Information processing device, system, method, storage medium and computer program product

Abstract

An information processing device, an information processing system, a storage medium, an information processing method and a computer program product, wherein the information processing device comprises: a receiving unit that receives command information related to operations based on a temporary user; and a control unit that controls the execution of operations corresponding to the command information received by the receiving unit when, after the receiving unit receives the command information from the user, the operations corresponding to the command information are included in the permissions of the user by switching the permissions of the user to permissions that are not temporary users.

Description

Technical Field

[0001] The present invention relates to an information processing device, an information processing system, a storage medium, an information processing method and a computer program product. Background Art

[0002] Patent document 1 proposes the following content, that is, when a user requests the execution of a user switching function, the user conversion control program limits the user authority level of the user who requested the user switching to users below a specific user authority level according to the user authority level of the user who requested the user switching.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2003-280781 Summary of the invention

[0004] There is a technology that allows temporary users who are not regular users to perform operations within a preset range of authority, but sometimes it is impossible for temporary users to command operations beyond the preset authority, so there is room for improvement. Therefore, the purpose of the present invention is to provide an information processing device, information processing system, storage medium and information processing method that can command operations beyond the preset authority granted to temporary users.

[0005] The invention described in Scheme 1 is an information processing device, which includes: a receiving unit that receives command information related to operations based on a temporary user; and a control unit that controls the execution of operations corresponding to the command information received by the receiving unit when the authority of the user is switched to the authority of a non-temporary user and the operation corresponding to the command information is included in the authority of the user after the receiving unit receives the command information from the user.

[0006] The invention described in claim 2 is based on the invention described in claim 1, and further includes: a storage unit that stores the received command information when the receiving unit receives the command information that exceeds the authority range of the temporary user.

[0007] The invention described in Scheme 3 is the invention described in Scheme 2, wherein when the command information received by the receiving unit is an operation within the preset authority range of the temporary user, the control unit performs control to execute the operation corresponding to the command information without storing it in the storage unit.

[0008] The invention described in claim 4 is the invention described in any one of claims 1 to 3, further comprising: a notification unit that notifies, when the receiving unit receives the command information, of an execution status of an operation on the command information.

[0009] The invention described in Scheme 5 is based on the invention described in Scheme 4. When the receiving unit is unable to switch the authority after receiving the command information above the preset authority range of the temporary user, the notification unit notifies the execution status that the operation corresponding to the received command information has not been executed.

[0010] The invention described in claim 6 is the invention described in claim 5, wherein the notification unit not only notifies the situation in which the temporary user is urged to switch the authority, but also notifies the situation in which the temporary user is urged to switch the authority.

[0011] The invention described in claim 7 is the invention described in any one of claims 4 to 6, wherein when execution of the operation corresponding to the command information received by the receiving unit is completed, the notifying unit notifies, as the execution status, that the requested operation has been completed.

[0012] The invention described in claim 8 is the invention described in any one of claims 4 to 7, wherein when the notification unit performs an operation corresponding to the command information received by the receiving unit, if a plurality of command information are repeated, the notification unit notifies an error according to a preset rule.

[0013] The invention described in Scheme 9 is an information processing system, which includes: an information processing device described in any one of Schemes 1 to 8; an information processing terminal for the user to send the command information to the information processing device; and an authentication device for authenticating the user for switching the user's authority.

[0014] The invention described in claim 10 is a storage medium storing an information processing program for causing a computer to function as the information processing device described in any one of claims 1 to 8.

[0015] The invention described in Scheme 11 is an information processing method, which includes the following steps: a receiving step, receiving command information related to operations based on a temporary user; and a control step, when after the command information is received from the user in the receiving step, the operation corresponding to the command information is included in the authority of the user by switching the authority of the user to the authority of a non-temporary user, and the control step performs control to execute the operation corresponding to the command information received in the receiving step.

[0016] Effects of the Invention

[0017] According to the information processing device described in claim 1, it is possible to provide an information processing device capable of instructing operations exceeding the preset authority granted to a temporary user.

[0018] According to the invention described in claim 2, after the authority of the user is switched, the processing corresponding to the command information can be executed.

[0019] According to the invention described in claim 3, compared with the case where all the command information is stored, it is possible to perform processing corresponding to operations within the authority and corresponding to the command information more quickly.

[0020] According to the invention described in claim 4, the execution status of the operation corresponding to the command information can be known.

[0021] According to the invention described in claim 5, it is possible to know that the processing corresponding to the command information cannot be executed without the authority.

[0022] According to the invention described in claim 6, it is possible to know whether switching of permissions is required.

[0023] According to the invention described in claim 7, it is possible to know that the processing of the command information is completed.

[0024] According to the invention described in claim 8, when a plurality of command information are repeated, it can be known that an error has occurred.

[0025] According to the invention described in claim 9, it is possible to provide an information processing system capable of instructing operations exceeding the preset authority granted to a temporary user.

[0026] According to the invention described in claim 10, it is possible to provide a storage medium capable of instructing operations exceeding the preset authority granted to a temporary user.

[0027] According to the invention described in claim 11, it is possible to provide an information processing method capable of instructing operations exceeding the preset authority granted to a temporary user. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Embodiments of the present invention will be described in detail with reference to the following drawings.

[0029] Figure 1 is a diagram showing a schematic configuration of an information processing system according to the present embodiment;

[0030] Figure 2 is a block diagram showing the main structure of the electrical system of the authentication server, information processing terminal and cloud server involved in this embodiment;

[0031] Figure 3 is a diagram showing an example in which different authentication services are required when processing is performed in conjunction with multiple cloud services;

[0032] Figure 4 is a functional block diagram showing the structure of a cloud server of the information processing system involved in the present embodiment;

[0033] Figure 5 is a diagram showing an example of command information indicating execution of an operation;

[0034] Figure 6 (A) shows an example of a rule for discarding the file editing content when the command information for editing the file is repeated. Figure 6 (B) shows an example of a rule for retaining the file editing content when the command information for editing the file is repeated;

[0035] Figure 7 (A) shows an example of rule information indicating a rule for discarding the file editing content when the command information for editing the file is repeated. Figure 7 (B) shows an example of rule information indicating a rule for retaining the file editing content when command information for editing a file is repeated;

[0036] Figure 8 This is a flowchart showing an example of the flow of processing performed by the cloud server of the information processing system involved in this embodiment.

[0037] Explanation of symbols

[0038] 10-information processing system, 12-authentication server, 14-information processing terminal, 16-cloud server, 18-communication line, 26-operation control unit, 28-operation execution possibility determination unit, 30-execution waiting queue, 32-user switching detection unit, 34-operation execution unit, 36-rule holding unit, 38-operation execution result storage unit. DETAILED DESCRIPTION

[0039] Hereinafter, an example of the present embodiment will be described in detail with reference to the drawings. In the present embodiment, an information processing system in which a plurality of information processing terminals, a plurality of authentication servers, and a plurality of cloud servers are connected via a communication line such as a network will be described as an example. Figure 1 It is a diagram showing a schematic configuration of an information processing system 10 according to the present embodiment.

[0040] like Figure 1 As shown, the information processing system 10 involved in this embodiment includes multiple authentication servers 12a, 12b, ..., multiple information processing terminals 14a, 14b, ..., and multiple cloud servers 16a, 16b, .... In addition, when it is not necessary to distinguish between the authentication servers 12a, 12b, ..., the information processing terminals 14a, 14b, ..., and the cloud servers 16a, 16b, ..., the letters at the end of the description symbols are sometimes omitted. In addition, in this embodiment, an example of having multiple authentication servers 12a, 12b, ..., multiple information processing terminals 14a, 14b, ..., and multiple cloud servers 16a, 16b, ... is described, but they are not limited to multiple, and can also be one. In addition, the authentication server 12 corresponds to the authentication device, and the cloud server 16 corresponds to the information processing device.

[0041] Each authentication server 12, information processing terminal 14 and cloud server 16 are connected via a communication line 18 such as a LAN (Local Area Network), a WAN (Wide Area Network), the Internet and an enterprise network. Furthermore, the authentication server 12, the information processing terminal 14 and the cloud server 16 can send and receive various data to each other via the communication line 18.

[0042] In the information processing system 10 involved in this embodiment, the cloud server 16 provides cloud services. In addition, the authentication server 12 manages the accounts of users who use cloud services. Users can use cloud services by operating the information processing terminal 14 to perform authentication based on the authentication server 12. For example, such as OAuth2 (open authorization), it is possible to use cloud services by using a structure that permits specific operations on specific information. In addition, as an example of cloud services, there can be cited services for editing files, services for storing files, services for converting files into a predetermined format, services for translation, and services for performing text recognition, but it is not limited to these.

[0043] In this embodiment, when using the cloud services provided by each cloud server 16, the use is permitted after authentication based on the authentication server 12. When a user who cannot be authenticated by the authentication server 12 uses the cloud service, the user is a temporary user called a temporary user, and the use is permitted within the scope of the pre-set authority.

[0044] Next, the main configuration of the electrical system of the authentication server 12 , the information processing terminal 14 , and the cloud server 16 according to the present embodiment will be described. Figure 2 This is a block diagram showing the main structure of the electrical system of the authentication server 12, information processing terminal 14, and cloud server 16 involved in this embodiment. In addition, the authentication server 12, information processing terminal 14, and cloud server 16 are basically configured as ordinary computers, so the cloud server 16 is used as a representative for description.

[0045] like Figure 2As shown, the cloud server 16 involved in this embodiment has a CPU 16A, a ROM 16B, a RAM 16C, a HDD 16D, a keyboard 16E, a display 16F and a communication line I / F (interface) unit 16G. The CPU 16A controls the overall operation of the cloud server 16. The ROM 16B stores various control programs and various parameters in advance. The RAM 16C is used as a work area when the CPU 16A executes various programs. The HDD 16D stores various data and application programs. The keyboard 16E is used to input various information. The display 16F is used to display various information. The communication line I / F unit 16G is connected to the communication line 18 and performs various data transmission and reception with other devices connected to the communication line 18. The above parts of the cloud server 16 are electrically connected to each other through the system bus 16H. In addition, in the cloud server 16 involved in this embodiment, the HDD 16D is used as a storage unit, but it is not limited to this, and other non-volatile storage units such as flash memory can also be applied.

[0046] With the above structure, the cloud server 16 according to the present embodiment respectively executes access to the ROM 16B, the RAM 16C, and the HDD 16D through the CPU 16A, acquires various data through the keyboard 16E, and displays various information on the display 16F. In addition, the cloud server 16 executes control of sending and receiving communication data through the communication line I / F unit 16G through the CPU 16A.

[0047] However, in the information processing system 10 configured as described above, the user can log in to the authentication server 12 by operating the information processing terminal 14 or the like, and can use the cloud service provided by the cloud server 16. Furthermore, even if the user does not log in, as long as a temporary user account is created in advance and the temporary user identification information is granted according to the user's request, the user can instruct the operation of the cloud service within the pre-set authority range.

[0048] However, such temporary users are only granted the minimum permissions, so sometimes they cannot perform the desired operations. For example, although files can be read, they cannot be updated, or the size of the storage area for files is limited, so that the upper limit is exceeded immediately and the files cannot be used. With such minimum permissions, even if there is a temporary account for using cloud services, cloud services cannot be used, and the original purpose cannot be achieved.

[0049] Furthermore, when processing is performed in conjunction with multiple cloud services, if each cloud service requires a different account, then only some of the accounts can be logged in, resulting in the inability to perform the joint processing. Figure 3As shown, sometimes, the service A20 and the service B22 of the cloud server 16a are sequentially performed, and then the service C24 of the cloud server 16b is executed. In addition, when the service A20 and the service B22 require an account of the authentication server 12a, and the service C24 requires an account of the authentication server 12b, if the user only logs in to one of the authentication servers 12a and 12b, the above-mentioned joint processing cannot be performed. In this case, it is necessary to obtain the account of the authentication server 12 that has not been logged in, and then instruct the operation of restarting the joint processing from the beginning.

[0050] Therefore, in the information processing system 10 involved in this embodiment, the cloud server 16 has an execution waiting queue for receiving and storing command information that exceeds the authority of the temporary user as a temporary user when using the cloud service. In addition, when the cloud server 16 detects the switching from the temporary user to the regular user, it executes the processing corresponding to the received command information. As a result, after logging in as a regular user, there is no need to command the cloud service again, and only logging in as a regular user is performed to perform the processing corresponding to the requested command information.

[0051] Here, the detailed functional structure of the cloud server 16 is described. Figure 4 It is a functional block diagram showing the configuration of the cloud server 16 of the information processing system 10 according to the present embodiment.

[0052] The cloud server 16 has the functions of an operation control unit 26 as a receiving unit, an operation execution possibility determination unit 28, an execution waiting queue 30 as a storage unit, a user switching detection unit 32, an operation execution unit 34 as a control unit, a rule holding unit 36 ​​and an operation execution result storage unit 38 as a notification unit.

[0053] The operation control unit 26 receives command information indicating the execution of the cloud service based on the temporary user or the regular user's operation. Furthermore, the operation execution possibility determination unit 28 is entrusted with the determination of the execution possibility of the received command information. Furthermore, the command information for which the determination result of the execution possibility based on the temporary user's operation is determined as "no" is stored in the execution waiting queue 30. On the other hand, the operation execution unit 34 is entrusted with the execution of the command information for which the determination result of the execution possibility based on the temporary user's operation is determined as "yes" and the command information based on the regular user.

[0054] The operation execution permission determination unit 28 determines whether the command information received by the operation control unit 26 can be executed. For example, it determines whether the user is a temporary user or a regular user. If the user is a regular user, the execution is determined to be "permitted" and the determination result is notified to the operation execution unit 34. If the user is a temporary user, the execution permission is determined by determining whether the operation content is within the authority of the temporary user, and the determination result is notified to the operation execution unit 34.

[0055] The execution waiting queue 30 stores the command information received by the operation control unit 26 and judged as "No" based on the operation of the temporary user in a storage unit such as RAM 16C or HDD 16D. As an example of the command information stored in the execution waiting queue 30, the storage indicates Figure 5 Command information for executing the operation as shown.

[0056] The user switching detection unit 32 monitors the switching from the temporary user to the regular user, and notifies the operation execution unit 34 when the switching from the temporary user to the regular user is detected.

[0057] Regarding the command information received by the operation control unit 26, the command information that is judged to be "allowable" based on the operation of a temporary user and the command information based on the operation of a regular user are not stored in the execution waiting queue 30, but the operation execution unit 34 controls the processing corresponding to the command information according to the rules maintained in the rule maintenance unit 36, and stores the execution results in the operation execution result storage unit 38.

[0058] When the user switching detection unit 32 detects the switching from the temporary user to the regular user, the operation execution unit 34 acquires the corresponding command information from the execution waiting queue 30. Then, the operation execution unit 34 performs control to execute the processing corresponding to the acquired command information according to the rule stored in the rule storage unit 36, and stores the execution result in the operation execution result storage unit 38.

[0059] The rule storage unit 36 ​​stores rules related to errors such as when multiple command information is repeated. As an example of the rules stored in the rule storage unit 36, it is possible to apply Figure 6 (A) Figure 6 The rules shown in (B) are respectively Figure 7 (A) Figure 7 It is defined by rule information as shown in (B).

[0060] Figure 6 (A) shows an example of a rule for discarding the file editing content when the command information for editing the file is repeated. Figure 7 (A) shows an example of rule information indicating a rule for abandoning the file editing content when the command information for editing the file is repeated. In this example, two operations ( Figure 6 An example of duplication of the operation ID of (A). The following example shows that the execution account is used by two temporary users ( Figure 6 (A) "tempUser001" and "tempUser002") issued an operation to the common operation object ( Figure 6 An example of an "editFile" operation for file editing (the argument of (A) is "file: / / xxx.doc"). In this case, the command information that initially issues the command is executed, and the rule for command information that issues subsequent commands is abandoned. In this example, the execution status is not "ended", and no error message is given to the requester regarding the initial command information. On the other hand, regarding the subsequent command information, an error message such as "Conflict detected in editFile. EditFile content abandoned." is given to the requester.

[0061] and, Figure 6 (B) shows an example of a rule for retaining the file editing content when the command information for editing the file is repeated. Figure 7 (B) shows an example of rule information indicating a rule for retaining the file editing content when the command information for editing the file is repeated. In this example, two operations ( Figure 6 (B) operation ID) is repeated. It shows that the execution account is used by two temporary users ( Figure 6 (B) "tempUser00A" and "tempUser00B") issued a request to the common object ( Figure 6 An example of an "editFile" operation for file editing (the argument of (B) is "file: / / yyy.doc"). In this case, the command information for the first command is executed, while the rule for command information for subsequent commands is retained. In this example, the execution status is "Ended" and no error message is given to the requester regarding the first command information. On the other hand, the subsequent command information is given to the requester as an error message such as "Conflict detected in editFile. The content of editFile is retained."

[0062] Regarding the command information based on the regular user, the operation execution result storage unit 38 prompts the user with the execution result executed and stored by the operation execution unit 34. Moreover, regarding the command information that the temporary user becomes waiting for execution, the execution result executed and stored by the operation execution unit 34 is prompted to the user after switching to the regular user. In addition, when the execution waiting queue 30 stores the command information based on the operation of the temporary user and is judged as "no", the requesting party may be prompted that the command information beyond the authority of the temporary user is retained. Moreover, at this time, the requesting party may be prompted to switch to the regular user.

[0063] Next, specific processing performed by the cloud server 16 of the information processing system 10 according to the present embodiment configured as described above will be described. Figure 8 1 is a flowchart showing an example of the flow of processing performed by the cloud server 16 of the information processing system 10 according to the present embodiment. Figure 8 The processing starts, for example, when the operation control unit 26 receives command information from the user.

[0064] In step S100, the operation control unit 26 obtains the authority information of the user who requested the received command information, and moves to step S102. For example, the operation control unit 26 obtains the user's identification information from the authentication server 12, and obtains the login information indicating whether the user is a temporary user or a regular user as the authority information.

[0065] In step S102, the operation executable determination unit 28 determines whether the command information is not executable based on the authority information. When the determination is negative, that is, when the user who requested the command information is a regular user or is within the authority range of a temporary user, the process moves to step S112. And when the determination is positive, that is, when the user who requested the command information is not a regular user or is outside the authority range of a temporary user, the process moves to step S104.

[0066] In step S104 , the operation control unit 26 stores the command information determined as “No” by the operation execution availability determination unit 28 in the execution waiting queue 30 , and proceeds to step S106 .

[0067] In step S106, the operation execution result storage unit 38 notifies the user of the requesting party of the execution status and transfers to step S108. For example, when the user is a temporary user and the command information of the operation content exceeds the authority range, the requesting party may be notified that the command information exceeding the authority range of the temporary user is retained. In addition, at this time, the requesting party may be notified of the content urging the user to switch to a regular user.

[0068] In step S108, the user switching detection unit 32 monitors the authority switching of the command information stored in the execution waiting queue 30, and moves to step S110. That is, the user switching detection unit 32 detects whether the user of the command information stored in the execution waiting queue 30 has switched to a regular user.

[0069] In step S110, the user switching detection unit 32 determines the available authority, that is, in this embodiment, determines whether the user has switched to a regular user. If the determination is negative, it returns to step S108 and continues to monitor the user's authority. If the determination is positive, it transfers to step S112.

[0070] In step S112, the operation execution unit 34 executes the processing corresponding to the command information according to the preset rule stored in the rule storage unit 36, and transfers to step S114. That is, the operation execution unit 34 executes the processing of the cloud service corresponding to the command information and stores the execution result in the operation execution result storage unit 38.

[0071] In step S114, the operation execution result storage unit 38 prompts the user of the execution result of the executed command information and ends a series of processes. For example, the operation execution result storage unit 38 prompts the execution result of the command information by sending the execution result of the executed command information to the information processing terminal 14 of the user who requested it.

[0072] By performing such processing, even when an operation with more than the authority of the temporary user is requested to the cloud service, the cloud server 16 temporarily stores the command information in the execution waiting queue 30. Furthermore, when the switch from the temporary user to the regular user is detected, the processing corresponding to the stored command information is performed, so after logging in as a regular user, there is no need to command the cloud service again, and the processing corresponding to the command information is executed.

[0073] In the above embodiment, the case where the authentication server 12 and the cloud server 16 have different structures is described as an example, but the cloud server 16 may have the function of the authentication server 12 .

[0074] Furthermore, the processing performed by the cloud server 16 involved in the above-mentioned embodiment is described as processing performed by software, but it may be processing performed by dedicated hardware or a combination of software and hardware. Furthermore, the processing performed by the cloud server 16 may be stored in a storage medium as a program and circulated.

[0075] Furthermore, the present invention is not limited to the above, and it is apparent that the present invention can be implemented with various modifications other than the above without departing from the spirit and scope of the present invention.

[0076] The above-mentioned embodiments of the present invention are provided for the purpose of illustration and description. In addition, the embodiments of the present invention do not fully and exhaustively include the present invention, and do not limit the present invention to the disclosed methods. Obviously, various modifications and changes are self-evident to those skilled in the art to which the present invention belongs. The present embodiment is selected and described in order to most easily understand the principles of the present invention and its application. Thus, other technicians in the art can understand the present invention through various variations optimized for specific uses assumed to be various embodiments. The scope of the present invention is defined by the above claims and their equivalents.

Claims

1. An information processing device, comprising: a receiving unit that receives command information related to an operation by a temporary user; a control unit that controls execution of the operation corresponding to the command information received by the receiving unit when the authority of the user is switched to the authority of a non-temporary user and the operation corresponding to the command information is included in the authority of the user after the receiving unit receives the command information from the user; and a notification unit that notifies the execution status of the operation on the command information when the receiving unit receives the command information, When the operation corresponding to the command information received by the receiving unit is executed, the notifying unit notifies an error according to a preset rule when a plurality of command information related to the user and another temporary user overlap.

2. The information processing device according to claim 1, further comprising: The storage unit stores the received command information when the receiving unit receives the command information that is greater than the authority of the temporary user.

3. The information processing device according to claim 2, wherein: When the command information received by the receiving unit is an operation within the preset authority range of the temporary user, the control unit performs control to execute the operation corresponding to the command information without storing it in the storage unit.

4. The information processing device according to claim 1, wherein: When the receiving unit cannot switch the authority after receiving the command information exceeding the preset authority range of the temporary user, the notifying unit notifies, as the execution status, that the operation corresponding to the received command information has not been executed.

5. The information processing device according to claim 4, wherein: The notification unit not only notifies the user of the non-execution but also urges the user to switch the authority of the temporary user.

6. The information processing device according to claim 4 or 5, wherein: When execution of the operation corresponding to the command information received by the receiving unit is completed, the notifying unit notifies, as the execution status, that the requested operation has been completed.

7. An information processing system comprising: The information processing device according to any one of claims 1 to 6; An information processing terminal, used by a user to send the command information to the information processing device; and The authentication device authenticates the user for switching the user authority. 8 . A storage medium storing an information processing program for causing a computer to function as the information processing device according to claim 1 .

9. An information processing method comprising the following steps: A receiving step of receiving command information related to an operation by a temporary user; a control step of performing control to execute the operation corresponding to the command information received in the receiving step when the authority of the user is switched to the authority of a non-temporary user after the command information is received from the user in the receiving step, and the operation corresponding to the command information is included in the authority of the user; and a notification step of notifying the execution status of the operation on the command information when the receiving step receives the command information, The notifying step notifies an error according to a preset rule when a plurality of command information related to the user and another temporary user overlap when an operation corresponding to the command information received in the receiving step is performed.

10. A computer program product comprising an information processing program for causing a computer to implement the steps of the method according to claim 9.

Images