Method and apparatus for managing file

• US 8,751,534 B2
• Filed: 01/05/2010
• Issued: 06/10/2014
• Est. Priority Date: 01/07/2009
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Oya, Takashi, Kawano, Atsushi
• Primary Examiner(s): Uddin, Md. I
• Application Number:
  US12/652,693
• Publication Number:
  US 20100174751A1
• Time in Patent Office: 1,617 Days
• Field of Search: 707/781, 707/782, 707/784, 707/785, 707/786, 707/787, 707/788, 707/783, 707/792
• US Class Current: 707/783
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

A method for managing a file includes: acquiring at least one personal ID for identifying a person associated with the right to access a file; setting a file operation method depending on whether or not a combination of the acquired personal ID satisfies a condition set for each type of operation for the file; and controlling a file operation based on the set file operation method.

Claims

1. A method for managing a file, the method comprising:

periodically receiving image data picked-up and input by a camera oriented toward a plurality of users who are to access a file together in a conference system that is accessed simultaneously by the plurality of users;

identifying a combination of authenticated personal identifications (IDs) of the plurality of users by recognizing faces of the plurality of users in the received image data by referring to a database to acquire a combination of personal IDs as the combination of authenticated personal IDs;

setting an access right to a type of file operation for the file as permitted, in response to the combination of authenticated personal IDs satisfying a predetermined combination of personal IDs for permitting the type of file operation, and cancelling an access right to a type of file operation for the file as not permitted, in response to the authenticated personal IDs not satisfying the predetermined combination of personal IDs for permitting the type of file operation;

storing permitted and not permitted access rights to respective files in association with the authenticated personal IDs in an access right database;

displaying a list of shared file icons of files and a content of a file selected from the list of file icons, wherein each file icon represents the permitted and not permitted access right set for the type of file operation of the file associated with that file icon;

displaying a pop-up window that displays access right information for a file denoted by an icon in response to moving a cursor of a mouse onto the icon;

controlling, using a central processing unit, a file operation for the file by the plurality of users based on the access right set for the type of file operation of the file;

creating, for each of the plurality of displayed shared files, a file icon that graphically conveys determined permitted and not permitted access rights for a shared file;

dynamically changing a displayed file icon in response to change in the permitted and not permitted access right in the access right database for a file associated with that displayed icon; and

receiving instructions from an author of a file during file sharing to change a number of files in a shared folder located in a shared file database and, in response to the number of files in the shared folder located in the shared file database being changed, sending out an access right change notification to icon creation unit to acquire a status of the file access right.

2. The method according to claim 1, further comprising displaying a status of the type of file operation, wherein, to set access to a first type of file operation for the file, the predetermined combination of personal IDs is a union of at least two personal IDs.

3. The method according to claim 1, further comprising creating an icon representing the access right set for the type of file operation of the file and updating a displayed icon with the created icon, if the access right has been changed, wherein creating an icon includes determining whether to create an icon indicating that contents of the file are permitted to be browsed or to create an icon indicating that the contents of the file are not permitted to be browsed.

4. The method according to claim 1, further comprising creating an icon representing the access right set for the type of file operation of the file and updating a displayed icon with the created icon, if the access right has been changed, wherein creating an icon includes creating an icon indicating that contents of the file are permitted to be edited.

5. The method according to claim 1, further comprising creating an icon representing the access right set for the type of file operation of the file and updating a displayed icon with the created icon, if the access right has been changed, wherein access to the conference system by the plurality of users is from one conference location, and wherein creating an icon includes creating an icon indicating that the file is permitted to be copied.

6. The method according to claim 1, wherein access to the conference system by the plurality of users is disbursed among multiple conference locations that are remote from each other, the method further comprising sharing the file between the multiple conference locations based on the set access to the type of file operation.

7. The method according to claim 1, wherein the type of file operation includes a file operation for browsing contents of a file.

8. The method according to claim 7, wherein the type of file operation further includes a file operation for editing the contents of a file.

9. The method according to claim 7, wherein the type of file operation further includes a file operation for copying a file.

10. A non-transitory computer-readable storage medium storing a computer program to cause a file management terminal to perform the method according to claim 1.

11. An apparatus for managing a file, the apparatus comprising:

at least one processor and memory;

a receiving unit configured to periodically receive image data picked-up and input by a camera oriented toward a plurality of users who are to access a file together in a conference system that is accessed simultaneously by the plurality of users;

an identifying unit configured to identify a combination of authenticated personal identifications (IDs) of the plurality of users by recognizing faces of the plurality of users in the received image data by referring to a database to acquire a combination of personal IDs as the combination of authenticated personal IDs;

a setting unit configured to set an access right to a type of file operation for the file as permitted, in response to the combination of authenticated personal IDs satisfying a predetermined combination of personal IDs for permitting the type of file operation, and to cancel an access right to a type of file operation for the file as not permitted, in response to the authenticated personal IDs not satisfying the predetermined combination of personal IDs for permitting the type of file operation;

a storing unit configured to store permitted and not permitted access rights to respective files in association with the authenticated personal IDs in an access right database;

a displaying unit configured to display a list of shared file icons of files and a content of a file selected from the list of file icons, wherein each file icon represents the permitted and not permitted access right set for the type of file operation of the file associated with that file icon, and configured to display a pop-up window that displays access right information for a file denoted by an icon in response to moving a cursor of a mouse onto the icon;

a controlling unit configured to control a file operation for the file by the plurality of users based on the access right set for the type of file operation of the file;

an icon creation unit configured to create, for each of the plurality of displayed shared files, a file icon that graphically conveys determined permitted and not permitted access rights for a shared file;

a change unit configured to dynamically change a displayed file icon in response to change in the permitted and not permitted access right in the access right database for a file associated with that displayed icon;

a shared file control unit configured to receive instructions from an author of a file during file sharing to change a number of files in a shared folder located in a shared file database and, in response to the number of files in the shared folder located in the shared file database being changed, an access right change notification is sent out to the icon creation unit to acquire a status of the file access right; and

a central processing unit configured to control at least one of the receiving unit, the identifying unit, the setting unit, the storing unit, the displaying unit, the controlling unit, the icon creation unit, the change unit, and the shared file control unit.

12. A file management terminal to control access to electronic files in a conference system that is accessed simultaneously by a plurality of persons, even when the author, right holder, or person in charge of contents of a target electronic file are not accessing the conference system, the file management terminal comprising:

a memory;

a personal authentication unit configured to receive face image data picked-up and input from a camera oriented toward the plurality of persons accessing the conference system and to compare the received face image data to stored face information to acquire personal IDs as authenticated personal IDs based on the receive face image data;

an access right management unit configured to determine, for each type of access to a target file, a permitted and not permitted access right to that target file based on both authenticated personal IDs received from the personal authentication unit and information in an access right management table, wherein each permitted and not permitted access right for a type of access to a target file in the access right management table is a based on a predetermined combination of personal IDs;

a storing unit configured to store permitted and not permitted access rights to respective files in association with the authenticated personal IDs in an access right database;

a displaying unit configured to display a list of shared file icons of files and a content of a file selected from the list of file icons, wherein each file icon represents the permitted and not permitted access right set for a type of file operation of the file associated with that file icon, and configured to display a pop-up window that displays access right information for a file denoted by an icon in response to moving a cursor of a mouse onto the icon;

a controlling unit configured to control a file operation for the file by the plurality of persons based on the access right set for the type of file operation of the file;

an icon creation unit configured to create, for each of the plurality of displayed shared files, a file icon that graphically conveys determined permitted and not permitted access rights for a shared file;

a change unit configured to dynamically change a displayed file icon in response to change in the permitted and not permitted access right in the access right database for a file associated with that displayed icon;

a shared file control unit configured to receive instructions from an author of a file during file sharing to change a number of files in a shared folder located in a shared file database and, in response to the number of files in the shared folder located in the shared file database being changed, the access right management unit sends out an access right change notification to the icon creation unit to acquire a status of the file access right; and

a central processing unit configured to control at least one of the personal authentication unit, the access right management unit, the storing unit, the displaying unit, the controlling unit, the icon creation unit, the change unit, and the shared file control unit.

13. The file management terminal according to claim 12, wherein, for a first type of access to a first target file, the predetermined combination of personal IDs to permit the first type of access is a union of at least two personal IDs.

14. The file management terminal according to claim 13, wherein, in response to a start of file sharing, the access right management unit is configured to create the access right management table by extracting access rights from files located in a shared folder of a shared file database.

15. The file management terminal according to claim 14, wherein the access rights in the files located in the shared folder were set by authors of the files prior to the start of file sharing.

16. The file management terminal according to claim 14, wherein the access right management unit further is configured to change the access right management table during file sharing in response to a change in a number of files in the shared folder located in a shared file database.

17. The file management terminal according to claim 14, wherein the type of access right for the first target file includes an access right to browse the target file, an access right to change the target file, and an access right to copy the target file.

18. The file management terminal according to claim 12, wherein, in response to receiving an access right change notification from the access right management unit, the icon creation unit dynamically changes file icons based on the permitted/and not permitted access right in the access right database to a target file in a shared file database.

19. The file management terminal according to claim 18, wherein, if a file is not permitted to be browsed, the icon associated with that file is marked with a first one of an “

X”

on a face of the icon, grayed out, and outlined, wherein, if a file is not permitted to be changed, the icon associated with that file is marked with a second one of an “

X”

on a face of the icon, grayed out, and outlined, and wherein, if a file is not permitted to be copied, the icon associated with that file is marked with a third one of an “

X”

on a face of the icon, grayed out, and outlined.

20. The file management terminal according to claim 12, wherein, for a file permitted to be browsed, the icon associated with the file is presented as a normal display,

wherein, for a file not permitted to be browsed, the icon associated with the file is altered from the normal display, wherein, for a file not permitted to be changed, the icon associated with the file is marked differently from the icon for a file not permitted to be browsed, and

wherein, for a file not permitted to be copied, the icon associated with the file is marked differently from the icon for a file not permitted to be browsed and the icon for a file not permitted to be change.

21. The file management terminal according to claim 12, wherein the personal authentication unit additionally receives at least one of an image record of entering/leaving a conference room and a voiceprint from the camera and uses that to acquire personal IDs as authenticated personal IDs.

22. The file management terminal according to claim 12, further comprising:

an input control unit configured to receive input information necessary to access a file from persons accessing the conference system; and

a shared file control unit configured to receive a request to access a target file from a person accessing the conference system,

wherein, in response to determining that the access right management unit has not determined permitted and not permitted access right to that target file, the shared file control unit does not permit access to the target file,

wherein, in response to determining that the access right management unit has determined that browse access is permitted for the target file based on the plurality of persons accessing the conference system, the shared file control unit permits the target file to be browsed but not changed or copied, and

wherein, in response to determining that the access right management unit has determined that change access is permitted for the target file based on the plurality of persons accessing the conference system, the shared file control unit permits the target file to be browsed and changed, but not copied.