OPERATION MANAGEMENT SYSTEM, OPERATION MANAGEMENT METHOD, RECORDING MEDIUM STORING OPERATION MANAGEMENT PROGRAM, AND DATA SIGNAL

• US 20090178038A1
• Filed: 09/03/2008
• Published: 07/09/2009
• Est. Priority Date: 01/07/2008
• Status: Abandoned Application

• Current Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Inventors: KATSURABAYASHI, Hiroshi
• Application Number:
  US12/203,812
• Publication Number:
  US 20090178038A1
• Time in Patent Office: Days
• US Class Current: 718/1
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

An operation management system, which includes: a document management device that manages a document; and a document operation device that requests to view or obtains the document, in which the document management device includes: an operation restriction information management section that manages first operation restriction information for restricting an operation of the document for which viewing is requested and which is operated by a user, and second operation restriction information generated from the first operation restriction information, for restricting the operation of the document obtained from the document management device and operated by the user; and an issuance section that issues the second operation restriction information to the document operation device, and the document operation device includes an operation restriction section that restricts the operation based on the second operation restriction information when the document is obtained from the document management device.

Claims

1. An operation management system, comprising:

a document management device that manages a document; and

a document operation device that requests for viewing of or obtains the document managed by the document management device to operate, wherein

the document management device comprises;

an operation restriction information management section that manages first operation restriction information for restricting an operation of the document for which viewing is requested from the document operation device to the document management device to operate and which is operated by a user of the document operation device, and second operation restriction information generated on the basis of the first operation restriction information, for restricting the operation of the document obtained from the document management device by the document operation device to operate and operated by the user of the document operation device; and

an issuance section that issues the second operation restriction information managed by the operation restriction information management section to the document operation device, and

the document operation device comprises an operation restriction section that restricts the operation of the document on the basis of the second operation restriction information issued by the issuance section when the document is obtained from the document management device to operate.

2. The operation management system according to claim 1, wherein

the document management device further comprises an operation restriction information generation section that generates the second operation restriction information when a request to obtain the second operation restriction information is made by the document operation device, and

the operation restriction information management section manages the second operation restriction information generated by the operation restriction information generation section.

3. The operation management system according to claim 2, wherein

the operation restriction information generation section generates the second operation restriction information on the basis of a combination of attribute information of the document and the first operation restriction information for restricting the operation of the document.

4. The operation management system according to claim 1, wherein

the document operation device obtains an encrypted document;

the issuance section issues an access ticket including decryption information for decrypting the encrypted document and the second operation restriction information; and

the document operation device decrypts the document on the basis of the decryption information included in the access ticket issued by the issuance section and operates the decrypted document.

5. The operation management system according to claim 1, wherein

the issuance section issues an access ticket including using location information for restricting a using location of the document, and

the document operation device restricts the operation of the document on the basis of the using location information included in the access ticket issued by the issuance section.

6. The operation management system according to claim 1, wherein

the issuance section issues an access ticket including time information for restricting a using time of the document, and

the document operation device restricts the operation of the document on the basis of the time information included in the access ticket issued by the issuance section.

7. The operation management system according to claim 1, wherein

the issuance section issues an access ticket including environment information for restricting a using environment of the document, and

the document operation device restricts the operation of the document on the basis of the environment information included in the access ticket issued by the issuance section.

8. The operation management system according to claim 1, wherein

the issuance section issues an access ticket including user information for restricting a user of the document, and

the document operation device restricts the operation of the document on the basis of the user information included in the access ticket issued by the issuance section.

9. The operation management system according to claim 1, wherein

the document management device further comprises an update section that updates the second operation restriction information in correspondence with an update in the first operation restriction information managed by the operation restriction information management section.

10. An operation management method, comprising:

managing a document;

making a viewing request to view or obtaining the managed document to operate;

managing first operation restriction information for restricting an operation of the document for which the viewing request is made to operate and which is operated by a user, and second operation restriction information generated on the basis of the first operation restriction information, for restricting the operation of the document obtained to operate and operated by the user;

issuing the managed second operation restriction information; and

restricting the operation of the document on the basis of the issued second operation restriction information when the document is obtained to operate.

11. A computer readable recording medium storing an operation management program that causes a computer to execute a process, the process comprising:

managing a document;

making a viewing request to view or obtaining the managed document to operate;

managing first operation restriction information for restricting an operation of the document for which the viewing request is made to operate and which is operated by a user, and second operation restriction information generated on the basis of the first operation restriction information, for restricting the operation of the document obtained to operate and operated by the user;

issuing the managed second operation restriction information; and

restricting the operation of the document on the basis of the issued second operation restriction information when the document is obtained to operate.

12. A computer data signal embodied in a carrier wave for enabling a computer to perform a process for operation management, the process comprising:

managing a document;

making a viewing request to view or obtaining the managed document to operate;

managing first operation restriction information for restricting an operation of the document for which the viewing request is made to operate and which is operated by a user, and second operation restriction information generated on the basis of the first operation restriction information, for restricting the operation of the document obtained to operate and operated by the user;

issuing the managed second operation restriction information; and

restricting the operation of the document on the basis of the issued second operation restriction information if the document is obtained to operate.