JP4882707B2 - Information processing system, information processing apparatus, and program - Google Patents

Description

  The present invention relates to an information processing system, an information processing apparatus, and a program.

  2. Description of the Related Art Conventionally, a method for authenticating a user (user) using a password (password information) in order to ensure security (safety) of document data (document information) handled by a personal computer or the like is widely known. Yes. In this method, for example, the document data is protected by permitting access to the document data only when the password input by the user matches that registered in advance.

  In recent years, as a method for authenticating a user, a method using an authentication algorithm more advanced than a password, such as authentication using an IC card or biometric authentication, is becoming widespread.

Patent Document 1 discloses a technique for reducing the effort of inputting a password by associating a password with a user in advance and displaying the password as a candidate password when the user uses the password.
JP 2006-163934 A

  By the way, when accessing document data protected by a password, the user authenticates the user with the user password, and when the user has a valid authority, inputs or selects the document password to access the document data. That is, the user needs to input the password twice.

  An object of the present invention is to provide an information processing system, an information processing apparatus, and a program capable of reducing the trouble of inputting a password (password information) while ensuring safety.

  In order to solve the above problems, an information processing system according to the present invention uses an authentication information generation unit that authenticates a user and generates authentication information, and document information protected by the password information using the password information. Based on the specific information, the canceling means for canceling the protection of the document information, the storage means for storing the password information used for the cancellation of the protection in association with the specific information for specifying the document information, Requesting means for requesting the password information stored in the means, and providing means for providing the password information stored in the storage means in response to input of the authentication information and the specific information.

  In the information processing system of the present invention, the storage unit stores each of the password information used for releasing the protection and the document information released from the protection in association with the specific information, and the providing unit. Provides the personal identification information or the document information stored in the storage unit according to the provision destination.

  Next, an information processing apparatus according to the present invention includes an authentication receiving unit that receives user authentication information, and the password information used to cancel the protection of the document information protected by the password information. Storage control means for storing in the storage means in association with the specific information to be identified, request receiving means for accepting a request for the personal identification information stored in the storage means based on the specific information, the authentication information and the specific information Providing means for providing personal identification information stored in the storage means in response to input of information.

  Next, the program of the present invention is an authentication receiving means for accepting user authentication information, and for identifying document information protected by the password information, the password information used for releasing the protection is specified to identify the document information. A storage control means for storing in the storage means in association with information; a request receiving means for accepting a request for personal identification information stored in the storage means based on the specific information; and input of the authentication information and the specific information Accordingly, the computer is caused to function as providing means for providing the password information stored in the storage means.

  According to the first aspect of the present invention, by reusing the password information used for releasing the protection of the document information, the user can access the document information simply by inputting the authentication information. It is possible to save the input effort.

  According to the invention of claim 2, for example, when the providing destination does not have the protection cancellation function, the personal identification information or the document information suitable for the provision destination is provided as appropriate, such as providing the document information itself instead of the personal identification information. can do.

  According to the invention of claim 3, the password information used for releasing the protection of the document information is reused on the condition that the authentication information is received, so that the password information is provided while ensuring safety, and the user It is possible to save the trouble of inputting the password information.

  According to the invention of claim 4, on the condition that the authentication information is received, the password information used for canceling the protection of the document information is reused to provide the password information while ensuring the safety. It is possible to save the trouble of inputting the password information.

  Embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram illustrating a configuration example of a document management system 1 as an embodiment of an information processing system of the present invention. In the document management system 1, an authentication server 2 as an authentication unit, a provision server 3 as an information providing device, and a plurality of terminals 4 to 6 are connected to a network constructed by a communication path. Can communicate with each other using a predetermined protocol.

  The document management system 1 handles document data (document information) protected by a password (password information). Here, it can be said that the document data represents, for example, a document including characters and images. The password can be referred to as a symbol string for certifying that the user has authority to access document data, for example. Further, protection of document data with a password can be a state in which access to document data is prohibited unless a password is input, for example.

  The authentication server 2 is configured as a computer including a CPU (central processing unit such as a microprocessor) and a RAM (random access memory) serving as a work area of the CPU.

  The authentication server 2 checks whether or not the user (user) who wants to access the document management system 1 has a legitimate authority. Authentication information representing an authenticated user is generated, and this authentication information is output to other components included in the document management system 1. This authentication process can be performed, for example, when the user starts using the terminals 4 to 6 included in the document management system 1.

  The authentication method in the authentication server 2 can be an authentication method using an authentication algorithm more advanced than a password, such as authentication using an IC card or biometric authentication. For example, in the authentication using an IC card, an IC card reader (not shown) provided in the terminals 4 to 6 reads the chip identification information recorded on the IC card, and the authentication server 2 that has acquired the chip identification information acquires it. Whether or not the chip identification information matches that registered in advance is verified, and if it matches, the user who owns the IC card is authenticated. Note that authentication methods such as authentication using an IC card and biometric authentication are well-known techniques and will not be described in further detail.

  As shown in FIG. 2, the providing server 3 includes a control unit 31 that controls the entire apparatus, a communication unit 32 that enables communication with other elements included in the document management system 1, and a display device. The computer includes a display unit 33, an operation unit 34 including a keyboard and a mouse, and a storage unit 35 including a hard disk.

  The control unit 31 includes a CPU (central processing unit such as a microprocessor), a RAM (random access memory) serving as a work area of the CPU, and the like. The storage unit 35 stores programs and data necessary for the operation of the CPU of the control unit 31. The program and data may be recorded and distributed on a medium such as a CD-ROM, or may be distributed via a communication path such as the Internet.

  As will be described later, the providing server 3 stores and provides passwords and document data in response to requests from the terminals 4 to 6.

  Various terminals such as a personal computer (PC), a multifunction peripheral, and a portable information terminal (PDA) can be applied to the terminals 4 to 6. These include a computer having a CPU (central processing unit such as a microprocessor) and a RAM (random access memory) serving as a work area of the CPU. A PC or PDA can browse and process document data.

  The multifunction peripheral has at least two or more functions among copying, printing, scanning, facsimile, and the like, and can perform processing based on these functions on document data. In the present embodiment, a multi-function peripheral is used as an example. However, the present invention is not limited to this.

  Hereinafter, each embodiment regarding the functional configuration example and operation example of the providing server 3 and the terminals 4 to 6 will be described.

[First Embodiment]
A functional configuration example of the providing server 3 according to the first embodiment will be described. As shown in FIG. 3, the providing server 3 functionally includes an authentication receiving unit 41, a storage request receiving unit 43, a storage processing unit 44, an acquisition request receiving unit 46, a providing unit 47, and a determining unit 48. And have. These components are realized by software operations of a CPU included in the control unit 31.

  The authentication reception unit 41 receives user authentication information from the authentication server 2 and enables other components included in the providing server 3 to operate.

  The save request receiving unit 43 receives a save request including a password used for releasing protection of document data and specific information for specifying the document data from a predetermined terminal. This specific information includes, for example, the document name of the document data.

  The storage processing unit 44 stores the password received by the storage request receiving unit 43 in association with the document name in the storage unit 35. This operation is performed in a state where the authentication receiving unit 41 receives the authentication information. Further, the storage processing unit 44 can limit the storage period of the password and the document name stored in the storage unit 35, and can be configured to delete these when the storage period has elapsed.

  The acquisition request receiving unit 46 receives a password acquisition request from a predetermined terminal. This acquisition request includes the document name of the target document data.

  The providing unit 47 reads out the password stored in association with the document name from the storage unit 35 using the document name included in the acquisition request received by the acquisition request receiving unit 46, and outputs the acquisition request. To provide. This operation is performed in a state where the authentication receiving unit 41 receives the authentication information.

  Further, when performing the above operation, the providing unit 47 determines whether or not the terminal that outputs the acquisition request is permitted to provide the password, and whether or not the user using the terminal is permitted to provide the password. The determination unit 48 makes the determination. Such a determination by the determination unit 48 can be made based on tables as shown in FIGS. 4 and 5, for example. In these tables, whether or not a password can be provided is described for each terminal or each user, thereby prohibiting the provision of a password to a specific terminal or a specific user. These tables may be stored in the RAM, or may be stored in the storage unit 35 and referred to.

  A functional configuration example of the terminal according to the first embodiment will be described. As illustrated in FIG. 6, the terminal functionally includes an authentication request unit 51, an authentication reception unit 52, a storage request unit 54, an acquisition request unit 55, an acquisition unit 57, and a release unit 58. These components are realized by software operations of a CPU included in the terminal.

  The authentication request unit 51 requests the authentication server 2 to authenticate the user who starts using the terminal. This can be realized, for example, by reading the chip identification information recorded on the IC card owned by the user by an IC card reader (not shown) and transmitting it to the authentication server 2.

  The authentication reception unit 52 receives user authentication information from the authentication server 2 and enables the operation of other components included in the terminal.

  The save request unit 54 transmits the password used for releasing the protection of the document data and the document name of the document data to the providing server 3 and requests the providing server 3 to save them. These can be acquired from the release unit 58 or the like. This operation is performed in a state where the authentication receiving unit 52 receives the authentication information.

  The acquisition request unit 55 transmits the document name of the document data to be protected, to the providing server 3, and requests the providing server 3 to provide a password that can cancel the protection of the document data. This operation is performed in a state where the authentication receiving unit 52 receives the authentication information.

  The acquisition unit 57 acquires the password provided from the providing server 3. The canceling unit 58 cancels the protection of the document data using the password acquired by the acquiring unit 57. This operation is performed in a state where the authentication receiving unit 52 receives the authentication information. The document data to be unprotected may be held by the terminal or may be held by another device on the network.

  Hereinafter, the operation flow of the providing server 3 and the terminal will be described. FIG. 7 shows a flowchart showing an operation example of the providing server 3 and the terminal.

  First, the authentication request unit 51 of the first terminal requests the authentication server 2 to authenticate the first user who starts using the first terminal. When the first user has a legitimate authority, the authentication server 2 generates authentication information indicating that the first user has been authenticated, and uses the authentication information as the first terminal and the providing server. Output to 3 etc.

  When the authentication reception unit 52 of the first terminal receives the authentication information about the first user from the authentication server 2, it can operate other components included in the first terminal with respect to the access from the first user. And Similarly, when the authentication receiving unit 41 of the providing server 3 receives the authentication information about the first user from the authentication server 2, the operation of the other components included in the providing server 3 with respect to the access from the first user is performed. enable.

  Next, the unlocking unit 58 of the first terminal cancels the protection of the document data using the password input from the first user for the document data protected by the password. Further, when the storage request unit 54 of the first terminal obtains the password used for canceling the protection and the document name of the document data from the canceling unit 58, it transmits these to the providing server 3 and stores them. Request to do.

  In the providing server 3, when the storage request reception unit 43 receives a storage request including the password and the document name from the first terminal, the storage processing unit 44 associates the received password with the document name, The data is stored in the storage unit 35.

  On the other hand, the authentication request unit 51 of the second terminal requests the authentication server 2 to authenticate the second user who starts using the second terminal. When the second user has a legitimate authority, the authentication server 2 generates authentication information indicating that the second user has been authenticated, and uses the authentication information as the second terminal and the providing server. Output to 3 etc.

  When the authentication reception unit 52 of the second terminal receives the authentication information about the second user from the authentication server 2, it can operate other components included in the second terminal for access from the second user. And Similarly, when the authentication reception unit 41 of the providing server 3 receives the authentication information about the second user from the authentication server 2, the operation of other components included in the providing server 3 with respect to the access from the second user is performed. enable.

  Next, the acquisition request unit 55 of the second terminal transmits to the providing server 3 the document name of the document data to be protected, and provides the password that can remove the protection of the document data. To request. Here, the document data to be released from protection may be data handled by the first terminal described above, or may be a copy of the data.

  In the providing server 3, the acquisition request receiving unit 46 receives a password acquisition request including the document name of the document data from the second terminal. The providing unit 47 obtains the password stored in the storage unit 35 based on the storage request from the first terminal when the provision of the password to the second terminal and the second user is permitted. The document name included in the request is read from the storage unit 35 as a clue and transmitted to the second terminal.

  Thereafter, in the second terminal, when the acquiring unit 57 acquires the password provided from the providing server 3, the canceling unit 58 cancels the protection of the document data using the acquired password. As a result, the second terminal can perform various processes on the document data such as browsing and processing the document data.

  In this embodiment, the user (first user) who saves the password, the user who receives the password (second user), the terminal (first terminal) that saves the password, and the password are provided. The receiving terminal (second terminal) is different from each other. However, the present invention is not limited to this, and one or both of the user and the terminal may overlap. That is, for example, the user who stores the password and the user who receives the password may be the same user, the terminal that stores the password and the terminal that receives the password may be the same terminal, Both terminals may be the same.

[Second Embodiment]
A functional configuration example of the providing server 3 according to the second embodiment will be described. In addition, detailed description is omitted about the part which overlaps with the above-mentioned embodiment. As shown in FIG. 8, the providing server 3 functionally includes an authentication receiving unit 61, a storage request receiving unit 63, a storage processing unit 64, a release unit 65, an acquisition request receiving unit 66, and a providing unit 67. And a determination unit 68. These components are realized by software operations of a CPU included in the control unit 31.

  The authentication reception unit 61 receives user authentication information from the authentication server 2 and enables the operation of other components included in the providing server 3.

  The storage request receiving unit 63 receives a document data storage request from a predetermined terminal. This document data is transmitted in a state protected by a password. The save request includes a password that can release protection of the document data, and a document name that identifies the document data.

  The canceling unit 65 cancels the protection of the document data accepted by the save request accepting unit 63 by using the password accepted by the save request accepting unit 63. This operation is performed in a state where the authentication receiving unit 61 receives the authentication information.

  The storage processing unit 64 associates the document data whose protection has been canceled by the cancellation unit 65 with the document name received by the storage request reception unit 63 and stores the document data in the storage unit 35. This operation is performed in a state where the authentication receiving unit 61 receives the authentication information.

  The acquisition request receiving unit 66 receives an acquisition request for document data whose protection is canceled from a predetermined terminal. This acquisition request includes the document name of the document data to be acquired.

  The providing unit 67 reads from the storage unit 35 the unprotected document data stored in association with the document name, using the document name included in the acquisition request received by the acquisition request receiving unit 66 as a clue. Provided to the terminal that has output the acquisition request. This operation is performed in a state where the authentication receiving unit 61 receives the authentication information. Further, in performing this operation, the providing unit 67 determines whether the terminal that has output the acquisition request is permitted to provide document data, and whether the user using the terminal is permitted to provide document data. The determination part 68 is made to determine whether or not.

  A functional configuration example of the terminal according to the second embodiment will be described. As illustrated in FIG. 9, the terminal functionally includes an authentication request unit 71, an authentication reception unit 72, an acquisition request unit 75, and an acquisition unit 77. These components are realized by software operations of a CPU included in the terminal.

  The authentication request unit 71 requests the authentication server 2 to authenticate a user who starts using the terminal. The authentication reception unit 72 receives user authentication information from the authentication server 2 and enables the operation of other components included in the terminal.

  The acquisition request unit 75 transmits an acquisition request for document data to be acquired. This acquisition request includes the document name of the document data to be acquired. This operation is performed in a state where the authentication receiving unit 72 receives the authentication information.

  The acquisition unit 77 acquires the document data provided from the providing server 3 and whose protection is canceled. As described above, in the present embodiment, since the document data whose protection is canceled is provided from the providing server 3 to the terminal, the terminal uses the password to cancel the protection of the document data (release) Part) is not required.

  Hereinafter, the operation flow of the providing server 3 and the terminal will be described. FIG. 10 is a flowchart showing an example of the operation of the providing server 3 and the terminal.

  First, the authentication request unit 71 of the first terminal requests the authentication server 2 to authenticate the first user who starts using the first terminal. When the first user has a legitimate authority, the authentication server 2 generates authentication information indicating that the first user has been authenticated, and uses the authentication information as the first terminal and the providing server. Output to 3 etc.

  When the authentication reception unit 72 of the first terminal receives the authentication information about the first user from the authentication server 2, the operation of other components included in the first terminal can be performed with respect to the access from the first user. And Similarly, when the authentication receiving unit 61 of the providing server 3 receives the authentication information regarding the first user from the authentication server 2, the operation of the other components included in the providing server 3 with respect to the access from the first user is performed. enable.

  Next, the first terminal transmits a document data storage request to the providing server 3. This document data is transmitted in a state protected by a password. The save request includes a password that can release protection of the document data, and a document name that identifies the document data. As this password, for example, a password input from the first user can be used.

  However, the present invention is not limited to this, and as a storage request, the providing server 3 is notified of an address for specifying the position of the document data on the network, and the providing server 3 obtains the document data based on this address, whereby the document data May be omitted. In addition, transmission of the document name may be omitted by causing the providing server 3 to acquire the document name from the document data without including the document name in the save request.

  In the providing server 3, when the storage request receiving unit 63 receives a storage request including document data, password, and document name protected by a password from the first terminal, the canceling unit 65 receives the received password. Unprotect the document data using. Thereafter, the storage processing unit 64 associates the document data whose document is released with the document name, and stores them in the storage unit 35.

  On the other hand, the authentication requesting unit 71 of the second terminal requests the authentication server 2 to authenticate the second user who starts using the second terminal. When the second user has a legitimate authority, the authentication server 2 generates authentication information indicating that the second user has been authenticated, and uses the authentication information as the second terminal and the providing server. Output to 3 etc.

  When the authentication reception unit 72 of the second terminal receives the authentication information about the second user from the authentication server 2, it can operate other components included in the second terminal with respect to the access from the second user. And Similarly, when the authentication receiving unit 61 of the providing server 3 receives the authentication information about the second user from the authentication server 2, the operation of the other components included in the providing server 3 with respect to the access from the second user is performed. enable.

  Next, the acquisition request unit 75 of the second terminal transmits the document name of the document data to be acquired to the providing server 3, and requests the providing server 3 to provide the document data specified by this document name. .

  In the providing server 3, the acquisition request reception unit 66 receives an acquisition request for document data including the document name from the second terminal. When the provision of the document data to the second terminal and the second user is permitted, the providing unit 67 has the protection stored in the storage unit 35 based on the storage request from the first terminal described above. The released document data is read from the storage unit 35 using the document name included in the acquisition request as a clue, and transmitted to the second terminal.

  Thereafter, in the second terminal, the acquisition unit 77 acquires the document data whose protection is canceled from the providing server 3. As a result, the second terminal can perform various processes on the document data such as browsing and processing the document data.

  In the present embodiment, the document data protected by the password and the password that can release the protection of the document data are transmitted from the terminal to the providing server 3, and the protection of the document data is released on the providing server 3 side. However, the present invention is not limited to this, and the protection of the document data is canceled using the password on the terminal side, and the transmission of the password is omitted by transmitting the protected document data from the terminal to the providing server 3. You may make it do.

[Third Embodiment]
A functional configuration example of the providing server 3 according to the third embodiment will be described. In addition, detailed description is omitted about the part which overlaps with the above-mentioned embodiment. As shown in FIG. 11, the providing server 3 functionally includes an authentication receiving unit 81, a storage request receiving unit 83, a storage processing unit 84, a release unit 85, an acquisition request receiving unit 86, and a providing unit 87. And a determination unit 88. These components are realized by software operations of a CPU included in the control unit 31.

  The authentication reception unit 81 receives user authentication information from the authentication server 2 and enables the operation of other components included in the providing server 3.

  The storage request receiving unit 83 receives a document data storage request from a predetermined terminal. This document data is transmitted in a state protected by a password. The save request includes a password that can release protection of the document data, and a document name that identifies the document data.

  The canceling unit 85 cancels the protection of the document data accepted by the save request accepting unit 83 by using the password accepted by the save request accepting unit 83. This operation is performed in a state where the authentication receiving unit 81 receives the authentication information.

  The save processing unit 84 associates the password received by the save request receiving unit 83 with the document name and stores it in the storage unit 35, and the document data whose protection has been released by the release unit 85 and the save request receiving unit 83. The received document name is associated with and stored in the storage unit 35. This operation is performed in a state where the authentication receiving unit 81 receives the authentication information.

  The acquisition request receiving unit 86 receives an acquisition request including the document name of the target document data from a predetermined terminal. It is not limited whether this acquisition request is a request for acquiring a password or a request for acquiring document data.

  The providing unit 87 causes the determining unit 88 to determine whether the terminal that has output the acquisition request has a function for canceling protection using a password, and when the terminal has a cancel function. Using the document name included in the acquisition request received by the acquisition request receiving unit 86 as a clue, the password stored in association with the document name is read from the storage unit 35 and is output to the terminal that has output the acquisition request. provide. On the other hand, if the terminal does not have a release function, the protection stored in association with the document name is released based on the document name included in the acquisition request received by the acquisition request receiving unit 86. The document data is read from the storage unit 35 and provided to the terminal that has output the acquisition request. This operation is performed in a state where the authentication receiving unit 81 receives the authentication information.

  The determination of the presence or absence of the release function by the determination unit 88 can be made based on, for example, a table as shown in FIG. In this table, in addition to information on whether or not each terminal is permitted to provide a password, information on whether or not these terminals have a function of canceling protection using a password is described. Yes. As a result, the password is provided to the terminal having the release function, and the protected document data is provided to the terminal not having the release function.

  Hereinafter, the operation flow of the providing server 3 and the terminal will be described. FIG. 13 is a flowchart showing an operation example of the providing server 3 and the terminal.

  As for the terminal, even if it has a release function (release unit 58) like the terminal of the first embodiment shown in FIG. 6, the release function like the terminal of the second embodiment shown in FIG. However, when a save request is transmitted to the providing server 3, document data, a document name, and a password are included in the save request as in the second embodiment. .

  First, the first terminal requests the authentication server 2 to authenticate the first user who starts using the first terminal. When the first user has a legitimate authority, the authentication server 2 generates authentication information indicating that the first user has been authenticated, and uses the authentication information as the first terminal and the providing server. Output to 3 etc.

  When the first terminal receives the authentication information regarding the first user from the authentication server 2, the first terminal enables the operation of the constituent elements included in the first terminal with respect to the access from the first user. Similarly, when the authentication receiving unit 81 of the providing server 3 receives the authentication information about the first user from the authentication server 2, the operation of other components included in the providing server 3 for the access from the first user is performed. enable.

  Next, the first terminal transmits a document data storage request to the providing server 3. This document data is transmitted in a state protected by a password. The save request includes a password that can release protection of the document data, and a document name that identifies the document data. As this password, for example, a password input from the first user can be used.

  In the providing server 3, when the storage request receiving unit 83 receives a storage request including document data, password, and document name protected by a password from the first terminal, the canceling unit 85 receives the password received. Unprotect the document data using. Thereafter, the save processing unit 84 associates the password and the document name received by the save request receiving unit 83 with each other and stores them in the storage unit 35, and the document data whose protection is canceled by the canceling unit 85, and the save request receiving unit The document name received by 83 is associated with and stored in the storage unit 35.

  On the other hand, the second terminal requests the authentication server 2 to authenticate the second user who starts using the second terminal. When the second user has a legitimate authority, the authentication server 2 generates authentication information indicating that the second user has been authenticated, and uses the authentication information as the second terminal and the providing server. Output to 3 etc.

  When the second terminal receives the authentication information regarding the second user from the authentication server 2, the second terminal enables the operation of the components included in the second terminal with respect to the access from the second user. Similarly, when the authentication receiving unit 81 of the providing server 3 receives the authentication information about the second user from the authentication server 2, the operation of the other components included in the providing server 3 with respect to the access from the second user is performed. enable.

  Next, the second terminal transmits the document name of the target document data to the providing server 3, and provides the document data specified by the document name or the provision of a password capable of releasing the protection of the document data. 3 is requested.

  In the providing server 3, the acquisition request receiving unit 86 receives an acquisition request including the document name from the second terminal. If the provision of the password or document data to the second terminal and the second user is permitted, the providing unit 87 may provide the above-described first terminal if the second terminal has a release function. The password stored in the storage unit 35 is read from the storage unit 35 based on the document name included in the acquisition request and transmitted to the second terminal. On the other hand, if this second terminal does not have a release function, an acquisition request is issued for the protected document data stored in the storage unit 35 based on the storage request from the first terminal described above. Is read from the storage unit 35 as a clue and transmitted to the second terminal.

  Thereafter, if the second terminal has a release function, the second terminal obtains the password provided from the providing server 3 and uses this to release the protection of the document data. On the other hand, if the release function is not provided, the document data whose protection is released is acquired from the providing server 3. As described above, the second terminal can perform various processes on the document data such as browsing and processing the document data.

It is a figure showing the example of a structure of a document management system. It is a block diagram showing the example of a structure of a provision server. It is a block diagram showing the function structural example of the provision server which concerns on 1st Embodiment. It is a figure showing the table for judging the propriety of provision. It is a figure showing the table for judging the propriety of provision. It is a block diagram showing the function structural example of the terminal which concerns on 1st Embodiment. It is a flowchart showing the operation example of the provision server and terminal which concern on 1st Embodiment. It is a block diagram showing the function structural example of the provision server which concerns on 2nd Embodiment. It is a block diagram showing the function structural example of the terminal which concerns on 2nd Embodiment. It is a flowchart showing the operation example of the provision server and terminal which concern on 2nd Embodiment. It is a block diagram showing the function structural example of the provision server which concerns on 3rd Embodiment. It is a figure showing the table for judging a provision place. It is a flowchart showing the operation example of the provision server and terminal which concern on 3rd Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 Document management system, 2 Authentication server (authentication means), 3 Provision server (information provision apparatus), 4 terminal, 5 terminal, 6 terminal, 31 Control part, 32 Communication part, 33 Display part, 34 Operation part, 35 Storage part , 41 Authentication reception unit, 43 Storage request reception unit, 44 Storage processing unit, 46 Acquisition request reception unit, 47 Provision unit, 48 Judgment unit, 51 Authentication request unit, 52 Authentication reception unit, 54 Storage request unit, 55 Acquisition request unit 57 acquisition unit, 58 cancellation unit, 61 authentication reception unit, 63 storage request reception unit, 64 storage processing unit, 65 cancellation unit, 66 acquisition request reception unit, 67 provision unit, 68 determination unit, 71 authentication request unit, 72 authentication Reception unit, 75 acquisition request unit, 77 acquisition unit, 81 authentication reception unit, 83 storage request reception unit, 84 storage processing unit, 85 release unit, 86 acquisition request reception unit, 87 provision unit, 88 Judgment part.

Claims (3)

An authentication server, a providing server, and a terminal;
The authentication server includes authentication information generation means for authenticating a user and generating authentication information ,
The providing server is
Release means for canceling protection of the document information using the password information for the document information protected by the password information;
Storage means for storing each of the personal identification information used for the cancellation of the protection and the document information for which the protection has been released in association with specific information for specifying the document information;
With
The terminal includes request means for outputting an acquisition request based on the specific information ,
The providing server is
A determination unit that determines whether the terminal that has output the acquisition request has a function for canceling protection of the document information using the personal identification information;
In response to input of the authentication information and the specific information, if the terminal has the release function, it provides the password information stored in the storage means, and if the terminal does not have the release function, Providing means for providing document information stored in the storage means;
An information processing system comprising: Authentication acceptance means for accepting user authentication information;
For the document information protected by the password information, the password information used for releasing the protection and the document information released from the protection are stored in storage means in association with specific information for specifying the document information. Storage control means for causing
Request accepting means for accepting an acquisition request based on the specific information;
A determination unit that determines whether the terminal that has output the acquisition request has a function for canceling protection of the document information using the personal identification information;
In response to input of the authentication information and the specific information, if the terminal has the release function, it provides the password information stored in the storage means, and if the terminal does not have the release function, Providing means for providing document information stored in the storage means;
An information processing apparatus comprising: Authentication acceptance means for accepting user authentication information,
For the document information protected by the password information, the password information used for releasing the protection and the document information released from the protection are stored in storage means in association with specific information for specifying the document information. Memory control means
Request accepting means for accepting an acquisition request based on the specific information;
Determining means for determining whether the terminal that has output the acquisition request has a function for canceling protection of the document information using the personal identification information; and
In response to input of the authentication information and the specific information, if the terminal has the release function, it provides the password information stored in the storage means, and if the terminal does not have the release function, Providing means for providing document information stored in the storage means;
A program characterized by causing a computer to function.

Images