JP6932157B2 - Information processing equipment, information processing methods, and information processing programs - Google Patents

Description

Embodiments of the present invention relate to information processing devices, information processing methods, and information processing programs.

There is known an IRM (Information Rights Management) technique for managing files such as document data and image data created by a user so that only an authorized user can view and edit the files.

Conventionally, a technique has been disclosed in which a file is encrypted by using a dedicated application program, and the access authority of a user who can decrypt and access the encrypted file is managed by a server. In this technique, when a person having access authority accesses a file, a decryption key for decrypting the encrypted file is given to the user via a server so that the file can be viewed.

By managing the user's access rights via the server, even if the file is out of the control of the creator, such as when the file is attached to an e-mail and sent to the other party, the set access rights will be used. It is possible to always restrict access to files.

Japanese Unexamined Patent Publication No. 2006-99419

By the way, in the IRM technology for controlling access to a file described above, in order to determine whether or not the user who accesses the file is a legitimate authorized person, an e-mail address which is information for identifying an individual user is used. The authentication method is widely used.

However, with the authentication method using an email address, even if a user with an email address that is less reliable than the corporate email address, such as an individual's private email address, is set as the access authority, the legitimate authority is granted. Since you can access the file as a person, there is a risk that highly confidential files will be leaked through your personal private email address. Even if the settings of the access authority can be managed by the management server and the settings can be changed after the fact, it may be too late after the file is leaked.

The present invention has been made in consideration of such circumstances, and provides an information processing device, an information processing method, and an information processing program capable of permitting access to a protected file only to a highly reliable user. The purpose is to provide.

The information processing device according to the embodiment of the present invention has an access authority acquisition unit that acquires access authority information including information of an access permitter corresponding to a protected file, and a domain in which domain information of an e-mail address is preset. Corresponds to the information registration unit, the user authentication unit that receives the user identification information that identifies the user from the receiver terminal, collates it with the acquired information of the access permitter, and authenticates the user, and the user identification information. An access control unit that determines whether or not to send the release information for releasing the protection of the file and permitting access based on the domain of the e-mail address and the set domain information to the recipient terminal. The access control unit is characterized in that it determines the setting of the access authority information based on the domain of the access permitter included in the access authority information and the domain information of the e-mail address.

Embodiments of the present invention provide information processing devices, information processing methods, and information processing programs that can allow access to protected files only to highly reliable users.

The block diagram which shows an example of the structure of the access control system using the information processing apparatus which concerns on this embodiment. The figure which shows an example of setting of access authority information by a sender terminal. The figure which shows an example of the domain information registered in advance. The schematic diagram which shows the flow of the access permission to a file in the access control system which concerns on this embodiment. The figure which shows an example of the warning screen which is displayed on the receiver terminal when the file is accessed by the user who does not match the registered domain information in the access control system which concerns on this embodiment. The figure which shows an example of the flow until the access authority information is set in the sender terminal in the information processing method which concerns on this embodiment. FIG. 5 is a diagram showing an example of a warning screen displayed on a sender terminal when a user who does not match the registered domain information is set as an access permitter in the access control system according to the present embodiment. The figure which shows an example of the flow at the time of accessing a file in a receiver terminal in the information processing method which concerns on this embodiment.

Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.
FIG. 1 is a diagram showing an example of a configuration of an access control system 100 using the information processing device 10 according to the present embodiment.

First, the overall configuration will be described.
The access control system 100 authenticates the receiver terminal 12 of the user whose access authority is set for the protected file with the information processing device 10, and determines whether or not the authenticated user belongs to the permitted group. , It is a system that makes a judgment based on the domain of the e-mail address and controls access to the file according to the judgment result.

The access control system 100 includes an information processing device 10, a sender terminal 11, and a receiver terminal 12. The information processing device 10 and the sender terminal 11, which is a terminal on the side of sending a file to the receiver terminal 12, are connected to each other so as to be able to communicate with each other via a network. Further, the information processing device 10 and the receiver terminal 12, which is a terminal on the side of receiving the file from the sender terminal 11, are connected to each other so as to be able to communicate with each other via a network.

The sender terminal 11 is a terminal that protects a file created or held by the terminal by setting an authorized person to access (open and view the file).

The sender terminal 11 has an access authority setting unit 13. The access authority setting unit 13 sets the access authority information including the information of the user to which the access authority is given to the file. The information of the user to whom the access authority is given to the file may be set by the identification information that can uniquely identify the user, for example, by the e-mail address corresponding to the user. In addition, as the user information to which the access authority is given to the file, the telephone number of the mobile device such as a telephone or a smartphone owned by the user, the identification information for identifying each of the mobile devices, or the file is used. It may be set by the application information for authentication operating in the receiving receiver terminal 12. Further, as the information of the user to which the access authority is given to the file, the biometric information such as the fingerprint information and the "face" information of the user may be used. These user information are stored in advance in the sender terminal 11 or the information processing device 10.

In addition, the access authority information may include restriction information regarding restrictions on various control operations (for example, file editing, overwriting, printing, copying, etc.) when a user with access authority operates a file. good.

When the access authority information is set for the file, the access authority setting unit 13 protects the file so that only the user having the unlock information can access the file by password lock or encryption processing. The access authority setting unit 13 generates release information for releasing the protection of the file, specifically, a password for releasing the password lock and a decryption key for decrypting the encrypted file.

The sender terminal 11 transmits the access authority information set for the file and the release information for releasing and accessing the protected file to the information processing device 10.

FIG. 2 is a diagram showing an example of setting access authority information by the sender terminal 11. The user who grants access to the file is set with an email address. In FIG. 2, access privileges are granted to three users, "xxx@aaa.co.jp", "yy@bbb.co.jp", and "zzz@kensaku.co.jp". Further, as the access authority information, it is possible to select whether or not to restrict the control operation of overwriting, printing, and copying of the file.

The sender terminal 11 transmits the information of the user who is permitted to access and the setting of the control operation for the file as the access authority information. At this time, the file is protected by the access authority setting unit 13 by an encryption process or the like, and the release information for releasing the protection is transmitted to the information processing device 10. The access permitter and the setting information of the control operation may be changed by receiving a command for changing the setting from the sender terminal 11 after being stored in the information processing device 10.

The file protected by the sender terminal 11 is transmitted to the receiver terminal 12. The transmission of the file from the sender terminal 11 to the receiver terminal 12 is attached to an e-mail and transmitted. Further, the transfer of the file from the sender terminal 11 to the receiver terminal 12 is not limited to the method via e-mail, and the protected file in the sender terminal 11 is recorded in a storage medium such as USB. Then, the method of sending the file data to the receiver terminal 12 via the storage medium may be used.

Further, when the file is sent from the sender terminal 11 to the receiver terminal 12 by e-mail, it is not necessary for the user to set the access authority information in advance, and the access authority setting unit 13 is an e-mail to which the file is attached. Access authority information may be automatically generated with the e-mail address of the destination (TO, CC, BCC) set in the access authorized person. In this case, the e-mail is sent to the recipient terminal 12 with a newly attached protected file instead of the attached file. At this time, the automatically generated access authority information and the release information for releasing the protection of the file are transmitted to the information processing device 10.

Further, when the user holds the file on a server different from the sender terminal 11 and has already set the information of the user who grants the access authority to the file, the server and the information processing device 10 are used. May be configured to cooperate with each other to transmit the set access authority information to the information processing apparatus 10. At this time, the file is protected by the server (or the sender terminal 11), and the release information for releasing the protection of the file is transmitted to the information processing device 10.

Further, when the user of the sender terminal 11 belongs to a system in which a plurality of users are operated as one group (for example, a system for exchanging messages between groups via a network), the user is set in this group. The access authority may be automatically set for the plurality of users, and the set access authority information may be transmitted to the information processing apparatus 10.

The receiver terminal 12 is a terminal that receives a protected file from the sender terminal 11 and accesses (views) the file, and has an identification information transmission unit 19 and a release information acquisition unit 18.

When accessing the protected file, the identification information transmission unit 19 transmits the identification information including the user's e-mail address of the receiver terminal 12 to the information processing device 10. Then, the user authentication is completed using the identification information received by the information processing device 10, and it is determined that the user is authorized to access the file based on the domain of the email address corresponding to the user of the recipient terminal 12. In this case, the information processing device 10 transmits release information for releasing the protection of the file.

The release information acquisition unit 18 acquires the release information (password and decryption key of the encrypted file) acquired from the information processing device 10. The receiver terminal 12 can access the file by releasing the protection of the file by the release information. If the release information cannot be acquired by the release information acquisition unit 18, the file cannot be accessed because the protection of the file cannot be released. The method of user authentication and access permission in the information processing device 10 will be described later.

The information processing device 10 according to the embodiment acquires access authority information from the sender terminal 11 and authenticates the user based on the user identification information transmitted from the receiver terminal 12. Then, whether or not to give the authenticated user of the receiver terminal 12 permission to access the file based on the domain of the e-mail address corresponding to the user of the receiver terminal 12 and the domain information stored in advance. It is a management server that controls access to files by determining whether or not to send release information.

A specific configuration of the information processing apparatus 10 according to the embodiment will be described.
The information processing device 10 includes an access authority acquisition unit 14, a domain information registration unit 15, a user authentication unit 16, and an access control unit 17.

The function of each unit constituting the information processing device 10 may be realized by executing a predetermined program code by using a processor, and is not limited to such software processing, and for example, an ASIC or the like is used. It may be realized by the existing hardware processing, or it may be realized by combining software processing and hardware processing.

The access authority acquisition unit 14 acquires the access authority information including the information of the access permitter (the e-mail address of the user to whom the access authority is granted) corresponding to the file protected by the sender terminal 11 from the sender terminal 11. do. The access authority acquisition unit 14 stores the access authority information in association with the identification information that identifies each of the files. Further, the release information for releasing the protection of the file received from the sender terminal 11 is saved in association with the file.

The domain information registration unit 15 presets the domain information of the e-mail address. Specifically, in the domain information of the domain information registration unit 15, the domain of the e-mail address corresponding to the user who releases the protection of the file and permits access is set. As the domain to allow access, the domain of the e-mail address belonging to the company or organization whose reliability has been confirmed is set. On the other hand, private domains used for personal email are not set as domains that allow access. The domain information is registered in advance by the user.

Further, the domain information registration unit 15 may separately register a domain for which access is permitted and a domain for which access is not permitted, such as a private domain. Further, a domain of a malicious e-mail address that invites the download of malware to a specific user terminal via the URL described in the body of the e-mail may be registered as a domain that denies access.

FIG. 3 is a diagram showing an example of domain information registered in advance in the information processing device 10.

The domain of the e-mail address corresponding to the company or organization whose reliability has been confirmed by the user is set as the domain that allows access to the file. A personal private domain is set as a domain that denies access to files. In addition, the domain of the malicious email address is set as the domain that denies access to the file.

The domain information set by the domain information registration unit 15 is not limited to the method of directly setting by the domain, and may be simply registered by an e-mail address. Specifically, when the domain information registration unit 15 registers the access permission (or access is not permitted) to the file using the e-mail address, the domain of the e-mail address is the domain (or the domain) that permits the access to the file. It is set as a domain that disallows access).

A private domain may be set as a domain that allows access to files. The domain that allows access can be flexibly set according to the security policy of each company or organization that operates the access control system 100.

When the receiver terminal 12 accesses the file, the user authentication unit 16 receives the user identification information that identifies the user from the receiver terminal 12 and authenticates the user by collating it with the acquired information of the access permitter. .. The user identification information that identifies the user includes the e-mail address of the user corresponding to the recipient terminal 12.

The user authentication unit 16 determines whether or not the user's e-mail address corresponding to the acquired receiver terminal 12 is included in the access authority in the access authority information stored in association with the file. , It is determined whether or not the recipient terminal 12 user has a legitimate access authority to the file.

Specifically, when the e-mail address of the user corresponding to the receiver terminal 12 is included in the e-mail address of the access permitter set in the access authority information, the user of the receiver terminal 12 is legitimate. Authenticate as an access authority. If it is not included in the permitter's email address, the authentication will be inconsistent. The user authentication may be one-time password authentication, SAML authentication, AD authentication, or a combination of these for user authentication. In addition, the telephone number of a mobile device such as a telephone or a smartphone owned by a user corresponding to the receiver terminal 12, an identification number for identifying each of the mobile devices, or in the receiver terminal 12 that receives a file. User authentication may be performed using the application information for authentication that operates. Further, as the information of the user to whom the access authority is given to the file, the user authentication may be performed using the biometric information such as the fingerprint information and the "face" information of the user.

After user authentication, the access control unit 17 releases the release information that allows access by releasing the protection of the file based on the domain of the e-mail address corresponding to the user's identification information and the preset domain information. It is determined whether or not to transmit to the terminal 12.

Specifically, the access control unit 17 collates the domain of the e-mail address corresponding to the user identification information of the receiver terminal 12 with the domain information registered in advance, and e-mails the receiver terminal 12. If the domain of the address matches the domain information for which access is permitted, the file access permission is granted and the release information corresponding to the file is transmitted to the receiver terminal 12.

On the other hand, if the domain of the e-mail address of the recipient terminal 12 does not match the domain information for which access is permitted, the file access permission is not permitted and the cancellation information is not transmitted. If the domain of the e-mail address of the recipient terminal 12 matches the domain information of the access denial, the file access permission is not permitted and the cancellation information is not transmitted. If the domain of the e-mail address of the recipient terminal 12 is not registered in the domain information, that is, if it is an unregistered domain, the access permission of the file is not permitted as access permission, and the cancellation information is displayed. It may be configured not to transmit.

Regarding the private email address of a highly reliable user, even if the domain of the private email address is registered as a domain for which access is not permitted, the configuration that allows access to the file as an access permitter May be. The private e-mail address of the trusted user is registered in the information processing device 10 in advance by the administrator of the information processing device 10 or the user of the sender terminal 11. Further, when the user of the recipient terminal 12 is authenticated, if the user can be authenticated by a method such as biometric authentication that can reliably identify the individual, even a user with a private email address corresponding to the unauthorized domain can be authenticated. It may be configured to allow access to the file as an access permitter.

At this time, if the domain of the user's e-mail address included in the user identification information received from the receiver terminal 12 does not match the domain information of the e-mail address to be accessed, the access control unit 17 accesses. The recipient terminal 12 may be notified of the disapproval.

When the access control unit 17 acquires the access authority information from the access authority setting unit 13 of the sender terminal 11, the domain of the access authority included in the access authority information releases the protection of the file and accesses the access. If it does not match the domain information of the permitted e-mail address, the sender terminal 11 may be notified that the access authority information cannot be set.

Subsequently, the flow of access permission to the file in the access control system 100 according to the present embodiment will be described with reference to FIG. FIG. 4 illustrates the flow of the file access method and is not limited to this method.

First, the access authority setting unit 13 of the sender terminal 11 sets the access authority information including the information of the access permitter. "Xxxx@aaa.co.jp" and "yy@private.com" are set for the file A. The access authority setting unit 13 encrypts and protects the file A for which the access authority is set. The sender terminal 11 transmits the access authority information and the release information (decryption key) for decrypting the encrypted file to the information processing device 10 in association with the file A.

Here, in the domain information registration unit 15 of the information processing apparatus 10, "aaa.co.jp" is set as a permitted domain that permits access to the file, while "private.com", which is a private domain, is not permitted. Suppose it is set as a domain.

The receiver terminal 12 receives the protected file A via e-mail or the like. When the receiver terminal 12 accesses the protected file A, user identification information including "yy@private.com", which is an e-mail address corresponding to the terminal, is transmitted to the information processing device 10.

The user authentication unit 16 of the information processing device 10 authenticates whether or not it has a legitimate access authority by using the e-mail address of the receiver terminal 12 that accesses the file A. Since "yy@private.com" is included in the access permitter, the authentication is consistent.

Further, the access control unit 17 collates "private.com", which is the domain of "yy@private.com", which is the e-mail address for which authentication is established, with the domain information registered in advance in the domain information registration unit 15. do.

Then, since the access control unit 17 determines that "private.com" is registered as a disallowed domain, the access control unit 17 determines that the access is not permitted, and sends the release information to the receiver terminal 12 to release the protection of the file A. Do not send. At this time, the access control unit 17 may warn the receiver terminal 12 that access is not permitted.

FIG. 5 is an example of a warning screen displayed on the receiver terminal 12 when the file is accessed from the receiver terminal 12 of the user who does not match the registered domain information.

The warning screen allows the user of the receiver terminal 12 to recognize that access to the file is not permitted because the domain of the receiver terminal 12 does not match the domain information.

The access authority setting unit 13 of the sender terminal 11 sets the access authority information including the information of the access permitter, and when the access authority information is acquired by the information processing apparatus 10, it matches the registered domain information. If a non-user is set as an access permitter, the sender terminal 11 may be warned to that effect.

In this way, when the sender terminal 11 sets the access authority information, the domain of the set e-mail address of the receiver terminal 12 does not match the registered domain information, so that the access to the file is prohibited. Can be notified to the sender terminal 11 in advance.

Subsequently, the operation of the information processing apparatus 10 according to the present embodiment will be described.
FIG. 6 is a diagram showing an example of a processing flow until access authority information is set in the sender terminal 11 in the information processing method according to the present embodiment (see FIG. 1 as appropriate).

The domain information registration unit 15 sets the domain information of the e-mail address in advance (S10). The domain information registration unit 15 may separately register a domain that allows access and a domain that disallows access, such as a private domain.

The access authority acquisition unit 14 acquires access authority information including information of an access permitter (for example, an e-mail address of a user who permits access) corresponding to a file protected by the sender terminal 11 from the sender terminal 11. (S11).

If the acquired domain of the access permission person's e-mail address does not match the preset permission domain, the sender terminal 11 is warned that the access permission information cannot be set (S12: NO, S13).

FIG. 7 shows a warning screen displayed on the sender terminal 11 when a user who does not match the registered domain information is set as an access permitter when the access authority information is acquired by the information processing device 10. An example is shown.

If the acquired domain of the access permitter's e-mail address matches the preset permission domain, the process ends as a normal setting (S12: YES, end).

Subsequently, the operation of the information processing apparatus 10 according to the present embodiment will be described.
FIG. 8 is a diagram showing an example of a processing flow when the receiver terminal 12 accesses a file in the information processing method according to the present embodiment (see FIG. 1 as appropriate).

When the receiver terminal 12 accesses the file, the user authentication unit 16 receives the user identification information that identifies the user from the receiver terminal 12 and authenticates the user by collating it with the acquired information of the access permitter. (S14, S15).

When the e-mail address of the user corresponding to the recipient terminal 12 is included in the e-mail address of the access permitter set in the access authority information, the recipient terminal 12 is authenticated as a legitimate access authority person ( S16: YES). On the other hand, if it is not included in the e-mail address of the access permitting person, the authentication becomes inconsistent and the access is denied (S16: NO, S17).

After user authentication, the access control unit 17 collates the domain of the e-mail address corresponding to the user identification information with the preset domain information, releases the file protection, and receives the release information for permitting access. It is determined whether or not to transmit to the user terminal 12 (S18).

When the domain of the e-mail address of the receiver terminal 12 matches the domain information for which access is permitted, the access control unit 17 grants the access permission of the file and provides the receiver terminal 12 with the release information corresponding to the file. Transmit (S19, S20).

On the other hand, if the domain of the e-mail address of the recipient terminal 12 does not match the domain information that allows access (or if it matches the domain information that disallows access), the permission to access the file is not permitted. , The release information is not transmitted (S21).

In this way, when the protected file is accessed, the user of the receiver terminal 12 that requested the access is authenticated, and the file is accessed based on the domain information corresponding to the group that grants the access permission to the file. By determining permissions, access to protected files can be restricted to users who belong to a reliable company or organization.

In addition, by making the domain information settings changeable, access is made according to the security policies of the companies and organizations that operate the access control system 100 (for example, the policy that makes private domains inaccessible to files). You can flexibly change the groups that allow. It should be noted that the security policy may be determined for each organizational unit (for example, development department, sales department, etc.) divided within the company, and the domain information setting may be set for each organization.

As described above, according to the information processing device 10 according to the present embodiment, when the protected file is accessed, the user authentication of the receiver terminal 12 that requested the access is performed, and the file is filed based on the preset domain information. By determining the access permission to, access to the protected file can be granted only to a reliable user.

The program executed by the information processing apparatus 10 is provided by being incorporated in a storage circuit such as a ROM in advance. Alternatively, the program should be provided as a file in an installable or executable format stored on a computer-readable storage medium such as a CD-ROM, CD-R, memory card, DVD, or flexible disc. You may. Further, the program executed by the information processing apparatus 10 may be stored on a computer connected to a network such as the Internet, downloaded via the network, and provided.

Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other embodiments, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.

10 ... Information processing device (management server), 11 ... Sender terminal, 12 ... Recipient terminal, 13 ... Access authority setting unit, 14 ... Access authority acquisition unit, 15 ... Domain information registration unit, 16 ... User authentication unit, 17 ... Access control unit, 18 ... Release information acquisition unit, 19 ... Identification information transmission unit, 100 ... Access control system.

Claims (7)

The access authority acquisition unit that acquires access authority information including the information of the permitter corresponding to the protected file, and the access authority acquisition unit.
The domain information registration unit that presets the domain information of the e-mail address, and
A user authentication unit that receives user identification information that identifies a user from a recipient terminal, collates it with the acquired information of the access permitter, and authenticates the user.
Based on the domain of the e-mail address corresponding to the user identification information and the set domain information, it is determined whether or not to send the release information for releasing the protection of the file and permitting access to the recipient terminal. includes an access control unit for, a,
The access control unit
The setting of the access authority information is determined based on the domain of the access permitter included in the access authority information and the domain information of the e-mail address.
An information processing device characterized by this. For the domain information of the domain information registration unit, the domain of the e-mail address that releases the protection of the file and permits access is set.
The information processing apparatus according to claim 1. The access control unit
When the domain of the user's e-mail address included in the user identification information received from the recipient terminal does not match the domain information of the e-mail address that unprotects the file and permits access. , Notify the recipient terminal of the fact that access is not permitted,
The information processing apparatus according to claim 1 or 2. The access control unit
If the domain of the access authority included in the acquired access authority information does not match the domain information of the e-mail address that unprotects the file and allows access, the sender can not set the access authority information. Notify the terminal,
The information processing device according to any one of claims 1 to 3, wherein the information processing device is characterized by the above. The access control unit
When the domain of the access authority included in the access authority information matches the domain information of the e-mail address that does not allow access by releasing the protection of the file, the sender terminal can set the access authority information not to be set. Notify to
The information processing device according to any one of claims 1 to 4, wherein the information processing device is characterized by the above. Steps to get permission information, including permissioner information, for protected files, and
Steps to preset domain information for email addresses and
A step of receiving user identification information for identifying a user from a receiver terminal and collating it with the acquired information of the access permitter to authenticate the user.
Based on the domain of the e-mail address corresponding to the user identification information and the set domain information, it is determined whether or not to send the release information for releasing the protection of the file and permitting access to the recipient terminal. Steps to do and
A step of determining the setting of the access authority information based on the domain of the access permitter included in the access authority information and the domain information of the e-mail address, and
An information processing method characterized by including. Computer,
Ability to get permission information, including permissioner information, for protected files,
Ability to preset domain information for email addresses,
A function of receiving user identification information for identifying a user from a recipient terminal and collating it with the acquired information of the access permitter to authenticate the user.
Based on the domain of the e-mail address corresponding to the user identification information and the set domain information, it is determined whether or not to send the release information for releasing the protection of the file and permitting access to the recipient terminal. Function to do,
A function for determining the setting of the access authority information based on the domain of the access permitter included in the access authority information and the domain information of the e-mail address.
An information processing program characterized by functioning as.

Images