TWI728405B - Search device, search method, and computer readable recording medium with search program recorded thereon - Google Patents

Abstract

The subject of the present invention is to reflect the addition, deletion or update of data to the access control and retrieval results in real time.

The present invention obtains and stores a plurality of data stored in the source. Then, when a notification showing that an event such as adding data has occurred is received, it is reflected to the plural data stored in the adding of data, etc. When accepting the user's login, obtain the user's access authority set in the storage of multiple data from the source and store it. Then, when the notification is received, the user's access authority set in the additional data will be reflected to the access authority obtained from the source and stored. From the plurality of stored data, extract the data that meets the retrieval conditions and that the user is permitted to access based on the stored access authority.

Description

Retrieval device, retrieval method, and computer-readable recording medium recorded with retrieval program

The invention relates to a search device, a search method, and a computer-readable recording medium with a search program recorded.

The retrieval device extracts data that meets the retrieval conditions from a plurality of data stored in the source, and includes the extracted data in the retrieval result. In addition, the retrieval device reflects the access authority to the retrieval result when performing access control. That is, although the retrieval device includes the data that the user is allowed to access based on the reflected access authority in the retrieval result, it does not include the data that the user is not allowed to access based on the access authority. Retrieving results. The techniques described in Patent Documents 1 and 2 are examples.

As a method of reflecting the access authority to the search result, the following first method and second method are general methods.

In the first method, the retrieval device manages the access authority. In the managed access authority, the source from which the user is allowed to access is set. Although the retrieval device includes the data stored in the source that the user is permitted to access based on the managed access authority in the retrieval result, it does not store the data that the user is not permitted to access based on the access authority. The data at the source is included in the search results.

In the second method, the source manages the access authority. In the managed access authority, set the data that the user is allowed to access. When the user logs in, the retrieval device obtains the managed access authority from the source, and includes the data that the user is permitted to access based on the obtained access authority in the retrieval result, but does not base the user on the Data that has access permission but is not permitted to be accessed is included in the search results.

[Prior Technical Literature] [Patent Literature]

[Patent Document 1] Japanese Patent Laid-Open No. 2013-114331

[Patent Document 2] Japanese Patent Laid-Open No. 2010-160577

In the retrieval device, it is expected that when an event of adding, deleting or updating data to multiple data stored in the source has occurred, the addition, deletion or update of the data will be reflected in the access control and retrieval results in real time .

However, the conventional retrieval device has the problem that the addition, deletion or update of data cannot be reflected to the access control and retrieval results in real time; and in order to reflect the addition, deletion or update of data to the access control and retrieval in real time As a result, complicated management of data and access rights must be carried out.

The present invention was completed in view of these problems. The problem to be solved by the present invention is to provide a retrieval device, retrieval method and record that can instantly reflect the addition, deletion or update of data to access control and retrieval results without the need for complex management of data and access permissions. A computer-readable recording medium with a search program.

The present invention relates to a retrieval device.

The retrieval device includes a receiving unit, a data storage unit, a data acquisition unit, an access authority management unit, a login unit, an access authority acquisition unit, and a retrieval unit.

The receiving part receives a notification showing that an event of data addition, deletion, or update to a plurality of data stored in at least one source has occurred.

The data acquisition department acquires the plural data and stores them in the data storage department. In addition, when the receiving section receives the notification after acquiring the plural pieces of data, the data acquisition section reflects the addition, deletion or update of the data to the plural pieces of data stored in the data storage section.

The login department accepts user login. In addition, when the login unit accepts the login, it obtains from at least one source the user's access authority for the plural data stored in the data storage unit and stores it in the access authority management unit.

The access authority acquisition unit obtains the access authority of the user who is set in the data storage unit and then the receiving unit receives the notification, obtains the data set in addition, deletion or update from at least one source The user’s access authority is reflected in the access authority stored in the access authority management section.

The retrieval unit extracts from the plurality of data stored in the data storage unit the data that meets the retrieval conditions and that the user is permitted to access based on the access authority stored in the above-mentioned access authority management unit.

The invention also relates to a retrieval method and a computer-readable recording medium on which the retrieval program is recorded.

According to the present invention, it is possible to update the stored plurality of data and update the stored access authority in conjunction with the occurrence of the event of adding, deleting or updating data to the plurality of data stored in at least one source. Therefore, there is no need to perform complicated management of data and access authority, and the addition, deletion or update of data can be reflected to the access control and retrieval results in real time.

The purpose, features, aspects and advantages of the present invention can be clarified by the following detailed description and appended drawings.

1000‧‧‧Search device

1020‧‧‧Search program

1040‧‧‧Central Processing Unit (CPU)

1042‧‧‧Memory

1044‧‧‧Hard Disk Drive

1046‧‧‧Input machine

1048‧‧‧Output machine

1060‧‧‧External storage media

1080‧‧‧Internet

1200‧‧‧Search System

1220‧‧‧Source

1222‧‧‧User Management Server

1240‧‧‧User

1260‧‧‧Receiving Department

1262‧‧‧Data Storage Department

1264‧‧‧Data Acquisition Department

1266‧‧‧Access Authority Management Department

1268‧‧‧Login Department

1270‧‧‧Access Authority Acquisition Department

1272‧‧‧Search Department

1300‧‧‧User ID

1302‧‧‧(Source 1) Accessible ID

1304‧‧‧(Source 2) Accessible ID

1400‧‧‧ID

1402‧‧‧Case Name

1404‧‧‧Content

1406‧‧‧Contractor

1420‧‧‧ID

1422‧‧‧Content

1424‧‧‧Case

1426‧‧‧Reporter

Fig. 1 is a block diagram illustrating the hardware of the search device of the first embodiment.

Fig. 2 is a block diagram illustrating a retrieval system equipped with the retrieval device of the first embodiment.

Fig. 3 is a diagram illustrating the structure of the access management data managed by the search device of the first embodiment.

Fig. 4 is a diagram illustrating the structure of a plurality of data stored in the retrieval device of the first embodiment.

Fig. 5 is a flowchart illustrating the flow of obtaining plural data by the search device of the first embodiment.

Fig. 6 is a flowchart illustrating the flow of obtaining access authority by the search device of the first embodiment.

1 The hardware of the retrieval device

Fig. 1 is a block diagram illustrating the hardware of the search device of the first embodiment.

The retrieval device 1000 shown in FIG. 1 is a personal computer (PC; Personal Computer) with a retrieval program 1020 installed. The search device 1000 includes a central processing unit (CPU; Central Processing Unit) 1040, a memory 1042, a hard disk drive 1044, an input device 1046, and an output device 1048. The retrieval device 1000 may also include components other than these components.

A search program 1020 is installed in the hard disk drive 1044. The retrieval program 1020 can be used to install the hard disk drive 1044 by storing it from a compact disc (CD; Compact Disc), a digital versatile disc (DVD; Digital Versatile Disc), and a universal serial bus (USB; Universal Serial Bus). The data read from the external storage medium 1060 such as the external storage medium 1060 is written into the hard disk drive 1044, and it can also be performed by writing the data received via the network 1080 into the hard drive 1044. The hard disk drive 1044 can also be replaced with other types of auxiliary storage devices. For example, the hard disk drive 1044 can also be replaced with a solid state drive (Solid State Drive) or a random access memory (RAM; Random Access Memory) disk. The hard disk drive 1044, the external storage medium 1060, the solid-state hard disk, the RAM disk, etc. are computer-readable recording media on which the retrieval program 1020 is recorded.

The CPU 1040 loads the search program 1020 into the memory 1042 and executes the loaded search program 1020. In this way, the PC functions as the search device 1000.

The input machine 1046 is a keyboard, mouse, touchpad, trackball, touch panel, switch, dial, microphone, etc.

The output device 1048 is a monitor, printer, speaker, etc.

2 Retrieval system

Fig. 2 is a block diagram illustrating a retrieval system equipped with the retrieval device of the first embodiment.

The retrieval system 1200 shown in FIG. 2 is equipped with the aforementioned retrieval device 1000, and is equipped with a source 1220 and a user management server 1222. The retrieval system 1200 may also have components other than these components. The 4 sources 1220 can also be replaced with 3 or less or 5 or more sources.

Source 1220 stores multiple data. The source 1220 is the source of the object to be searched. The plural data stored in the source 1220 are the plural data to be retrieved. The four sources 1220 respectively store the data constituting the plural data.

The retrieval device 1000 obtains a plurality of data stored in the source 1220. In addition, the search device 1000 accepts the login of the user 1240 and accepts the input of the search conditions of the user 1240. In addition, the retrieval device 1000 extracts data that meets the retrieval conditions and that the user 1240 is permitted to access from a plurality of data stored in the source 1220, and presents the extracted data to the user 1240.

The retrieval device 1000 and the source 1220 utilize mechanisms such as Active Directory, and use a common user management server 1222 to perform common user management. The retrieval device 1000 and the source 1220 only set and manage the user 1240 who can log in, the group to which the user 1240 belongs, and the permissions that the user 1240 has.

3 Retrieval device

As shown in FIG. 2, the search device 1000 includes a receiving unit 1260, a data storage unit 1262, a data acquisition unit 1264, an access authority management unit 1266, a login unit 1268, an access authority acquisition unit 1270, and a retrieval unit 1272. The retrieval device 1000 may also include components other than these components.

The receiving unit 1260, the data obtaining unit 1264, the logging unit 1268, the access authority obtaining unit 1270, and the retrieval unit 1272 are configured by causing the CPU 1040 to execute the retrieval program 1020. The data storage unit 1262 and the access authority management unit 1266 are composed of at least one of a memory 1042 and a hard disk drive 1044.

All or part of the processing performed by the CPU 1040 can also be performed by other types of processing devices. For example, all or part of the processing performed by the CPU 1040 may also be performed by a graphics processing unit (GPU, Graphics Processing Unit). All or part of the processing performed by the CPU 1040 can also be performed by hardware that does not execute programs.

The receiving unit 1260 receives a notification showing that an event has occurred for adding, deleting, or updating data to a plurality of data stored in the source 1220 (hereinafter referred to as "event occurrence notification"). Event notification is sent by the source of the event that has occurred. The notification of event occurrence is received in the background (Background).

The data acquisition unit 1264 acquires plural data stored in the source 1220. The data acquisition unit 1264 collectively acquires all the plural data stored in the source 1220 at a specified time. The designated time is, for example, a fixed time every night. When acquiring a plurality of data, the data acquisition unit 1264 acquires a plurality of IDs (identifiers) that respectively identify the plurality of data. In addition, the data acquisition unit 1264 stores the acquired plural data in the data storage unit 1262.

In addition, the data acquisition unit 1264 acquires only the added, deleted, or updated data when the receiving unit 1260 receives the event occurrence notification after acquiring a plurality of data. When the data acquisition unit 1264 acquires the added, deleted or updated data, it acquires the ID that identifies the added, deleted or updated data. In addition, the data acquisition unit 1264 reflects the addition, deletion, or update of data to the plural data stored in the data storage unit 1262. The reflection of addition, deletion, or update of data is repeatedly performed during the operation period of the retrieval device 1000. In this way, it is possible to update the data stored in the data storage unit 1262 in real time in conjunction with the occurrence of the event of adding, deleting or updating data to the data stored in the source 1220. Update the information to be prompted to the user 1240.

The login unit 1268 accepts the login of the user 1240. The login unit 1268 asks the user management server 1222 whether the user 1240 can log in, and accepts the login of the user 1240 when the user management server 1222 answers that the user 1240 can log in.

In addition, when the login unit 1268 accepts the login, it obtains from the source 1220 the access authority of the user 1240 set in the plural data stored in the data storage unit 1262. The acquired access authority includes an ID for identifying the data that the user 1240 is permitted to access. In addition, the login unit 1268 causes the access authority management unit 1266 to store the acquired access authority.

After the access authority acquisition unit 1270 obtains the access authority of the user 1240 set in the plural data stored in the data storage unit 1262, after the receiving unit 1260 receives the event occurrence notification, it obtains from the source 1220 the access authority set in the added, Access permissions for deleted or updated data. In addition, the access authority acquisition unit 1270 reflects the acquired access authority to the access authority stored in the access authority management unit 1266. The reflection of the access authority is repeatedly performed during the user 1240 login period. In this way, the access authority managed by the access authority management unit 1266 can be updated in real time in conjunction with the occurrence of the event of adding, deleting or updating data to the plural data stored in the source 1220, and the access authority managed by the access authority management unit 1266 can be updated in real time. The information that is prompted to the user 1240 is updated accordingly.

The retrieval unit 1272 refers to the access authority stored in the access authority management unit 1266, and extracts data from a plurality of data stored in the data storage unit 1262. The extracted data is the data that meets the retrieval conditions and the user 1240 is permitted to access based on the access authority stored in the access authority management unit 1266. The extracted data is included in the search result and output by the output machine 1048. When the output device 1048 is a display, the extracted data is displayed on the display.

According to the retrieval device 1000, the multiple data stored in the data storage unit 1262 can be updated in conjunction with the occurrence of the event of adding, deleting or updating multiple data stored in the source 1220, and the stored data can be updated. Access authority in the access authority management section 1266. Therefore, there is no need to perform complicated management of data and access authority, and the addition, deletion or update of data can be reflected to the access control and retrieval results in real time. Although this effect will still appear when the retrieval system 1200 has only one source, it will especially appear when the retrieval system 1200 has multiple sources.

4 Structure of access management data

Fig. 3 is a diagram illustrating the structure of the access management data managed by the search device of the first embodiment.

The structure of the access management data illustrated in FIG. 3 shows the structure of the access authority data managed by the access authority management unit 1266.

In the structure of the access management data illustrated in FIG. 3, the accessible ID 1302 of the source 1 and the accessible ID 1304 of the source 2 and the user ID 1300 are established in correspondence. The accessible ID 1302 of the source 1 is an ID that is stored in the source 1 and identifies the data that the user 1240 identified by the user ID 1300 is permitted to access. Similarly, the accessible ID 1304 of the source 2 is an ID that is stored in the source 2 and identifies the data that the user 1240 identified by the user ID 1300 is permitted to access.

5 The structure of multiple data

Fig. 4 is a diagram illustrating the structure of a plurality of data stored in the retrieval device of the first embodiment.

The structure of the plural data shown in FIG. 4 is the structure of the plural data stored in the data storage unit 1262.

In the structure of the plural data shown in FIG. 4, for source 1, case name 1402, content 1404, undertaking personnel 1406, etc., are associated with ID 1400. Case name 1402 is the case name of the data identified by ID 1400. The content 1404 is the content of the data identified by ID 1400. The undertaker 1406 is the undertaker of the data identified by ID 1400.

In addition, in the structure of the plurality of data shown in FIG. 4, for source 2, content 1422, case 1424, reporter 1426, etc. are associated with ID 1420. The content 1422 is the content of the data identified by ID 1420. Case 1424 is a case of data identified by ID 1420. The reporter 1426 is the reporter of the data identified by ID 1420.

6 Acquisition of data

Fig. 5 is a flowchart illustrating the flow of obtaining plural data by the search device of the first embodiment.

In step S101 shown in FIG. 5, the data acquisition unit 1264 determines whether it has come to acquire all the data stored in the source 1220 at the designated time. When it is determined that the specified time has come, step S104 is executed after steps S102 and S103 are executed sequentially. When it is determined that the designated time is reached in the future, step S104 is executed in a state where steps S102 and S103 are not executed.

In step S102, the data obtaining unit 1264 obtains all the data stored in the source 1220 from the source 1220. All data is obtained by batch processing, and from all sources included in source 1220.

In step S103, the data acquisition unit 1264 stores all the acquired data in the data storage unit 1262.

According to steps S101 to S103, the plural data stored in the source 1220 can be periodically acquired at a specified time, and the acquired plural data will be stored in the data storage unit 1262.

In step S104, the receiving unit 1260 determines whether an event occurrence notification has been received. When it is determined that the event occurrence notification has been received, steps S105 to S107 are sequentially executed. When it is determined that the event occurrence notification has not been received, step S101 is executed again.

In step S105, the data obtaining unit 1264 further obtains only the added, deleted or updated data.

In step S106, the data acquisition unit 1264 reflects the addition, deletion or update of data to the plural data stored in the data storage unit 1262.

According to steps S104 to S106, it can be linked to the occurrence of the event of adding, deleting or updating data. Only the added, deleted or updated data will be further obtained, and the addition, deletion or update of the data will be reflected to A plurality of data stored in the data storage unit 1262.

In step S107, it is determined whether the retrieval device 1000 has ended. When it is determined that the retrieval device 1000 has ended, the data acquisition ends. When it is determined that the retrieval device 1000 has not ended, step S101 is executed again. Thereby, steps S101 to S106 are repeatedly executed until the search program ends and the search device 1000 ends.

According to steps S101 to S107, the data acquisition unit 1264 is in a standby state until the specified time comes or until it receives an event occurrence notification. In addition, the data acquisition unit 1264 acquires all the data when the designated time has come, and stores all the acquired data in the data storage unit 1262. In addition, when the data acquisition unit 1264 receives the notification of the occurrence of an event, it further acquires only the added, deleted or updated data, and reflects the addition, deletion or update of the data to the plural data stored in the data storage unit 1262 .

7 Procedure for obtaining access rights

Fig. 6 is a flowchart illustrating the flow of obtaining access authority by the search device of the first embodiment.

In step S121 shown in FIG. 6, the login unit 1268 determines whether the user 1240 can log in to the user management server 1222. When it is determined that the user 1240 can log in, steps S122 and S123 are executed sequentially. When it is determined that the user 1240 cannot log in, the acquisition of the access authority ends.

In step S122, the log-in unit 1268 obtains from the source 1220 the access authority of the plural data stored in the data storage unit 1262. The acquired access authority is stored by the access authority management unit 1266 and managed by the access authority management unit 1266.

In step S123, the receiving unit 1260 determines whether the event occurrence notification has been received. When it is determined that the event occurrence notification has been received, step S125 is executed after step S124 is executed. When it is determined that the event occurrence notification has not been received, step S125 is executed in a state where step S124 is not executed.

In step S124, the access authority obtaining unit 1270 obtains from the source 1220 the access authority set to the added, deleted or updated data. The acquired access authority is reflected in the access authority stored in the access authority management unit 1266. The access authority obtaining unit 1270 obtains the ID, asks the source 1220 whether the user 1240 is allowed to access the data identified by the obtained ID, and obtains the answer from the source 1220 to obtain the user set in the data 1240 access rights.

In step S125, the login unit 1268 determines whether the user 1240 has logged out. When it is determined that the user 1240 has logged out, the acquisition of the access authority ends after step S126 is executed. When it is determined that the user 1240 has not logged out, step S123 is executed again. Thus, before the user 1240 logs out, steps S121 to S124 will be repeatedly executed.

In step S126, the access authority stored in the access authority management unit 1266 is discarded.

Although the present invention has been described in detail, all aspects of the above description are only examples, and the present invention is not limited by these. Various modifications that are not illustrated can be interpreted as those that can be inferred and completed without departing from the scope of the present invention.

1000‧‧‧Search device

1200‧‧‧Search System

1220‧‧‧Source

1222‧‧‧User Management Server

1240‧‧‧User

1260‧‧‧Receiving Department

1262‧‧‧Data Storage Department

1264‧‧‧Data Acquisition Department

1266‧‧‧Access Authority Management Department

1268‧‧‧Login Department

1270‧‧‧Access Authority Acquisition Department

1272‧‧‧Search Department

Claims (4)

A retrieval device, which is provided with: a receiving unit, which receives a notification showing that a plurality of data stored in at least one source has been added, deleted, or updated event notification; a data storage unit; a data acquisition unit, which acquires The above-mentioned plural data are stored in the above-mentioned data storage unit, and when the above-mentioned receiving unit receives the above notification after obtaining the above-mentioned plural data, it reflects the addition, deletion or update of the above-mentioned data to the plural data deposited in the above-mentioned data storage unit Data; access authority management section; login section, which accepts user login, and when accepting the above login, obtains from the above at least one source the storage of the above user who is set in the plurality of data stored in the above data storage section To obtain the authority, and make the access authority management section store the access authority; the access authority acquisition section obtains the access authority of the above-mentioned user who is set to the plurality of data stored in the data storage section. When the department receives the above notification, it obtains from the above at least one source the access authority of the user who is set in the added, deleted or updated data, and reflects it to the access authority stored in the access authority management section. Authority; and the retrieval unit, which extracts from the plurality of data stored in the above-mentioned data storage unit, the data that meets the retrieval conditions and that the above-mentioned user is permitted to access based on the access authority stored in the above-mentioned access authority management unit . Such as the retrieval device of claim 1, wherein the at least one source mentioned above is a plurality of sources. A retrieval method, which includes the steps of: a data acquisition unit obtains a plurality of data stored in at least one source and stores them in a data storage unit; and the receiving unit receives and displays that data has occurred on the plurality of data. Steps for notification of events of addition, deletion, or update; when the above notification is received after obtaining the above multiple data, the above data acquisition part is used to reflect the addition, deletion or update of the above data to the stored multiple data ；Accept the user’s login steps through the login section; when accepting the above login, obtain the above user’s access authority set in the plurality of stored data from the above at least one source and save it to access Steps of the authority management unit; when the notification is received after obtaining the access authority of the above-mentioned user who is set in the plurality of stored data, the access authority acquisition unit obtains from the above-mentioned at least one source and is set in the , Delete or update the data of the above-mentioned user's access authority, and reflect it to the steps of the stored access authority; and from the plurality of stored data, use the retrieval part to extract the retrieval conditions and the above Steps for the user to be permitted to access data based on the stored access rights. A computer-readable recording medium recorded with a retrieval program, the retrieval program causes the computer to perform the following steps: a step of obtaining a plurality of data stored in at least one source and storing it; receiving and indicating that the above-mentioned plurality of data has been performed The steps of notification of the event of addition, deletion or update of data; when the above notification is received after obtaining the above plural data, the above data shall be traced Add, delete or update the steps reflected in the stored plural data; the steps of accepting the user's login; when accepting the above login, obtain from the above at least one source the above-mentioned users who are set in the stored plural data Steps of obtaining access rights and storing them; when the notification is received after obtaining the access rights of the above-mentioned user who is set in the stored plural data, it is obtained from the above-mentioned at least one source and is set after being added, deleted or updated The access rights of the above-mentioned users of the data and reflect them to the steps of the stored access rights; and from the plurality of stored data, extract the above-mentioned users who meet the retrieval conditions and based on the stored access rights And the steps of the data that is allowed to access.

Images