JP4334074B2 - Information management system, authority management method, and storage medium - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an authority management method of an information management system that can manage various authorities related to information processing of individuals belonging to an organization such as an employee, and in particular, business handover work when the affiliated organization is changed. It is related with the authority management method which can do smoothly.
[0002]
[Prior art]
In an organization such as a company, an individual affiliation is often changed. At the time of such affiliation change, notification of affiliation change is made immediately before the change, and business handover work accompanying the affiliation change must be started after the affiliation change is announced, so even after the affiliation change execution date I had to take over the work in my old organization. For this reason, while actually belonging to the new affiliation, staying in the old affiliation for a certain period and taking over the business is the actual situation.
However, in recent years, due to the advancement of information systems, many tasks have been systematized, and daily tasks are performed according to the system usage authority (various authorities related to information processing) given according to belonging information. Must be done by the information system using the authority of the old organization. That is, the time for registering the change of affiliation information in the information system is delayed from the affiliation change execution date.
However, in that case, there are problems such as inconveniences in the work of the new organization because the period in which the authority of the old organization needs to remain may be increased or decreased depending on individual circumstances, or the switching to the new organization is not performed. It was.
In the organization information file system disclosed in Japanese Patent Application Laid-Open No. 7-44433, it is possible to easily search to which department of the new organization the business of the old organization has been taken over when the organization is changed.
[0003]
[Problems to be solved by the invention]
As described above, in the prior art, when the affiliated organization is changed, there is a problem that the business takeover work in the old affiliated organization cannot be performed smoothly, or inconvenience occurs in the business in the new affiliated organization, Such a problem is not solved in the prior art disclosed in Japanese Patent Laid-Open No. 7-44433.
The object of the present invention is to solve such problems of the prior art, and when the affiliation organization is changed, information that can smoothly carry over the work in the old affiliation organization and can also smoothly carry out the work in the new affiliation organization The object is to provide a management system authority management method.
[0004]
[Means for Solving the Problems]
In order to solve the above-described problem, in the invention according to claim 1, in the information management system capable of managing various authorities related to information processing, each individual identification information is changed to each organization identification information indicating the organization to which the information belongs. Registered in association with each other, and registered in the authority information storage unit for registering various authority information related to information processing in association with each individual identification information belonging to each organization identification information, and the authority information storage unit An application processing unit that executes various application programs in accordance with the authority information that is registered, and a registration change authority that registers personal identification information and authority information in the authority information storage unit and registers authority information for updating the registered information Information is registered or registered in the authority information storage unit according to authority information registered in the storage unit and the registration change authority storage unit A personal information input by the user terminal device and an instruction of an application program to be started, and the personal identification information input by the user terminal device. And the application program name is passed to the application processing unit, the application processing unit searches the affiliation information table in the authority information storage unit to obtain the organization identification information associated with the passed personal identification information, based on the authorization information table, creates the affiliation information table arranged in value order of personal identification information the authority information registration change processing unit in advance, by the belonging information table search, it is determined whether to execute the indicated application program If the user has authority to execute the application program, The application processing unit activates and starts execution of the application program. When an instruction to update or reference data is given during execution of the application program, the program processing unit refers to the authority information table again, and It is determined whether or not has the authority to update or refer to the data .
According to a second aspect of the present invention, in the authority management method of the information management system capable of managing various authorities relating to information processing, the authority information storage unit stores each individual identification information and each organization identification indicating its organization. A step of registering in association with information and registering various authority information related to information processing in association with each individual identification information belonging to each of the organization identification information, and an application processing unit including the authority information storage unit A step of executing various application programs in accordance with the authority information registered in, and an authority for the registration change authority storage unit to register personal identification information and authority information in the authority information storage unit and to update the registered information Information registration step, and the authority information registration change processing unit follows the authority information registered in the registration change authority storage unit. A step of registering information in the authority information storage unit or updating registered information; and a user terminal device, and personal identification information input by the user terminal device, and an instruction of an application program to be started In response, the input personal identification information and the application program name are passed to the application processing unit, and the application processing unit searches the affiliation information table in the authority information storage unit and corresponds to the passed personal identification information. The authority information registration change processing unit creates in advance an affiliation information table obtained by acquiring the attached organization identification information and arranged in order of the value of the personal identification information based on the authority information table, and is instructed by the affiliation information table search. determines whether the execution of the application program, the to the user Apurikeshi The application processing unit activates the application program to start execution, and when a data update or reference instruction is given during execution of the application program, the program processing unit The authority information table is referred again, and it is determined whether or not the user has the authority to update or refer to the data .
The invention according to claim 3 is characterized in that a program according to the authority management method according to claim 2 is stored in a storage medium storing the program.
[0007]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a block diagram showing the configuration of an information management system according to an embodiment of the present invention. As shown in the figure, the information management system of this embodiment registers each personal identification information in association with each organization identification information indicating the organization to which the personal identification information belongs, and each personal identification information belonging to each organization identification information. An authority information storage unit (affiliation information storage unit and authority information storage unit) 1 for registering various authority information related to information processing in association with the personal information, personal identification information, authority information, etc. is registered in the authority information storage unit 1 A registration change authority storage unit (change authority storage means) 2 for registering authority information for updating the registered information or the authority information stored in accordance with the authority information registered in the registration change authority storage unit 2 Authority information registration change processing section 3 for registering information in section 1 and updating (changing) registered information, and various applications according to authority information registered in authority information storage section 1 Application processing unit for executing and Activation Program (application processing unit) 4, a system administrator terminal device 5, the user boss terminal device 6, and a like user terminal device 7. The authority information registration change processing unit 3 and the application processing unit 4 have a shared memory for storing a program and a shared CPU that operates according to the program. The authority information storage unit 1 and the registration change authority storage unit 2 are configured by a shared hard disk device or the like.
[0008]
FIG. 2 shows organization identification information (organization ID), personal identification information (user ID) registered in the authority information table in the authority information storage unit 1 and various authority information registered in association with the personal identification information. Show. As shown in the figure, each individual identification information is registered in association with the organization identification information (organization ID) indicating the organization to which the individual belongs (so that it can be understood that it belongs). Correspondingly, various authority information such as a program name that can be executed by each individual indicated by the personal identification information, updatable data (including an updatable document file), and referenceable data are registered. Such programs, data that can be updated, and data that can be referred to depend on the organization to which they belong, and since they belong to a certain organization, there are many that are given execution authority, update authority, and reference authority. Or, the authority varies depending on whether the person is a manager or not. Note that the authority common to the individuals belonging to the same organization may be directly associated with the organization identification information without being associated with the personal identification information. In other words, in such a configuration, an individual belonging to an organization has the authority indicated by the authority information associated with his / her personal identification information and the authority indicated by the authority information associated with the organization identification information of his / her organization. You can exercise both.
FIG. 3 shows an example of registration update authority information registered in the registration change authority storage unit 2. In FIG. 3, organization identification information “005” indicates, for example, a personnel information management department, and a specific individual within the organization has authority to add, delete, and change organization identification information (organization ID) shown in FIG. This indicates that the user has authority to add, delete, and change personal identification information (user ID), and other update authority not shown. In FIG. 3, a configuration without the “updatable information” field (column) is also possible. In such a configuration, each registered individual has a predetermined common authority. Further, authority information that can be updated directly is associated with the organization identification information, and a specific organization may have the same authority.
[0009]
FIG. 4 shows an operation flow at the time of affiliation change. Hereinafter, the operation at the time of affiliation change of this embodiment will be described with reference to FIG.
In this embodiment, when an affiliation change occurs, first, for example, a person in charge of a personnel information management department (a specific individual) updates information registered in the authority information storage unit 1 using his / her user terminal device 7. (Step S1). Then, the authority information registration change processing unit 3 receives this instruction via the network, and requests the user terminal device 7 that has transmitted the instruction for the instruction of the organization identification information and the personal identification information. In response to this request, when the person in charge inputs the organization identification information of the personnel information management department to which he belongs and his own personal identification information (user ID) (step S2), the authority information registration change processing unit 3 The organization identification information and personal identification information are acquired.
Subsequently, the authority information registration change processing unit 3 searches for the organization identification information registered in the registration change authority storage unit 2 (see FIG. 3). Then, it is determined whether or not the personal identification information input at that time is registered (step S3). If registered (Yes in step S3), the authority information registration change processing unit 3 acquires the updatable information type registered in association with the personal identification information from the registration change authority storage unit 2 (step S3). In step S4), a message is created in accordance with the message, the message is sent to the user terminal device 7, and the message is displayed as shown in FIG.
[0010]
Thereby, the person in charge instructs registration, and inputs the personal identification information of the affiliation change target person acquired in advance and the organization identification information indicating the new affiliation organization of the object person (step S5). The authority given to the target person is, for example, a standard authority, and authority information is not selected from the authority information list shown in item 4 of FIG. Then, the input personal identification information and organization identification information are received by the authority information registration change processing unit 3, and the authority information registration change processing unit 3 that has received them is registered in the authority information table in the authority information storage unit 1. The received personal identification information is added to a user ID (personal identification information) field (see FIG. 2) corresponding to the organization identification information being stored. Also, authority information associated with the organization identification information is acquired from standard authority information registered in advance in association with each organization identification information in a predetermined area in the authority information storage unit 1, Then, it is registered (written) in the authority information table in association with the added personal identification information (step S6).
On the other hand, if it is determined in step S3 that the matching organization identification information is not registered, or the matching organization identification information is registered, but the matching personal identification information is registered in association with the organization identification information. If it is determined that it is not (No in step S3), the authority information registration change processing unit 3 sends a message indicating that to the user terminal device 7 and causes the user terminal device 7 to display the message (step S3). S7).
In this way, the authority information of the affiliation change target person is registered in association with the organization identification information of both the old and new affiliation organizations as shown in FIG. 6, so that the affiliation change object person can exercise authority in both organizations. Become. In FIG. 6, the user ID “0567432” is the affiliation change target person, the organization identification information “001” is the organization identification information of the former affiliation organization of the affiliation change object person, and “003” is the organization identification of the new affiliation organization. Information. Further, “C” and “C1” shown in association with the organization identification information “003” indicate standard authority information in the new organization.
[0011]
FIG. 7 shows an operation flow when executing the application program of this embodiment. Hereinafter, the operation when the application program is executed will be described with reference to FIG.
At this time, as shown in FIG. 7, first, the user (user, each individual belonging to the organization) inputs his / her personal identification information using the user terminal device 7 (step S11). The application program to be started is designated (step S12). Then, the input personal identification information and the application program name are passed to the application processing unit 4 via the network, whereby the application processing unit 4 searches the affiliation information table in the authority information storage unit 1 and passes it. The organization identification information associated with the personal identification information is acquired. Based on the authority information table, the authority information registration change processing unit 3 creates in advance an affiliation information table arranged in the order of the values of the personal identification information.
If the affiliation information table search is performed, for example, if the affiliation change target person (user ID: 0567432) shown in FIG. 6 is used, the application processing unit 4 can acquire two pieces of organization identification information. Search for the personal identification information associated with each organization identification information, and whether the instructed application program is registered as an “executable program” in association with one of the two personal identification information Is determined (step S13). If registered (that is, if the user has authority to execute the program) (Yes in step S13), the application processing unit 4 starts the program and starts executing it (step S14).
Thereafter, when the user gives an instruction to update or refer to contents (data) such as a specific file / database during the execution (step S15), the program processing unit 4 refers to the authority information table again (see FIG. 6). ), It is determined whether or not the user is authorized to update or refer to the data (step S16). If it is determined that the user has authority (Yes in step S16), data update or data reference is executed in accordance with user input information (step S17).
[0012]
On the other hand, if it is determined in step S13 that there is no execution authority (No in step S13) and if it is determined in step S16 that there is no update authority or reference authority (No in step S16), this is indicated. The message shown is sent to the terminal device 7 to display the message (step S18).
In the configuration in which the authority common to each individual belonging to the same organization is directly associated with the organization identification information, the application processing unit 4 stores one or two organization identification information acquired from the affiliation information table. The authority indicated by the directly associated authority information is also determined as the authority given to the individual.
Thus, according to this embodiment, the affiliation change target person can use the authority of the old affiliation organization to perform the business takeover work in the old affiliation organization, and the new affiliation organization has You can use your authority to smoothly perform tasks in your new organization.
In addition, when it is not necessary to use authority in the former affiliation of the affiliation change subject after the business takeover work, etc., the person in charge of the personnel information management department, for example, The personal identification information of the affiliation change target person associated with the identification information is deleted.
[0013]
First, the person in charge instructs to update information registered in the authority information storage unit 1 using his / her user terminal device 7 (step S21). Then, the authority information registration change processing unit 3 receives this instruction via the network, and requests the user terminal device 7 that has transmitted the instruction for the instruction of the organization identification information and the personal identification information. In response to this request, when the person in charge inputs the organization identification information of the personnel information management department to which he belongs and his own personal identification information (user ID) (step S22), the authority information registration change processing unit 3 The organization identification information and personal identification information are acquired.
Subsequently, the authority information registration change processing unit 3 searches for the organization identification information registered in the registration change authority storage unit 2 (see FIG. 3). Then, it is determined whether or not the personal identification information input at that time is registered (step S23). If registered (Yes in step S23), the authority information registration change processing unit 3 acquires the updatable information type registered in association with the personal identification information from the registration change authority storage unit 2 (step S23). In step S24), a message is created in accordance with the message, the message is sent to the user terminal device 7, and the message is displayed as shown in FIG.
[0014]
Thereby, the person in charge instructs the deletion, and inputs the personal identification information of the person to be deleted and the organization identification information indicating the former affiliation of the person who has been acquired in advance (step S25). Then, the input personal identification information and organization identification information are received by the authority information registration change processing unit 3, and the authority information registration change processing unit 3 that has received them is registered in the authority information table in the authority information storage unit 1. The personal identification information associated with the organization identification information is deleted from the user ID (personal identification information) field. The authority information associated with the deleted personal identification information is also deleted (step S26).
On the other hand, if it is determined in step S23 that the matching organization identification information is not registered, or the matching organization identification information is registered, but the matching personal identification information is registered in association with the organization identification information. If it is determined that it is not (No in Step S23), the authority information registration change processing unit 3 sends a message indicating that to the user terminal device 7 and displays the message on the user terminal device 7 (Step S23). S27).
In the above, it is possible to adopt a configuration in which a specific organization such as a personnel information management department has the deletion authority. In such a case, only the organization identification information is input in step S22, and the organization identification is performed in step S23. It is only determined whether or not information is registered.
[0015]
Further, the deletion authority as described above can be given to the affiliation change target person or the person in charge (department manager) of the former affiliation organization. In such a configuration, when the operation flow shown in FIG. 4 is operated (at the time of affiliation change), the old organization identification information associated with the affiliation change target person to which the authority information registration change processing unit 3 is input is assigned to the affiliation Acquired from the information table, the old organization identification information and the personal identification information of the affiliation change target person are associated with each other and added to the table shown in FIG. 3, or the organization responsibility associated with the old organization information The personal identification information of the person is acquired from the authority information storage unit 1 and the former affiliation organization information and the personal identification information are associated with each other and added to the table shown in FIG. 3 (see FIG. 9). Further, information indicating the authority to delete the personal identification information of the affiliation change target person associated with the old affiliation organization information in the “updatable information” field (see FIG. 9) in association with the added personal identification information. Register with. Thereby, the person in charge or the affiliation change target person can execute the operation flow shown in FIG. 8 using the user supervisor terminal device 6 or the user terminal device 7. The authority information registration change processing unit 3 executes this operation flow, and then, from the table shown in FIG. 9, personal identification information of the affiliation change target person or the person in charge of the former affiliation organization (or only the affiliation change target person) Is deleted, and the deletion authority temporarily given is revoked.
Thus, according to the embodiment shown in FIG. 8, abuse of authority is prevented by extinguishing the authority when the period necessary to give the authority of the former affiliation organization on the business due to the affiliation change is over. In addition, by giving the authority to revoke the authority (deletion authority) only to a specific person, it is possible to avoid a situation in which the authority is inadvertently lost.
[0016]
At the time of affiliation change, by registering in the old affiliation authority information table having the same configuration as the authority information table shown in FIG. 2, the affiliation change target person can be changed from the authority information table shown in FIG. It is also possible to delete the identification information and the authority information. In such a configuration, the affiliation change target person is given the authority of the former affiliation organization necessary for, for example, business handover work according to the old affiliation authority table. Then, this authority disappears by executing the operation flow as shown in FIG.
In the embodiment, when a predetermined period has elapsed since the personal identification information is registered in association with both the new and old organizations, the authority information registration change processing unit 3 displays the personal identification information associated with the old organization. You may make it delete automatically.
Further, by storing the program according to the authority management method of the present invention described above in a removable storage medium, the removable storage medium storing the program is loaded into a general-purpose information processing apparatus such as a personal computer. Thus, the authority management method according to the present invention can also be realized in the information processing apparatus.
[0017]
【The invention's effect】
As described above, according to the present invention , not only the data reference authority but also whether or not the application program can be started is checked, so that it is possible to limit the unauthorized user from starting the application program unfairly, For example, even if there is an application authority, the authority is separately checked for file reference and update, so security can be ensured.
[Brief description of the drawings]
FIG. 1 is a block diagram showing the configuration of an information management system according to an embodiment of the present invention.
FIG. 2 is a data configuration diagram of an information management system showing an embodiment of the present invention.
FIG. 3 is another data configuration diagram of the information management system showing an embodiment of the present invention.
FIG. 4 is an operation flowchart of the information management system showing an embodiment of the present invention.
FIG. 5 is a screen view of an information management system showing an embodiment of the present invention.
FIG. 6 is another data configuration diagram of the information management system showing an embodiment of the present invention.
FIG. 7 is another operation flow diagram of the information management system showing an embodiment of the present invention.
FIG. 8 is another operation flowchart of the information management system showing an embodiment of the present invention.
FIG. 9 is another data configuration diagram of the information management system showing an embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Authority information storage part 2 Registration change authority storage part 3 Authority information registration change process part 4 Application process part 7 User terminal device

Claims (3)

In an information management system that can manage various authorities related to information processing,
Each personal identification information is registered in association with each organization identification information indicating the affiliated organization, and various authority information relating to information processing is registered in association with each personal identification information belonging to each organization identification information. An authority information storage unit,
An application processing unit that executes various application programs according to the authority information registered in the authority information storage unit;
A registration change authority storage section for registering authority information for registering personal identification information or authority information in the authority information storage section or updating authority information registered;
An authority information registration change processing unit for registering information in the authority information storage unit or updating the registered information according to the authority information registered in the registration change authority storage unit;
A user terminal device,
Upon receiving the personal identification information input by the user terminal device and the instruction of the application program to be started, the input personal identification information and the application program name are passed to the application processing unit, and the application processing unit Search the affiliation information table in the information storage unit, obtain the organization identification information associated with the passed personal identification information, and based on the authority information table, the affiliation information table arranged in order of the value of the personal identification information If the authority information registration change processing unit creates in advance and determines whether or not the designated application program can be executed by the affiliation information table search, and the user has the execution right of the application program, the application processing unit Launch the application program When an instruction to update or refer to data is issued during execution of the application program, the program processing unit refers to the authority information table again, and is the user authorized to update or refer to the data? An information management system characterized by determining whether or not . In the authority management method of the information management system that can manage various authorities related to information processing,
The authority information storage unit registers each individual identification information in association with each organization identification information indicating the organization to which the user belongs, and various information processing information associated with each individual identification information belonging to each organization identification information. The step of registering authority information,
A step of causing the application processing unit to execute various application programs according to authority information registered in the authority information storage unit;
A step in which a registration change authority storage unit registers authority information for registering personal identification information and authority information in the authority information storage unit or updating registered information;
An authority information registration change processing unit registers information in the authority information storage unit according to the authority information registered in the registration change authority storage unit, or updates the registered information;
A user terminal device,
Upon receiving the personal identification information input by the user terminal device and the instruction of the application program to be started, the input personal identification information and the application program name are passed to the application processing unit, and the application processing unit Search the affiliation information table in the information storage unit, obtain the organization identification information associated with the passed personal identification information, and based on the authority information table, the affiliation information table arranged in order of the value of the personal identification information If the authority information registration change processing unit creates in advance and determines whether or not the designated application program can be executed by the affiliation information table search, and the user has the execution right of the application program, the application processing unit Launch the application program When an instruction to update or refer to data is issued during execution of the application program, the program processing unit refers to the authority information table again, and is the user authorized to update or refer to the data? An authority management method characterized by determining whether or not . A storage medium storing a program, wherein the program according to the authority management method according to claim 2 is stored.

Images