Information processing device for detecting an illegal stored document, illegal stored document detection method and recording medium

• US 9,292,704 B2
• Filed: 03/12/2013
• Issued: 03/22/2016
• Est. Priority Date: 03/16/2012
• Status: Active Grant

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Ueno, Mitsuyoshi
• Primary Examiner(s): ABEDIN, SHANTO
• Application Number:
  US13/796,959
• Publication Number:
  US 20130247215A1
• Time in Patent Office: 1,106 Days
• Field of Search: 726 1- 4, 726 26- 30, 707781-788, 707/608, 709/229
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

The present invention provides an information processing device which can detect illegal authorization setting efficiently in a short period of time. The information processing device includes a database which stores electronic documents, a means for storing rank values of users of the database, a means for storing the authorization degree of an electronic document or an electronic document group and authorization degrees of respective document classes of the database, a means for analyzing the electronic documents and combining together documents having mutual similarity in a degree equal to or higher than a certain level into a similar document group, and a means for analyzing authorization degrees of respective document classes in the database with reference to the rank values of the users, and thus detecting an electronic document or an electronic document group whose authorization setting is improper.

Claims

1. An information processing device, comprising:

a database which includes a hierarchical structure and stores electronic documents;

a user information management unit which stores rank values of users of said database, wherein each rank value of the rank values corresponds to height of an authority level for a user;

a class/document information management unit which stores authorization degrees of electronic documents or of electronic document groups, and authorization degrees of respective document classes in said database where the electronic documents or document groups are stored;

a document information control unit which analyzes the electronic documents stored in said database and combines together said electronic documents having mutual similarity in a degree equal to or higher than a certain level into a similar document group; and

a document-class information control unit which calculates authorization degrees of respective document classes in said database in terms of each said similar document group with reference to said rank values of database users, analyzes said authorization degrees, thus detects an electronic document or an electronic document group whose authorization setting is improper based on results of the analyzing said authorization degrees, compares the authorization degree of an arbitrary similar document group in the last analysis with that at present and, if the authorization degree is increased, determines the authorization setting as improper and notifies a user of it.

2. The information processing device according to claim 1, wherein

said document-class information control unit

calculates rank-value-specific authorization degrees of said similar document group with reference to said rank values of database users and authorization degrees of respective document classes and,

by comparing the rank-value-specific authorization degrees among said similar document groups, investigates whether or not rank-value-specific authorization degrees for rank values equal to or higher than a specific one are set to be equal to or higher than a certain level, and thereby detects an electronic document or an electronic document group whose authorization setting is improper.

3. The information processing device according to claim 1, wherein

said document-class information control unit compares the authorization degree of an arbitrary similar document group in the last analysis with that at present and, if the number of similar document groups is increased, determines the authorization setting as improper and notifies a user of it.

4. The information processing device according to claim 1, wherein if there exists an arbitrary similar document group whose authorization degree is lower than a certain level, said document information control unit extracts a common portion which is similar among the electronic documents included in the similar document group, and set it as a portion to protect by lowering the authorization degree, and,

if there exists a portion to protect and there also exists a similar document group whose authorization degree is set to be equal to or higher than a certain level, said document-class information control unit determines the authorization setting as improper and notifies a user of it.

5. The information processing device according to claim 1, wherein

said document information control unit accepts a newly stored document to be stored in said database, performs calculation of its similarity, creation of its similar document groups and calculation of an authorization degree and rank-value-specific authorization degrees for each of the similar document groups, and

refers to rank-value-specific authorization degrees for rank values equal to or higher than that for a user trying to store the newly stored document, and gives the user an announcement that the document should be stored in a similar document group which is high in such kind of rank-value-specific authorization degrees.

6. An illegal stored document detection method, wherein,

a computer analyzes electronic documents stored in a database having a hierarchical structure,

records the electronic documents having mutual similarity in a degree equal to or higher than a certain level into a similar document list,

classifies the similar document list into similar document groups according to said hierarchical structure of the database,

calculates an authorization degree of each document class in said database in terms of each said similar document group by referring to rank values of database users stored in a user information management unit, and stores the result in a class/document information management unit, wherein each rank value of the rank values corresponds to a-height of an authority level for a user,

refers to, at the class/document information management unit, authorization degrees of respective document classes in which similar document groups are stored, and

analyzes said authorization degrees, detects an electronic document or an electronic document group whose authorization setting is improper based on results of the analyzing said authorization degrees,

compares the authorization degree of an arbitrary similar document group in the last analysis with that at present and,

if the authorization degree is increased, determines the authorization setting as improper and notifies a user of it.

7. The illegal stored document detection method according to claim 6, wherein said computer calculates rank-value-specific authorization degrees of said similar document group with reference to said rank values of database users and authorization degrees of respective document classes and,

by comparing the rank-value-specific authorization degrees among said similar document groups, investigates whether or not rank-value-specific authorization degrees for rank values equal to or higher than a specific one are set to be equal to or higher than a certain level, and thereby detects an electronic document or an electronic document group whose authorization setting is improper.

8. The illegal stored document detection method according to claim 6, wherein

said computer

compares the authorization degree of an arbitrary similar document group in the last analysis with that at present and, if the number of similar document groups is increased or the authorization degree is increased, determines the authorization setting as improper and notifies a user of it.

9. The illegal stored document detection method according to claim 6, wherein

said computer

accepts a newly stored document to be stored in said database, performs calculation of its similarity, creation of its similar document groups and calculation of an authorization degree and rank-value-specific authorization degrees for each of the similar document groups, refers to rank-value-specific authorization degrees for rank values equal to or higher than that for a user trying to store the newly stored document, and gives the user an announcement that the document should be stored in a similar document group which is high in such kind of rank-value-specific authorization degrees.

10. A non-volatile recording medium storing a program for causing a computer to execute the processing which comprises:

analyzing electronic documents stored in a database having a hierarchical structure,

recording the electronic documents having mutual similarity in a degree equal to or higher than a certain level into a similar document list,

classifying the similar document list into similar document groups according to said hierarchical structure of the database,

calculating an authorization degree of each document class in said database in terms of each said similar document group by referring to rank values of database users stored in a user information management unit, and storing the result in a class/document information management unit, wherein each rank value of the rank values corresponds to height of an authority level for a user; and

referring to, at the class/document information management unit, authorization degrees of respective document classes in which similar document groups are stored, and

analyzing said authorization degrees, detecting an electronic document or an electronic document group whose authorization setting is improper based on results of the analyzing said authorization degrees,

comparing the authorization degree of an arbitrary similar document group in the last analysis with that at present and,

if the authorization degree is increased, determining the authorization setting as improper and notifying a user of it.