JP2002290469A - Electronic mail auditing system and its method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic mail auditing system and its method capable of easily executing an audit avoiding means, and reducing the load of visual confirmation of retrieved result, without the need for setting keyword for retrieved conditional expression. SOLUTION: An auditing server device is composed of an auditing object confirmation part, a retrieval expression setting part, a retrieval processing part and a mail destination edit part. The auditing object confirmation part recognizes whether an electronic mail is object for audit or not. The retrieval expression setting part sets the retrieval conditional expression which decides the selection reference of whether the electronic mail for auditing object is to be transmitted to the outside or not. The retrieval processing part classifies the electronic mails decided to be an auditing object through the above process, into more than at least two kinds by the adaptation with the retrieval conditional expression. The mail destination edit part displays the content of the classified electronic mails according to its kind in a retrieval result reference part and sets the destination to the client device or the designated transmission destination computer by the client device, which locates outside of the network.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a so-called electronic mail audit for exchanging a message with a specific party via a network. More specifically, the present invention relates to an electronic mail distributed from a network inside a company or an organization to the outside. The present invention relates to a system and a method for auditing mail.

[0002]

2. Description of the Related Art Conventionally, many companies or institutions have introduced various e-mail auditing systems for determining whether or not to permit distribution according to the contents of e-mails. Audit operations are being conducted.

[0003] However, in the actual auditing work, detailed setting of the auditing target and selection and setting of a keyword for a search condition formula for extracting the auditing target are required, which is troublesome. .

[0004] Specifically, before starting the operation, it is necessary to perform a trial operation of relaying and monitoring an e-mail or an audit avoidance means for coping with an unexpected situation before setting a detailed audit target. there were.

In selecting keywords for a search condition expression, the actual situation is that these keywords are visually set by an inspector through trial and error from the original existing document. Even when the conditional expression is met, there is only a judgment as to whether or not the retrieval condition expression is met.In many cases, the contents depend on the visual judgment of the auditor, and the load on the auditor is high. Met.

[0006]

SUMMARY OF THE INVENTION The present invention was conceived in view of the above circumstances, and can easily implement an audit evasion means without having to set a keyword for a search condition expression. It is an object of the present invention to provide an electronic mail auditing system and an auditing method thereof capable of reducing a load in visually confirming search results.

Another object of the present invention is to distribute electronic mail without delay due to an increase in search condition expressions.

[0008]

According to an aspect of the present invention, in order to solve the above-described problem, in response to an electronic mail transmission request from a client device in a specific network, the electronic mail is transmitted to the network. In an audit system having an audit server device that audits whether or not to send to the outside, the audit server device includes: an audit target confirmation unit that determines whether the electronic mail is an audit target; A search formula setting unit that sets a search condition formula that determines a selection criterion of whether or not to send the targeted e-mail to the outside, and executes a search by the search condition formula set by the search formula setting unit The e-mails subject to the audit should be at least 2
A search processing unit for classifying the e-mail into two or more types, and displaying the contents of the two or more e-mails classified by the search processing unit according to the type on a search result reference unit and a client device in the network or the It is characterized by comprising a mail destination editing unit for setting a destination to a destination computer outside the network.

According to a second aspect of the present invention, in addition to the configuration of the first aspect, the determination as to whether or not the target is the audit target in the audit target confirming unit is performed in a mode in which a preset audit target definition file is referred to or The present invention is characterized in that any one of the modes for excluding all e-mails requested to be transmitted from the audit target is selected and executed.

[0010] The invention described in claim 3 is the invention according to claim 1 or 2.
In addition to the above configuration, at least two types of classification by the search processing unit are performed by setting a threshold value that is a reference for determining the degree of conformity with the search condition expression, and the threshold value is determined by the network. And a threshold for dividing the e-mail that can be sent to outside and an e-mail that cannot be sent, and a threshold for further dividing the e-mail that can be sent into two or more types. And

[0011] The invention according to claim 4 is the invention according to claims 1 to 3.
In addition to any one of the above configurations, in addition to a keyword set in advance, a natural sentence can be input to the search condition expression. When a natural sentence is input to the search expression setting unit, The natural sentence is divided into parts of speech, and compound words are processed by combining continuous nouns in the words divided into parts of speech to create a compound word. The mail inspection system according to any one of claims 1 to 3, further comprising a compound word processing unit added to the system.

[0012] The invention according to claim 5 provides the invention according to claims 1 to 4.
In addition to any one of the above configurations, the audit server device has a mail data decompression unit for decompressing a compressed file attached to the e-mail, and the mail data decompressed by the mail data decompression unit is also provided. It is characterized in that it is subject to an audit on whether or not to transmit to the outside.

According to a sixth aspect of the present invention, there is provided a receiving step of receiving an electronic mail transmission request from a client device in a specific network, and a step of receiving a keyword or a natural sentence inputted from an auditor computer connected to the network. A search condition formula creation step of creating a search condition formula representing a selection criterion of whether to transmit the e-mail to the outside of the network based on the e-mail, and inputting the search condition formula and the e-mail to a computer, An e-mail auditing method comprising a step of selecting e-mails to be transmitted to the outside of the network and those not to be transmitted, wherein the computer is a massively parallel computer incorporating a plurality of processors, A plurality of independent search condition expressions are set on the processor and attached to the e-mail and the e-mail. It is characterized in that the attachments were to be full-text search.

[0014]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of a mail inspection system according to the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram showing a configuration of an embodiment of a mail audit system according to the present invention. In FIG. 1, an audit server device 1 is a computer that performs overall management of a mail audit system, and includes a WWW server unit 2,
It has an audit server unit 3 and is connected to an external e-mail server 4.

The audit server device 1 is connected to a user computer 6 as a client device and an auditor computer 7 via an intranet 5 provided inside a company or institution. Further, the external destination computer G, which is the destination of the e-mail, and the audit server device 1 are connected via the Internet 8 via the e-mail server 4.

The user sends an e-mail using the user computer 6 which is a client device, and the inspector sets an auditing search condition expression and checks the audit status using an auditor computer 7 which is also a client device.

As shown in FIG. 2, the audit server unit 3 includes a mail auditing object confirming unit 9 and a mail data decompressing unit 1
0, a search formula setting unit 11, a search processing unit 12, a search result reference unit 13, a mail destination editing unit 14, and a mail audit log output unit 15. In addition, the audit server unit 3 includes FIG.
As shown in FIG. 2, the massively parallel computer 21, the audit exclusion address definition file 16, and the comment definition file 1
7. The database unit 20 for storing the mail audit log file 18 and the audit target data 34 is connected.

The database section 20 may be divided for each storage file as shown in FIG. 2, or may be integrated. Therefore, in FIG. 1 showing the overall configuration, the database unit 20 is shown as one, but in FIG. 2 showing a more detailed configuration, the audit exclusion address definition file 16, the comment definition file 17, the mail auditing The log file 18 and the data to be audited 34 are shown as being stored in separate databases. Then, the inspection target data 34 is stored in the dedicated search directory 19.

The audit server unit 3 sends the search processing result to the WWW
The data is transferred to the server unit 2 and transmitted to the auditor computer.

In order to easily take countermeasures even in the event of a trial operation or the avoidance of an audit due to the occurrence of an unforeseen situation, whether or not to be subject to an audit is specified by a mode in which a preset audit exclusion address definition file 16 is used to check all electronic devices. Email 30
Are excluded from the audit target, and one of the modes can be selected and executed.

Whether the mode for excluding all from the audit or the mode for not excluding from the audit is determined by the auditor inputting the conditions from the auditor computer 7 into the audit exclusion address definition file 16 of the database unit 20 of the audit server unit 3. Remember. The specification of the audit exclusion address definition file 16 and the mode in which all mails are excluded from the audit may be defined in the same file or a plurality of files.

In setting a search condition expression, an e-mail 3 related to an existing document (eg, a past e-mail) that satisfies the search condition without being particularly conscious of the key words of the keyword.
In order to be able to detect 0, a search condition expression is automatically generated from a natural sentence of an existing document.

In referring to the search results, it is determined whether or not to transmit the e-mail 30 to the outside in order to prioritize and narrow down the visual confirmation.
By determining two types of thresholds that are determined based on the degree of conformity with the search condition expression and as a basis, the threshold is classified into three types of “attention” for calling attention in addition to “pass” and “fail”. The method is adopted.

As a means for speeding up the mail auditing operation after obtaining the mail, a plurality of search condition expressions can be set in advance on a plurality of processors, and the search is performed by inputting text data which is not indexed. By using the massively parallel computer 21 capable of obtaining the result, the massively parallel computer 2 is immediately received when a new electronic mail 30 is received.
1, a full-text search is performed by collating the search condition expression with the input audit target data 34. As a result, the time from when the e-mail 30 is received to when the search result is obtained can be shortened, and the e-mail whose audit has been completed on the same day can be simultaneously delivered to a plurality of destinations.

The threshold is divided into an e-mail 40 that can be transmitted outside the intranet 5 and an e-mail 50 that cannot be transmitted. The e-mails 40 that can be transmitted to the outside are classified as “pass”, and the e-mails 50 that cannot be transmitted to the outside are classified as “fail”, and are called “attention”. Create a classification,
The e-mail 41 classified as “Caution” is transmitted to the external destination computer G and the source user computer 6.
It is possible to transmit to a plurality of places (such as transmission to the outside is possible).

The threshold value is determined by the level of the pass / fail line of the audit. For example, if the maximum value is 100 points, the pass is 0.
10 points, 11 points to 90 points for caution, 91 points for rejection
It is conceivable to set 100 points. In this case, 91
Anything scored above the score will be rejected.

In addition, in addition to the above-mentioned method, the pass / fail judgment is performed by the following method.
If at least one keyword appears, the method is rejected or points that match a specific keyword set in advance are added (weight in the positive direction) and deducted (weight in the negative direction)
May be used in combination with a system in which the sum of these is given as a score.

According to the search results, "pass", "fail",
Each e-mail classified as "Caution" is edited by the e-mail server 4 connected to the e-mail destination editing unit 14 by editing the destination by the e-mail destination editing unit 14 according to the following rules. Is sent to each destination.

That is, the “passed” e-mail 40 is delivered to the e-mail server 4 without editing the destination of the original e-mail 30 and transmitted to the external destination computer G via the Internet 8. "Failed" Email 50
With regard to (3), the destination of the original electronic mail 30 is edited to the user computer 6 as the transmission source and other necessary transmission destinations, and the notification mail 52 (in this case, a rejection notification mail) which is an auditor comment is edited. Attach and send.
For the e-mail 41 classified as "Caution", the destination of the original e-mail 30
In addition, a notification email 52 (in this case, a cautionary advice email) which is edited to an necessary transmission destination and attached as an auditor's comment is attached and transmitted, and a mail which does not edit the destination of the original electronic mail 30 is electronically transmitted. The data is delivered to the mail server 4 and transmitted to an external destination computer G via the Internet 8.

As described above, in the embodiment of the present invention, since the classification of "attention" is provided in addition to "pass" and "fail", the e-mail classified as "attention" By sending a notification mail 41 of the cautionary recommendation of the inspector to the user computer 6 of the originator or other necessary computer such as the supervisor of the user, the information can be used to prevent the recurrence.

In addition, by setting the passing line strictly and allowing the auditor to visually check only "failed",
Auditor's audit work can be reduced. Alternatively, the efficiency of the confirmation work can be improved by dividing the auditor into two groups, a group that visually confirms "fail" and a group that visually confirms "caution", and proceeds with each work separately. .

In any case, the handling of the e-mail 41 classified as "Caution" is determined by the operation policy of the side adopting the audit system. A flag or the like that can determine whether or not to transmit the message may be provided.

As shown in the schematic diagram of FIG. 3, the massively parallel computer 21 includes thousands to tens of thousands of processors 22, 22, 22,.
.. (Hereinafter, these are collectively referred to as a pipeline), a plurality of different search condition expressions 24 can be simultaneously set in the pipeline 23. Then, the large number of processors 22, 22, 2
Are operated simultaneously, a new e-mail 30 is sent, the audit target data 34 of the e-mail 30 is sent to the pipeline 23, and a plurality of different search condition expressions 24 and audits are sent. A full-text search for matching with the target data 34 is executed. As a result of the matching, if the inspection target data 34 that matches the search condition expression 24 is found, the inspection target data 34 has a function of being considered as a hit (“fail”).

Here, the massively parallel computer 21 is desirably a device such as a full-text search engine (for example, FDF (registered trademark) 4T TextFinder) manufactured by Paracel, but a workstation or the like having functions and performance equivalent thereto. Devices.

The audit exclusion address definition file 16 stores a domain name not to be audited, a mail address, and a flag indicating whether or not to audit all items.

[Caution] as a result of search and mail destination editing
Alternatively, the inspection target data 34 of the e-mails 41 and 50 classified as “fail” is stored in the database unit 20 for subsequent screen display or retransmission.

The mail audit log file 18 records whether or not a condition is met as a result of the audit and records the degree of conformity with the search condition formula 24. The mail audit log file 18 is output from the mail audit log output unit 15 and is output from the database unit. 20.

An audit procedure according to an embodiment of the mail audit system according to the present invention will be described below with reference to FIGS.

FIG. 4 is a flowchart showing the entire flow of the electronic mail auditing method according to the present invention.

First, a user inside the intranet 5 transmits an e-mail 30 in which a message is described by designating a target external destination computer G from his or her own user computer 6 as a client device (step S1). . Then, without being aware of the user,
The monitoring server unit 3 receives the e-mail 30 (step S2).

Upon receiving the e-mail 30, the monitoring server 3 obtains the e-mail text 31 and the e-mail address of the user who is the sender and the e-mail address of the transmission destination computer G. And
It is confirmed whether or not there is a designation of a mode for excluding all e-mails 30 from the audit (step S3). Whether the received e-mail 30 is to be audited is checked by referring to the acquired e-mail address and the audit exclusion address definition file 16. Then, in the mode of excluding from the audit, all the e-mails 30 are transferred to the e-mail server 4 via the e-mail destination editing unit 14 without performing the audit (step S11), and the mode of excluding from the audit is set. If not, it is checked whether or not it is an audit target (step S
4).

Next, if the received e-mail 30 is to be audited, the mail body 31 is first converted to a text format, and if the e-mail 30 has a compressed attached file 32, the file of the attached file 32 Decompress to a text format according to the format (step S5). Decompression is performed on the copy of the original attached file 32, and the original attached file 32 is stored as it is. The thawing means can be dealt with by using a thawing program which is already published or marketed. The converted or decompressed text file is stored as the audit target data 34 in the search directory 19.

Therefore, the inspector may input a keyword for the search condition expression 24 for auditing or an existing document (eg, past e-mail).
Is input from the auditor computer 6 (step S6).

The search condition expression 24 is based on a plurality of keywords
Although a combination of ND, OR, NOT, and the like is obtained, when a natural sentence is input, a word serving as a keyword is automatically cut out from the natural sentence. In addition,
Details of the automatic generation of the search condition expression 24 will be described later.

Next, when the search condition expression 24 is given, a search is started to determine whether or not the received electronic mail 30 matches the search condition expression 24 (step S7).

The search results are displayed on a monitor or the like (not shown) as the search result reference unit 13 of the inspector computer 7. Specifically, the search result is determined by comparing the degree of conformity with the search condition expression 24 with two predetermined thresholds,
It is classified into three types: “pass”, “fail”, and “caution”.

Then, it is confirmed whether or not the result of the search is a pass (step S8), and the “passed” e-mail 40 which has been “passed” is transferred to the e-mail server 4 (step S11). The “pass” e-mail 40 is transferred to the original external destination computer G specified by the user.
If the e-mails 41 and 50 are not "pass"("attention" or "fail"), the audit target data 34 is stored in the database unit 20 (step S9), and whether the result corresponds to "attention" (Step S1)
0), if it corresponds to “caution”, the “caution” e-mail 41 is transferred to the e-mail server 4 (step S)
14) The e-mail is transferred to the original external destination computer G specified by the user.

In step S 10, it is determined that the message does not correspond to “attention”. The “failed” e-mail 50 is included in the “failed” e-mail 50 in addition to the received e-mail text 51 and the attached document 52. Then, an editing process for giving a prespecified auditor comment is performed (step S1).
2). The "failed" e-mail 50 is attached with a notification e-mail 53, which is an auditor comment, and is delivered via the e-mail server 4 to the user computer 6, which is the sender.

Then, as a result of the search and the editing of the destination and comment of the electronic mail, the audit status of the electronic mail 30 received from the user computer 6 is output as a log by the mail audit log output unit 15 (step S13). In this log, the title of the e-mail, the sender, the transmission destination, pass / fail, attention, etc. are described, and are saved as the mail audit log file 18.

Next, the details of the automatic generation of a search condition expression using natural sentences will be described with reference to FIG.

FIG. 5 is a flowchart when a natural sentence is input in setting the search condition expression.

First, the natural sentence input by the inspector is divided into parts of speech by morphological analysis, and type information is obtained (step S61). Next, a compound word is created by subjecting the words divided into parts of speech to compound words processing, for example, combining continuous nouns (step S62). By adopting this compound word as a search keyword, it is possible to avoid the abstraction of the expression due to the division of the word, and to extract the word that accurately expresses the condition.

Next, based on statistical information obtained by statistically processing the past e-mails 30 stored in the database unit 20, keywords are selected based on part of speech information, the number of e-mails in which words appear, the generality of words, and the like. Yes (Step S6
3).

Here, the part-of-speech information, the number of electronic mails in which the word appears, and the conditions for selecting the generality of the word will be described in detail.

First, words of a part of speech representing characteristics, such as compound words, nouns, and undefined words, are extracted from the part of speech information. The part-of-speech to be extracted is not limited to the compound words, nouns, and undefined words, but specifies the part-of-speech that is predicted to represent a characteristic for each mail to be distributed. After being divided into parts of speech,
In some cases, a word or the like to be deleted is always held as a list, and a function of deleting the word may be added even if the part of speech to be extracted is used.

Based on the part-of-speech information, the weight of the narrowed word is calculated from the number of appearances of the word, the importance indicating the generality of the word, and the like.

Regarding the number of appearances of a word, a word having a large number of appearances is considered to be a word representing the concept of the article.

The importance indicating the generality of a word is calculated, for example, by calculating the ratio of articles in which the word appears in a database storing various articles. If the ratio is high, the word appears in various articles, the importance is low. If the ratio is low, the word is high only as a word appearing only in a specific article.

A general word can be considered as a word having a high frequency of appearance. However, such a word has a low importance and the weight given to the word is small.
It does not negatively affect search results.

When a keyword is selected, a search condition formula (consisting of a keyword, a weight, a scoring method, etc.) for searching for an electronic mail related to a specified existing document or the like is automatically generated based on the keyword. (Step S
64). Examples of the scoring method include a method of calculating a score if it appears at least once in a search target, and a method of calculating a score each time it appears in search target data.

In the above-described embodiment, the intranet 5 is used as the connection means between the user computer 6 and the inspector computer 7 and the audit server device 1, but other networks such as a network that can be connected to the WWW server unit 2. Connection may be used.

The auditor computer 7 may also be used as the audit server device 1.

The WWW server unit 2 may be a server other than a so-called WWW server capable of setting a search condition expression of an inspector, instructing distribution of an e-mail and referring to an audit status.

The WWW server unit 2 and the audit server unit 3 included in the audit server device 1 may have independent configurations. The e-mail server 4 is an audit server device 1
Although it is separate from the above, the electronic mail server 4 may be configured by being incorporated in the audit server device 1. In other words, even if one or both of the WWW server unit 2 and the e-mail server 4 are not installed at the same location as the audit server unit 3, any configuration may be used as long as they are connected via a network or the like.

The audit exclusion address definition file 1
6. The comment definition file 17, the mail audit log file 18, and the audit target data 34 are files that do not have a special database structure such as a database managed by specific software such as an independent database management system or a database management system. May be used.

Further, as the user computer 6,
A mobile phone or the like that can receive the Internet or an e-mail service may be used.

[0068]

As described above, according to the first aspect of the present invention, the audit server device includes: an audit target confirming unit that determines whether an electronic mail is an audit target; A search formula setting unit that sets a search condition formula that determines a selection criterion for whether to send an e-mail to be audited to the outside, and executes a search using the search condition formula set by the search formula setting unit A search processing unit that classifies e-mails to be audited into at least two types according to the degree of conformity with a search condition expression, and display contents according to the types of the two or more types of e-mails classified by the search processing unit Is displayed in the search result reference section and the mail destination editing section is used to set a destination to a client device in the network or a destination computer outside the network. Te is, since it is easily possible to perform prioritization and refine in performing the visual confirmation by the fit, it is possible to reduce the load of the audit work.

According to the invention described in claim 2, according to claim 1
In addition to the effects of the above, the judgment of whether or not to be an audit target in the audit target confirmation unit can be performed by a mode in which a preset audit target definition file is referred to or a mode in which all e-mails requested to be transmitted are excluded from the audit target. In the event of a trial run or avoidance of an audit due to an unforeseen event, the auditor can easily take countermeasures by selecting a mode in which all e-mails are excluded from the audit target. Can be taken.

According to the third aspect of the present invention, the first aspect is provided.
Or, in addition to the effect of 2, at least 2
Classification of more than one kind is performed by setting a threshold value as a criterion for judging the degree of conformity with the search condition expression. Since it consists of a threshold for dividing into e-mails and a threshold for further dividing e-mails that can be sent into two or more types, for example, ranks such as pass and fail and caution etc. Thus, the degree of success can be indicated, so that a more detailed inspection is performed and the effect of motivating the user is enhanced. Further, it is possible to cope with various audit conditions depending on how the attention rank is handled.

According to the invention set forth in claim 4, according to claim 1,
In addition to the effects of any one of (1) to (3), in addition to a keyword set in advance, a natural sentence can be input to the search condition expression. When a natural sentence is input to the search expression setting unit, The natural sentence is divided into parts of speech, and compound words are processed by combining continuous nouns in the words divided into parts of speech to create a compound word. Since there is a compound word processing unit in addition to the above, there is no need to select keywords from existing documents when inputting natural sentences. Email can be detected.

According to the fifth aspect of the present invention, the first aspect is provided.
In addition to the effects of any one of (1) to (4), the audit server device has a mail data decompression unit for decompressing the compressed file attached to the e-mail, and the mail data decompressed by the mail data decompression unit is also provided. Since an audit is performed to determine whether or not to send to the outside, appropriate audits are automatically performed not only on the mail text but also on attached files.

According to the sixth aspect of the present invention, a receiving step of receiving an electronic mail transmission request from a client device in a specific network, a keyword or a natural sentence input from an auditor computer connected to the network. A search condition formula for creating a search condition formula representing a selection criterion for whether to send an e-mail to the outside of the network based on the search condition, and inputting the search condition formula and the e-mail to the computer and sending the e-mail to the network An e-mail auditing method comprising a selection step of selecting transmission and non-transmission to outside the computer, wherein the computer is a massively parallel computer having a plurality of processors built therein, and each of the computers is independent on a plurality of processors. A plurality of search condition expressions are set to perform a full-text search of an e-mail and an attached file attached to the e-mail. Since it is not necessary to select keywords from existing documents when entering a natural sentence in the setting of a search condition expression, e-mails that are related to the documents can be created without being conscious of the key words of the keywords. It becomes possible to detect.

Further, by performing a full-text search by a massively parallel computer, it is possible to obtain a search result immediately after obtaining a mail, thereby speeding up a mail auditing operation.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of an embodiment according to a mail monitoring system of the present invention.

FIG. 2 is a block diagram illustrating a configuration of an audit server unit according to the embodiment.

FIG. 3 is a schematic diagram showing a processing state in the massively parallel computer of the embodiment.

FIG. 4 is a flowchart showing an overall flow of an electronic mail auditing method using the embodiment.

FIG. 5 is a flowchart when a natural sentence is input in setting the search condition expression in FIG. 5;

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Audit server apparatus 2 WWW server section 3 Audit server section 4 E-mail server 5 Intranet 6 User computer (client apparatus) 7 Auditor computer (client apparatus) 8 Internet 20 Database section 21 Massively parallel computer

Continued on the front page (72) Inventor Tohru Oyama 524 Kamimachiya, Kamakura City, Kanagawa Prefecture Mitsubishi Space Software Co., Ltd.Kamakura Business Unit (72) Inventor Ryo Tachinoi 524 Kamimachiya, Kamakura City, Kanagawa Prefecture Mitsubishi Spare Software Company Kamakura Division F term (reference) 5K030 GA11 HA05 KA01 KA06 KA13 LD11 MB01 MB18

Claims (6)

[Claims] 1. An audit system having an audit server device for auditing whether or not to transmit an electronic mail to the outside of the network in response to an electronic mail transmission request from a client device in a specific network, The server apparatus includes: an audit target confirmation unit that determines whether the electronic mail is an audit target; and a search that determines a selection criterion of whether to send the electronic mail that has been audited by the audit target confirmation unit to the outside. A search expression setting unit for setting a conditional expression, and at least two types of e-mails that have been subjected to the search by the search condition expression set by the search expression setting unit and have been audited according to the relevance to the search condition expression A search processing unit for classifying the above, and display contents corresponding to the two or more types of e-mails classified by the search processing unit in a search result reference unit; An e-mail audit system, comprising: a mail destination editing unit for setting a destination to a client device in the network or a transmission destination computer outside the network. 2. A method according to claim 1, wherein the audit target confirmation unit determines whether or not the electronic mail is the audit target. The audit target definition file is set to a reference mode or all the e-mails requested to be transmitted are excluded from the audit target. 2. The method according to claim 1, wherein the processing is performed by selecting one of the following.
E-mail audit system as described in. 3. Classification of at least two or more types by the search processing unit is performed by setting a threshold value as a criterion for judging the degree of conformity with the search condition expression, and the threshold value is set in the network. It is characterized by comprising a threshold for dividing an e-mail that can be sent outside and an e-mail that cannot be sent and a threshold for further dividing the e-mail that can be sent into two or more types. Claim 1 or 2
E-mail audit system as described in. 4. A natural sentence other than a keyword set in advance can be input to the search condition expression. When a natural sentence is input, the natural sentence is input to the search expression setting unit. A compound word is created by performing compound word processing for combining continuous nouns in the words divided into units of speech and combining the nouns, and adding the created compound word to the search condition expression The e-mail inspection system according to claim 1, further comprising a unit. 5. The audit server device according to claim 1, further comprising a mail data decompression unit for decompressing the compressed file attached to the electronic mail, and transmitting the mail data decompressed by the mail data decompression unit to the outside. 5. The e-mail inspection system according to claim 1, wherein the e-mail inspection system is set to be an audit target. 6. A receiving step of receiving an e-mail transmission request from a client device in a specific network, and transmitting the e-mail based on a keyword or a natural sentence input from an auditor computer connected to the network. A search condition expression creating step of creating a search condition expression representing a selection criterion of whether or not to transmit to the outside of the network;
An e-mail auditing method, comprising the steps of: inputting the search condition expression and the e-mail to a computer, and selecting the e-mail to be transmitted to the outside of the network or not to be transmitted. Is a massively parallel computer incorporating a plurality of processors, and sets a plurality of independent search condition expressions on the plurality of processors to perform a full-text search of the email and the attached file attached to the email. An e-mail audit method, characterized in that: