Information management system and information management method

• US 9,628,496 B2
• Filed: 08/07/2012
• Issued: 04/18/2017
• Est. Priority Date: 08/10/2011
• Status: Active Grant

• Current Assignee: Mizuho Information & Research Institute Incorporated (Mizuho Financial Group Incorporated)
• Original Assignee: Mizuho Information & Research Institute Incorporated (Mizuho Financial Group Incorporated)
• Inventors: Tomoeda, Atsushi
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US14/237,146
• Publication Number:
  US 20140245399A1
• Time in Patent Office: 1,715 Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

In the present invention, a control section of a CRM server performs editing processing for TPO (the time, the place, and the occasion) requirements. Next, a control section of a TPO server registers the TPO requirements in order to convert the same to TPO definitions. Then, the control section performs setting processing for the TPO definitions. A portable terminal identifies the current location and the current time. Then, a control section verifies TPO definition state transitioning. If transitioning of the TPO definition state is detected, the control section performs TPO definition state transition notification processing. The control section of the portable terminal performs individual control processing on the basis of the TPO definitions.

Claims

1. An information management system comprising:

a secure set storage means configured to register a plurality of event definition templates, each event definition template containing operational control information for controlling an operation of controlled equipment for an event type;

an event managing means configured to perform setting for limiting the operation of the controlled equipment; and

the controlled equipment, wherein,

the event managing means

acquires, responsive to a registration of an event, an event requirement defined by an event place, an event period, and an event participant for the event type,

selects an event definition template corresponding to the event type in the secure set storage unit from the plurality of event definition templates,

identifies the controlled equipment used by the participant recorded in the event requirement, and

generates, for the controlled equipment, an event definition that is operational control information included in the selected event definition template for an event condition including the event place and the event period as elements, and

the controlled equipment

identifies a current state including current location and current date and time, and

compares the current state with the event condition, and controls the operation of the controlled equipment based on the operational control information according to a comparison result for the event definition.

2. The information management system according to claim 1, wherein security area operational control information associated with information for identifying security-ensured place and non-security area operational control information associated with information for identifying security-unensured place are initially set in the controlled equipment.

3. The information management system according to claim 1, wherein operational control information on the event place and a period related to the event period for the event type is set in the event definition template.

4. The information management system according to claim 1, wherein

in the case where a mismatch is partially present in the comparison result of the current state and the event condition, the controlled equipment executes security checking processing for checking content of the mismatch, and

in the case where it is determined that the content of the mismatch has no problem in the security checking processing, the operation of the controlled equipment is controlled based on operational control information applied in the case where no mismatch is present in the comparison result.

5. The information management system according to claim 4, wherein in the case where the content of the mismatch falls within a predetermined allowable range, the security checking processing is executed.

6. The information management system according to claim 1, wherein

the controlled equipment is connected to a file server that stores a file used in the event via a network,

the event requirement includes a file identifier of the file used in the event,

file access authority in the event requirement is set in the operational control information,

the controlled equipment

before the event period, acquires the file having the file identifier included in the event requirement from the file server, and stores the file in a temporary storage unit in the controlled equipment, and

according to the comparison result, allows access to the file stored in the temporary storage means based on the access authority set in the operational control information.

7. The information management system according claim 6, wherein

the temporary storage means of the controlled equipment is provided with a folder corresponding to access authority, and

the controlled equipment

stores the file used in the event in the folder corresponding to access authority set in the event requirement, and

allows access to the folder based on access authority set in the operational control information.

8. The information management system according claim 6, wherein when detecting leaving from the event place or termination of the event period according to the comparison result, the controlled equipment deletes the file stored in the temporary storage means.

9. The information management system according to claim 1, wherein

the operational control information includes an application identifier of an application, and

the controlled equipment controls the operation of the application having the application identifier included in the operational control information according to the comparison result.

10. The information management system according to claim 1, wherein

the operational control information includes a waiting time taken to activate a security lock of the controlled equipment, and

the controlled equipment activates the security lock based on the waiting time included in the operational control information according to the comparison result.

11. The information management system according to claim 1, wherein in the case where an event group consisting of a plurality of predetermined correlated events occurring in a certain period is identified, based on operational control information of one or some of the events in the event group, the event managing means modifies operational control information of other events in the event group.

12. An information management method using an information management system, the information management system including:

a secure set storage means configured to register a plurality of event definition templates, each event definition template containing operational control information for controlling an operation of controlled equipment for an event type;

an event managing means configured to perform setting for limiting the operation of the controlled equipment; and

the controlled equipment, wherein

the event managing means

acquires, responsive to a registration of an event, an event requirement defined by an event place, an event period, and an event participant for the event type,

selects an event definition template corresponding to the event type in the secure set storage unit from the plurality of event definition templates,

identifies the controlled equipment used by the participant recorded in the event requirement, and

generates, for the controlled equipment, an event definition that is operational control information included in the selected event definition template for an event condition including the event place and the event period as elements, and

the controlled equipment

identifies a current state including current location and current date and time, and

compares the current state with the event condition, and controls the operation of the controlled equipment based on the operational control information according to a comparison result for the event definition.

13. The information management method using an information management system of claim 12, wherein:

in the case where it is detected that the event condition is different than the current state, a TPO definition managing means of the controlled equipment notifies a secure managing means of the controlled equipment.

14. The information management method using an information management system of claim 13, wherein:

the notification comprises security setting information of the event definition template.

15. The information management method using an information management system of claim 12, wherein:

in the case where a place of the current state does not match the event condition and a time of the current state reaches a predetermined time earlier than a designated start time, the controlled equipment;

notifies an administrator system; and

receives an approval from the administrator; and

in response to receiving the approval, shifts to a main event setting.

16. The information management method using an information management system of claim 12, wherein:

in the case where a place of the current state is different than the event condition and a time of the current state is before a designated finish time, the controlled equipment;

displays an alert screen for checking whether or not a current event mode continues;

receives an input associated with the alert; and

operates in a mode associated with the input.

17. The information management method using an information management system of claim 12, wherein:

the event definition is generated by combining a plurality of schedules.

18. The information management method using an information management system of claim 12, wherein:

the event managing means comprises a terminal monitoring means configured to;

monitor a state of a security setting of the controlled equipment; and

operate the controlled equipment.

19. The information management method using an information management system of claim 18, wherein:

monitoring the state of the security setting comprises the terminal managing means acquiring;

a current location and current state of the controlled equipment;

information on a log management means; and

information on a state of a security setting.

20. The information management method using an information management system of claim 19, wherein:

the terminal monitoring means is further configured to;

compare the event definition of the controlled equipment with information acquired from the controlled equipment;

determine that the event definition of the controlled equipment is different from the current state of the controlled equipment; and

output alert information based on determining that the event definition of the controlled equipment is different from the current state.