JP4586043B2 - Network management system, network management program, and communication terminal - Google Patents

Description

  The present invention relates to a network management system including a management server that manages a plurality of communication terminals connected to a communication network, a network management program, and a communication terminal, and more particularly to a technique for managing an information file of a communication terminal.

  As similar to the network management system configured as described above, a plurality of communication terminals (terminal devices in the literature) are connected to the network, and each communication terminal has a file management unit that manages an index of shared information, Some include a file storage unit that stores files, an operation log that records operation information such as file updates, and a file synchronization management unit that manages information sharing of communication terminals (see Patent Document 1). .

  In Patent Document 1, when a change operation such as addition, deletion, or update is performed on a file in a communication terminal, the file management unit rewrites only index information indicating the change contents, and writes the operation information in an operation log. The file synchronization management unit refers to the operation log, creates change operation information, and distributes it. The distribution target includes only information related to addition or update, or a file entity.

JP 2005-321922 A (paragraph numbers [0031] to [0055], FIGS. 1 and 4)

  As a communication network, where a file server and a plurality of communication terminals are connected to a corporate LAN, considering the situation where an information file is downloaded from a file server and used in the communication terminal, the communication terminal Many changes are also used. However, if the information file is changed repeatedly, it may fall into a situation where multiple modified information files exist in the communication terminal, or the contents of the information file are far from those stored in the file server. Even if it is an information file that should be concealed at the time of downloading, it is assumed that the consciousness that should be concealed is reduced, leading to information file leakage.

  From another viewpoint, the information file stored in the file server and downloadable from the communication terminal needs to be maintained with the latest information, and is updated as appropriate. Therefore, when the information file stored in the file server is updated, it is desirable to update the information file already downloaded to the communication terminal to the latest one. In this case, a large number of modified information files exist in the communication terminal, and even a user operating the communication terminal makes it difficult to determine an information file to be updated.

  Considering the technology of Patent Document 1 for these disadvantages, in the technology of Patent Document 1, when an information file is modified in any one of a plurality of communication terminals, the modification is changed to other Although it can be reflected in the information file of the communication terminal, even when a necessary modification is made only in a specific communication terminal, a useless aspect of reflecting the modification in the information file of another communication terminal appears. It was a thing.

  In order to eliminate such inconvenience, it is ideal that the user operating the communication terminal periodically checks the contents of the information file to update the information file or delete old information files that are not being used. However, for example, when a plurality of information files are created by changing the file name, it takes time to update and delete, and there is room for improvement.

  An object of the present invention is to suppress the presence of an inappropriate information file in a communication terminal by grasping an operation such as alteration of an information file copied to the communication terminal.

A feature of the present invention is a network management system including a management server that manages communication terminals connected to a communication network.
The management server is based on an operation log acquisition unit that acquires an operation log from the communication terminal, and an operation content for an information file that is a copy of an original information file included in the operation log acquired by the operation log acquisition unit. A modification information acquisition unit that acquires a modification degree value by an operation on the information file, and a degree value aggregation that totals the modification degree value acquired by the modification information acquisition unit every time the operation on the information file is performed And deleting the information file acquired by the communication terminal at the communication terminal when it is determined that the degree value totaled by the degree value totaling unit has reached a preset threshold value. A command is generated as restriction information, and the deletion command is sent to a communication terminal whose aggregated degree value has reached a preset threshold value. In that it includes a restriction information generation unit for transmitting a de.

With this configuration, the management server acquires the modification value of the information file based on the operation log from the operation log acquisition unit, and the degree value aggregated by the degree value aggregation unit exceeds the threshold. If it is determined, the restriction information generation unit generates restriction information for restricting the operation on the operation file, thereby making it possible to restrict the operation on the information file. As a result, the existence of an inappropriate information file in the communication terminal can be suppressed by grasping an operation such as modification of the information file copied to the communication terminal. Also, with this configuration, the problem that the information file is further modified by deleting the information file in the communication terminal and the problem that the information file leaks due to careless handling by the user are solved.

A feature of the present invention is a network management system including a management server that manages communication terminals connected to a communication network.
The management server is based on an operation log acquisition unit that acquires an operation log from the communication terminal, and an operation content for an information file that is a copy of an original information file included in the operation log acquired by the operation log acquisition unit. A modification information acquisition unit that acquires a modification degree value by an operation on the information file, and a degree value aggregation that totals the modification degree value acquired by the modification information acquisition unit every time the operation on the information file is performed A compulsory download that downloads an original information file corresponding to the information file when it is determined that the degree value aggregated in the degree value aggregation unit has reached a preset threshold value. A command is generated as restriction information, and the aggregated degree value is transmitted to a communication terminal that has reached a preset threshold value. To, in that it includes a restriction information generation unit configured to transmit the forcible download command. According to this, when the degree of modification of the information file reaches the threshold value in the communication terminal, the communication terminal receives a forced download command, and acquires the original information file based on the forced download command. Can be used.

In the present invention, when the information file is stored in a storage connected to the communication network and the information file stored in the storage is updated, the communication terminal that has downloaded the information file from the storage before the update The degree value may be increased, or the threshold value may be lowered. According to this, after the information file has been updated in the storage, when the information file that has been downloaded to the communication terminal before this update is modified, the degree value will reach the threshold early, and the information file has been modified. Inappropriate use in the state can be more reliably suppressed.

In the present invention, the information file is stored in a storage connected to the communication network, and when the information file is downloaded from the storage, the communication terminal that has performed the download corresponds to the elapsed time from the download. At least one of the degree value and the threshold value in the communication terminal may be changed. According to this, for example, as the elapsed time from download becomes longer, the degree value is increased by increasing the degree value by modifying the information file, or lowering the threshold value, or raising the degree value and simultaneously lowering the threshold value. Thus, the threshold value is reached, and inappropriate use of the information file in a modified state can be more reliably suppressed.

A feature of the present invention is a network management program for managing a communication terminal connected to a communication network.
An operation log acquisition function for acquiring an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition function A modification information acquisition function for acquiring a modification degree value according to the above, a degree value totaling function for totaling the degree of modification value acquired by the modification information acquisition function every time an operation is performed on the information file, and this degree value totaling function When it is determined that the aggregated degree value has reached a preset threshold value, the information file acquired by the communication terminal is generated as restriction information to delete the information file in the communication terminal, Restriction on sending the delete command to a communication terminal whose aggregated degree value has reached a preset threshold value And boric generation function, may be realized by the management server.

With this configuration, in the management server, the modification information acquisition function acquires the modification degree value of the information file based on the operation log acquired by the operation log acquisition function, and the degree value aggregated by the degree value aggregation function sets the threshold value. When it is determined that the limit has been exceeded, the limit information generation function generates limit information for limiting the operation on the operation file in the communication terminal, and the operation on the information file can be limited. As a result, it is possible to suppress the existence of an inappropriate information file in the communication terminal by accurately grasping the modification of the information file in the communication terminal and grasping the operation such as the modification of the information file copied to the communication terminal. It became a thing. Also, with this configuration, the problem that the information file is further modified by deleting the information file in the communication terminal and the problem that the information file leaks due to careless handling by the user are solved.

A feature of the present invention is a network management program for managing a communication terminal connected to a communication network.
An operation log acquisition function for acquiring an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition function A modification information acquisition function for acquiring a modification degree value according to the above, a degree value totaling function for totaling the degree of modification value acquired by the modification information acquisition function every time an operation is performed on the information file, and this degree value totaling function When it is determined that the aggregated degree value has reached a preset threshold value, a forced download command for executing download of the original information file corresponding to the information file is generated as restriction information, For the communication terminal whose aggregated degree value has reached a preset threshold value, the forced duplication is performed. And restriction information generating function to send a down load command, may be realized by the management server. In this configuration, when the degree of modification of the information file reaches a threshold in the communication terminal, the communication terminal receives a forced download command, and acquires the original information file based on the forced download command. Can be used.

A feature of the present invention is a communication terminal connected to a communication network,
An operation log acquisition unit that acquires an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition unit A modification information acquisition unit that acquires a modification degree value according to the above, and a degree value totaling unit that counts the degree value of modification acquired by the modification information acquisition unit every time an operation is performed on the information file. When it is determined that the degree value aggregated in the degree value aggregation unit has reached a preset threshold value, a restriction information generation unit that generates a deletion command for deleting the information file as restriction information is provided. In the point.

With this configuration, based on the operation log acquired by the operation log acquisition unit, the modification information acquisition unit acquired the degree value of modification of the information file, and the degree value aggregated by the degree value aggregation unit exceeded the threshold If it is determined, the restriction information generation unit generates restriction information for restricting operations on the operation file, so that the operation on the information file can be restricted. As a result, the existence of an inappropriate information file in the communication terminal can be suppressed by grasping an operation such as modification of the information file copied to the communication terminal. Also, with this configuration, the problem that the information file is further modified by deleting the information file in the communication terminal and the problem that the information file leaks due to careless handling by the user are solved.

A feature of the present invention is a communication terminal connected to a communication network,
An operation log acquisition unit that acquires an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition unit A modification information acquisition unit that acquires a modification degree value according to the above, and a degree value totaling unit that counts the degree value of modification acquired by the modification information acquisition unit every time an operation is performed on the information file. When it is determined that the degree value aggregated in the degree value aggregation unit has reached a preset threshold value, a forced download command for executing the download of the original information file corresponding to the information file is used as the restriction information. The restriction information generating unit is generated. In this configuration, when the degree of modification of the information file reaches the threshold value in the communication terminal, the original information file can be acquired and used based on the forced download command.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[Network management system]
As shown in FIG. 1, a management server A composed of a computer, a management terminal B composed of a computer that controls the management server A, a plurality of communication terminals C (client PCs) composed of computers, and a file server that functions as a storage D is connected to the communication network L. In this communication network L, the management server A and the management terminal B constitute a network management system.

  The communication network L is a CSMA / CD (Carrier Sense Multiple Access with Collision Detection) equipped with a cable for physically transmitting information in a limited facility such as a company or a school, and a repeater composed of a LAN switch or a hub. ) Type Ethernet (trademark) type LAN, this communication network L is constructed by an intranet using Internet technology in addition to the Ethernet type LAN, and WAN ( It may be constructed by the technology of Wide Area Network.

  The management server A includes a computer main body 1, a server monitor 2, a keyboard 3, a mouse M, and the like, and the management terminal B includes a computer main body 4, a management monitor 5, a keyboard 6, a track pad T, a mouse M, and the like, and the communication The terminal C includes a computer main body 7, a monitor 8, a keyboard 9, a track pad T, a mouse M, and the like.

  In the management terminal B, the mouse M, the track pad T, and the cursor key of the keyboard 6 function as a pointing device. Similarly, in the communication terminal C, the mouse M, the track pad T, and the cursor key of the keyboard 9 are pointing devices. Function as. The pointing device is not limited to these, and various functions such as using a trackball, forming a touch panel on the display surface of the management monitor 5 or the monitor 8, and using the touch panel can be used.

  In this network management system, the management server A acquires the operation screen G (image displayed on the desktop) displayed on the monitors 8 of the plurality of communication terminals C and the operation log of the communication terminal C via the communication network L. And perform processing necessary for management. Information generated by processing necessary for management by the management server A can be displayed on the server monitor 2, but this information is sent by the management server A to the communication network L and received by the management server A. It is displayed on the management monitor 5 of this management terminal B. When the management server A displays processing necessary for management on the server monitor 2, the server monitor 2 functions as a management monitor.

[System control systems and communication terminals]
An outline of a control system for realizing these displays can be shown as shown in FIG. That is, the communication terminal C includes the GUI unit 12 that controls the execution of the application 11 by displaying information necessary for the monitor 8 as an image such as an icon, and the image displayed on the monitor 8 when the application 11 is executed. An operation screen acquisition unit 13 that acquires (desktop image) as an operation screen G, an operation log acquisition unit 14 that acquires an operation log, and an operation log and an operation screen from the operation log acquisition unit are managed from the communication network L. An information transmission / reception unit 15 for transmission to the server; a file storage unit 16 for storing an information file used in the communication terminal C; a file management unit 17 for managing the information file; and a message displayed on the monitor 8 And a message display unit 18 for performing the operation.

  The operation screen acquisition unit 13 acquires an operation screen of about one frame per second, and compresses the acquired operation screen G into a format such as a JPEG format (a format established by the Joint Photographic Experts Group). Further, the operation log acquisition unit 14 acquires an operation log acquired at every set interval or when an event occurs. Thereby, the terminal identification information for identifying the communication terminal C, the operation screen G, and date / time information for specifying the acquisition date / time of the operation log are given and transmitted from the information transmitting / receiving unit 15 to the management server A.

  The file storage unit 16 is composed of a storage such as a hard disk, and the file management unit 17 not only acquires an information file via a media drive (not shown) of the communication terminal C, but also A function for obtaining (downloading) an information file from the file server D via the communication network L, a function for transferring the information file stored in the file storage unit 16 to the application 11, and information related to the information file Is transmitted to the message display unit 18 to display information related to the information file on the monitor 8.

  The operation screen acquisition unit 13, the operation log acquisition unit 14, the file management unit 17, and the message display unit 18 are configured by software, but a combination of software and hardware. You may comprise, and you may comprise with hardwares, such as a logic.

[Management server]
The management server A includes an information transmission / reception unit 21 that transmits / receives information to / from the communication network L, and an operation screen storage unit 22 that stores the operation screen G received by the information transmission / reception unit 21 in a memory or a hard disk HD. An operation log storage unit 23 (an example of an operation log acquisition unit / operation log acquisition function) that stores the received operation log in a memory or a hard disk HD, and a management screen generation unit 24 that generates the management screen 40 shown in FIG. An image output unit 25 for outputting the management screen 40 to the server monitor 2 is provided. The image output unit 25 also has a function of transmitting an image to be output to the server monitor 2 to the management terminal B via the communication network L and displaying it on the management monitor 5 of the management terminal B.

  Furthermore, the management server A analyzes the operation log stored in the operation log storage unit 23, and modifies the information file for each communication terminal C by operation based on the information from the operation log analysis unit 26. The modification information acquisition unit 27 that acquires the degree value of the operation, the operation point table 27T that sets the degree value of the modification from the operation on the information file acquired by the modification information acquisition unit 27 (an example of the modification information acquisition function), and the modification A degree value integrating unit 28 (an example of a degree value totaling unit / degree value totaling function) that integrates (an example of a process of summing up) degree values acquired from the information acquisition unit 27 and compares the result with a threshold value, and the degree value integrating unit 28 And a restriction information generation unit 29 (an example of a restriction information generation function) that transmits restriction information when it is determined that the degree value exceeds the threshold. Furthermore, the management server A includes a GUI unit 30 that realizes input of operation information while reflecting operation information from the keyboard 3 and mouse M on the server monitor 2.

  In this network management system, when the communication terminal C acquires (downloads) an information file from the file server D via the communication network L, the information file is acquired from a plurality of operation logs received by the management server A. The operation log analysis unit 26 performs processing so as to extract the operation log from the communication terminal C and the information log obtained by modifying the information file acquired from the file server D from the operation log. 27 obtains the degree value of modification. In this way, the process of extracting a specific communication terminal C from a plurality of operation logs and further extracting information related to a specific information file from the extracted operation logs is called tracking. An information file for acquiring information is called a tracking target.

  The information file to be tracked is not limited to the information file downloaded from the file server D, but includes an information file copied from the information file and an information file whose name has been changed.

  The operation of overwriting the information file set as the tracking target in the communication terminal C after editing, the operation of copying (copying) the information file, and the operation of changing the name of the file are defined as alterations, and the operation log The analysis unit 26 performs processing for acquiring the modification form of the information file set as the tracking target and the location of the modified information file as directory information, and the acquisition result is stored in the modification information acquisition unit 27 as a tracking log. Saved for each information file set as a tracking target. The tracking log also stores a degree value indicating the degree of modification.

  In addition to the processing by the operation log analysis unit 26 and the modification information acquisition unit 27 as described above, the management server A provides the operation screen G stored in the operation screen storage unit 22 to the management screen generation unit 24. Thus, information in which operation screens G from a plurality of communication terminals C are listed and arranged in the operation screen display area 40A of the management screen 40 shown in FIG. 3 is generated. The management screen 40 generated in this way is displayed on the management monitor 5 of the management terminal B by the image output unit 25 displaying it on the server monitor 2 or transmitting it to the management terminal B.

  The operation screen storage unit 22, the operation log storage unit 23, the management screen generation unit 24, the operation log analysis unit 26, and the modification information acquisition unit 27 are configured by software (program). It may be configured by a combination of software and hardware, or may be configured by hardware such as logic.

[Management terminal]
The management terminal B includes an information processing unit 33 that accesses information with an information transmission / reception unit 32 that transmits / receives information to / from the communication network L, and displays processed information on the management monitor 5. A GUI unit 34 is provided which implements input to the information processing unit while reflecting operation information from the mouse M or the like on the management monitor 5.

  In FIG. 2, the management terminal B receives processing information in the management server A and displays it on the management monitor 5. However, the management terminal B includes a part of the configuration shown in FIG. A part of the processing may be performed by the server A, and the remaining part of the processing may be performed by the management terminal B.

〔file server〕
The file server D includes an information storage unit 36 configured by a hard disk so as to store an information file (original information file), an information transmission / reception unit 37 that transmits / receives information to / from the communication network L, and an information And an information management unit 38 for managing the above. In the file server D, the authority to update the contents of the information file stored in the information storage unit 36 and to newly store the information file is given to the management server A (given to those who operate the management server A). Is).

  The file server D refers to all servers having a function of storing an information file connectable from the communication terminal C in the communication network L. The information file includes CAD data, image data, etc. in addition to document data. included.

〔Management screen〕
In the management screen 40, as shown in FIG. 3, a screen playback button 41, a log browsing button 42, a PC information button 43, a remote control button 44, an alert setting button 45, etc. are displayed in the upper position in the form of icons. An operation screen display area 40A, a message display section 40B, and a terminal list display section 40C are formed at the lower part of the screen 40.

  In the management screen 40, an operation required by the operation of the cursor Cu is realized. By operating the screen playback button 41 using the cursor Cu, the operation screen G is reproduced and displayed in the form of a moving image. A list of operation logs is displayed by operating the log browsing button 42, PC information of the communication terminal C is displayed by operating the PC information button 43, and the communication terminal C is operated by operating the remote control button 44. Remote control in the specified state is realized.

  In the operation screen display area 40A, an operation screen G is displayed in an inner area of a plurality of rectangular display frames E. Under the display frame E, identification information for identifying the communication terminal C and the communication terminal C are operated. An information display section Ea for displaying information such as the name of the user is formed. The message display unit 40B displays information necessary for processing, and the terminal list display unit 40C displays a list of information of the communication terminals C connected to the communication network L.

  As described above, since the operation screen acquisition unit 13 acquires the operation screen G of about one frame per second and transmits it to the management server A, the operation screen G displayed in the operation screen display area 40A has a time of about one second. It is updated at intervals and represents the status of the operation in real time. As a result, not only can the contents of the operation being performed at the communication terminal C be grasped, but also the presence or absence of an operation risk can be determined.

[Management of information files]
In this network management system, when an information file is downloaded from the file server D in the communication terminal C, the management server A determines the degree of alteration of the information file based on the operation log after this download. It is characterized in that a restriction process for restricting modification of the information file is performed based on the determination result.

  Note that “modification” refers to overwriting after an operation that changes part of the information file, copying part or all of the information file, moving the information file to a different level such as a folder, Refers to name change.

  This restriction process is shown in the flowchart of FIG. 4, and the information flow in the situation where this restriction process is performed is shown in the information chart of FIG. That is, when the management server A acquires the operation log of each communication terminal C and determines that an information file is newly downloaded from the file server D (an example of storage), the downloaded information file, The terminal identification information of the communication terminal C that performed the download is acquired, and the information file is set as a tracking target (steps # 101 to # 103).

  As described above, the operation log is always transmitted to the management server A when an event occurs in the communication terminal C, and the operation log transmitted from each communication terminal C is stored in the operation log together with the terminal identification information. Stored in the unit 23. When the operation log analysis unit 26 determines by analysis that a new information file has been downloaded based on the operation log, the operation log analysis unit 26 identifies the terminal identification information of the communication terminal C and information identifying the information file. (For example, a file name) is given to the modification information acquisition unit 27 and set as a tracking target.

  Next, the modification information acquisition unit 27 acquires a modification degree value of the information file to be tracked and information on the location of the information file based on the operation log, and saves it as a tracking log (step # 104).

  In this process, the operation log analysis unit 26 analyzes the contents of the operation log stored in the operation log storage unit 23, whereby an operation log including operation information for the operation file to be tracked is acquired. The degree of modification is digitized from the log based on the points (numerical values) in the operation point table 27T, whereby the numerical value is obtained and directory information indicating the location of the information file is obtained.

  The relationship between the operation mode and the degree value in the operation point table 27T can be shown as shown in FIG. That is, the points for the operation form are given as numerical values, such as 5 points for overwriting a file, 3 points for file copy, and 1 point for moving a file. When a plurality of information files exist by changing the name or copying, or when the location of the information file is changed, directory information indicating the location is stored as a tracking log.

  In the present invention, the modification degree value does not necessarily use the operation point table 27T in order to quantify the modification degree by an operation on the downloaded information file (original information file). For example, a number of coefficients greater than “1” are prepared corresponding to the operation mode, and each time an operation is performed on the information file, the operation is performed on the reference value. The degree value may be obtained by performing an operation of multiplying the calculated coefficient.

  Next, the degree values of the tracking logs set in each communication terminal C are integrated and compared with a threshold value, and if there is something exceeding the threshold value, the corresponding communication terminal C (degree value has exceeded the threshold value) The restriction information is transmitted to the communication terminal C) (steps # 105 to # 107).

  In this process, the degree value stored in the tracking log is accumulated in each communication terminal C by the degree value accumulation unit 28 (an example of the degree value aggregation unit), and is compared with a preset threshold value. When it is determined that the threshold value is exceeded in this process, the restriction information generation unit 29 transmits the restriction information to the corresponding communication terminal C. In addition, about 10 points are assumed as this threshold value.

  The processing in the degree value integration unit 28 does not have to be a processing form in which the degree values are simply integrated. For example, even when the same modification operation is performed, the process is performed after the modification point previously performed. In order to increase the modification point, the point is multiplied by a coefficient larger than “1” so as to increase corresponding to the number of modifications, and conversely, even when the same modification operation is performed, The processing mode may be set so that the point of modification performed later is smaller than the point of modification performed, and the point is multiplied by a coefficient smaller than “1” so as to increase corresponding to the number of modifications. .

  The restriction information is configured as a command for restricting an operation on the information file in the communication terminal C, the file management unit 17 performs processing corresponding to the command, and the message display unit 18 receives the command. The corresponding message is displayed on the monitor 8.

  More specifically, each communication terminal C designates an information file as restriction information for the information file, specifies a restriction command for disabling (locking) the information file, and designates the information file. A deletion command for forcibly deleting is generated by the restriction information generation unit 29 and transmitted to the communication terminal C. Further, although the operation is not limited, a forced download command for forcibly downloading the original information file from the file server D to the communication terminal C is also transmitted from the restriction information generating unit 29 to the communication terminal C.

  When the processing form that disables the modification of the information file is selected, the restriction information generating unit 29 transmits a restriction command, and when the control form for deleting the information file is selected, The restriction information generating unit 29 transmits a delete command and a forced download command for forcibly downloading the original information file.

  In the communication terminal C that has received this restriction information, the file management section 17 passes the restriction information to the message display section 18 so that the message display section 18 displays a message corresponding to the control information on the monitor 8 and this file. The management unit 17 executes a restriction command or a deletion command. When a delete command is sent, it is desirable to display a message before executing this delete command. However, when a limit command is sent, before and after executing this limit command, it is desirable to display a message. A message is displayed at any timing.

  Regardless of whether the restriction command or the delete command is executed, if there are a plurality of target information files, the location of the plurality of information files is specified by the directory information, and the command is executed. When the restriction command is executed, operations such as overwriting and copying for the information file become impossible (deletion may be allowed). When a delete command is executed, the corresponding information file (all information files if there are a plurality of information files) is deleted.

  In addition, when the information file downloaded to the communication terminal C is copied at the communication terminal C and is a plurality of information files, it is determined that one modification degree value of the plurality of information files exceeds the threshold value. In such a case, the processing mode may be set so that the restriction command is executed for the one information file.

  Thereafter, in the communication terminal C in which the information file is deleted by the delete command, the file management unit 17 stores the original information file of the already deleted information file on the file server D based on the forced download command. The forced download is executed upon request (steps # 108 and # 109).

  In this process, the file management unit 17 deletes the information file by executing a delete command, and then executes a forced download command to access the file server D and download the original information file. To do. As a result, the information file is replaced (updated) in the communication terminal C in which the original information file is forcibly downloaded.

  In the flowchart shown in FIG. 4, the original information file is forcibly downloaded after the information file is deleted. In the present invention, instead of this processing, the forcible download is performed in a state where the information file exists. It may be executed. In other words, if the original information file is forcibly downloaded to urge the use of the original information file, for example, the information file operation is maintained in a disabled state (locked state). In addition, after this forced download, the processing mode may be set so that the user can delete the information file that cannot be operated.

[Another Embodiment 1 of Restriction Processing]
As another embodiment-1, as shown in the flowchart of FIG. This flowchart has a structure in which new processing is performed between # 104 and # 105 in the flowchart of FIG. 4, and other processing forms are the same as those in the flowchart of FIG.

  That is, when the management server A acquires the operation log of each communication terminal C and determines that an information file is newly downloaded from the file server D (an example of storage), the downloaded information file, Obtain the terminal identification information of the communication terminal C that performed the download, set the information file as a tracking target, and obtain the degree of modification of the tracking target information file and the information on the location of the information file from the operation log. It is saved as a tracking log (steps # 201 to # 204, processing common to # 102 to # 104).

  Next, when the information file of the file server D is updated by the management server A, the setting value is added to the degree value (the degree value already acquired) corresponding to the updated information file (the setting value is increased). An example of processing is performed (steps # 205 and # 206).

  In this process, when the information file stored in the file server D is updated, the information file already downloaded is old information, and there is a difference in content compared to the updated information file. Therefore, even in a situation where the communication terminal C has not been modified, the information file that has already been downloaded in order to be handled in the same manner as the modified file, and the information file copied from this information file, will be of a moderate value. Processing for adding the set values is performed. Instead of the process of adding the set value, an operation of multiplying by a coefficient having a value larger than “1” may be performed.

  In this alternative embodiment, in addition to the process for increasing the degree value, a process for lowering the threshold value corresponding to the information file to be tracked may be performed. The process for increasing the degree value and the process for lowering the threshold value are performed simultaneously. It may be a thing.

  Next, the degree values of the tracking logs set in each communication terminal C are integrated and compared with a threshold value, and if there is something exceeding the threshold value, the corresponding communication terminal C (degree value has exceeded the threshold value) The restriction information is transmitted to the communication terminal C) (processing common to steps # 207 to # 209 and steps # 105 to # 107).

  Further, in the communication terminal C in which the information file is deleted by the delete command, the file management unit 17 requests the file server D for the original information file of the already deleted information file based on the forced download command. By doing so, the forced download is executed (processing common to # 210, # 211 steps, # 108, # 109 steps).

  In this process, after the information file is deleted, the original information file is forcibly downloaded.In the present invention, instead of this process, the forced download is executed in a state where the information file exists. There may be. In other words, if the original information file is forcibly downloaded to urge the use of the original information file, for example, the information file operation is maintained in a disabled state (locked state). In addition, after this forced download, the processing mode may be set so that the user can delete the information file that cannot be operated.

[Another Embodiment of Restriction Processing-2]
As another embodiment-2, as shown in the flowchart of FIG. In this alternative embodiment-2, the processing of step # 205 (step # 305 in this alternative embodiment) is different from that shown in the flowchart of FIG. The process is common to the flowchart of FIG.

  That is, when the management server A acquires the operation log of each communication terminal C and determines that an information file is newly downloaded from the file server D (an example of storage), the downloaded information file, Obtain the terminal identification information of the communication terminal C that performed the download, set the information file as a tracking target, and obtain the degree of modification of the tracking target information file and the information on the location of the information file from the operation log. Save as a tracking log (steps # 301 to # 304).

  Next, for the information file downloaded from the file server D, when it is determined that the set time has passed since the download, the set value is added to the degree value corresponding to the information file (the degree value already acquired). (An example of processing for increasing the set value) is performed (steps # 305 and # 306).

  In this process, the information file downloaded from the file server D becomes an older information file as time elapses (corresponding to the elapsed time) with reference to the download, so it is desirable to update it as soon as possible. For this reason, even if the communication terminal C has not been altered, the information file and the information file copied from this information file each time the set time elapses on the basis of download Processing for adding the set values is performed. Instead of the process of adding the set value, an operation of multiplying by a coefficient having a value larger than “1” may be performed.

  In this alternative embodiment, in addition to the process for increasing the degree value, a process for lowering the threshold value corresponding to the information file to be tracked may be performed. The process for increasing the degree value and the process for lowering the threshold value are performed simultaneously. It may be a thing. In particular, in this process, the processing mode may be set so that the threshold value is slightly increased when the degree value is increased, or the degree value is slightly decreased when the threshold value is lowered. Even in the form, a situation can be created in which the degree value reaches the threshold earlier as the elapsed time from the download becomes longer as a result.

  Next, the degree values of the tracking logs set in each communication terminal C are integrated and compared with a threshold value, and if there is something exceeding the threshold value, the corresponding communication terminal C (degree value has exceeded the threshold value) The restriction information is transmitted to the communication terminal C) (steps # 307 to # 309).

  Further, in the communication terminal C in which the information file is deleted by the delete command, the file management unit 17 requests the file server D for the original information file of the already deleted information file based on the forced download command. As a result, forced download is executed (steps # 310 and # 311).

  In this process, after the information file is deleted, the original information file is forcibly downloaded.In the present invention, instead of this process, the forced download is executed in a state where the information file exists. There may be. In other words, if the original information file is forcibly downloaded to urge the use of the original information file, for example, the information file operation is maintained in a disabled state (locked state). In addition, after this forced download, the processing mode may be set so that the user can delete the information file that cannot be operated.

[Concept of the Invention]
Thus, in the present invention, when an information file is downloaded from the file server D at the communication terminal C, the degree of modification of the information file is modified with the operation log analysis unit 26 of the management server A after the download. The information acquisition unit 27 digitizes and stores it as a degree value in the tracking log, and further determines whether the restriction is possible by integrating the degree value and comparing it with a threshold value. If the degree of modification is large for the communication terminal C, even if a plurality of information files are created, forcibly deleting these information files will cause an inappropriate information file in the communication terminal C. It avoids the increase and inconvenience of flowing out.

  In particular, after the information file is forcibly deleted, the original information file is forcibly downloaded to promote proper use of the file.

[Another embodiment]
The present invention may be configured as follows in addition to the embodiment described above.

(A) As shown in FIG. 9, a part of the functions of the management server A shown in the embodiment is provided to constitute a communication terminal C. In the same figure, those having the same functions as those in the above embodiment are given the same numbers and symbols as those in the embodiment.

  The communication terminal C includes a monitor 8, an application 11, a GUI unit 12, an operation screen acquisition unit 13, an operation log acquisition unit 14, an information transmission / reception unit 15, a file storage unit 16, a file management unit 17, and a message display unit 18. ing. The communication terminal C further includes an operation log storage unit 23 (operation log acquisition unit) that stores an operation log in a memory or a hard disk HD, and an operation log analysis unit 26 that analyzes the operation log stored in the operation log storage unit 23. A modification information acquisition unit 27 that acquires a modification degree value by an operation on the information file based on information from the operation log analysis unit 26, and a modification degree value from the operation on the information file acquired by the modification information acquisition unit 27 An operation point table 27T for setting the value, a degree value accumulating unit 28 (an example of a degree value aggregating unit) that integrates (an example of a process for aggregating) the degree values acquired from the modification information acquisition unit 27, and compares the result with a threshold value; The degree value integrating unit 28 includes a restriction information generating unit 29 that generates restriction information when it is determined that the degree value exceeds the threshold value.

  In this communication terminal C, the process performed in the management server A of the embodiment is performed in the communication terminal C, and the process form is common to the flowchart shown in FIG. Therefore, in this communication terminal C, based on the operation log acquired by the operation log acquisition unit 14, the modification information acquisition unit 27 acquires the degree value of the information file modification, and the degree that the value accumulation unit 28 has aggregated. When it is determined that the value exceeds the threshold value, the restriction information generation unit 29 generates restriction information for restricting operations on the operation file. This makes it possible to limit operations on the information file.

(B) The type of information file is set in advance as an information file for which the operation is restricted (to be tracked). That is, a document file, a text file, or the like that is likely to be modified by the communication terminal C is set as a tracking target, and a file that is difficult to be modified, such as an audio file or a moving image file, is excluded from the tracking target. By performing such setting, the processing load on the management server A can be reduced.

Diagram showing an overview of a communication network Block circuit diagram showing the configuration of the management server and communication terminal etc. Figure showing the management screen Flow chart of restriction process Information chart showing the flow of information Diagram showing the operation point table The flowchart which shows another embodiment-1 of a restriction | limiting process The flowchart which shows another embodiment-2 of a restriction | limiting process Block circuit diagram showing the configuration of another embodiment (a)

Explanation of symbols

8 Monitor 23 Operation log acquisition unit (Operation log storage unit)
27 Modification information acquisition unit 28 About value totaling unit (about value accumulation unit)
29 Restriction information generation part A Management server C Communication terminal D Storage (file server)
L Communication network

Claims (8)

A network management system including a management server for managing communication terminals connected to a communication network,
The management server is based on an operation log acquisition unit that acquires an operation log from the communication terminal, and an operation content for an information file that is a copy of an original information file included in the operation log acquired by the operation log acquisition unit. A modification information acquisition unit that acquires a degree value of modification by an operation on the information file;
A degree value totaling unit that counts the degree value of modification acquired by the modification information acquisition unit each time an operation is performed on the information file;
When it is determined that the degree value aggregated in the degree value aggregation unit has reached a preset threshold value, a deletion command that causes the communication terminal to delete the information file acquired by the communication terminal is limited information. A network management system comprising a restriction information generation unit that transmits the deletion command to a communication terminal that has been generated as described above and whose aggregated degree value has reached a preset threshold value . A network management system including a management server for managing communication terminals connected to a communication network,
The management server is based on an operation log acquisition unit that acquires an operation log from the communication terminal, and an operation content for an information file that is a copy of an original information file included in the operation log acquired by the operation log acquisition unit. A modification information acquisition unit that acquires a degree value of modification by an operation on the information file;
A degree value totaling unit that counts the degree value of modification acquired by the modification information acquisition unit each time an operation is performed on the information file;
When it is determined that the degree value aggregated in the degree value aggregation unit has reached a preset threshold value, a forced download command for executing the download of the original information file corresponding to the information file is limited information. network management system for generating, the aggregated degree value is provided to the communication terminal reaches a preset threshold value, the control information generation unit configured to transmit the forcible download command as. When the information file is stored in a storage connected to the communication network and the information file stored in the storage is updated, the degree value in the communication terminal that downloaded the information file from the storage before the update is set. increase, or, a network management system according to claim 1 or 2 lower the threshold. The information file is stored in a storage connected to the communication network, and when the information file is downloaded from the storage, the communication terminal that has performed the download corresponds to the elapsed time from the download in the communication terminal. network management system according to any one of claims 1 to 3, changing at least one of the degree value and the threshold value. A network management program for managing communication terminals connected to a communication network,
An operation log acquisition function for acquiring an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition function Modification information acquisition function to acquire the degree of modification by
A degree value totaling function for totaling the degree values of modification acquired by the modification information acquisition function each time an operation is performed on the information file;
When it is determined that the degree value aggregated in the degree value aggregation function has reached a preset threshold value, a deletion command for deleting the information file acquired by the communication terminal at the communication terminal is limited information. generated as the relative aggregated communication terminal degree value reaches a preset threshold, control information generation function and a program for network management implemented by the management server of sending the delete command. A network management program for managing communication terminals connected to a communication network,
An operation log acquisition function for acquiring an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition function Modification information acquisition function to acquire the degree of modification by
A degree value totaling function for totaling the degree values of modification acquired by the modification information acquisition function each time an operation is performed on the information file;
When it is determined that the degree value aggregated by the degree value aggregation function has reached a preset threshold value, a forced download command for executing the download of the original information file corresponding to the information file is limited information. A network management program that realizes, by a management server, a restriction information generation function that transmits the compulsory download command to a communication terminal that has been generated as described above and whose aggregated degree value has reached a preset threshold value. A communication terminal connected to a communication network,
An operation log acquisition unit that acquires an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition unit And a modification information acquisition unit that acquires a degree value of modification by
Each time an operation is performed on the information file, the modification information acquisition unit includes a degree value totaling unit that totals the degree of modification acquired. A communication terminal provided with a restriction information generating unit for generating, as restriction information, a delete command for deleting the information file when it is determined that the information file has been reached. A communication terminal connected to a communication network,
An operation log acquisition unit that acquires an operation log from the communication terminal and an operation on the information file based on an operation content on the information file that is a copy of the original information file included in the operation log acquired by the operation log acquisition unit And a modification information acquisition unit that acquires a degree value of modification by
Each time an operation is performed on the information file, the modification information acquisition unit includes a degree value totaling unit that totals the degree of modification acquired. The degree value aggregated in the degree value totaling unit is set to a preset threshold. A communication terminal comprising a restriction information generating unit that generates, as restriction information, a forced download command for executing download of an original information file corresponding to the information file when it is determined that the information file has been reached.

Images