JP4772022B2 - Data management system and data management method - Google Patents

Description

  The present invention relates to a data management system and a data management method for managing data when the digitized data is written on a storage medium and taken out.

  As a storage medium for storing digitized data, a small storage medium such as a USB memory is widely used. When such a small storage medium is used, it is easy to take out data, so it is necessary to manage the taking out of data. In particular, when the data is confidential information or business information converted into data, various important information is included in the data. Therefore, data take-out management is particularly important in companies and the like.

For this reason, there is a system for managing data using a confidential flag indicating confidential information (see, for example, Patent Document 1). In this system, a confidential flag indicating that the content of the data is confidential information is stored in association with the data in advance. When the data is read, it is determined whether the data corresponds to the confidential information using the associated confidential flag. If the data is the confidential information, the ID (IDentification) of the terminal from which the data is read is determined. Is stored and data is managed.
JP 2007-11521 A

  By the way, the system described above has the following problems. That is, in this system, it is necessary to associate a confidential flag with each data in advance. That is, it is necessary to determine whether the data is confidential information in advance and distribute the data. However, data used in companies and the like may be updated, and in such cases, the data may become confidential information and vice versa. In particular, if the confidential information is changed when the data is updated, the data will not be classified unless the confidential flag is changed. In other words, if the secret flag is assigned in advance, a problem occurs in data management.

  An object of the present invention is to provide a data management system and a data management method for solving the above-mentioned problems and managing the taking-out of data without making it necessary to sort out whether the data is confidential information in advance.

In order to solve the above-mentioned problems, the invention of claim 1 is characterized in that a storage medium on which data can be written can be used and a personal computer used in each group of an organization and data handled by the personal computer. A management server that manages the confidential information of the group and a database server that stores the importance data for each group to which the importance is added for each group as data necessary for the management of the confidential information is connected to be able to perform data communication. The management server is configured such that the management server weights words that appear commonly in each collected document by a predetermined analysis method, and weights words that appear in a specific document high, and the analysis method The keyword weighted by the keyword is used as a keyword, and a value representing the importance according to the weight is assigned to the keyword. Added to, and the keyword, stored in the database server as confidential data in association with each group using the keyword, the personal computer, when writing data in the storage medium, extracts words from the data The word and the keyword of the confidential data of the database server are compared to determine whether the data is confidential information. When the data is confidential information, a group that uses the keyword included in the data is If there is, the keyword is divided into groups, the importance of each keyword divided for each group is totaled, the group-by-group importance obtained by the aggregation is compared with the group-level importance data, and the group importance If time is greater importance and aggregated as compared to, it is determined that the data corresponds to the confidential information of the group, A data management system characterized and.

In the invention of claim 1, the database server stores in advance keywords representing confidential information as confidential data. In such a state, when writing data to a storage medium such as a USB memory, the personal computer extracts words from the written data. Thereafter, the personal computer compares the word extracted from the data with the keyword of the confidential data to determine whether the data is confidential information.

According to a second aspect of the present invention, in the data management system according to the first aspect, when the data written to the storage medium is confidential information, the personal computer sends log information of the data to the database server , and the database When the server receives log information from the personal computer, the server records the log information.

  According to a third aspect of the present invention, in the data management system according to the second aspect, the log information includes an execution user who writes data to the storage medium, a name given to the data, and a date on which the data is written. And at least one of time.

According to a fourth aspect of the present invention, in the data management system according to the second or third aspect , when the data to be written is confidential information, the personal computer requests input of the reason for taking out the data, and the reason for taking out is specified. The data and the reason for taking out are added to the log information.

According to a fifth aspect of the present invention, there is provided a personal computer that can use a storage medium on which data can be written and is used in each group of an organization, and a management server that manages confidential information in data handled by the personal computer. A data management method for a system in which, as data necessary for management of confidential information, a database server that stores importance data for each group to which importance is added for each group is connected so that data communication is possible. The management server assigns a low weight to words commonly appearing in each collected document by a predetermined analysis method, assigns a high weight to words appearing in a specific document, and assigns words weighted by the analysis method to keywords. And a value indicating importance according to the size of the weight is added to the keyword, and the key Is stored in the database server as confidential data in association with a group that uses the keyword, and when the data is written to the storage medium by the personal computer, the word is extracted from the data, In contrast to the keyword of the confidential data of the database server, it is determined whether or not the data is confidential information. When the data is confidential information, if there is a group that uses the keyword included in the data, The keywords are divided into groups, the importance of each keyword divided for each group is aggregated, and the importance for each group obtained by aggregation is compared with the importance data for each group, and compared with the importance of the group. If aggregation degree of importance is high, it is determined that the data corresponds to the confidential information of the group, to characterized in that It is a data management method.

According to the first and fifth aspects of the present invention, since it is determined whether or not the written data is confidential information when the data is written to the recording medium, the data is updated when the data is updated as in the prior art. Can be prevented from being affected by data updates, such as being unmanaged from confidential information. In addition, files taken out can be managed according to each group of the organization.

According to the invention of claim 2, when the data written to the storage medium is confidential information, the log information is stored in the database server. Therefore, when the data is leaked, the related information of the leaked data and the log information are collated. This makes it possible to identify the source of information leakage.

  According to the invention of claim 3, since the log information includes the execution user who writes the data to the storage medium, the name attached to the data, and the date and time of writing, the data amount of the log information is reduced and the load on the storage means is reduced. Can be lightened.

According to the invention of claim 4 , when the reason for taking out the data to be written into the storage medium is a predetermined reason for taking out, the data and the reason for taking out are added to the log information and recorded, so that data is managed for each reason for taking out. Make it possible to do. In addition, when data leaks from an organization, it is possible to identify the leaked source of information by collating the leaked content with log information data.

  Next, embodiments of the present invention will be described in detail with reference to the drawings. Important information in a company includes confidential information and business information. In the following embodiment, confidential information handled in a company will be described as an example. In other words, in the following embodiment, confidential information is converted into data as management target data.

(Embodiment 1)
A data management system according to this embodiment will be described with reference to FIGS. As shown in FIG. 1, this data management system includes data among the data handled by each personal computer (PC) 11 in the sales department provided in the company, and each personal computer (PC) 12 in the general affairs department. Is managed by a person in charge of management, a management server 1 for managing various data, a database server 2 for storing data, in addition to each personal computer 11 and each personal computer 12. A management personal computer (PC) 3. The management server 1, the database server 2, the management personal computer 3, each personal computer 11, and each personal computer 12 are connected by a local area network NW so that data communication is possible.

  The management server 1 stores various data handled in the company in the database server 2 for management. When the management server 1 receives data log information from the personal computer 11 or the personal computer 12, the management server 1 stores the received log information in the database server 2.

  In addition, employee data is data that the management server 1 records in the database server 2. The employee data records the affiliation of each employee, and this employee data is shown in FIG. In the employee data, an employee number for identifying the employee in the company and the name of the employee are recorded. In the employee data, a user ID (IDentification), which is identification information when using a computer in a company, and a password are recorded. Furthermore, the employee data records employee affiliations (groups) within the company. Such employee data is recorded in an employee DB (database) of the database server 2.

  There is confidential data as data that the management server 1 records in the database server 2. The confidential data is a word that characterizes confidential information in a document, and the management server 1 creates the confidential data as follows. The management server 1 collects documents including confidential information among documents handled by the personal computers 11 and 12. For example, documents that are already classified, such as documents that include drawings, documents that are handled by a specific group such as a research department, and the like are documents to be collected.

  When collecting documents including confidential information, the management server 1 weights words included in each document using an analysis method such as a TF (Term Frequency) / IDF (Inverse Document Frequency) method. The TF / IDF method weights words by reducing the importance of words appearing frequently and increasing the importance of words appearing less frequently in the collected documents. Thereby, the importance of common words appearing in each collected document is weighted low, and the words appearing in a specific document are weighted high.

  The management server 1 weights the words in each document to obtain keywords, and classifies each keyword according to the magnitude of the weight. Then, the management server 1 attaches a value indicating the importance to the classified keyword and stores it as confidential data in the confidential information DB (database) of the database server 2. The confidential data stored in the database server 2 is shown in FIG. In the confidential data, numerical values “1” to “5” are assigned as importance levels to keywords that are extracted by the TF / IDF method and weighted. Further, the group to which the keyword belongs is recorded in the confidential data. That is, each group has a unique keyword.

  It is also possible for the manager in charge to edit the keyword of the confidential data by operating the management personal computer 3. In other words, keywords can be added to the confidential data and the importance can be changed.

  As data recorded in the database server 2 by the management server 1, there is importance data for each group. The importance data for each group represents the importance of each group in the company, and this importance data for each group is shown in FIG. In the importance data for each group, each department in the company is defined as each group, and the importance of each group is expressed numerically. Such group importance data is recorded in the group server transmission determination DB (database) of the database server 2.

  Since the personal computer (PC) 11 used in the sales department and the personal computer (PC) 12 used in the general affairs department are basically the same, the personal computer 11 will be described as an example. As shown in FIG. 2, the personal computer 11 is a computer that can use the USB memory 20, and as shown in FIG. 3, a processing unit 11B, a storage unit 11C, and the like connected to a bus 11A for transmitting data and the like. A display unit 11D, an input unit 11E, a USB interface (I / F) 11F, a reading unit 11G, and a communication unit 11H are provided.

  The input unit 11E is an input device such as a keyboard and a mouse, and data, various instructions, and the like are input to the input unit 11E. The display unit 11D is a display device such as an LCD (Liquid Crystal Display), and displays data and the like input to the input unit 11E under the control of the processing unit 11B. The USB interface 11F is an interface for connecting the USB memory 20, and reads / writes data from / to the USB memory 20 under the control of the processing unit 11B. The reading unit 11G is an apparatus that optically reads a handwritten character or a printed character to form an image. The communication unit 11H performs data transmission / reception with the management server 1 and the like using the local area network NW under the control of the processing unit 11B. The storage unit 11C stores various programs for the personal computer 11. Further, the data input to the input unit 11E is temporarily stored under the control of the processing unit 11B.

  The processing unit 11 </ b> B performs various processes related to the personal computer 11. For example, after the personal computer 11 is activated, the processing unit 11B stores the user ID and password input to the input unit 11E in the storage unit 11C in order to put the personal computer 11 into a use state.

  Further, the processing unit 11B executes various programs stored in the storage unit 11C. The program executed by the processing unit 11B includes OCR (Optical Character Reader) processing. The OCR process is a process of identifying a character from an image read by the reading unit 11G or the like and converting it into text.

  The program executed by the processing unit 11B includes a writing process. The writing process is a program that is executed when the USB memory 20 is connected to the USB interface 11F. By this writing process, file format data can be written to the USB memory 20. That is, the writing process is a write-only program for a small storage medium such as the USB memory 20. Data that can be written to the USB memory 20 by the writing process includes a document file and an image file.

  The program executed by the processing unit 11B includes a data determination process. The data determination process is a program for determining and managing whether or not confidential information is included in the data contents when writing data such as a file in a small storage medium such as the USB memory 20. The data determination process is performed after the writing process is activated. This data determination process is shown in FIGS. Note that data determination processing may be added to a program dedicated to writing on a small storage medium. In other words, the writing process and the data determination process may be combined into a single program for writing to a small storage medium.

  When the data determination process is started, the processing unit 11B performs a file designation process (step S1). The file designation process in step S1 is the process shown in FIG. 8, and the processing unit 11B has a file to be written to the small storage medium (hereinafter referred to as “take-out file”) and a write-out destination of the take-out file (hereinafter referred to as “take-out destination”). ) Is displayed (step S21), and the input of the takeout file and the takeout destination is awaited (step S22). In this embodiment, the take-out destination is the USB memory 20. After step S22, if there is an input for designating a take-out file and a take-out destination (step S23), the processing unit 11B waits for an input of a take-out file write instruction (step S24). If there is a write instruction (step S25), the processing unit 11B ends the file designation process. If there is no input for designating the take-out file and the take-out destination in step S23, or if there is no write instruction in step S25, the processing unit 11B returns the process to step S22.

  When the file designating process in step S1 ends, the processing unit 11B extracts text from the taken-out file (step S2) and determines whether there is text (step S3). If there is text in the taken-out file, the processing unit 11B checks a keyword representing confidential information by pattern matching (step S4). The pattern matching in step S4 is a process of finding out a keyword included in the take-out file by comparing the text of the take-out file with the keyword of the confidential data (FIG. 5). In addition, the processing unit 11B uses the execution user who takes out the file, the execution date and time, and the file name of the taken-out file as log information. The execution user is information including the user ID and password of employee data (FIG. 4) input to the personal computer 11 when a person in charge of the sales department starts operation of the personal computer 11, for example. It is memorized information.

  Thereafter, the processing unit 11B determines whether the taken-out file corresponds to confidential information from the result of pattern matching in step S4 (step S6). If the taken-out file is confidential information, the processing unit 11B performs a grouping process (step S7). The grouping process in step S7 is the process shown in FIG. 9, and the processing unit 11B counts the importance of the confidential information for each group (step S41). For example, as illustrated in FIG. 12, when the text includes keywords such as “transportation cost” and “estimated amount”, the processing unit 11 </ b> B divides the keywords into groups using confidential data (FIG. 5). Thereafter, the processing unit 11B aggregates the importance of each keyword and calculates the importance for each group.

  When step S41 is completed, the processing unit 11B compares the importance for each group obtained by the aggregation and the importance data for each group (FIG. 6) (step S42), and the importance for each group obtained by the aggregation. Whether or not is large is determined (step S43). When the importance by group obtained by the aggregation is larger than the importance data by group (FIG. 6), the processing unit 11B assumes that the taken-out file is confidential information and corresponds to the confidential information of a specific group. The file body, which is the content of the take-out file, and a keyword representing the detected confidential information are added to the log information, the log information in step S5 is changed (step S44), and the grouping process ends. In step S43, if the importance by group obtained by the aggregation is smaller than the importance data by group (FIG. 6), the processing unit 11B ends the grouping process without changing the log information in step S5. To do.

  When the grouping process in step S7 ends, the processing unit 11B performs a take-out reason designation process (step S8). The take-out reason designation process in step S8 is the process shown in FIG. 10, and the processing unit 11B controls the display unit 11D to display a take-out reason selection screen (step S61). Each take-out reason is displayed on the take-out reason selection screen. The reason for taking out is, for example, “providing to a contractor” or “taking outside”. After step S61, the processing unit 11B waits for selection input of the take-out reason (step S62). If there is no selection input (step S63), the processing unit 11B returns the process to step S62.

  If there is a selection input for the reason for take-out in step S63, the processing unit 11B determines whether there is a specific take-out reason (hereinafter referred to as “specific reason”) designated in advance among the selected reasons for take-out. (Step S64). If there is a specific reason for the selected take-out reason, the processing unit 11B adds the selected take-out reason, the file body that is the content of the take-out file, and a keyword representing the detected confidential information to the log information, The log information is changed (step S65), and the take-out reason designation process is terminated. If there is no specific reason for the selected take-out reason in step S64, the processing unit 11B ends the grouping process without changing the log information. Further, when the log information already includes a file body and a keyword representing the detected confidential information, the processing unit 11B changes the log information by adding only the selected take-out reason to the log information.

  When step S8 ends, the processing unit 11B controls the communication unit 11H to transmit log information to the management server 1 (step S9). Thereafter, the processing unit 11B writes the taken-out file in the USB memory 20 connected to the USB interface 11F, that is, the small storage medium (step S10), and ends the data determination process.

  On the other hand, if there is no text in the taken-out file in step S3, the processing unit 11B performs OCR processing on the taken-out file (step S11). That is, the processing unit 11B performs processing for identifying characters from the taken-out file and converting them into a document. Thereafter, the processing unit 11B determines whether or not text has been extracted (step S12). When the text is extracted, the processing unit 11B performs the processing after step S4.

  If no text is extracted, the processing unit 11B performs a file number determination process (step S13). The taken-out file number determination process in step S13 is the process shown in FIG. 11, and the processing unit 11B checks the number of taken-out files specified in step S1 (step S81) and determines whether there are a plurality of taken-out files (step S81). S82). When there are a plurality of files to be taken out, the processing unit 11B controls the display unit 11D to display an error message indicating that the file cannot be taken out (step S83), and ends the file number determination process. If there is only one file to be taken out in step S82, the processing unit 11B uses the execution user who takes out the file, the execution date and time, and the file name of the taken-out file as log information (step S84). Thereafter, the processing unit 11B controls the communication unit 11H to transmit log information to the management server 1 (step S85), and writes a take-out file to the USB memory 20 connected to the USB interface 11F (step S86). Then, the file number determination process is terminated.

  In this way, the processing unit 11B performs the data determination process shown in FIGS. When the data determination process ends, the processing unit 11B then ends the write process.

  Next, a data management method using the data management system of this embodiment will be described. The management server 1 creates confidential data (FIG. 5) by converting words characterizing confidential information in the document into data, and stores this data in the database server 2. At this time, the management server 1 collects documents including confidential information among documents handled by the personal computers 11 and 12, and creates confidential data (FIG. 5). Further, the person in charge of management may operate the management personal computer 3 to create confidential data (FIG. 5). Furthermore, the confidential data (FIG. 5) stored in the database server 2 can be corrected from the management personal computer 3.

  In such a state, for example, when a sales representative uses the personal computer 11, the personal computer 11 is activated and the user ID and password registered in the employee data (FIG. 4) are input to the personal computer 11. Then, the personal computer 11 is put into use. At this time, the personal computer 11 stores the input user ID and password. Thus, the person in charge uses the personal computer 11. Thereafter, the person in charge inserts the USB memory 20 into the personal computer 11 in order to use the USB memory 20. Furthermore, when a file stored in the personal computer 11 is to be written to the USB memory 20, a write-only program is executed, a writing process is performed, and then a data determination process is performed.

Thereafter, when a file is designated by the person in charge and a write instruction is input to the personal computer 11, if there is text in the take-out file, the personal computer 11 determines whether the content of the take-out file is confidential information. Depending on whether or not the file is written in the USB memory 20 according to the importance of the file to be taken out and the reason for taking it out, the next log information is transmitted to the database server 2.
a. If the taken-out file is not confidential information, log information including the execution user, execution date and time, and file name is transmitted.
b. When the taken-out file is confidential information, log information including an execution user, an execution date and time, and a file name is transmitted when the importance calculated is lower than the importance of each group set in advance.
c. When the taken-out file is confidential information, log information consisting of the execution user, execution date / time, file name, file body, and detected keyword is displayed when the importance is higher than the pre-set importance of each group. Send.
e. When the taken-out file is confidential information, when a specific reason is included in the taken-out reason, log information including the execution user, the execution date and time, the file name, the file body, and the reason for taking out is transmitted.
f. If the file to be taken out is confidential information, the importance calculated is higher than the importance of each group set in advance, and if the reason for taking out includes a specific reason, the execution user, execution date and time, file Send log information consisting of name, file body, detected keyword, and reason for taking out.

  When the management server 1 receives such log information, the management server 1 records the log information in the database server 2 and manages information on the taken-out file. If confidential information is leaked, the person in charge of management operates the management personal computer 3 to refer to log information and employee data (FIG. 4) recorded in the database server 2, and also to the file body. It is possible to find out the source of information leaks depending on the reason for taking it out.

  Thus, according to this embodiment, when data is written to a small storage medium such as the USB memory 20, it is determined whether or not it is confidential, so that it is not affected by data update as in the prior art. Also, according to this embodiment, when data is written to a small storage medium, it is determined whether or not the data is confidential information, so that the confidential flag is updated when the file is updated as in the prior art. Can be made unnecessary. Further, when the taken-out file is confidential information, it is determined whether or not the file body is recorded in the database server 2 as log information according to the importance or the reason for taking out, so the data amount of the log information stored in the database server 2 And the burden on the database server 2 can be reduced. In addition, it is possible to manage take-out files according to the group and according to the reason for take-out. For example, it is possible to identify the information leakage source by collating the leaked content with the file body.

(Embodiment 2)
In this embodiment, instead of the data determination process of the first embodiment, a simplified one is used. In this embodiment, components that are the same as or the same as those in the previous embodiment are given the same reference numerals, and descriptions thereof are omitted. In this embodiment, the data determination process of FIG. 13 is used. That is, this data determination process omits the grouping process in step S7 and the take-out reason designation process in step S8 in the data determination process of the first embodiment. Instead of these processes, the processing unit 11B changes the log information after step S6 by adding the file body that is the contents of the taken-out file and a keyword representing the detected confidential information to the log information. (Step S7A), the next step S9 is performed.

  According to this embodiment, when writing to a small storage medium, since it is determined whether or not it is confidential, there is no influence of data update as in the conventional case. Also, according to this embodiment, when writing a file to a small storage medium, it is determined whether or not the file is confidential information. Therefore, the confidential flag is updated at the time of updating the file as in the prior art. Can be made unnecessary. Furthermore, according to this embodiment, since the file body is stored in the database server 2 as log information, it is possible to identify the leaked information source by collating the leaked content with the file body.

(Embodiment 3)
In this embodiment, a simplified version of the data determination process of the first embodiment is used. In this embodiment, components that are the same as or the same as those in the previous embodiment are given the same reference numerals, and descriptions thereof are omitted. In this embodiment, in the data determination process of the first embodiment, either the grouping process in step S7 or the take-out reason specifying process in step S8 is omitted.

  According to such an embodiment, since it is determined whether to record the file body as log information in the database server 2 according to the importance level or for the reason of taking out, the data amount of the log information stored in the database server 2 Can be reduced.

  As mentioned above, although each embodiment of this invention has been described in detail, the specific configuration is not limited to each embodiment, and even if there is a design change or the like without departing from the gist of this invention, It is included in this invention. For example, in each embodiment, the USB memory 20 is taken as an example of the small storage medium. However, the small storage medium is not limited to this, and may be, for example, a mass storage device capable of USB connection. .

It is a block diagram which shows the data management system by Embodiment 1 of this invention. It is a perspective view which shows a personal computer and a USB memory. It is a block diagram which shows an example of the personal computer used in each division. It is a figure which shows an example of the employee data which a database server memorize | stores. It is a figure which shows an example of the confidential data which a database server memorize | stores. It is a figure which shows an example of the importance data classified by group which a database server memorize | stores. It is a flowchart which shows a data determination process. It is a flowchart which shows a file specification process. It is a flowchart which shows a grouping process. It is a flowchart which shows a take-out reason designation | designated process. It is a flowchart which shows a file number discrimination | determination process. It is a figure explaining grouping of confidential information. 10 is a flowchart illustrating data determination processing according to the second embodiment.

Explanation of symbols

1 management server 2 database server (storage means)
11, 12 Personal computer 20 USB memory (storage medium)

Claims (5)

Necessary for managing confidential information, a personal computer that can use a storage medium that can write data, and that is used in each group of the organization, a management server that manages confidential information in the data handled by the personal computer, and As a data management system, a data base system that stores importance data for each group to which importance is added for each group is connected to the database server so that data communication is possible.
The management server weights words that appear in common in each collected document by a predetermined analysis method, weights words that appear in a specific document high, and uses the words weighted by the analysis method as keywords. And adding a value representing importance in accordance with the size of the weight to the keyword, associating the keyword with a group using the keyword and storing it as confidential data in the database server,
The personal computer, when writing data in the storage medium, extracts words from the data, and comparing the keyword of the sensitive data of the database server and said word, said data to determine whether confidential information When the data is confidential information, if there is a group that uses the keywords included in the data, the keywords are divided into groups, and the importance of each keyword divided for each group is tabulated and tabulated. Comparing the obtained importance by group and the importance data by group, and determining that the data corresponds to the confidential information of the group when the importance calculated is larger than the importance of the group;
A data management system characterized by that. When the data to be written to the storage medium is confidential information, the personal computer sends log information of the data to the database server ,
The data management system according to claim 1, wherein when the database server receives log information from the personal computer, the database server records the log information.   3. The log information includes an execution user who writes data to the storage medium, a name given to the data, and at least one of a date and time at which the data is written. Data management system. The personal computer requests input of the reason for taking out the data when the data to be written is confidential information, and adds the data and the reason for taking out to the log information when the reason for taking out is a specific reason for taking out. 4. The data management system according to claim 2 or 3 , wherein: Necessary for managing confidential information, a personal computer that can use a storage medium that can write data, and that is used in each group of the organization, a management server that manages confidential information in the data handled by the personal computer, and A data management method for a system in which a database server that stores importance data for each group to which importance is added for each group is connected so as to be capable of data communication,
The management server assigns a low weight to words that appear in common in each collected document by a predetermined analysis method, weights a word that appears in a specific document high, and uses the words weighted by the analysis method as keywords. And adding a value representing importance in accordance with the size of the weight to the keyword, associating the keyword with a group using the keyword and storing it as confidential data in the database server,
When writing data to the storage medium by the personal computer, a word is extracted from the data, and the word is compared with a keyword of confidential data of the database server to determine whether the data is confidential information. When the data is confidential information, if there is a group that uses the keywords included in the data, the keywords are divided into groups, and the importance of each keyword divided for each group is tabulated and tabulated. Comparing the obtained importance by group and the importance data by group, and determining that the data corresponds to the confidential information of the group when the importance calculated is larger than the importance of the group;
A data management method characterized by the above.

Images