JP4959777B2 - Computer system and operation reproduction method - Google Patents

Description

  The present invention relates to a computer system and an operation reproduction method for reproducing a user's operation content on a Web browser.

  In recent years, various services are provided by Web applications. The services described above are used in many scenes such as B2B (Business to Business) and B2C (Business to Consumer) because of the convenience that can be used only by a Web browser.

  In the case described above, there is a request to confirm the operation content of the Web user for the Web application, and a technique for recording / reproducing the operation content of the Web user has been developed.

  For example, Patent Document 1 discloses a system that records / reproduces the operation content of a Web user with respect to the Web browser without installing special software other than the Web browser in the system used by the Web user. This system includes a Web operation computer that requests a Web service (hereinafter referred to as “client”), an application server that executes the Web service in response to the request, and a management computer that manages the operation performed by the client (hereinafter referred to as “Client”). A function of recording / reproducing the operation of the Web browser by inserting a program using Java (registered trademark) into the source of the target Web page. The administrator can check the operation performed by the client.

  As a case where such a system is applied, for example, a web application service for operating a bank deposit account or the like can be cited. That is, when an operation failure or the like occurs in the client, the administrator analyzes the operation content of the client and solves the problem.

  JP 2008-117093 A

  By the way, in various services using Web applications, confidential information is frequently handled. Here, the confidential information includes operation records (hereinafter referred to as “operation log”) included in the Web browser operated by the client, HTML content operated by the client (hereinafter referred to as “content”), and including. For example, in the above-described Web application that operates a bank account, the client inputs a deposit account number and a password as confidential information. When confidential information is handled in the system disclosed in Patent Document 1, there is a problem that the confidential information leaks to an administrator.

  It is also conceivable to construct a database in which confidential information included in operation records is defined in advance, detect confidential information from the operation records by a computer, and conceal it from the administrator. There is a variety of information, and not only the construction of the database becomes complicated, but there is also a problem that new confidential information cannot be concealed until the database is updated.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to more safely and dynamically conceal confidential information included in the operation content of a client with respect to a Web browser.

  A typical example of the present invention is as follows. That is, a plurality of first server devices that generate content to be played back on the first web browser, a second server device that plays back user operation details on the first web browser, and confidential information included in the content A computer system including a confidential information database for storing information for identifying the first server device, wherein the first server devices are connected to each other via a communication line, and the other first server device is connected to the first server device via the communication line. The content generated in step (b) is acquired, the confidential information included in the content is stored in the confidential information database, the content generated by the own device is analyzed with reference to the confidential information database, and the information included in the content Of the confidential information is identified, and the identified portion indicates the confidential information indicating the confidential information. The second server device refers to the confidential mark and reproduces the operation information of the user on the first web browser while concealing the confidential information. .

  According to an aspect of the present invention, when a user's operation content on a Web browser is reproduced, processing is performed so that a confidential portion of the content is not displayed more safely and dynamically, and thus has a predetermined authority. This has the effect of preventing confidential information from leaking to those who do not.

1 is a schematic configuration diagram of a computer system according to an embodiment of this invention. It is a block diagram which shows the structural example of the computer system of embodiment of this invention. It is a sequence diagram explaining the process of the client apparatus and content production | generation server apparatus at the time of content acquisition in embodiment of this invention. It is a block diagram explaining the process which the confidential information provision part of embodiment of this invention discriminate | determines a confidential part. It is a flowchart explaining the process in which the content analysis part of embodiment of this invention updates confidential information DB. It is a flowchart explaining the process which the intra search part of embodiment of this invention performs. It is a block diagram explaining the reference authority provision part of embodiment of this invention. It is a flowchart explaining the process which the reference authority provision part of embodiment of this invention performs. It is explanatory drawing which shows the timing at which the information stored in confidential information DB of embodiment of this invention is updated. It is explanatory drawing which shows the detail of confidential information DB of embodiment of this invention. It is explanatory drawing which shows DB for content generation of embodiment of this invention. It is explanatory drawing which shows an example of the process which the content production | generation server apparatus of embodiment of this invention provides a confidential location mark to a content. It is a flowchart explaining the process which the confidential location mark provision part of embodiment of this invention performs. It is explanatory drawing which shows an example of the content in embodiment of this invention. It is explanatory drawing which shows an example of the method of providing a confidential location mark to the confidential location of the content in embodiment of this invention. It is a block diagram explaining the flow of the process for reproducing | regenerating the operation content of the client on the browser of embodiment of this invention. It is a sequence diagram explaining the flow of the process for reproducing | regenerating the operation content of the client on the browser of embodiment of this invention. It is a flowchart explaining the process which the confidential location reading part of embodiment of this invention performs. It is a flowchart explaining the process which the mask provision part of embodiment of this invention performs. It is explanatory drawing which shows GUI displayed when operating the reproduction | regeneration control part of embodiment of this invention. It is explanatory drawing which shows an example of GUI which displays the operation content of the client on the browser reproduced | regenerated by the video output part of embodiment of this invention.

  DESCRIPTION OF EMBODIMENTS Hereinafter, embodiments of the present invention will be described in detail using the drawings.

  FIG. 1 shows a schematic configuration of a computer system according to an embodiment to which the present invention is applied.

  In the computer system, a plurality of client apparatuses 101a to 101d, a plurality of content generation server apparatuses 102a to 102c and an operation reproduction server apparatus 103 are connected to a communication line (intranet 150). 104 is connected via a communication line.

  In this embodiment, the intranet 150 is applied as a communication form of each device, but the Internet or a dedicated line can also be applied. The operation reproduction server devices 103 and 104 are connected by a dedicated line, but may be connected by an intranet or the Internet.

  If the outline | summary of the computer system of this embodiment is demonstrated, client apparatus 101a-d will transmit a request via the intranet 150 to predetermined content generation server apparatus 102a-c, in order to use a Web application service. The predetermined content generation server apparatuses 101a to 101d that have received the request generate predetermined contents and transmit them to the client apparatuses 101a to 101d.

  The predetermined client devices 101a to 101d which are the request transmission sources that have received the predetermined content display the content on the screen, and the user inputs an input device such as a keyboard or a touch panel in a predetermined input portion in the displayed content. Then, predetermined information is input (may include confidential information), and a processing request is transmitted to the predetermined content generation server apparatuses 102a to 102c.

  The client apparatuses 101a to 101d execute predetermined processing that the Web application has in response to the request including predetermined information input by the user. If necessary, the client devices 101a to 101d generate content again and request the next content to the client devices 101a to 101d in order to request the user for the next input or the like. As described above, the computer system executes the web application service.

  In addition, when content is transmitted from the content generation servers 102a to 102c to the client devices 101a to 101d, the content generation servers 102a to 102c determine whether or not confidential information is included in the content to be transmitted. In the case where the content is displayed, an identifier is added to the content.

  The client apparatuses 101a and 101b store the operation contents of their own apparatuses as the operation log 111. The operation log 111 also stores operation details performed by the user on the content. When a problem or the like occurs in the client apparatuses 101a and 101b, the operation player (administrator) investigates the cause of the problem using the operation reproduction server apparatus 103 and the video reproduction apparatus 104 with respect to the operation log 111. Can be done.

  The operation reproduction server apparatus 103 can acquire the operation logs 111 of the client apparatuses 101a to 101d via the intranet 150. When a problem occurs in the client apparatuses 101a to 101d, this operation log is recorded. 111 is played back (displayed) on the video playback device 104. The operation player (administrator) can analyze the operation log 111 displayed on the video display device 104 and investigate the cause of the failure.

  Further, as described above, the operation log 111 may contain confidential information input at a predetermined location of the content. For this reason, the operation reproduction server device 103 refers to the identifier added to the content by the content reproduction servers 102a to 102c, and displays video (operation log 111) in which confidential information is concealed (masked) from the operation log 111 based on the identifier. The data is output to the playback device 104. For this reason, the operation log 111 in which the confidential information is concealed is displayed on the screen of the video reproduction device 104.

  Further, whether or not the content generation server apparatuses 102a to 102c add an identifier to the confidential information depends on whether a character string in the generated content matches confidential information stored in a confidential information DB 114 described later. To do. The confidential information stored in the confidential information DB 114 is registered in advance by an operation player (administrator) or the like as an initial setting, and confidential information that is included in a request from the client device and is not registered in the confidential information DB 114 is appropriately set. It is supposed to be registered.

  Furthermore, the content generation server device 102 acquires confidential information from the content of the other content generation server device 102 via the intranet 150 at a predetermined opportunity. Thus, confidential information that is not in the confidential information DB 114 of the own apparatus is updated as appropriate.

  The above is the outline of the computer system of this embodiment.

  Below, the apparatus which comprises the computer system of this embodiment is demonstrated in detail.

  FIG. 2 shows the configuration of the client device 101, the content generation server device 102, the video playback device 103, and the operation playback server device 104 in detail. For simplicity, FIG. 2 shows one client device 101 and one content generation server device 102.

  Further, the content generation server device 102, the video playback device 103, and the operation playback server device 104 may be configured as a server device in the same housing, or a part thereof is connected as a separate housing through a communication line such as an intranet 150. It may be a configuration.

  The client apparatus 101 transmits a request to the content generation server apparatus 102, and executes various processes using the content transmitted from the content generation server apparatus 102.

  The client device 101 includes a CPU 105, a main storage unit 106, an auxiliary storage unit 107, and an interface 141.

  The CPU 105 executes a program stored in the main storage unit 106.

  The main storage unit 106 stores a program executed by the CPU 105. The main storage unit 106 is, for example, a memory. The main storage unit 106 stores a browser 108 and an operation log acquisition unit 109.

  The browser 108 transmits a content generation request to the content generation server apparatus 102, displays the content transmitted from the content generation server apparatus 102, and executes various processes. Further, the browser 108 stores the reproduced content in the auxiliary storage unit 107. A user who operates the client apparatus 101 can execute various processes using the browser 108.

  In the present embodiment, the content transmitted from the content generation server apparatus 102 is given a mark indicating that it is a confidential location corresponding to the reference authority.

  Here, the mark indicating the confidential portion is a mark for indicating a portion corresponding to the confidential information in the content transmitted from the content generation server apparatus 102. The reference authority is an authority for referring to a part to which a mark indicating a confidential part is given. In other words, when the referable reference authority is not set, it is set so that the portion to which the mark indicating that it is a confidential portion is added cannot be referred to.

  Hereinafter, a mark indicating a confidential portion corresponding to the reference authority is referred to as a “confidential portion mark”. In the present embodiment, a different secret mark is assigned for each reference authority.

  In the present embodiment, a script code for recording the operation details of the client on the browser 108 is inserted into the response transmitted from the content generation server apparatus 102 to the client apparatus 101.

  The operation log acquisition unit 109 acquires a client operation record (operation log) on the browser 108. Specifically, the operation log acquisition unit 109 acquires a client operation record on the browser 108 by reading a script code inserted in a response transmitted from the content generation server device 102.

  The auxiliary storage unit 107 stores information and processing results necessary for the program executed by the CPU 105. The auxiliary storage unit 107 is, for example, an HDD. The auxiliary storage unit 107 stores the content 110 and the operation log 111.

  The content 110 is content displayed on the browser 108, and a confidential part mark is given by the content generation server device 102.

  The operation log 111 is a client operation record on the browser 108 acquired by the operation log acquisition unit 109.

  The interface 141 is an interface for connecting to other devices.

  The content generation server device 102 generates content according to the request transmitted from the client device 101. In addition, the content generation server apparatus 102 assigns a confidential part mark to the generated content, and transmits the content (content 110) to which the confidential part mark is attached to the client apparatus 101.

  The content generation server apparatus 102 includes a CPU 112, a main storage unit 113, a confidential information DB 114, a content generation DB 115, and an interface 142.

  The CPU 112 executes a program stored in the main storage unit 113.

  The main storage unit 113 stores a program executed by the CPU 112. The main storage unit 106 is, for example, a memory. The main storage unit 113 stores a content generation processing unit 116, a confidential acquisition unit 117, and a confidential information adding unit 118.

  The content generation processing unit 116 generates content according to a request transmitted from the browser 108. The generated content is output to the confidential information adding unit 118.

  The confidential information adding unit 118 specifies a portion corresponding to the confidential information included in the generated content, and adds a confidential portion mark to the specified portion. The confidential information adding unit 118 includes a confidential part mark adding unit 119 and a content analyzing unit 120.

  The content analysis unit 120 analyzes the content input from the content generation processing unit 116, and updates the confidential information DB 114 based on the analysis result.

  The confidential part mark assigning unit 119 refers to the confidential information DB 114, identifies a portion corresponding to the confidential information included in the content input from the content analysis unit 120, and assigns a confidential portion mark to the identified part. Further, the confidential part mark assigning unit 119 transmits the content (content 110) to which the confidential part mark is attached to the browser 108.

  The confidential acquisition unit 117 determines information to be confidential information among information included in the generated content. Further, the confidential acquisition unit 117 determines the reference authority for the information determined as confidential information. The determined confidential information and reference authority are stored in the confidential information DB 114.

  The confidential information DB 114 stores information for determining confidential information included in the content. The confidential information DB 114 is referred to by the confidential information adding unit 118. Information for determining the confidential information included in the content is set by the content creator who determines the output content of the content generation processing unit 116. Details of the confidential information DB 114 will be described later with reference to FIG. 10A.

  The content generation DB 115 stores information necessary for generating content. The content generation DB 115 is referred to by the content generation processing unit 116 and the confidential acquisition unit 117. Details of the content generation DB 115 will be described later with reference to FIG. 10B.

  The interface 142 is an interface for connecting to other devices.

  The video playback device 103 plays back the operation contents of the client on the browser 108. The operation reproduction server device 104 is set to be authenticated so that only a specific person such as a machine administrator can log in. The operation reproduction user cannot directly log in to the operation reproduction server device 104. The operation player can access information stored in the operation reproduction server device 104 only through the video reproduction device 103.

  The video playback device 103 includes a CPU 121, a main storage unit 122, and an interface 143.

  The CPU 121 executes a program stored in the main storage unit 122.

  The main storage unit 122 stores a program executed by the CPU 121. The main storage unit 106 is, for example, a memory.

  The main storage unit 122 stores the operation video reproduction unit 123.

  The operation video reproduction unit 123 acquires the operation contents of the client on the browser 108 from the operation reproduction server device 104, and reproduces the operation contents of the client on the browser 108.

  The operation video playback unit 123 includes a playback control unit 124 and a video output unit 125.

  The reproduction control unit 124 controls the operation reproduction server device 104. Specifically, the reproduction control unit 124 instructs the operation reproduction server device 104 to reproduce or stop the operation log 111.

  The video output unit 125 reproduces the operation contents of the client on the browser 108 transmitted from the operation reproduction server device 104 as an image. As a result, the operation player who operates the video playback apparatus 103 can confirm the operation content of the client on the browser 108.

  The interface 143 is an interface for connecting to the operation reproduction server device.

  The operation playback server device 104 generates client operation content on the browser 108 according to the command transmitted from the video playback device 103, and transmits the client operation content on the generated browser 108 to the video playback device 103. .

  The operation reproduction server device 104 includes a CPU 126, a main storage unit 127, an auxiliary storage unit 128, and an interface 144.

  The CPU 126 executes a program stored in the main storage unit 127.

  The main storage unit 127 stores a program executed by the CPU 126. The main storage unit 127 is, for example, a memory. The main storage unit 127 includes an operation reproduction unit 129 and a browser 130.

  The operation / playback unit 129 generates a client operation content on the browser 108 requested by the video playback device 103, and transmits the generated client operation content on the browser 108 to the video playback device 103 as a video.

  The operation reproduction unit 129 includes a control reception unit 131, an operation reproduction unit 132, an image generation unit 133, and an image distribution unit 134.

  The control receiving unit 131 receives the command transmitted from the video playback device 103 and instructs the operation playback unit 132 to process based on the received command.

  The operation playback unit 132 executes a process for playing back the operation content of the client on the browser 108 in accordance with the instruction transmitted from the control receiving unit 131.

  Specifically, the operation playback unit 132 reads out the confidential part mark given to the content 110, and the part to which the confidential part mark is given in the content output to the browser 130 based on the reference authority of the operation player. Is masked (hidden).

  The content in which the part to which the mark indicating that it is a confidential part is masked is output to the browser 130.

  The operation reproducing unit 132 includes a confidential part reading unit 135, an operation reproduction script 136, and a mask applying unit 137.

  The confidential part reading unit 135 reads a part to which a confidential part mark is given from the content 110 to be reproduced.

  The operation reproduction script 136 reads the operation log 111 and generates a script for reproducing the operation contents of the client on the browser 108. The generated script is output to the browser 130.

  The mask assigning unit 137 masks the portion to which the confidential portion mark is assigned in the content 110 to be reproduced based on the reference authority of the operation player. The content in which the portion to which the confidential mark is assigned is masked is output to the browser 130.

  The browser 130 reproduces the operation content of the client on the browser 108 based on various information input from the operation playback unit 132.

  The image generation unit 133 acquires the operation content of the client on the browser 108 reproduced on the browser 130 as an image. The acquired image is output to the image distribution unit 134. In the present embodiment, it is assumed that the acquired image is a moving image. As a result, the operation player can easily grasp the operation contents performed by the client in chronological order. The present invention is not limited to this, and the acquired image may be a still image.

  The image distribution unit 134 transmits the image input from the image generation unit 133 to the video reproduction device 103.

  The browser 130 is the same as the browser 108. The browser 130 reproduces the operation content of the client on the browser 108 based on the information input from the operation reproduction unit 132.

  The auxiliary storage unit 128 stores information necessary for the program executed by the CPU 126 and processing results. The auxiliary storage unit 107 is, for example, an HDD.

  The auxiliary storage unit 128 stores the content 110 and the operation log 111. Note that the content 110 and the operation log 111 are the same as the content 110 and the operation log 111 stored in the client device 101.

  As a method for the operation reproduction server device 104 to acquire the content 110 and the operation log 111 from the client device 101, for example, when the client device 101 and the operation reproduction server device 104 are connected via a network (not shown). Obtained through the network. As another method, a method of recording the content 110 and the operation log 111 stored in the client device 101 on a storage medium or the like and acquiring from the storage medium or the like can be considered.

  The interface 144 is an interface for connecting to other devices.

  First, the configuration of the client device 101 and the content generation server device 102 and the method for acquiring the content 110 and the operation log 111 will be described.

  Note that the computer system in this embodiment includes a database (not shown) for managing personal information of the operation player. The video playback device 103 can acquire personal information of an operation player who operates the video playback device 103 by referring to the database, and can execute an authentication process or the like. The database includes at least information related to the reference authority of the operation player.

  FIG. 3 is a sequence diagram illustrating processing of the client device 101 and the content generation server device 102 at the time of content acquisition in the present embodiment.

  The browser 108 on the client device 101 transmits a request to the content generation processing unit 116 on the content generation server device 102 (S2001).

  Upon receiving the request, the content generation processing unit 116 on the content generation server device 102 generates content as a response to the received request, and outputs the generated content to the confidential information adding unit 118 on the content generation server device 102. (S2002). At this time, the secret mark is not given to the generated content.

  The confidential information adding unit 118 to which the generated content is input calls the content analyzing unit 120 and the confidential part mark adding unit 119 (S2003, S2004).

  The called content analysis unit 120 and confidential part mark assignment unit 119 each start processing. Note that a confidential portion mark is attached to the generated content by the process executed by the confidential portion mark assigning unit 119.

  The confidential information adding unit 118 transmits the content with the confidential part mark added to the browser 108 (S2005).

  FIG. 4 is a block diagram illustrating a process in which the confidential information adding unit 118 according to this embodiment determines a confidential part.

  First, the confidential information DB 114 will be described. The confidential information DB 114 is updated by the confidential acquisition unit 117 or the confidential information adding unit 118.

  The confidential acquisition unit 117 includes a confidential information DB update unit 201 and an intra search unit 202.

  The intra search unit 202 acquires content in another content generation server device via the intranet 150. In addition, the intra search unit 202 acquires a regular expression 902 (described later using FIG. 10A) from the confidential information DB 114, and a character string that matches the regular expression 902 is included in the content acquired via the intranet 150. It is determined whether or not.

  When it is determined that the character string that matches the regular expression 902 is not included in the content acquired via the intranet 150, that is, the content acquired from the intranet 150 includes a character string that is different from the regular expression 902. In this case, the intra search unit 202 notifies the confidential information DB update unit 201 that content including a character string different from the regular expression 902 exists. The notification includes character string information that can be newly classified information.

  Upon receiving the notification from the intra search unit 202, the confidential information DB update unit 201 stores a character string that can newly become confidential information in the confidential information DB 114.

  When it is determined that the character string that matches the regular expression 902 is included in the content acquired via the intranet 150, the intra search unit 202 ends the process.

  Next, the confidential part determination process will be described.

  The content generation processing unit 116 that has received the request from the client device 101 generates content, and outputs the generated content to the confidential information adding unit 118.

  In the confidential information adding unit 118, the content analysis unit 120 to which the generated content is input refers to the confidential information DB 114, analyzes the input content, and updates the confidential information DB 114 based on the analysis result. Details of processing executed by the content analysis unit 120 will be described later with reference to FIG.

  The confidential part mark assigning unit 119 refers to the confidential information DB 114, specifies the confidential information part included in the content input from the content analysis unit 120, and assigns the confidential part mark to the specified part.

  Specifically, when it is determined that the input content includes a character string that matches the regular expression 902, the confidential part mark assigning unit 119 determines that the input content includes confidential information.

  Furthermore, the confidential part mark assigning unit 119 compares the character string included in the portion that is the confidential information included in the input content with the confidential character string 903 (which will be described later with reference to FIG. 10A). Identify sensitive strings.

  The confidential part mark assigning unit 119 refers to a reference authority 904 (which will be described later with reference to FIG. 10A) corresponding to the confidential character string 903 that matches the character string included in the input content.

  The confidential part mark assigning unit 119 assigns a mark indicating a confidential part corresponding to the reference authority 904 to a part of the content that is confidential information.

  Through the above processing, a confidential part mark is given to the input content.

  The confidential part mark assigning unit 119 transmits the content provided with the confidential part mark to the client device 101.

  If the content analysis unit 120 determines that the input content does not include a character string that matches the regular expression 902, the confidential part mark assigning unit 119 performs the input without executing any processing. The content thus transmitted is transmitted to the client apparatus 101.

  FIG. 10A is an explanatory diagram showing details of the confidential information DB 114 of the present embodiment.

  The confidential information DB 114 includes a confidential information identifier 901, a regular expression 902, a confidential character string 903, and a reference authority 904.

  The confidential information identifier 901 is an identifier for identifying confidential information. The regular expression 902 is a character string pattern corresponding to confidential information. The confidential character string 903 is a character string indicating confidential information actually included in the content. The reference authority 904 is an authority for referring to confidential information.

  The confidential information identifier 901 and the regular expression 902 are preferably set in advance by a content creator or the like.

  When setting a character string that is difficult to describe with a regular expression, the content creator may also set the confidential character string 903 in advance. The content creator may also set the reference authority 904.

  In this embodiment, an address, a bank account, a telephone number, a name, and a password are set as confidential information. In particular, since it is difficult to describe the name with a regular expression, the content producer may set the name in the confidential information DB 114 in advance.

  FIG. 5 is a flowchart for describing processing in which the content analysis unit 120 of the present embodiment updates the confidential information DB 114.

  The content analysis unit 120 starts analysis processing for a confidential portion in the content (step S401). First, the content analysis unit 120 acquires the content generated by the content generation processing unit 116 (step S402).

  The content analysis unit 120 refers to the confidential information DB 114 and acquires a character string of the regular expression 902 (step S403).

  Next, the content analysis unit 120 determines whether or not the character string included in the acquired content matches the character string of the regular expression 902 (step S404).

  If it is determined that the character string included in the acquired content does not match the character string of the regular expression 902, the content analysis unit 120 ends the process (step S409).

  When it is determined that the character string included in the acquired content matches the character string of the regular expression 902, the content analysis unit 120 matches the character string of the regular expression 902 from the character string included in the content. A character string is cut out (step S405).

  The content analysis unit 120 determines whether or not a character string cut out from the acquired content is included in the confidential information DB 114 (step S406). Specifically, the content analysis unit 120 determines whether a character string that matches a character string cut out from the acquired content exists in the confidential character string 903.

  If it is determined that there is a character string that matches the character string extracted from the acquired content in the confidential character string 903, the content analysis unit 120 ends the process (step S409).

  When it is determined that the character string that matches the character string extracted from the acquired content does not exist in the confidential character string 903, the content analysis unit 120 calls the confidential information DB update unit 203 and the character extracted from the content The column is stored in the confidential information DB 114 (step 407).

  Specifically, the content analysis unit 120 adds a new entry to the confidential character string 903 corresponding to the regular expression 902 determined to match the character string included in the acquired content in step S404. Further, the content analysis unit 120 stores the character string cut out from the content in the newly added entry in step S405, and calls the reference authority granting unit 601. The reference authority granting unit 601 sets the reference authority 904 for the newly added entry.

  The content analysis unit 120 calls the confidential part mark assigning unit 119 (step S408) and ends the process (step S409).

  Note that the processing of step S402 to step S409 is executed for all regular expressions 902. Specifically, the content analysis unit 120 selects one regular expression 902 in step S403, executes the processing of step S404 to step 408 for the selected regular expression 902, and after the processing ends, The next regular expression 902 is selected and the same processing is executed. That is, loop processing is executed.

  FIG. 6 is a flowchart for explaining processing executed by the intra search unit 202 of this embodiment.

  The intra search unit 202 starts an intranet search periodically (step S501). Note that the period for starting the intranet search process may be set by a content creator or the like.

  First, the intra search unit 202 refers to the regular expression 902 in the confidential information DB 114 and acquires the character string of the regular expression 902 (step S502).

  The intra search unit 202 collects content by searching a certain range in the intranet 150 (step S503). A certain range in which the intra search unit 202 searches for collecting content is set by the content creator or the like, and for example, a URL indicating the entrance of the intranet 150 is designated, and a URL linked from the URL is specified. Content is collected by recursive access.

  The intra search unit 202 analyzes the collected content (step S504), and determines whether the character string included in the analyzed content matches the acquired character string of the regular expression 902 (step S504). S505).

  If it is determined that the character string included in the analyzed content does not match the acquired character string of the regular expression 902, the intra search unit 202 ends the process (step S507).

  When it is determined that the character string included in the analyzed content matches the character string of the acquired regular expression, the intra search unit 202 calls the confidential information DB update unit 201 (step S506) and ends the process. (Step S507).

  The read confidential information DB update unit 201 cuts out the character string that matches the acquired character string of the regular expression from the content including the character string that matches the acquired character string of the regular expression, and cuts out the extracted character string. The added character string is added to the confidential character string 903 corresponding to the regular expression 902.

  FIG. 7 is a block diagram illustrating the reference authority assigning unit 601 according to the embodiment of this invention.

  As shown in FIG. 7, the confidential acquisition unit 117 includes a reference authority giving unit 601.

  The reference authority granting unit 601 has a function for referring to a character string stored in the content generation DB 115 using a plurality of reference authorities.

  The reference authority granting unit 601 is called by the content analysis unit 120 (step S408) or is called by the confidential information DB update unit 201, and executes processing described below.

  The reference authority assigning unit 601 determines a reference authority for referring to a character string that is included in the content generation DB 115 and matches the character string of the regular expression 902.

  The reference authority granting unit 601 notifies the confidential information DB update unit 201 of the determined reference authority, and the confidential information DB update unit 201 determines the reference authority determined as the reference authority 904 of the confidential information DB 114 based on the notification. Is stored.

  Specifically, the reference authority assigning unit 601 determines whether or not a character string that is included in the content generation DB 115 and matches the character string of the regular expression 902 can be referred to using an arbitrary reference authority. The confidential acquisition unit 117 determines the reference authority that can refer to the character string as the reference authority 904. When there are a plurality of reference authorities that can refer to the character string, the reference authority with the lowest level is determined as the reference authority 904.

  In the example illustrated in FIG. 7, whether or not the reference authority granting unit 601 can refer to the character string stored in the content generation DB 115 using the respective reference authorities of the person-in-charge authority, the chief authority, and the section manager authority. Determine.

  When the reference authority granting unit 601 uses the person-in-charge authority or the chief authority, the character string stored in the content generation DB 115 cannot be referred to. On the other hand, when the reference authority granting unit 601 uses the section manager authority, the character string stored in the content generation DB 115 can be referred to. Therefore, in the example illustrated in FIG. 7, the reference authority granting unit 601 determines the reference authority 904 as “section manager authority”.

Here, the content generation DB 115 accessed by the reference authority assigning unit 601 will be described.

  FIG. 10B is an explanatory diagram illustrating the content generation DB 115 according to this embodiment.

  The content generation DB 115 stores information necessary for generating content. Specifically, a character string or the like necessary for generating content is stored.

  Information stored in the content generation DB 115 depends on services provided by the content generation server apparatus 102. The content generation DB 115 is created by a content creator.

  In the example shown in FIG. 10B, a name 905 and an address 906 are included. The name 905 stores a character string of the name. An address 906 indicates a character string of the address. The content generation DB 115 may include other information and character strings.

  FIG. 8 is a flowchart for describing processing executed by the reference authority assigning unit 601 of this embodiment.

  The reference authority granting unit 601 is called by the content analysis unit 120 (step S408 in FIG. 5) or is called by the confidential information DB update unit 201, and starts a process for granting reference authority (step S701). Further, the reference authority granting unit 601 may periodically execute processing according to a cycle set by a content creator or the like.

  The reference authority granting unit 601 refers to the confidential information DB 114 and acquires the confidential character string 903 for which the reference authority 904 is not set (step S702).

  Next, the reference authority granting unit 601 sets the reference authority for accessing the character string that matches the acquired confidential character string 903 stored in the content generation DB 115 to the lowest level (step S703).

  The reference authority assigning unit 601 accesses the content generation DB 115 using the set reference authority (step S704).

  The reference authority assigning unit 601 determines whether the content generation DB 115 has been accessed (step S705).

  When it is determined that the content generation DB 115 can be accessed, the reference authority assigning unit 601 calls the confidential information DB update unit 201 (step S706) and ends the process (step S710).

  The called confidential information DB update unit 201 sets the reference authority that can access the content generation DB 115 in the reference authority 904 corresponding to the confidential character string 903 acquired in step 702.

  If it is determined that the content generation DB 115 cannot be accessed, the reference authority assigning unit 601 determines whether or not the set reference authority is at the highest level (step S707).

  When it is determined that the set reference authority is not the highest level, the reference authority granting unit 601 sets a reference authority of a level higher than the reference authority level used in step 704 (step S709), and the process proceeds to step S704. Returning, the processing of step S704 to step S710 is executed.

  When it is determined that the set reference authority is at the highest level, the reference authority assigning unit 601 calls the confidential information DB update unit 201 (step S708) and ends the process (step S710).

  The called confidential information DB update unit 201 sets the highest level reference authority to the reference authority 904 corresponding to the confidential character string 903 acquired in step S702.

  FIG. 9 is an explanatory diagram showing the timing at which information stored in the confidential information DB 114 of the present embodiment is updated.

  As shown in FIG. 9, when the intra search unit 202 collects content including character strings that can be confidential information from the intranet 150 and stores the character strings that can be confidential information in the confidential information DB 114, the confidential information DB update is performed. The confidential character string 903 is updated by the unit 201.

  Further, when the reference authority granting unit 601 sets the reference authority for the reference authority 904 corresponding to the confidential character string 903, the confidential information DB update unit 201 updates the reference authority 904.

  FIG. 11 is an explanatory diagram illustrating an example of a process in which the content generation server apparatus 102 according to the present embodiment gives a confidential portion mark to content.

  The content generation processing unit 116 that has received the request from the client device 101 generates the content 1001 and outputs the generated content 1001 to the confidential information adding unit 118. Here, the generated content 1001 includes a confidential part 1002.

  At the time of output from the content generation processing unit 116, the confidential portion 1002 of the content 1001 is not specified.

  The content analysis unit 120 updates the confidential information DB 114 based on the content 1001 input from the content generation processing unit 116. Specifically, the confidential character string 903 and the reference authority 904 are updated.

  Next, the confidential part mark assigning unit 119 refers to the confidential information DB 114, identifies a part (secret part 1002) that is confidential information included in the content 1001, and assigns the confidential part mark 1003 to the specified part. .

  Further, the confidential part mark assigning unit 119 transmits the content 110 with the confidential part mark 1003 attached thereto to the client device 101.

  FIG. 12 is a flowchart for explaining processing executed by the confidential part mark assigning unit 119 according to this embodiment.

  When the content is input from the content analysis unit 120, the confidential part mark assigning unit 119 starts processing (step S1101).

  First, the confidential part mark assigning unit 119 refers to the confidential information DB 114 and acquires the confidential character string 903 from the confidential information DB 114 (step S1102).

  The confidential part mark assigning unit 119 compares the character string included in the input content with the confidential character string 903 (step S1103).

  Based on the comparison result, the confidential part mark assigning unit 119 determines whether or not the character string included in the input content matches the confidential character string 903 (step S1104).

  If it is determined that the character string included in the input content does not match the acquired confidential character string 903, the confidential part mark assigning unit 119 ends the process (step S1107).

  When it is determined that the character string included in the input content matches the acquired confidential character string 903, the confidential portion mark assigning unit 119 adds a confidential portion mark to the content including the confidential character string 903 and the matching character string. (Step S1105). Specifically, a mark indicating that the location is a confidential portion corresponding to the reference authority 904 corresponding to the confidential character string 903 is given to the character string.

  The confidential part mark assigning unit 119 transmits the content provided with the confidential part mark to the client device 101 (step S1106), and ends the process (step S1107).

  Note that the processing from step S1101 to step S1107 is executed for all character strings stored in the confidential character string 903.

  FIG. 13A is an explanatory diagram illustrating an example of content in the present embodiment.

  In the present embodiment, when accessing the same URL, a portion where the display content of the content changes depending on factors such as the accessing person or the access time is called a dynamic location.

  In the example shown in FIG. 13A, a part 1201 for displaying an address is a dynamic part. Hereinafter, this portion is referred to as a dynamic location 1201.

  In the present embodiment, when accessing the same URL, a portion where the display content of the content does not change depending on factors such as the accessing person or the access time is called a static part.

  In the example shown in FIG. 13A, a portion 1202 indicating an instruction is a static location. Hereinafter, this portion is referred to as a static location 1202.

  In the present embodiment, content including a dynamic location is referred to as dynamic content, and content including only static content is referred to as static content. Note that the content shown in FIG. 13A is dynamic content.

  FIG. 13B is an explanatory diagram illustrating an example of a method for assigning a confidential part mark to a confidential part of content according to the present embodiment.

  In the present embodiment, even if the content generated by the content generation processing unit 116 is dynamic content or static content, it is output as a character string. The content transmitted from the content generation server device 102 to the client device 101 is transmitted in the HTML format.

  In the present embodiment, the content characteristics described above are used. Specifically, when providing a mark indicating a confidential location, the confidential location mark assigning unit 119 uses an HTML tag and embeds a tag corresponding to the reference authority 904 before and after the confidential location. To give a mark indicating that it is a confidential part.

  In the example shown in FIG. 13B, a mask attribute corresponding to the reference authority 904 is embedded before and after the character string that matches the confidential character string 903, so that a mark indicating a confidential part corresponding to the reference authority 904 is given. Is done.

  The above is the description of the configuration of the client device 101 and the content generation server device 102 and the method for acquiring the content 110 and the operation log 111.

  Next, the configuration of the video playback device 103 and the operation playback server device 104, and the playback method of the content 110 and the operation log 111 will be described.

  FIG. 14 is a block diagram illustrating a flow of processing for reproducing the operation contents of the client on the browser 108 according to the present embodiment.

  The playback control unit 124 instructs the control reception unit 131 to play back the operation contents of the client on the browser 108. Note that the playback control unit 124 can also instruct to stop and pause playback of client operation contents on the browser 108.

  The control receiving unit 131 that has received the playback command from the playback control unit 124 issues a playback command to the operation playback unit 132.

  The operation playback unit 132 that has received a playback command from the control reception unit 131 starts processing for playing back the operation content of the client on the browser 108. Hereinafter, processing executed by the operation reproducing unit 132 will be described.

  First, the operation reproduction script 136 reads the operation log 111 stored in the auxiliary storage unit 128, and generates a script for reproducing the operation contents of the client on the browser 108 based on the read operation log 111. The generated script is output to the browser 130.

  In addition, the confidential part reading unit 135 reads the content 110 stored in the auxiliary storage unit 128 and analyzes the read content 110 to identify the part to which the confidential part mark is given.

  As a method for specifying the portion to which the confidential part mark is given, for example, a method in which the confidential part reading unit 135 reads out the mask attribute embedded in the content can be considered.

  The confidential part reading unit 135 outputs the read content 110 and the analysis result of the content 110 to the mask applying unit 137.

  Based on the content 110 and the analysis result of the content 110 input from the confidential part reading unit 135, the mask attaching unit 137 masks the part to which the confidential part mark is attached in the content 110.

  Specifically, the mask assigning unit 137 determines whether or not the reference authority in the confidential part mark assigned to the content 110 is higher than the reference authority included in the reproduction command received from the control accepting unit 131. .

  When it is determined that the reference authority for the confidential part mark assigned to the content 110 is lower than the reference authority included in the reproduction command received from the control reception unit 131, the mask assignment unit 137 executes the mask process. First, the input content 110 is output to the browser 130.

  When it is determined that the reference authority in the confidential part mark given to the content 110 is higher than the reference authority included in the reproduction command received from the control reception unit 131, the mask assignment unit 137 executes mask processing. . Specifically, the mask assigning unit 137 masks the portion to which the secret location mark is assigned.

  The mask assigning unit 137 outputs the content 110 on which the mask process has been executed to the browser 130.

  The above is the description of the processing executed by the operation playback unit 132.

  Returning to the description of the processing for reproducing the operation contents of the client on the browser 108.

  The browser 130 reproduces the operation contents of the client on the browser 108 based on the script input from the operation reproduction script 136 and the content 110 input from the mask assignment unit 137. The content 1300 reproduced on the browser 130 includes content 110 that has been subjected to mask processing and content 110 that has not been subjected to mask processing.

  The image generation unit 133 to which the image generation command is input from the control reception unit 131 starts processing. The image generation unit 133 captures an image of the operation contents of the client on the browser 108 that is reproduced on the browser 130, and generates an image for transmission to the video reproduction device 103. The generated image is output to the image distribution unit 134.

  The image distribution unit 134 to which the distribution command is input from the control reception unit 131 transmits the image input from the image generation unit 133 to the video output unit 125.

  The video output unit 125 reproduces the image received from the image distribution unit 134.

  Through the above processing, the portion that is the confidential information in the operation contents of the client on the browser 108 that is reproduced on the browser 130 is masked and displayed.

  FIG. 15 is a sequence diagram illustrating the flow of processing for reproducing the operation contents of the client on the browser 108 according to the present embodiment.

  The reproduction control unit 124 transmits a reproduction command to the control reception unit 131 (S1401).

  The control receiving unit 131 that has received the playback command from the playback control unit 124 issues the playback command to the operation playback unit 132 (S1402).

  The operation reproducing unit 132 receives a reproduction command issued from the control receiving unit 131 and calls the confidential part reading unit 135 (S1403). The read confidential part reading unit 135 identifies the part to which the confidential part mark is given.

  Next, the operation reproducing unit 132 calls the mask applying unit 137 (S1404). The called mask assigning unit 137 masks the portion to which the confidential portion mark is attached based on the reference authority and the confidential portion mark of the operation player included in the reproduction command transmitted from the reproduction control unit 124.

  Next, the operation reproduction unit 132 calls the operation reproduction script 136 (S1405). The called operation reproduction script 136 reads the operation log 111 and generates a script for reproducing the operation contents of the client on the browser 108.

  The browser 130 reproduces the operation content of the client on the browser 108 based on the content on which the mask process has been executed and the generated script (S1406).

  The control reception unit 131 issues an image generation command to the image generation unit 133 (S1407).

  The image generation unit 133 receives an image generation command from the control reception unit 131, captures an image of the operation contents of the client on the browser 108 that is reproduced on the browser 130, and an image (for transmission to the video reproduction device 103 ( An operation reproduction image 1416) is generated (S1408). The operation reproduction image 1416 is output to the image distribution unit 134.

  When the operation reproduction script 136 ends the generation of the script for reproducing the client operation content on the browser 108, the browser 130 ends the reproduction of the client operation content on the browser 108 (S1409).

  The operation / playback unit 132 issues a video recording end command to the image generation unit 133 (S1410).

  The image generation unit 133 receives the video recording end command from the operation playback unit 132, and issues an image generation completion command to the control reception unit 131 (S1411).

  The control reception unit 131 receives an image generation completion command from the image generation unit 133 and issues an image distribution command to the image distribution unit 134 (S1412).

  The image distribution unit 134 receives an image distribution command from the control reception unit 131, and transmits the operation reproduction image 1416 to the video output unit 125 (S1413). As a transmission method of the operation reproduction image 1416, streaming distribution or the like can be considered.

  After the transmission of the operation reproduction image 1416 to the video output unit 125 is completed, the image distribution unit 134 issues an output completion command to the control reception unit 131 (S1414).

  The control reception unit 131 receives the output completion command from the image distribution unit 134, and transmits the playback completion command to the playback control unit 124 (S1415).

  FIG. 16A is a flowchart for describing processing executed by the confidential part reading unit 135 of this embodiment. FIG. 16B is a flowchart illustrating processing executed by the mask applying unit 137 according to the embodiment of this invention.

  The confidential part reading unit 135 starts processing by being called from the control receiving unit 131 (step S1501).

  The confidential part reading unit 135 reads the content 110 (step S1502).

  The confidential part reading unit 135 masks a part to be masked based on the reference authority of the operation player included in the reproduction command transmitted from the reproduction control unit 124 and the confidential part mark given to the read content 110. Determination is made (step S1503), and the process is terminated (step S1504).

  Specifically, when it is determined that the reference authority of the operation player included in the reproduction command transmitted from the reproduction control unit 124 is lower than the reference authority included in the confidential portion mark, the confidential portion reading unit 135 is determined. Determines the portion to which the confidential portion mark is assigned as the mask portion.

  If it is determined that the reference authority of the operation player included in the reproduction command transmitted from the reproduction control unit 124 is higher than the reference authority included in the confidential portion mark, the portion to which the confidential portion mark is given. Is not a mask location.

  Next, the masking unit 137 is called by the operation reproducing unit 132.

  The called mask assigning unit 137 starts mask processing (step S1505). In step S1503, if the reference authority of the operation player included in the reproduction command transmitted from the reproduction control unit 124 is higher than the reference authority included in the confidential portion mark, the mask process is not started.

  The mask applying unit 137 performs mask processing on the mask location determined in step S1503 (step S1506), and ends the processing (step S1507).

  By the mask processing described above, for example, when the reference authority included in the confidential part mark given to the content 110 is the section manager authority, only the operation player who has the authority higher than the section authority is reproduced from the video output unit 125. Confidential information included in the operation contents of the client on the browser 108 can be viewed.

  Through the above processing, the browser 130 reproduces the operation contents of the client on the browser 108 in which the portion to which the mark indicating the confidential portion is given is masked.

  FIG. 17A is an explanatory diagram showing a GUI displayed when operating the reproduction control unit 124 of the present embodiment.

  The video playback device 103 includes a display device (not shown), and a GUI 1610 is displayed on the display device.

  The GUI 1610 includes an operation log selection display unit 1608, a play button 1603, a pause button 1604, and a stop button 1605.

  The operation log selection display unit 1608 is a display unit for selecting operation contents stored in the operation log 111.

  In the example shown in FIG. 16A, the operation log 1 (1601) and the operation log 2 (1602) are selected in the operation log selection display unit 1608.

  The operation log selection display unit 1608 includes a personal information ID input unit 1607 for identifying the personal information of the operation player.

  Using the ID input to the personal information ID input unit 1607, the video playback device 103 refers to a database (not shown) that manages the personal information of the operation player and acquires the reference authority of the operation player. In order to prevent unauthorized use of the ID, the video playback device 103 may include an input unit for inputting a password to the GUI 1610.

  A play button 1603, a pause button 1604, and a stop button 1605 are operation buttons for instructing the operation / playback server device 104 to play, pause, and stop the operation contents of the client on the browser 108.

  FIG. 17B is an explanatory diagram illustrating an example of a GUI that is displayed by the video output unit 125 of this embodiment and displays the operation contents of the client on the browser 108.

  The GUI 1611 is displayed on a display device (not shown) included in the video playback device 103. An operation reproduction video 1606 is displayed on the GUI 1611. In the operation reproduction video 1606, the operation contents of the client on the browser 108 generated by the image generation unit 133 capturing the browser 130 are displayed.

  Further, of the operation contents displayed on the operation reproduction video 1606, the portion to which the confidential portion mark is given is masked and is not displayed to the operation player.

  According to an embodiment of the present invention, when the operation content of the client on the browser 108 is reproduced, the confidential portion in the content is masked and displayed, so that the operation player cannot easily see the confidential information. .

  Further, according to the embodiment of the present invention, the operation player can check the operation content of the client on the browser 108 stored in the operation reproduction server device 104 only through the video reproduction device 103. . Therefore, there is no danger of browsing the operation content using unauthorized means.

  In addition, according to an embodiment of the present invention, other content is acquired via an intranet, and confidential information that has not been managed by the confidential information DB of the device itself is dynamically updated. Accordingly, more confidential information to be concealed can be dynamically stored, management of the confidential information becomes safer, and the effort of inputting the confidential information in advance in the confidential information DB as an initial setting can be reduced.

  Furthermore, according to an embodiment of the present invention, since the reference authority is provided for the confidential information to be concealed, hierarchical management can be performed regarding the reproduction of the confidential information.

101 Client device 102 Content generation server device 103 Video playback device 104 Operation playback server device 105 CPU
106 Main storage unit 107 Auxiliary storage unit 108 Browser 109 Operation log acquisition unit 110 Content (with confidential part mark)
111 Operation log 112 CPU
113 Main storage unit 114 Confidential information DB
115 Content generation DB
116 Content generation processing unit 117 Confidential information addition unit 118 Confidential acquisition unit 119 Confidential part mark addition unit 120 Content analysis unit 121 CPU
122 Main storage unit 123 Operation video playback unit 124 Playback control unit 125 Video output unit 126 CPU
127 Main storage unit 128 Auxiliary storage unit 129 Operation reproduction unit 130 Browser 131 Control reception unit 132 Operation reproduction unit 133 Image generation unit 134 Image distribution unit 135 Confidential part reading unit 136 Operation reproduction script 137 Mask assignment unit 141 Interface 142 Interface 143 Interface 144 Interface 150 Intranet 201 Confidential information DB update unit 202 Intra search unit 601 Reference authority granting unit 901 Confidential information identifier 902 Regular expression 903 Confidential character string 904 Reference authority 905 Name 906 Address 1001 Content 1002 Confidential part 1003 Confidential part mark 1201 Dynamic part 1202 Static location 1300 Content 1416 Operation playback image 1603 Playback button 1604 Pause button 1605 Stop button 1606 Operation reproduction video 16 7 Personal information ID input unit 1608 operation log selection display unit 1610 GUI
1611 GUI

Claims (13)

A plurality of first server devices that generate content to be played back on the first web browser, a second server device that plays back the user's operation details on the first web browser, and confidential information included in the content A computer system including a confidential information database for storing information for
The first server devices are connected to each other via a communication line,
Acquiring content generated by another first server device via the communication line, storing confidential information included in the content in the confidential information database,
Analyzing the content generated by the own device with reference to the confidential information database,
Of the information contained in the content, identify the part that is confidential information,
A confidential mark indicating confidential information is given to the identified part,
The computer system, wherein the second server device refers to the confidential mark and reproduces the operation information of the user on the first web browser while concealing the confidential information. The confidential information database stores the confidential information in regular expressions and entries corresponding to the regular expressions,
The first server device
When the content generated by the other first server device acquired via the communication line is acquired and confidential information included in the content is stored in the confidential information database, a character string included in the content is Determine if it matches the regular expression and the entry;
2. The computer system according to claim 1, wherein, if they do not match, a character string included in the content is stored as a new entry in the confidential information database. The first server device
3. The computer system according to claim 1 or 2 , wherein a different confidential mark is assigned to the specified part for each first authority for referring to a part that becomes confidential information. The computer system includes a content generation database that stores information for generating the content,
The confidential information database includes a character string serving as the confidential information and the first authority corresponding to the character string serving as the confidential information,
The first server device
Refer to the confidential information database, obtain a character string that is the confidential information for which the first authority is not set,
The authority for referring to the character string that becomes the acquired confidential information is set to a predetermined level,
Using the set predetermined level of authority, it is determined whether or not it is possible to refer to a character string that is included in the content generation database and matches the character string that is the acquired confidential information,
When it is determined that the character string that is included in the content generation database and matches the character string that becomes the acquired confidential information cannot be referred to, the authority for referring to the character string that becomes the acquired confidential information Set the level to the next higher level,
Using the newly set level authority, it is determined again whether or not it is possible to refer to a character string that is included in the content generation database and matches the character string that is the acquired confidential information,
When it is determined that a character string that is included in the content generation database and matches the character string that is the acquired confidential information can be referred to, the currently set authority is set as the first authority to the confidential information database. The computer system according to claim 3, wherein the computer system is stored in a computer. The second server device is
Obtaining a second authority of an administrator who requests reproduction of a user's operation content on the first web browser;
Determining whether the second authority is lower than the first authority in the confidential mark given to the content included in the operation content of the user on the first web browser to be reproduced;
If it is determined that the second authority is low, process so that the portion with the confidential mark is not displayed,
5. The computer system according to claim 3 , wherein an operation content of a user on the first web browser is reproduced using content processed so that the portion to which the confidential mark is attached is not displayed. 6. . The second server device is
Have a second web browser,
Acquiring content played on the first web browser and user operation log on the first web browser;
Based on the acquired content reproduced on the first web browser and the operation log of the user on the acquired first web browser, the first web browser performs the first operation on the second web browser. Reproduce user operations on the web browser,
From the second web browser, according to any one of claims 1 5, characterized in that to generate an image for reproducing the details of the operation of the user in the reproduced on said first web browser Computer system. A plurality of first server devices that generate content to be played back on the first web browser, a second server device that plays back the user's operation details on the first web browser, and confidential information included in the content An operation reproduction method in a computer system including a confidential information database for storing information for
The plurality of first server devices are connected to each other via a communication line,
The operation playback method includes:
The first server device acquires the content generated by another first server device via the communication line, and stores the confidential information included in the content in the confidential information database;
The first server device analyzing the content with reference to the confidential information database;
The first server device identifying a portion to be confidential information of information included in the content;
The first server device assigns a confidential mark indicating confidential information to the specified portion;
The second server device includes a step of concealing and reproducing the confidential information when reproducing the operation content of the user on the first web browser with reference to the confidential mark. How to play back. The confidential information database stores the confidential information in an entry corresponding to a regular display and the regular expression,
The operation playback method includes:
In the step of acquiring content generated by the other first server device acquired via the communication line and storing confidential information included in the content in the confidential information database,
The first server device determining whether a character string included in the content matches the regular expression and the entry;
8. The operation reproduction method according to claim 7, further comprising a step of storing a character string included in the content as a new entry in the confidential information database if they do not match. The computer system is
Including a content generation database storing information for generating the content;
The confidential information database includes a character string serving as the confidential information and the first authority corresponding to the character string serving as the confidential information,
The operation playback method includes:
The first server device refers to the confidential information database, and obtains a character string serving as the confidential information for which the first authority is not set;
The first server device sets an authority for referring to the character string as the acquired confidential information to a predetermined level;
Whether or not the first server device can refer to a character string that is included in the content generation database and matches the character string that is the acquired confidential information, using the set predetermined level of authority. A determining step;
If it is determined that the first server device cannot refer to a character string that is included in the content generation database and matches the character string that is the acquired confidential information, the character that is the acquired confidential information Setting the level of authority to view the column to the next higher level;
Whether or not the first server device can refer to a character string that is included in the content generation database and matches the character string that is the acquired confidential information by using a newly set authority. A determining step;
When it is determined that a character string that is included in the content generation database and matches the character string that is the acquired confidential information can be referred to, the currently set authority is set as the first authority to the confidential information database. The method of claim 7 , further comprising a step of storing in the operation reproduction method. The second server device has a second web browser,
The operation playback method includes:
When requested by an administrator to play back the user's operation content on the first web browser, the second server device performs the content played on the first web browser and the first Obtaining a user operation log on the web browser of
The second server device obtaining a second authority of the administrator;
The second server device determining whether the second authority is lower than the first authority in the security mark given to the content reproduced on the first web browser;
When it is determined that the second authority is low, the second server device performs processing so that the portion to which the confidential mark is attached is not displayed;
The second server device, based on the content processed so as not to display the portion to which the confidential mark is attached, and the acquired operation log of the user on the first web browser, Reproducing a user operation content on the first web browser on a web browser;
The second server device includes a step of generating, from the second web browser, an image for reproducing the reproduced operation contents of the user on the first web browser. The operation reproduction method according to any one of claims 7 to 9 .   A security mark assigning program that is connected to a confidential information database that stores information for specifying confidential information included in content and is executed on a server device that generates the content to be played back on a web browser,
  The server device includes a processor, a memory connected to the processor, and a network interface connected to the processor,
  The confidential mark granting program is:
  Acquiring content generated by the other server device via the network interface, and storing confidential information included in the content in the confidential information database;
  A procedure for analyzing the content generated by the device with reference to the confidential information database;
  Of the information included in the content, a procedure for identifying a portion that is confidential information;
  A procedure for giving a secret mark indicating confidential information to the specified portion;
Is executed by the server device.   The confidential information database stores the confidential information in regular expressions and entries corresponding to the regular expressions,
  The confidential mark granting program is:
  In the procedure of acquiring content generated by the other server device and storing confidential information included in the content in the confidential information database,
  A procedure for determining whether a character string included in the content matches the regular expression and the entry;
  12. The secret mark assigning program according to claim 11, wherein, if they do not match, the server device is caused to execute a procedure for storing a character string included in the content as a new entry in the confidential information database.   The confidential mark granting program is:
  13. The confidentiality according to claim 11 or 12, wherein the server apparatus is caused to execute a procedure for assigning the different confidential mark to the specified part for each authority for referring to the part to be confidential information. Marking program.