Information sharing device, information sharing system, information sharing method, and information sharing program

Abstract

To provide an information sharing device, system, method, and program with which it is possible to share information maintaining information security.SOLUTION: An information sharing device 10 comprises: determination means 11 for determining whether transmit data violates a predetermined information security policy on the basis of the fact that transmit operation has been performed by a first user; and transmission means 12 for transmitting the transmit data having been determined by the determination means 11 as not violating the information security policy, on the basis of the fact that approval operation has been performed by a second user different from the first user.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present disclosure relates to an information sharing device, an information sharing system, an information sharing method, and an information sharing program that share information while ensuring information security. [Background technology]

[0002] There are known techniques for ensuring information security when electronic data is exchanged for the purpose of sharing information with other organizations, departments, or locations. For example, a message transmission / reception system described in Patent Document 1 determines whether or not destination information, message information, and a transmission file of the transmission data satisfy preset conditions when a send button on a transmission message window is operated. Then, the message transmission / reception system transmits the transmission data when the predetermined conditions are satisfied. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-111125 Summary of the Invention [Problem to be solved by the invention]

[0004] The message sending and receiving system described in Patent Document 1 displays a warning / confirmation display window when transmission data does not satisfy a predetermined condition. Then, the message sending and receiving system transmits the transmission data when the send button in the warning / confirmation display window is operated. In other words, a user can send transmission data that does not satisfy a predetermined condition by operating the send button in the warning / confirmation display window. Therefore, there is a risk that a process that violates an information security policy may be carried out due to an intentional or negligent act of a single user.

[0005] In view of the above, an object of the present disclosure is to provide an information sharing device, an information sharing system, an information sharing method, and an information sharing program that are capable of sharing information while ensuring information security. [Means for solving the problem]

[0006] The information sharing device according to the present disclosure is characterized in that it comprises a determination means for determining whether transmitted data violates a predetermined information security policy based on a transmission operation performed by a first user, and a transmission means for transmitting transmitted data that is not determined by the determination means to not violate the information security policy based on an approval operation performed by a second user different from the first user.

[0007] The information sharing system according to the present disclosure is characterized in that the above-mentioned information sharing device and user terminals used by users are arranged at respective bases, and transmission data transmitted from a first user terminal at a first base to a second user terminal at a second base is determined by a determination means of the first information sharing device at the first base, and then transmitted by a transmission means to a second information sharing device at the second base, and then transmitted from the second information sharing device to the second user terminal.

[0008] The information sharing method disclosed herein is characterized in that a computer determines whether transmitted data violates a predetermined information security policy based on a transmission operation performed by a first user, and transmits transmitted data that is not determined to violate the information security policy based on an approval operation performed by a second user different from the first user.

[0009] The information sharing program disclosed herein is characterized in that it causes a computer to execute a determination process for determining whether transmitted data violates a predetermined information security policy based on a transmission operation performed by a first user, and a transmission process for transmitting transmitted data that is not determined to violate the information security policy in the determination process based on an approval operation performed by a second user different from the first user. Effect of the Invention

[0010] According to the present disclosure, information can be shared while ensuring information security. [Brief description of the drawings]

[0011] [Figure 1] 1 is a block diagram showing an example of an overall configuration of an information sharing system. [Diagram 2] 2 is a block diagram showing an example of a functional configuration of an information sharing server. FIG. [Diagram 3] 13 is a flowchart showing a processing operation of the information sharing system. [Figure 4] 13 is a flowchart showing a processing operation of the information sharing system. [Diagram 5] FIG. 13 is a block diagram showing an example of an overall configuration of an information sharing system according to another embodiment. [Figure 6] FIG. 1 is a schematic block diagram showing the configuration of a computer according to the present disclosure. [Figure 7] 1 is a block diagram showing an overview of an information sharing device according to the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings.

[0013] Fig. 1 is a diagram showing an example of an overall configuration of an information sharing system, in which the information sharing system is applied to a first location and a second location.

[0014] The information sharing system includes, for example, an information sharing server 1 and one or more user terminals 2. Fig. 1 shows an example in which the information sharing server 1 and the user terminal 2 are connected to each other via an intra-site network (for example, a local area network) at a first base and a second base. The information sharing server 1 at the first base and the information sharing server 1 at the second base are communicatively connected to each other via a communication network 3. The communication network 3 is, for example, the Internet, a wide area network, a local area network, or the like.

[0015] The information sharing server 1 is configured with one or more information processing devices. The user terminal 2 is, for example, an information processing device used by a user. The user terminal 2 is, for example, a personal computer, a tablet terminal, a smartphone, or a wearable terminal. The number of user terminals 2 connected to the information sharing server 1 may be any number.

[0016] Fig. 2 is a block diagram showing an example of the functional configuration of an information sharing server. The information sharing server 1 shown in Fig. 2 includes a setting operation reception unit 101, an information security policy storage unit 102, a transmission operation reception unit 103, an information security policy judgment unit 104, a data transmission unit 105, a judgment result presentation unit 106, an approval operation reception unit 107, and a data reception unit 108. Note that the arrows in Fig. 2 simply indicate the direction of signal (data) flow, but do not exclude bidirectionality. This also applies to other block diagrams.

[0017] In this embodiment, the information sharing system is configured to be available to users who have user accounts registered in the information sharing system. Each user account registered in the information sharing system is given a user authority. Each user account is assigned a function that can be executed in the information sharing system according to the type of user authority.

[0018] In this embodiment, at least a standard authority, an administrative authority, and an approval authority are provided as user authorities.

[0019] A user account to which standard authority has been granted can use the function of sending and receiving data in the information sharing system. Hereinafter, a user who has a user account to which standard authority has been granted is also referred to as a standard authority user.

[0020] A user account that has been granted administrative authority can use the function of sending and receiving data in the information sharing system. In addition, a user account that has been granted administrative authority can use the function of setting new settings and updating information security policies in the information sharing system. Hereinafter, a user who has a user account that has been granted administrative authority is also referred to as an administrative authority user.

[0021] A user account that has been granted approval authority can use the function of sending and receiving data in the information sharing system. In addition, a user account that has been granted approval authority can use the function of making a final decision on whether to approve or not approve the transmission of data that has not been determined to violate the information security policy in the information sharing system. Hereinafter, a user who has a user account that has been granted approval authority is also referred to as an approval authority user.

[0022] 2 are user terminals 2 operated by a standard authority user. The user terminal 2b is a user terminal 2 operated by a management authority user. The user terminal 2c is a user terminal 2 operated by an approval authority user.

[0023] The user terminal 2b shown in Fig. 2 is used, for example, by an administrator of an information security policy at a base. The administrator uses the user terminal 2b to log in to the information sharing system with a user account to which administrative authority has been granted. Then, the administrator uses the user terminal 2b to perform a setting operation to newly set or update an information security policy at the base. Then, the user terminal 2b outputs information security policy data in which the information security policy to be set is specified, together with setting instruction data instructing the setting, to the setting operation receiving unit 101 of the information sharing server 1.

[0024] When the setting operation receiving unit 101 receives a setting operation from the user terminal 2b (that is, when it receives information security policy data and setting instruction data), it causes the information security policy storage unit 102 to store the output information security policy data.

[0025] The information security policy storage unit 102 stores information security policy data. For example, the information security policy storage unit 102 stores the latest information security policy data received by the setting operation receiving unit 101 and past information security policy data in such a manner that each of the data can be identified. The information security policy storage unit 102 is realized by, for example, a magnetic disk or the like.

[0026] The user terminal 2a shown in Fig. 2 is used, for example, by a sender who wishes to send data to another base. The sender uses the user terminal 2a to log in to the information sharing system with a user account that has been granted standard authority. The sender then uses the user terminal 2a to perform a sending operation to send the transmission data. Then, the user terminal 2b outputs the transmission data to the sending operation receiving unit 103. The transmission data includes, for example, destination information indicating the destination such as an email address, message information including a character string, an attachment, and the like.

[0027] In this embodiment, when a sender sends data via the information sharing server 1, the information sharing system can accept, as a destination, destination information of an account registered in the information sharing system at the same or another base. However, the information sharing system may be capable of accepting, as a destination, a destination that is not registered in the information sharing system. In this case, the information sharing server 1 transmits the data (or a URL from which the data can be downloaded) directly to the destination, rather than to the data receiving unit 108 of the information sharing server 1 installed at the other base.

[0028] When the transmission operation receiving unit 103 receives a transmission operation from the user terminal 2a (i.e., when it receives transmission data), it outputs the output transmission data to the information security policy determination unit 104. Also, for example, the transmission operation receiving unit 103 temporarily stores the output transmission data in a transmission data storage unit (not shown). The transmission data stored in the transmission data storage unit is erased after the data transmission unit 105 outputs the transmission data or after the approval operation receiving unit 107 receives a non-approval operation.

[0029] The information security policy determination unit 104 determines, based on the latest information security policy data stored in the information security policy storage unit 102, whether the transmission data accepted by the transmission operation acceptance unit 103 violates the information security policy.

[0030] If the information security policy determination unit 104 determines that the information security policy is not violated, it outputs the transmission data to the data transmission unit 105. This corresponds to the case where the information security policy determination unit 104 determines Yes in step S202 shown in FIG.

[0031] When the information security policy determination unit 104 does not determine that the information security policy is not violated, it outputs data indicating the determination result to the determination result presentation unit 106. This corresponds to the case where the information security policy determination unit 104 determines "No" in step S202 shown in Fig. 4. At this time, the information security policy determination unit 104 may notify the sender (for example, the user terminal 2a shown in Fig. 2) that approval by the approver is awaited and the determination result.

[0032] Cases where the information security policy determination unit 104 has not determined that there is no violation of the information security policy include, in addition to cases where it has determined that there is a violation of the information security policy, cases where there is a possibility of a violation of the information security policy (or the possibility is equal to or exceeds a predetermined threshold), and cases where it cannot be determined whether there is a violation of the information security policy.

[0033] The information security policy includes, for example, a restriction that highly confidential data is not transmitted to the outside, and a restriction that approval by an approver is required when highly confidential data is transmitted to the outside.

[0034] Whether or not information is highly confidential is determined, for example, by whether it contains a character string indicating a specific keyword, a character string reminiscent of a specific keyword, or a character string similar to a specific keyword. Also, whether or not information is highly confidential is determined, for example, by whether or not it contains a character string or information in a specific format. Examples of specific keywords include information indicating the product number or performance of a new product, and information indicating measuring equipment used in research and study. Examples of specific formats include the format of data measured by measuring equipment.

[0035] In this embodiment, a case where "KX3" indicating the optical measuring instrument used in the survey / research is set as the specific keyword will be described. Also, a case where, for example, "XXXX-HHMMSS" (XXXX includes location information indicating the measurement location, and HHMMSS includes time information indicating the measurement time) is set as the specific format will be described.

[0036] The information security policy determination unit 104 determines whether the message information or attached file of the transmission data contains a character string that matches the keyword "KX3" or the format "XXXX-YYMMDD". If a matching character string is contained, the information security policy determination unit 104 determines that the information security policy is violated.

[0037] In addition, the information security policy determination unit 104 determines whether or not the message information or attached file of the transmission data contains information that is reminiscent of or similar to the keyword "KX3." For example, if "K" in the keyword "KX3" is used as an abbreviation for "optical," and if the character strings "optical X3" or "HX3" ("H" is a character that can be used as an abbreviation for optical) are included, the information security policy determination unit 104 determines that there is a possibility of violating the information security policy.

[0038] Also, for example, the information security policy determination unit 104 determines whether or not the message information or attached file of the transmission data contains information corresponding to the format "XXXX-HHMMSS." For example, even if it does not match a specific format, when the location information (information indicating latitude and longitude or information indicating an address) and time information are described within a predetermined number of characters, the information security policy determination unit 104 determines that there is a possibility of violating the information security policy.

[0039] Various methods can be applied to determine the possibility of violating the information security policy. For example, the administrator registers in advance in the information security policy data a character string that recalls a specific keyword or information, or a similar character string, in addition to a specific keyword. Then, the information security policy determination unit 104 determines that there is a possibility of violating the information security policy when a character string that matches the above is included.

[0040] In addition, a natural language processing technique may be applied as a method for determining whether a character string that evokes a specific keyword or information or a similar character string is included. For example, the information security policy determination unit 104 calculates the similarity of each word or phrase to a specific keyword using a word vector model that represents words and phrases in a vector space. Then, when the similarity is equal to or greater than a predetermined threshold, the information security policy determination unit 104 determines that there is a possibility of a violation of the information security policy.

[0041] For example, when the judgment process ends with an error, the information security policy judgment unit 104 does not judge that the information security policy is not violated because it cannot judge whether the information security policy is violated. This corresponds to the part where the information security policy judgment unit 104 judges No in step S202 shown in FIG. 4.

[0042] The information sharing system may count and store the number of times that the information security policy determination unit 104 has determined that an information security policy has been violated (or there is a possibility of violating) for each user. The information sharing system may also include a statistical information output unit (not shown) that outputs the number of times counted for each user as statistical information to a display unit or an external device in response to an operation by an administrator or an approver.

[0043] The data transmitting unit 105 transmits the transmission data that the information security policy determining unit 104 has determined not to violate the information security policy based on the destination information. The data transmitting unit 105 also transmits the transmission data for which the approval operation receiving unit 107 has accepted the approval operation based on the destination information. The transmission data transmitted by the data transmitting unit 105 is received, for example, by the data receiving unit 108 of the information sharing server 1 installed at another base identified by the destination information.

[0044] The judgment result presentation unit 106 presents data indicating the judgment result output from the information security policy judgment unit 104 to an approver who has a user account to which approval authority has been granted.

[0045] For example, the judgment result presenting unit 106 notifies the preregistered notification destination (e.g., an email address or a notification function of a predetermined application) of the approval authority user of the judgment result and prompts the user to perform an approval or disapproval operation. The approver performs an operation to confirm the notification, for example, using the user terminal 2d. Then, the user terminal 2d displays on the display unit a notification prompting the user to perform an approval or disapproval operation along with the judgment result.

[0046] Information indicating the judgment result may be described in the body of the received e-mail or the like, or may be displayed by accessing the information sharing system from a URL described in the received e-mail or the like. That is, as the presentation of the judgment result, information capable of forming a screen indicating the judgment result (e.g., an e-mail in text or HTML format) may be transmitted, or information for displaying the screen indicating the judgment result (e.g., a URL for displaying the screen) may be transmitted. Also, the screen indicating the judgment result may display a button in a graphical user interface (GUI) capable of accepting an approval operation and a button in a GUI capable of accepting a non-approval operation. Through such processing, the judgment result presentation unit 106 presents the judgment result to the approver.

[0047] Also, for example, information indicating the judgment result may be presented to the approver by displaying a pop-up containing the information and a notification prompting the approver to perform an operation on the display unit of a user terminal 2 used by the approver (i.e., a user terminal 2 that is logged in to the information sharing system as an approval-authorized user).

[0048] When a user with approval authority performs a transmission operation of data that is determined to violate (or may violate) the information security policy, the determination result presentation unit 106 may present the determination result to the approval authority user in question, or may present the determination result to other approval authority users.

[0049] The presented judgment result includes, for example, keywords and the like defined in the information security policy that the information security policy judgment unit 104 judges to match (or be similar to) and a character string included in the transmission data. The presented judgment result may also include, for example, the number of times and date and time when the sender was judged to possibly violate the information security policy in the past, and the final decision result by the approver (i.e., whether it was decided to approve or not approve), in addition to information indicating the sender and the destination.

[0050] The presented judgment result may be displayed in different modes depending on the history information when it was judged in the past that there was a possibility of violating the information security policy. For example, if the same or another sender has been judged in the past to have a possibility of violating the information security policy based on the same judgment result (or if the approver's final decision is not to approve), a display indicating this may be additionally displayed, or the background color or text color of the presented screen may be different from the standard color. With such a configuration, the time required for the approver to decide whether to approve or not can be shortened.

[0051] 2 is used, for example, by an approver who makes a final decision on whether to approve or disapprove data transmission at a base. The approver uses the user terminal 2c to log into the information sharing system with a user account that has been granted approval authority. Then, the approver uses the user terminal 2c to perform an approval operation to approve transmission or a disapproval operation to disapprove transmission of transmission data that has not been determined to not violate the information security policy.

[0052] For example, the approver refers to the judgment result presented by the judgment result presenting unit 106, and if it is determined that there is no problem, performs an approval operation using the user terminal 2c. Then, the user terminal 2c outputs approval operation data indicating that the approval operation has been performed to the approval operation receiving unit 107.

[0053] Furthermore, the approver refers to the judgment result presented by the judgment result presenting unit 106, and if it is determined that there is a problem, performs a non-approved operation using the user terminal 2c. Then, the user terminal 2c outputs non-approved operation data indicating that a non-approved operation has been performed to the approval operation receiving unit 107.

[0054] The information sharing system may count and store the number of times a final decision of approval or disapproval has been made for each approver (or for each combination of sender and approver). The information sharing system may also include a statistical information output unit (not shown) that outputs the counted number of times for each approver (or for each combination of sender and approver) as statistical information to a display unit or an external device in response to an operation by an administrator or an approver. The information sharing system may also determine whether there is a significant difference in the statistical information every predetermined period (for example, several hours, several days, or several weeks), and if it determines that there is a significant difference, notify a predetermined notification destination of that fact.

[0055] When the approval operation receiving unit 107 receives the approval operation from the user terminal 2c (that is, when it receives the approval operation data), it outputs the approval operation data to the data transmitting unit 105.

[0056] When the approval operation receiving unit 107 receives a non-approval operation from the user terminal 2c (i.e., when it receives non-approval operation data), it erases the transmission data stored in the transmission data storage unit. Also, the approval operation receiving unit 107 notifies the sender (for example, the user terminal 2a shown in FIG. 2) that the transmission data was not approved by the approver.

[0057] The data receiving unit 108 receives, for example, transmission data transmitted from the information sharing server 1 installed at another base. For example, the data receiving unit 108 of the information sharing server 1 installed at the second base receives transmission data transmitted from the data transmitting unit 105 of the information sharing server 1 installed at the first base.

[0058] The data receiving unit 108 stores the received data in a received data storage unit (not shown). The data receiving unit 108 also issues a password required to download the received data. The data receiving unit 108 then notifies the destination, such as an email address, specified by the destination information that the data has been received, along with the issued password.

[0059] 2 is used, for example, by a receiver who receives data transmitted from another location. The receiver uses the user terminal 2d to log in to the information sharing system with his / her own user account. The receiver then uses the user terminal 2d to perform a download operation to execute a download by inputting the notified password. The user terminal 2d then outputs the password to the data receiving unit 108 together with download operation data indicating that the download operation has been performed.

[0060] When the data receiving unit 108 receives a download operation from the user terminal 2d (i.e., when it receives a password together with the download operation data), it determines whether the password is correct. If the password is correct, the data receiving unit 108 outputs the received data to the user terminal 2d.

[0061] Next, the operation of the information sharing system will be described with reference to the flowcharts of Figures 3 and 4.

[0062] FIG. 3 shows an example of the processing operation of the information sharing system regarding new setting or updated setting of an information security policy.

[0063] For example, an administrator of an information security policy at a base uses the user terminal 2b to log in to the information sharing system with a user account that has been granted administrative authority. Then, the administrator uses the user terminal 2b to perform a setting operation to newly set or update an information security policy at the base. Then, the user terminal 2b outputs information security policy data that specifies the information security policy to be set, together with setting instruction data that instructs the setting, to the setting operation receiving unit 101 of the information sharing server 1.

[0064] The setting operation receiving unit 101 receives a setting operation from the user terminal 2b (step S101). That is, the setting operation receiving unit 101 receives information security policy data and setting instruction data.

[0065] Next, the setting operation receiving unit 101 stores the output information security policy data in the information security policy storage unit 102 as the latest information security policy (step S102).

[0066] The information security policy set in the information sharing system may be different for each base, or may be commonly applied to all or some of the bases.

[0067] In this embodiment, data transmitted by each user via the information sharing system is transmitted after it is determined whether or not it violates the information security policy set in the information sharing system. The information security policy set in the information sharing system is centrally managed by an administrator. Therefore, each user does not need to perform setting operations every time the information security policy is revised, and incidents caused by failure to update the information security policy data can be prevented.

[0068] 4 shows an example of the processing operation of the information sharing system for data transmission. For example, a sender who wishes to transmit data to another base uses the user terminal 2a to log in to the information sharing system with a user account that has been granted standard authority. The sender then uses the user terminal 2a to perform a transmission operation to transmit the transmission data. The user terminal 2b then outputs the transmission data to the transmission operation receiving unit 103 of the information sharing server 1.

[0069] The transmission operation receiving unit 103 receives a transmission operation from the user terminal 2a (step S201). That is, the transmission operation receiving unit 103 receives transmission data. Then, the transmission operation receiving unit 103 outputs the transmission data to the information security policy determination unit 104. Also, for example, the transmission operation receiving unit 103 temporarily stores the transmission data in a transmission data storage unit (not shown).

[0070] Next, the information security policy determination unit 104 determines whether the transmission data accepted by the transmission operation acceptance unit 103 violates the information security policy based on the latest information security policy data stored in the information security policy memory unit 102 (step S202).

[0071] If it is determined that the information security policy is not violated (Yes in step S202), the information security policy determination unit 104 outputs the transmission data to the data transmission unit 105. Then, the data transmission unit 105 transmits the transmission data based on the destination information (step S206). Then, the process ends.

[0072] When it is determined that the information security policy is not violated (No in step S202), the information security policy determination unit 104 outputs data indicating the determination result to the determination result presentation unit 106. In addition, for example, the information security policy determination unit 104 notifies the sender (for example, the user terminal 2a shown in FIG. 2) that approval by the approver is awaited and the determination result.

[0073] Next, the determination result presenting unit 106 presents data indicating the determination result output from the information security policy determination unit 104 to the approval authority user (step S203).

[0074] Next, when the approval operation receiving unit 107 receives a non-approval operation from the approval authority user (Yes in step S204), it erases the transmission data stored in the transmission data storage unit (step S207). In addition, the approval operation receiving unit 107 notifies the sender (for example, the user terminal 2a shown in FIG. 2) that the transmission data was not approved by the approval authority user.

[0075] If the approval operation receiving unit 107 does not accept the non-approval operation (No in step S204), but accepts the non-approval operation (Yes in step S205), the approval operation receiving unit 107 outputs the approval operation data to the data transmitting unit 105. Then, the data transmitting unit 105 transmits the transmission data based on the destination information (step S206). Then, the process ends.

[0076] FIG. 4 shows an example in which the processes of steps S204 and S205 are looped until either a non-approval operation or an approval operation is accepted after the data indicating the judgment result is presented to the approval authority user (step S203). However, if neither a non-approval operation nor an approval operation is accepted even after a predetermined period of time has elapsed after the data indicating the judgment result is presented to the approval authority user, additional processing may be executed. For example, as additional processing, the judgment result may be presented to an approval authority user different from the user in step 203, and a notification may be sent to prompt the approval operation or non-approval operation. Also, for example, in step S203, a notification may be sent to a first notification destination (e.g., an email address, etc.) of the approval authority user, and a notification may be sent to a second notification destination (e.g., an SNS: short message service, etc.) of the approval authority user as additional processing.

[0077] In this embodiment, if the information security policy determination unit 104 determines that the information security policy is not violated, the data transmission unit 105 transmits the transmission data. On the other hand, if the information security policy determination unit 104 does not determine that the information security policy is not violated, the data transmission unit 105 transmits the transmission data on the condition that an approval operation is performed by an approval authority user. In addition, the data transmission unit 105 does not transmit the transmission data when a non-approval operation is performed by an approval authority user. With this configuration, it is possible to prevent a transmission process that violates the information security policy due to the intentional or negligent act of one user. Therefore, information security can be ensured and information can be shared.

[0078] In addition, in this embodiment, when the information security policy determination unit 104 does not determine that the information security policy is not violated, the determination result presentation unit 106 presents the determination result to the user with approval authority. With this configuration, the user with approval authority can be appropriately prompted to decide whether to approve or not.

[0079] Next, an information sharing system according to another embodiment will be described with reference to Fig. 5. Fig. 5 is a block diagram showing an example of the overall configuration of an information sharing system according to another embodiment.

[0080] In another aspect of the information sharing system shown in Fig. 5, one or more user terminals 2 are installed at a first location, and one or more user terminals 2 are installed at a second location. In the information sharing system shown in Fig. 5, the information sharing server 1 is communicatively connected to one or more user terminals 2 at the first location and the second location via a communication network 3. The communication network 3 is, for example, a communication network such as the Internet, a wide area network, or a local area network.

[0081] 5, when it is determined that the information security policy is not violated (Yes in step S202) or when an approval operation by a user with approval authority is received (Yes in step S205), the information sharing server 1 issues a password required to download the data. Then, the information sharing server 1 notifies the destination, such as an email address specified by the destination information, via the communication network 3 that the data has been received, together with notifying the issued password.

[0082] The recipient at the other location who has received the notification by e-mail or the like uses the user terminal 2 to log in to the information sharing system with his / her own user account via the communication network 3. The recipient then performs a download operation to execute a download by inputting the notified password using the user terminal 2. The recipient's user terminal 2 then outputs the password to the information sharing server 1 together with download operation data indicating that the download operation has been performed.

[0083] When the information sharing server 1 receives a download operation from the recipient's user terminal 2 (i.e., receives a password along with download operation data), it determines whether the password is correct. If the password is correct, the information sharing server 1 transmits the data to the recipient's user terminal 2 via the communication network 3.

[0084] 6 is a schematic block diagram showing the configuration of a computer according to the present disclosure. A CPU 1000 executes processing according to an information sharing program stored in a storage device 1001, thereby realizing each function of the information sharing server 1 in the above embodiment.

[0085] That is, the CPU 1000 realizes the functions of the setting operation receiving unit 101, the transmission operation receiving unit 103, the information security policy determination unit 104, the data transmission unit 105, the determination result presentation unit 106, the approval operation receiving unit 107, and the data receiving unit 108 shown in FIG. 2.

[0086] The storage device 1001 is, for example, a non-transitory computer readable medium. The non-transitory computer readable medium includes various types of tangible storage media. Specific examples of the non-transitory computer readable medium include semiconductor memory (for example, mask ROM, PROM (Programmable ROM), EPROM (Erasable PROM), and flash ROM).

[0087] The memory 1002 is realized by, for example, a RAM (Random Access Memory), and is a storage means for temporarily storing data when the CPU 1000 executes processing.

[0088] Next, an outline of the present disclosure will be described. Fig. 7 is a block diagram showing an outline of an information sharing device according to the present disclosure. The information sharing device 10 (realized by the information sharing server 1 in the embodiment) shown in Fig. 7 includes a determination means 11 (realized by the transmission operation receiving unit 103 and the information security policy determining unit 104 in the embodiment) that determines whether transmission data violates a predetermined information security policy based on a transmission operation performed by a first user (corresponding to a standard authority user, a management authority user, or an approval authority user in the embodiment), and a transmission means 12 (realized by the approval operation receiving unit 107 and the data transmission unit 105 in the embodiment) that transmits transmission data that is not determined to violate the information security policy by the determination means 11 based on an approval operation performed by a second user (corresponding to an approval authority user in the embodiment) different from the first user.

[0089] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.

[0090] (Supplementary Note 1) An information sharing device characterized by comprising a determination means for determining whether transmitted data violates a predetermined information security policy based on a transmission operation performed by a first user, and a transmission means for transmitting transmitted data that is not determined by the determination means to not violate the information security policy based on an approval operation performed by a second user different from the first user.

[0091] (Appendix 2) An information sharing device as described in Appendix 1, comprising a presentation means (in an embodiment, realized by a judgment result presentation unit 106) that presents the judgment result by the judgment means to the second user based on the fact that the judgment means has not determined that there is no violation of the information security policy.

[0092] (Supplementary Note 3) The information sharing device according to Supplementary Note 2, wherein the presentation means is capable of presenting a determination result in different modes depending on history information of the determination by the determination means.

[0093] (Appendix 4) An information sharing device as described in Appendix 1 or Appendix 2, comprising a setting means (in the embodiment, realized by a setting operation receiving unit 101) for storing data indicating the information security policy in a storage means based on a setting operation performed by a third user (in the embodiment, corresponding to an administrative authority user), and the determination means determines whether the transmitted data violates the information security policy based on the data indicating the information security policy stored in the storage means (in the embodiment, realized by an information security policy storage unit 102).

[0094] (Appendix 5) An information sharing device as described in Appendix 1 or Appendix 2, comprising an output means (in an embodiment, realized by a statistical information output unit) capable of outputting statistical information counting the number of times that the judgment means has not judged that the information security policy has not been violated for each first user.

[0095] (Appendix 6) An information sharing system characterized in that an information sharing device described in Appendix 1 or Appendix 2 and a user terminal used by a user are arranged at each base, and transmission data transmitted from a first user terminal at a first base to a second user terminal at a second base is determined by the determination means of the first information sharing device at the first base, and then transmitted by the transmission means to a second information sharing device at the second base, and then transmitted from the second information sharing device to the second user terminal.

[0096] (Supplementary Note 7) The information sharing system according to Supplementary Note 6, wherein the presentation means is capable of presenting the judgment result in different modes depending on history information of the judgment by the judgment means.

[0097] (Appendix 8) An information sharing system as described in Appendix 6 or Appendix 7, further comprising a setting means for storing data indicating the information security policy in a storage means based on a setting operation performed by a third user, and wherein the determination means determines whether the transmitted data violates the information security policy based on the data indicating the information security policy stored in the storage means.

[0098] (Appendix 9) An information sharing system as described in Appendix 6 or Appendix 7, comprising an output means capable of outputting statistical information counting the number of times that the judgment means did not judge that the first user violated the information security policy for each first user.

[0099] (Appendix 10) An information sharing method characterized in that a computer determines whether transmission data violates a predetermined information security policy based on a transmission operation performed by a first user, and transmits transmission data that is not determined to violate the information security policy based on an approval operation performed by a second user different from the first user.

[0100] (Supplementary Note 11) The information sharing method according to Supplementary Note 10, wherein the computer presents a determination result to the second user based on the fact that the information security policy has not been violated.

[0101] (Appendix 12) The information sharing method according to appendix 11, in which the computer presents the judgment result in different manners depending on the judgment history information.

[0102] (Appendix 13) An information sharing method as described in Appendix 10 or Appendix 11, in which a computer stores data indicating the information security policy in a storage means based on a setting operation performed by a third user, and determines whether transmitted data violates the information security policy based on the data indicating the information security policy stored in the storage means.

[0103] (Supplementary Note 14) The information sharing method according to Supplementary Note 10 or 11, wherein a computer outputs statistical information counting the number of times that the information security policy was not determined to be violated for each of the first users.

[0104] (Appendix 15) An information sharing program for causing a computer to execute a determination process for determining whether transmission data violates a predetermined information security policy, based on a transmission operation performed by a first user, and a transmission process for transmitting transmission data that is not determined to violate the information security policy in the determination process, based on an approval operation performed by a second user different from the first user.

[0105] (Appendix 16) An information sharing program as described in Appendix 15, which causes a computer to execute a presentation process to present the judgment result of the judgment process to the second user based on the fact that the judgment process did not determine that there was no violation of the information security policy.

[0106] (Supplementary Note 17) The information sharing program according to Supplementary Note 16, which causes a computer to present a judgment result in a presentation process in different manners depending on history information of the judgment in the judgment process.

[0107] (Appendix 18) An information sharing program as described in Appendix 15 or Appendix 16, which causes a computer to execute a setting process to store data indicating the information security policy in a storage means based on a setting operation performed by a third user, and in the judgment process, causes the computer to determine whether the transmitted data violates the information security policy based on the data indicating the information security policy stored in the storage means.

[0108] (Appendix 19) An information sharing program as described in Appendix 15 or Appendix 16, which causes a computer to execute an output process to output statistical information counting the number of times that the judgment process did not determine that the information security policy was not violated for each of the first users.

[0109] Although the present disclosure has been described above with reference to the embodiments, the present disclosure is not limited to the above embodiments. Various modifications that can be understood by a person skilled in the art can be made to the configuration and details of the present disclosure within the scope of the present disclosure. [Industrial Applicability]

[0110] The present disclosure is preferably applicable to an information sharing system that transmits and receives information by electronic data for the purpose of sharing information with other organizations, other departments, and other locations. [Explanation of symbols]

[0111] 1 Information sharing server 2, 2a, 2b, 2c, 2d User terminal 3. Communication Network 10 Information sharing device 11 Judgment means 12 Transmission Method 101 Setting operation reception section 102 Information Security Policy Storage Unit 103 Transmission operation reception section 104 Information Security Policy Judgment Department 105 Data transmission unit 106 Judgment result presentation section 107 Approval Operation Reception Department 108 Data receiving unit 1000 CPU 1001 Storage device 1002 Memory

Claims

1. a determination means for determining whether the transmission data violates a predetermined information security policy based on a transmission operation performed by a first user; a transmitting means for transmitting transmission data that is not determined to violate the information security policy by the determining means based on an approval operation by a second user different from the first user.

1. An information sharing device comprising:

2. a presentation unit that presents a result of the determination by the determination unit to the second user based on the determination unit not having determined that there is no violation of the information security policy. The information sharing device according to claim 1.

3. The presenting means is capable of presenting the judgment result in different forms according to history information of the judgment by the judging means. The information sharing device according to claim 2.

4. a setting unit that stores data indicating the information security policy in a storage unit based on a setting operation performed by a third user; The determining means determines whether the transmission data violates the information security policy based on the data indicating the information security policy stored in the storage means.

3. The information sharing device according to claim 1 or 2.

5. and an output unit capable of outputting statistical information indicating the number of times that the first user was not determined to be in violation of the information security policy by the determination unit for each first user.

3. The information sharing device according to claim 1 or 2.

6. The information sharing device according to claim 1 or 2 and a user terminal used by a user are arranged at each base, The transmission data transmitted from the first user terminal at the first base to the second user terminal at the second base is determined by the determination means of the first information sharing device at the first base, and then transmitted by the transmission means to the second information sharing device at the second base, and then transmitted from the second information sharing device to the second user terminal. An information sharing system comprising:

7. The computer determining whether the transmission data violates a predetermined information security policy based on a transmission operation performed by the first user; Transmitting transmission data that is not determined to violate the information security policy based on an approval operation performed by a second user different from the first user.

13. An information sharing method comprising:

8. On the computer, a determination process for determining whether the transmission data violates a predetermined information security policy based on a transmission operation performed by a first user; a transmission process for transmitting transmission data that is not determined to violate the information security policy in the determination process based on an approval operation performed by a second user different from the first user; An information sharing program to carry out the above.

Images