2, ID 1420 is associated with content 1422, case 1424, reporter 1426, and the like. Content 1422 is the content of the data identified by ID 1420 . Case 1424 is a case of data identified by ID 1420 . Reporter 1426 is the reporter of the data identified by ID 1420 .

6 Acquisition of Data FIG. 5 is a flowchart illustrating the flow of acquisition of a plurality of data performed by the search device of the first embodiment.

In step S101 illustrated in FIG. 5, the data acquisition unit 1264 determines whether or not the specified time for acquiring all the data stored in the source 1220 has arrived. If it is determined that the designated time has come, steps S102 and S103 are sequentially executed, and then step S104 is executed. If it is determined that the specified time has not arrived, step S104 is executed without executing steps S102 and S103.

In step S<b>102 , the data acquisition unit 1264 acquires all data stored in the source 1220 from the source 1220 . Acquisition of all data is done in batches and from all sources contained in sources 1220 .

In step S<b>103 , the data acquisition unit 1264 stores all the acquired data in the data storage unit 1262 .

According to steps S 101 to S 103 , a plurality of data items stored in the source 1220 are periodically acquired at specified times, and the acquired multiple data items are stored in the data storage unit 1262 .

In step S104, reception unit 1260 determines whether or not an event occurrence notification has been received. If it is determined that the event occurrence notification has been received, steps S105 to S107 are sequentially executed. If it is determined that the event occurrence notification has not been received, step S101 is executed again.

In step S105, the data acquisition unit 1264 further acquires only the added, deleted, or updated data.

In step S<b>106 , the data acquisition unit 1264 reflects the addition, deletion, or update of data on the multiple data stored in the data storage unit 1262 .

According to steps S104 to S106, only the added, deleted, or updated data is further acquired in conjunction with the occurrence of the event of adding, deleting, or updating the data, and the addition, deletion, or updating of the data is performed. This is reflected in multiple data stored in the data storage unit 1262 .

In step S107, it is determined whether or not the search device 1000 has ended. If it is determined that the search device 1000 has ended, the acquisition of data ends. If it is determined that the search device 1000 has not ended, step S101 is executed again. As a result, steps S101 to S106 are repeatedly executed until the search program ends and the search device 1000 ends.

According to steps S101 to S107, the data acquisition unit 1264 is in a standby state until the specified time arrives or the event occurrence notification is received. Also, the data acquisition unit 1264 acquires all the data and stores the acquired all the data in the data storage unit 1262 when the designated time has come. Further, when an event occurrence notification is received, the data acquisition unit 1264 further acquires only data that has been added, deleted, or updated, and adds, deletes, or updates the data to a plurality of data stored in the data storage unit 1262. reflected in the data of

7 Flow of Access Authority Acquisition FIG. 6 is a flowchart illustrating the flow of access authority acquisition performed in the search device of the first embodiment.

In step S121 illustrated in FIG. 6, the login unit 1268 determines whether the user 1240 can log in to the user management server 1222 or not. If it is determined that the user 1240 can log in, steps S122 and S123 are executed in sequence. If it is determined that user 1240 is not able to log in. Acquisition of access authority ends.

In step S<b>122 , login unit 1268 acquires from source 1220 the access authority set for a plurality of data stored in data storage unit 1262 . The acquired access authority is stored in the access authority management section 1266 and managed by the access authority management section 1266 .

In step S123, reception unit 1260 determines whether or not an event occurrence notification has been received. If it is determined that the event occurrence notification has been received, step S124 is executed and then step S125 is executed. If it is determined that the event occurrence notification has not been received, step S125 is executed without executing step S124.

In step S124, the access authority acquisition unit 1270 acquires from the source 1220 the access authority set for the added, deleted, or updated data. The acquired access authority is reflected in the access authority stored in the access authority management unit 1266. FIG. The access authority acquisition unit 1270 acquires an ID, inquires of the source 1220 whether or not the user 1240 is permitted to access the data identified by the acquired ID, and obtains an answer from the source 1220 to obtain the Acquire the access authority of the user 1240 set in the data.

In step S125, login unit 1268 determines whether or not user 1240 has logged out. If it is determined that the user 1240 has logged out, then step S126 is executed and then access authorization acquisition ends. If it is determined that the user 1240 has not logged out, step S123 is executed again. As a result, steps S121 to S124 are repeatedly executed until the user 1240 logs out.

In step S126, the access authority stored in the access authority management unit 1266 is canceled.

Although the present invention has been described in detail, the above description is, in all aspects, illustrative and not intended to limit the present invention. It is understood that numerous variations not illustrated can be envisioned without departing from the scope of the invention.

1000 Search Device 1020 Search Program 1200 Search System 1220 Source 1222 User Management Server 1240 User 1260 Reception Unit 1262 Data Storage Unit 1264 Data Acquisition Unit 1266 Access Authority Management Unit 1268 Login Unit 1270 Access Authority Acquisition Unit 1272 Search Unit

Claims (4)

a receiving unit for receiving a notification indicating that an event has occurred that adds, deletes, or updates data to a plurality of data stored in at least one source;
a data storage unit;
acquiring the plurality of data and storing them in the data storage unit, and adding, deleting, or updating the data to the data storage unit when the receiving unit receives the notification after acquiring the plurality of data; a data acquisition unit that reflects a plurality of stored data;
an access authority management unit;
receiving a login by a user, and acquiring, from the at least one source, the access authority of the user set to the plurality of data stored in the data storage unit when the login is received; a login part to be stored in the
set to the data added, deleted or updated when the receiving unit receives the notification after acquiring the access authority of the user set to the plurality of data stored in the data storage unit an access authority acquisition unit that acquires the access authority of the user from the at least one source and reflects it in the access authority stored in the access authority management unit;
a search unit for extracting, from a plurality of data stored in the data storage unit, data that matches a search condition and that the user is permitted to access according to the access authority stored in the access authority management unit; ,
A search device comprising: 2. The search device of Claim 1, wherein said at least one source is a plurality of sources. obtaining a plurality of data stored in at least one source by a data obtaining unit and storing the data in a data storage unit ;
receiving , by a receiver, a notification indicating that an event of adding, deleting, or updating data to the plurality of data has occurred;
a step of causing the data acquisition unit to reflect addition, deletion or update of the data in the plurality of data stored in the data storage unit when the notification is received after acquiring the plurality of data ;
a step of accepting a login by a user with a login unit ;
When the login is accepted, the access authority of the user set in the plurality of data stored in the data storage unit is acquired from the at least one source by the login unit and stored in the access authority management unit. and
When the notification is received after obtaining the access authority of the user set to the plurality of data stored in the data storage unit , the user set to the data added, deleted or updated obtaining access rights from the at least one source and reflecting them in the access rights stored by the access rights management unit , by an access rights acquisition unit ;
A search unit extracts, from a plurality of data stored in the data storage unit , data that matches a search condition and is permitted to be accessed by the user according to the access authority stored in the access authority management unit. and
A search method comprising: obtaining and storing a plurality of data stored in at least one source into a data store ;
receiving a notification indicating that a data addition, deletion, or update event has occurred for the plurality of data;
a step of reflecting the addition, deletion or update of the data in the plurality of data stored in the data storage unit when the notification is received after the plurality of data is obtained;
accepting a login by a user;
obtaining from the at least one source the user's access authority set to the plurality of data stored in the data storage unit when the login is accepted, and storing the access authority in the access authority management unit ;
When the notification is received after obtaining the access authority of the user set to the plurality of data stored in the data storage unit , the user set to the data added, deleted or updated obtaining access rights from the at least one source and reflecting them in the access rights stored by the access rights manager ;
a step of extracting, from a plurality of data stored in the data storage unit , data that matches a search condition and that the user is permitted to access according to the access authority stored in the access authority management unit ;
A search program that causes a computer to run

Images