JP3581009B2 - Data search system and data search method - Google Patents

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention is, by concealing the search criteria in the data retrieval apparatus, relates the search condition data retrieval system and data retrieval method that can protect against a third party, in particular, data retrieval, such as an external mainframe or workstation the server's data, the data retrieval system for retrieving from the data retrieval apparatus of the client computer or the like connected by a communication line such as LAN or the Internet, the search condition, conceals the location of the searcher to the data retrieval device third party The present invention relates to a data search system and a data search method that can be protected from data .
[0002]
[Prior art]
2. Description of the Related Art Conventionally, data search in a data search system such as a database search system or a document management system is executed by a user designating search conditions for narrowing down data and issuing a search request. The search condition is described in a search language such as SQL, and the data search server narrows down the data. On the other hand, the data retrieval server acquires trace information such as a database trace or a line trace performed by a user for the purpose of recovery from a failure, acquisition of statistical information, and the like.
[0003]
[Problems to be solved by the invention]
In the prior art described above, the privacy of individuals, search conditions that should be confidential information of the company, and the location of the searcher are leaked to a third party such as a system administrator due to trace information such as a database trace or a line trace. It has the problem that it has been lost.
[0004]
An object of the present invention, the conventional and solve the problems of the technology, to hide the search criteria in the data retrieval apparatus, there is provided a data retrieval system and a data retrieval method that can protect against a third party.
[0005]
[Means for Solving the Problems]
The object according to the present invention includes a data retrieval device and the data search server are connected via a communication line, a data retrieval system for retrieving the data of the data search in the server from the data retrieval device, said data retrieval device Performs a process of deleting a pre-registered search condition from the input search condition, searches data in the data search server based on the search condition that has performed the process, and retrieves the search result by its own data search. This is achieved by narrowing down using the search condition input to the device .
[0006]
In addition, the object is to provide a data search method in which a data search device and a data search server are connected via a communication line, and the data search device searches for data in the data search server. Performing a process of deleting a pre-registered search condition from the searched search condition, searching data in the data search server based on the search condition having performed the process, and inputting the search result to the own data search device. This is achieved by narrowing down using the searched search condition .
[0007]
Further, the above object is achieved by placing a proxy server between the data search device and the data search server, making the proxy server access the data search server, and concealing the location of the searcher. Is done.
[0008]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, detailed explanation of the implementation form of a data retrieval system and a data retrieval method according to the invention by the accompanying drawings.
[0009]
FIG. 1 is a block diagram showing a configuration of a data search system according to an embodiment of the present invention. FIG. 2 is a flowchart for explaining a processing operation of a condition concealing unit. FIG. 3 is a process of re-creating a conditional expression based on a confidential condition determination rule. 4 is a diagram for explaining the configuration of a confidential condition table created by reading a confidential condition file, and FIG. 5 is a diagram for explaining the configuration of a similar condition table created by reading a similar condition file. FIG. 6 is a view for explaining a specific search example of data search performed using the embodiment of the present invention, and FIG. 7 is a view for explaining the configuration of an additional condition table created by reading an additional condition file. is there. In FIG. 1, 100 is a data search device, 101 is a GUI analysis unit, 102 is a basic search language generation unit, 103 is a condition hiding unit, 104 is a search language division unit, 105 is an additional condition / search language generation unit, and 106 is data Access unit, 107 is a data editing unit, 108 is a confidential condition file, 109 is a similar condition file, 110 is an additional condition file, 111 is a data storage file, 112 is a user terminal device, 120 is a communication line, 130 is a proxy server, 140 Is a data search server.
[0010]
As shown in FIG. 1, a data search system according to an embodiment of the present invention includes a data search device 100 such as a client computer and a data search server 140 having a database or a document management system. 120 are connected. Further, a plurality of proxy servers 130 that perform access requests from the data search device 100 on behalf of the data search server 140 may be connected to the same network such as a LAN and the Internet.
[0011]
The data search device 100 includes a GUI analysis unit 101, a basic search language generation unit 102, a condition hiding unit 103, a search language division unit 104, an additional condition / search language generation unit 105, a data access unit 106, An editing unit 107 is provided. The data search device 100 is connected to a confidential condition file 108, a similar condition file 109, an additional condition file 110, a data storage file 111, and a user terminal device 112.
[0012]
In the data search device 100 configured as described above, the GUI analysis unit 101 analyzes search conditions specified by the user for data search from the user terminal device 112, and outputs the analysis result to the basic search language generation unit 102. Notify The basic search language generation unit 102 generates a basic search language from the received analysis result. Normally, the data search device 100 accesses data at this stage. In the embodiment of the present invention, the search condition is deleted / divided before the data is searched to conceal and blur the search condition. .
[0013]
Therefore, when there are a plurality of proxy servers 130, or when the user specifies to divide the search language, control is first passed to the search language division unit 104. The search language dividing unit 104 divides a condition for each OR logical operator in the search condition, and recreates a search language for each of the divided conditions. When the search language does not need to be divided, or after the search language is divided by the search language dividing unit 104, the control is passed to the condition hiding unit 103.
[0014]
The condition concealing unit 103 is based on the basic search language from the basic search language generation unit 102 or the divided search language from the search language division unit 104 and the information in the confidential condition file 108 and the similar condition file 109. A search condition expression in which the original condition is concealed by the confidential condition determination rule created is created, and the condition expression for the search is passed to the data access unit 106.
[0015]
As a result, control is passed to the data access unit 106, and the data access unit 106 accesses the data search server 140 via the proxy server 130 or directly. The search data obtained as a result of the search by the data search server 140 is searched based on a search condition formula in which the original condition is hidden, and includes unnecessary search data. Upon receiving such search data, the data access unit 106 of the data search device 100 passes the search result to the data editing unit 107 when one access is completed. Data editing unit 107 edits Filter data based on the original condition of basic search language generation unit 102 creates and passes the search results are the object to the user terminal 112.
[0016]
The outline of the operation of the system shown in FIG. 1 has been described above. Next, the details of the processing operation of the condition concealing unit 103 in the data search device 100 will be described with reference to the flow shown in FIG. The operation of each functional unit will be described in detail.
[0017]
(1) The condition hiding unit 103 divides the conditional expression in the search language passed from the basic language generation unit 102 or the search language division unit 104 for each OR logical operator. If the conditional expression has already been divided for each OR logical operator by the search language dividing unit 104, this processing is not performed (step 201).
[0018]
(2) Next, a security condition is checked for each of the divided conditional expressions. Therefore, it is checked whether the divided condition is a single condition. In the case of a single condition, since this condition is always required, this condition is left as it is, and the process returns from step 208 to step 202 to perform the processing of the next conditional expression (step 202).
[0019]
(3) Next, whether or not there is a confidential condition specified by the user in the conditional expression is checked using the contents of the confidential condition file 108. Therefore, the security condition file 108 is read and a security condition table is created. As shown in FIG. 4, this confidential condition table includes a table name / document name area 401 and a column name / constant area 402, and specifies a column or a constant to be hidden for each table or document. If the condition specified in the confidential condition table exists in the conditional expression, the corresponding condition is deleted from the conditional expression. The confidential condition in the confidential condition file 108 may be registered in advance as a confidential condition as a search condition to be hidden in the data search device as a system or a search condition to be hidden in the user or the data search device. It is a thing (step 203).
[0020]
(4) It is checked whether only one condition remains in the conditional expression as a result of deleting the condition in step 203. If only one condition remains, this condition is a necessary condition, so the concealment process is terminated, and the process returns from step 208 to step 202 to perform the process of the next conditional expression (step 204).
[0021]
(5) Next, it is checked whether or not there is a condition that can be converted from the similar condition file 109 into a similar word and a broader term. For this reason, the similar condition file 109 is read and a similar condition table is created. As shown in FIG. 5, the similar condition table includes a table name area 501 in which a target table name and a document name are specified, a lower concept word area 504, and a higher concept word area 506. LLA 503 and LLB 505 are added, and when the target data has a column as a component like a database, a column name area 502 is added. Then, a condition that can be converted is searched for from the constants specified in the table name area 501, the column name area 502, and the lower concept word area 504, and if there is, the constant of the condition is replaced with a higher concept word and other conditions are deleted. Then, a conditional expression is created again (step 205).
[0022]
(6) recreated conditions expression is checked whether or not converted to broad term in step 205, if the conditional expression is converted to the preamble word, and ends the concealment processing, the step from step 208 Returning to step 202, the next conditional expression is processed (step 206).
[0023]
(7) If the conditional expression re-created in step 205 is not converted into a broader term in the check in step 206, the condition to be deleted is determined based on the confidential condition determination rule, and the conditional expression is re-created (step 207).
[0024]
(8) Since the concealment processing of one conditional expression is completed in the processing described above, the processing of the conditional expressions for all of the OR operators is returned to step 202 and sequentially performed (step 208).
[0025]
Next, the details of the process of re-creating the conditional expression based on the confidential condition determination rule in step 207 described above will be described with reference to the flow shown in FIG.
[0026]
(1) First, an AND operator is searched for in a conditional expression, and it is checked whether or not there is an AND operator (steps 301 and 302).
[0027]
(2) If it is determined in the step 302 that there is an AND operator, a process of deleting all the remaining items, leaving one condition for each AND operator, is started. In the embodiment of the present invention, rules for determining conditions to be left in this processing are determined in consideration of the efficiency of data search, and the priority of the conditions to be left is determined by the index condition included in each condition divided for each AND operator. , =, <,>. When concealment is prioritized, the priority may be reversed. Note that these index conditions are registered in the system in advance, and may include indexes other than =, <,>. Then, first, an index condition in the conditional expression is searched, and it is checked whether or not there is a condition specified in the index sequence (steps 303 and 304).
[0028]
(3) If the condition specified in the index column exists in the check in step 304, the condition of the index column is set as a condition to remain, and if no condition exists in the index column, the priority of the condition to be left is set to =, The conditions to be left are determined as <and> (steps 306 and 305).
[0029]
(4) After determining the conditions to be left in steps 306 and 305, conditions other than the conditions to be left are deleted and a conditional expression is re-created (step 307).
[0030]
(5) If it is determined in the step 302 that there is no AND operator in the conditional expression, it is checked whether the condition is a LIKE predicate. If the condition is a LIKE predicate, the pattern character string is reduced to half. Cut and re-create the conditional expression. For example, if the pattern character string is “Chuo-ku, Osaka”, the pattern character string is set to “Osaka”, and a character string containing “Osaka” is searched (steps 308 and 309).
[0031]
(6) In the check in step 308, if the condition is not a LIKE predicate, it is checked whether the condition is a BETWEEN predicate. If the condition is not a BETWEEN predicate, the process ends. Is converted to <= condition, and a conditional expression is created again (steps 310 and 311).
[0032]
The search language divided or re-created as described above is collectively passed to the data access unit 106. The data access unit 106 checks the connection state of the proxy server 130 from the server definition information, and directly accesses the data search server 140 when the proxy server 130 is not connected. When the proxy server 130 is connected, the divided search languages are assigned to one or more proxy servers, and access to the data search server 140 is requested.
[0033]
The proxy server 130 accesses the data search server 140 on behalf of the data search device, and returns search data obtained as a result of the search to the data search device 100. The data access unit 106 passes the search result to the data editing unit 107 when one access is completed. When the search language is divided into a plurality of parts, the data editing unit 107 temporarily accumulates the search data in the data storage file 111, and extracts the accumulated data when the processing of all the divided search languages is completed. Edit the data that combines the merged and duplicated data into one.
[0034]
That is, the data editing unit 107 applies the original search language created by the basic search language generation unit 102 to the search data that includes unnecessary search data because the original condition is searched based on the hidden search condition expression. The data is edited to narrow down the data based on the conditional expression, and the target search result is passed to the user terminal device 112.
[0035]
Next, a specific search example of data search performed using the embodiment of the present invention will be described with reference to FIG.
[0036]
It is assumed that the search content requested by the user is as shown in 601. From such search contents, the basic search language generation unit 102 generates a basic search language. As shown in 602, the basic search language indicates a conditional expression in the search language. In the illustrated example, it is assumed that there are a plurality of proxy servers 130, and the search language is passed to the search language division unit 104, and is divided into two conditions 603 and 604 for each OR logical operator.
[0037]
Thereafter, the condition concealing unit 103 performs condition concealment processing for each of the divided conditional expressions. First, concealment processing of a conditional expression shown as 603 is performed. In this case, in the table shown in FIG. 4, since the column of the annual income is specified as the confidential condition in the confidential condition file, the column condition of the annual income is deleted from the conditional expression shown as 603, and the conditional expression is shown as 605. Next, in the table shown in FIG. 5, since the broader term "Tokyo" of "Minato-ku" in the address column is specified in the similar condition file, "Minato-ku" is converted to "Tokyo" and the remaining Delete the condition of As a result, the conditional expression shown as 603 is converted into a conditional expression shown as 606.
[0038]
A conditional expression shown as 606 is given to the data search server 140, whereby the search is performed. The data search server 140 searches for a character string including "Tokyo". if 1 40 which is the broad term of "Minato-ku,""Tokyo" is defined, by the thesaurus search, a string that contains the in the data even if there is no string of "Tokyo""Minato-ku" Can be searched.
[0039]
Similarly, the conditional expression 604 is also deleted from the column condition of the annual income, and becomes a conditional expression 607. As a result of this deletion, since only one condition remains, the concealment process is terminated, and the conditional expression 608 is the final conditional expression. Thereafter, the two divided and re-created conditional expressions are passed to the data access unit, distributed to the two proxy servers 1 and 2, and used for accessing the data search server 140.
[0040]
As described above, according to the embodiment of the present invention, "the proxy server 1 has searched the member table under the condition that the address is a person in Tokyo" on a trace such as a database trace and a line trace of the data search server 140. And the history that “the agency server 2 has searched the member table under the condition that the gender is female” remains, and the original searcher and the intention of the searcher can be unclear.
[0041]
Although the embodiment of the present invention described above deletes a search condition, transforms or divides a search language, and conceals the search condition or blurs the intention of the search, the present invention provides an unnecessary condition or The search language can be added to the original search conditions to blur the intention of the search.
[0042]
In this case, before the control is passed from the condition hiding unit 103 to the data access unit 106 shown in FIG. The additional condition / search language generating unit 105 reads the additional condition file 110 and creates an additional condition table as shown in FIG. The additional condition table includes a table name area 701 in which a target table name, a document name, and the like are specified, and a column name area 702, an operator area 703, and a constant area 704 when there is a column as a component of the target data. Is done. The additional condition / search language generating unit 105 generates unnecessary conditions based on the contents of this table.
[0043]
The data access unit 106 generates a search language to which an unnecessary condition created by the additional condition / search language generation unit 105 is added, and sends the device to the data search server 140 via the proxy server 130 or directly. Access and search data. When the search language is added, the data access unit 106 discards the search result corresponding to the added condition from the search result, and the data editing unit 107 narrows down the received search result in the same manner as described above. .
[0044]
As described above, according to the embodiment of the present invention, by hiding some or all of the conditional expressions for data search in the data search device, the search conditions are hidden from third parties, and the intention of the search is unclear. Can be Since the search condition to be hidden is automatically determined by the data search device, the user can search for the data without being conscious of the search content. Further, it is possible to hide any search condition or to replace any search condition with a broader term, and the user can specify a search condition that the third party does not particularly want to know.
[0045]
According to the embodiment of the present invention, the location of the searcher can be concealed by performing the data access by the proxy server, and the search language is divided and divided into the proxy server to access the data search server. By generating unnecessary conditions and a search language and searching for data, the intention of the search can be blurred.
[0046]
【The invention's effect】
As described above, according to the present invention, it is possible to protect search conditions and the location of a searcher as confidential information that have been leaked to a third party due to a database trace, a line trace, and the like of the data search server.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a data search system according to an embodiment of the present invention.
FIG. 2 is a flowchart illustrating a processing operation of a condition hiding unit.
FIG. 3 is a flowchart illustrating details of a process of re-creating a conditional expression based on a confidential condition determination rule.
FIG. 4 is a diagram illustrating a configuration of a confidential condition table created by reading a confidential condition file.
FIG. 5 is a diagram illustrating a configuration of a similar condition table created by reading a similar condition file.
FIG. 6 is a diagram illustrating a specific search example of data search performed using the embodiment of the present invention.
FIG. 7 is a diagram illustrating a configuration of an additional condition table created by reading an additional condition file.
[Explanation of symbols]
Reference Signs List 100 data retrieval device 101 GUI analysis unit 102 basic search language generation unit 103 condition hiding unit 104 search language division unit 105 addition condition / search language generation unit 106 data access unit 107 data editing unit 108 confidential condition file 109 similar condition file 110 addition condition File 111 Data storage file 112 User terminal device 120 Communication line 130 Proxy server 140 Data search server

Claims (8)

Data retrieval device and the data search server are connected via a communication line, the data search system for searching data in the data retrieval server from the data retrieval device,
The data search device performs a process of deleting a search condition registered in advance from the input search condition, searches data in the data search server based on the search condition that has performed the process, and searches the search result. A data search system for narrowing down using the search condition input to the own data search device . In a data search system in which a data search device and a data search server are connected via a communication line, and the data search device searches for data in the data search server,
The data search device is configured to replace all or part of the input search condition with a search condition registered in advance as a similar word or a broader term, or to perform a search condition registered in the input search condition in advance. Performing a process of adding, searching data in the data search server based on the search condition in which the process is performed, and narrowing down the search result using the search condition input to the own data search device. Characteristic data retrieval system. In a data search system in which a data search device and a data search server are connected via a communication line, and the data search device searches for data in the data search server,
The data search device performs a process of dividing the input search condition, searches data in the data search server based on the search condition that performed the process, and inputs the search result to its own data search device. A data search system for narrowing down the data using the search condition. In a data search system in which a data search device and a data search server are connected via a communication line, and the data search device searches for data in the data search server,
The data search device performs a process of dividing the input search condition, a process of deleting a pre-registered search condition from the search condition of the divided process, a synonym for the search condition of the divided process, Perform either a process of replacing the search condition registered in advance as a broader concept word, or a process of adding a search condition registered in advance to the search condition subjected to the division process, based on the search condition in which the process is performed. A data search server that searches for data in the data search server, and narrows down the search results using the search conditions input to the own data search device. A data search method in which a data search device and a data search server are connected via a communication line, and the data search device searches for data in the data search server.
The data search device performs a process of deleting a search condition registered in advance from the input search condition, searches data in the data search server based on the search condition that has performed the process, and searches the search result. Using the search condition input to the own data search device to narrow down the data. A data search method in which a data search device and a data search server are connected via a communication line, and the data search device searches for data in the data search server.
The data search device is configured to replace all or part of the input search condition with a search condition registered in advance as a similar word or a broader term, or to perform a search condition registered in the input search condition in advance. Performing a process of adding, searching data in the data search server based on the search condition in which the process is performed, and narrowing down the search result using the search condition input to the own data search device. Characteristic data search method. A data search method, wherein the data search device and the data search server are provided via a communication line, and the data search device searches for data in the data search server.
The data search device performs a process of dividing the input search condition, searches data in the data search server based on the search condition that performed the process, and inputs the search result to its own data search device. A data search method characterized by narrowing down using the searched search condition. In a data search method, a data search device, a plurality of proxy servers, and a data search server are connected via a communication line, and the data search device searches for data in the data search server via the proxy server from the data search device.
The data search device divides the input first search condition into a second search condition and a third search condition, transmits the divided second search condition to a first proxy server, Sending the third search condition to the second proxy server,
The first proxy server searches data in the data search server based on the second search condition, and transmits a search result to the data search device;
The second proxy server searches data in the data search server based on the third search condition, and transmits a search result to the data search device;
The data search method, wherein the data search device narrows down the search results from the first and second proxy servers using the first search condition.

Images