Document processing system and document processing program

Abstract

To provide a document processing system and a document processing program capable of executing a workflow other than a workflow that is executable at a level of the security policy of an environment in which the document processing system operates, without lowering the level of security policy of the environment in which the document processing system operates.SOLUTION: A document processing system that executes a workflow in which, when a document is input as electronic data to a specific input destination, at least one process is executed on the document and an execution result is output to a specific output destination, sets a security policy level of a job for a specific in-workflow process without lowering the security policy level of an environment in which the document processing system operates, to execute the job (S123).SELECTED DRAWING: Figure 6

Description

[Technical field]

[0001] The present invention relates to a document processing system and a document processing program that execute a workflow for executing at least one process on a document when the document is input to a specific input destination and outputting the execution result to a specific output destination. [Background technology]

[0002] Conventionally, there is known a document processing system that executes a workflow in accordance with a security policy (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2012-203724 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, the document processing system described in Patent Document 1 has a problem in that it is not possible to execute workflows other than those executable at the level of the security policy of the environment in which the document processing system operates.

[0005] Therefore, an object of the present invention is to provide a document processing system and a document processing program that can execute workflows other than workflows that can be executed at the level of the security policy of the environment in which the document processing system operates, without lowering the level of the security policy of the environment in which the document processing system operates. [Means for solving the problem]

[0006] The document processing system of the present invention is a document processing system that executes a workflow in which, when a document is input as electronic data to a specific input destination, it performs at least one process on the document and outputs the execution result to a specific output destination, and is characterized in that it executes the job by setting the security policy level of a specific processing job in the workflow without lowering the security policy level of the environment in which the document processing system operates.

[0007] With this configuration, the document processing system of the present invention sets the security policy level of a processing job within a workflow and executes the job without lowering the security policy level of the environment in which the document processing system operates, so that it is possible to execute workflows other than those that can be executed at the security policy level of the environment in which the document processing system operates, without lowering the security policy level of the environment in which the document processing system operates.

[0008] The document processing system of the present invention may, when the current level of the security policy of the environment is a first level or higher, execute the job by lowering the level of the security policy of the job to a second level lower than the first level without lowering the level of the security policy of the environment.

[0009] With this configuration, when the current level of the security policy of the environment in which the document processing system operates is a first level or higher, the document processing system of the present invention lowers the security policy level of the processing job within the workflow to a second level lower than the first level and executes the job without lowering the security policy level of the environment in which the document processing system operates, thereby making it possible to execute workflows other than workflows that can be executed at the security policy level of the environment in which the document processing system operates without lowering the security policy level of the environment in which the document processing system operates.

[0010] When an error occurs during the execution of a job, the document processing system of the present invention, when instructed by a user to lower the level of the security policy of the job in which the error occurred by one level below the current level of the security policy of the environment and re-execute the job, may lower the level of the security policy of the job in which the error occurred by one level below the current level of the security policy of the environment without lowering the level of the security policy of the environment, and may re-execute the job.

[0011] With this configuration, when an error occurs in the execution of a processing job within a workflow, the document processing system of the present invention lowers the security policy level of the job where the error occurred by one level from the current level of the security policy of the environment in which the document processing system operates, and when instructed by a user to re-execute the job, it lowers the security policy level of the job where the error occurred by one level from the current level of the security policy of the environment in which the document processing system operates, without lowering the security policy level of the environment in which the document processing system operates, and re-executes the job.Therefore, it is possible to execute workflows other than workflows that can be executed at the security policy level of the environment in which the document processing system operates, without lowering the security policy level of the environment in which the document processing system operates.

[0012] In the document processing system of the present invention, when an error occurs during the execution of a job with a lowered security policy level, when a user instructs the system to lower the security policy level of the job in which the error occurred by one level from the previous level of the security policy of the job and re-execute the job, the system may lower the security policy level of the job in which the error occurred by one level from the previous level of the security policy of the job without lowering the security policy level of the environment and re-execute the job.

[0013] With this configuration, when an error occurs during the execution of a job with a lowered security policy level, the document processing system of the present invention lowers the security policy level of the job where the error occurred by one level from the previous level of the security policy of the job, and when instructed by a user to re-execute the job, the document processing system lowers the security policy level of the job where the error occurred by one level from the previous level of the security policy of the job, without lowering the security policy level of the environment in which the document processing system operates, and re-executes the job.Therefore, it is possible to execute workflows other than those that can be executed at the security policy level of the environment in which the document processing system operates, without lowering the security policy level of the environment in which the document processing system operates.

[0014] The document processing system of the present invention may execute the job by setting the security policy level of the job to the lowest level without lowering the security policy level of the environment.

[0015] With this configuration, the document processing system of the present invention sets the security policy level of a processing job within a workflow to the lowest level and executes the job without lowering the security policy level of the environment in which the document processing system operates, so that workflows other than those executable at the security policy level of the environment in which the document processing system operates can be executed without lowering the security policy level of the environment in which the document processing system operates.

[0016] The document processing program of the present invention is characterized in that it sets the security policy level of a specific processing job in the workflow, and causes a computer to execute the operation of executing this job, without lowering the security policy level of the environment in which a document processing system operates, which executes a workflow in which, when a document is input as electronic data to a specific input destination, the document is processed by performing at least one process on the document and outputting the execution result to a specific output destination.

[0017] With this configuration, a computer executing the document processing program of the present invention sets the security policy level of a processing job within a workflow and executes the job without lowering the security policy level of the environment in which the computer executing the document processing program operates, so that a workflow other than a workflow that can be executed at the security policy level of the environment in which the computer executing the document processing program operates can be executed without lowering the security policy level of the environment in which the computer executing the document processing program operates. Effect of the Invention

[0018] The document processing system and document processing program of the present invention can execute workflows other than those executable at the level of the security policy of the environment in which the document processing system operates, without lowering the level of the security policy of the environment in which the document processing system operates. [Brief description of the drawings]

[0019] [Figure 1] FIG. 1 is a block diagram of a document processing system according to an embodiment of the present invention when configured with one computer. [Diagram 2] FIG. 2 is a diagram illustrating an example of the workflow shown in FIG. [Diagram 3] 2 is a diagram showing an example of a list of security policy levels that can be set in pre-reduction lower limit information and post-reduction lower limit information shown in FIG. 1. FIG. [Figure 4] FIG. 2 is a diagram showing an example of password list information shown in FIG. [Diagram 5] 4 is a sequence diagram of the operation of the document processing system shown in FIG. 1 when a workflow is executed. [Figure 6] 2 is a flowchart illustrating an example of an operation of a script execution unit illustrated in FIG. 1. [Figure 7] 2 is a flowchart of a part of the operation of the script execution unit shown in FIG. 1 when an example of a target workflow is executed. [Figure 8] 7 is a flowchart of a part of the operation of the script execution unit shown in FIG. 1, which is an example different from the example shown in FIG. 6. [Figure 9] 9 is a flowchart of an operation subsequent to the operation shown in FIG. 8. [Figure 10] 10 is a flowchart of an example of the operation of the script execution unit shown in FIG. 1, which is different from the examples shown in FIG. 6 and FIGS. 8 to 9. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0020] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0021] First, the configuration of a document processing system according to an embodiment of the present invention will be described.

[0022] FIG. 1 is a block diagram of a document processing system 10 according to the present embodiment, which is configured using one computer.

[0023] As shown in FIG. 1, the document processing system 10 includes an operation unit 11 which is an operating device such as a keyboard or mouse through which various operations are input, a display unit 12 which is a display device such as an LCD (Liquid Crystal Display) that displays various information, a communication unit 13 which is a communication device that communicates with external devices via a network such as a LAN (Local Area Network) or the Internet, or directly by wire or wirelessly without using a network, a memory unit 14 which is a non-volatile memory device such as a semiconductor memory or an HDD (Hard Disk Drive) that stores various information, and a control unit 15 which controls the entire document processing system 10.

[0024] The document processing system 10 executes a workflow in which, when a document is input as electronic data to a specific input destination (hereinafter referred to as the "document input destination"), at least one process (hereinafter referred to as the "process within the workflow") is performed on the document and the execution result is output to a specific output destination (hereinafter referred to as the "execution result output destination").

[0025] The storage unit 14 can store a document processing program 14a for executing a workflow. The document processing program 14a may be installed in the document processing system 10 during the manufacturing stage of the document processing system 10, or may be additionally installed in the document processing system 10 from an external storage medium such as a Universal Serial Bus (USB) memory, or may be additionally installed in the document processing system 10 from a network.

[0026] The storage unit 14 is capable of storing the workflow 14b. The storage unit 14 is capable of storing at least one other workflow in addition to the workflow 14b.

[0027] FIG. 2 is a diagram showing an example of the workflow 14b.

[0028] Workflow 14b shown in Figure 2 comprises a document input destination 21 to which a document is input, a workflow process 22 that is executed first on the document input to the document input destination 21, a workflow process 23 that is executed on the execution result of workflow process 22, a workflow process 24 that is executed on the execution result of workflow process 23, and an execution result output destination 25 to which the execution result of workflow process 24 is output.

[0029] Examples of document input destinations 21 include a specific output destination to which an image read by an image reading device such as an MFP (Multifunction Peripheral) that reads an image from a document or a dedicated scanner is output, a specific folder in a specific file server, a specific website to which a document can be input via a web browser, a specific destination to which a document can be sent by email, and a specific destination to which a document can be sent from an electronic device such as a PC or smart device by a specific application program other than a web browser or email client. Workflow 14b is started when a document is input to document input destination 21 set in workflow 14b.

[0030] The workflow processes 22, 23, and 24 include, for example, a process of performing OCR (Optical Character Recognition) on the entire range of a document or a specific part of the range, a process of recognizing a barcode or two-dimensional code present in the entire range of a document or a specific part of the range, a process of recognizing the type of a document based on the result of OCR performed on the entire range of a document or a specific part of the range, a process of outputting various data recognized from a document as metadata, a process of changing the file format of a document, a process of generating a file name for a document based on various data recognized from a document, a process of performing image correction such as rotation, tilt correction, frame erasure, blank page removal, noise (black dot) removal, and punch hole removal on a document, and a process of sorting a document based on at least one of characters, images, barcodes, and two-dimensional codes extracted from a document. In the example shown in FIG. 2, three workflow processes are set in the workflow 14b, but only two or less workflow processes may be set, or four or more workflow processes may be set. 2, the workflow 14b has multiple in-workflow processes that are not branched but are serial, but at least a part of the workflow may branch into multiple in-workflow processes. The workflow 14b is set as to which in-workflow processes are executed in what order.

[0031] Examples of the execution result output destination 25 include a specific DMS (Document management system), a specific ECM (Enterprise Content Management), a specific file server, a specific database, and a specific cloud service. In the example shown in Fig. 2, only one execution result output destination is set for the workflow 14b, but multiple execution result output destinations may be set.

[0032] As shown in FIG. 1, the storage unit 14 can store a script file (hereinafter referred to as a "script file") 14c in a specific script language. The storage unit 14 can store at least one script file other than the script file 14c. The specific script language may be, for example, PowerShell (registered trademark) of Microsoft Corporation. Below, PowerShell will be described as an example of the specific script language.

[0033] The storage unit 14 can store pre-reduction lower limit information 14d indicating a lower limit of the security policy level before the reduction when the security policy level of a job that executes a script is reduced, and post-reduction lower limit information 14e indicating a lower limit of the security policy level after the reduction when the security policy level of a job that executes a script is reduced. The level indicated in the post-reduction lower limit information 14e is set lower than the level indicated in the pre-reduction lower limit information 14d.

[0034] FIG. 3 is a diagram showing an example of a list of security policy levels that can be set in the pre-reduction lower limit information 14d and the post-reduction lower limit information 14e.

[0035] As shown in FIG. 3, the security policy levels that can be set in the lower limit information 14e after reduction are four levels: the highest level "Restricted," the second highest level "AllSigned," the third highest level "RemoteSigned," and the lowest level "Unrestricted."

[0036] "Restricted" is a policy that does not allow any scripts to be executed.

[0037] "AllSigned" is a policy in which signed scripts can be executed but unsigned scripts cannot be executed.

[0038] "RemoteSigned" is a policy that allows local script execution and remote signed scripts, i.e., signed scripts downloaded from the Internet, to be executed, but does not allow remote unsigned scripts, i.e., unsigned scripts downloaded from the Internet, to be executed.

[0039] "Unrestricted" is a policy that allows execution of all scripts.

[0040] As shown in FIG. 1, the storage unit 14 is capable of storing password list information 14f that indicates a list of passwords for decompressing ZIP files.

[0041] FIG. 4 is a diagram showing an example of the password list information 14f.

[0042] 4 includes a combination of user identification information and a password for each user. The password list information 14f is realized by a file in a CSV (Comma-Separated Values) format, for example.

[0043] 1 includes, for example, a CPU (Central Processing Unit), a ROM (Read Only Memory) that stores programs and various data, and a RAM (Random Access Memory) as a volatile storage device used as a working area for the CPU of the control unit 15. The CPU of the control unit 15 executes programs stored in the storage unit 14 or the ROM of the control unit 15.

[0044] By executing the document processing program 14a, the control unit 15 realizes a data acquisition unit 31 that acquires a document as electronic data input to a document input destination set in the workflow, a workflow processing unit 32 that executes processing within the workflow set in the workflow, and a data output unit 33 that outputs data indicating the execution result of processing within the workflow by the workflow processing unit 32 to an execution result output destination set in the workflow.

[0045] The control unit 15 executes the document processing program 14a to realize a custom code execution unit 32a on the workflow processing unit 32, which executes custom code, which is code for a function not supported by the standard functions of the workflow processing unit 32. An example of the custom code is a process code for executing a script in a specific script language.

[0046] The control unit 15 executes the document processing program 14a to realize a script execution unit 32b that executes a script in a specific script language on the custom code execution unit 32a.

[0047] Next, the operation of the document processing system 10 when executing a workflow will be described.

[0048] FIG. 5 is a sequence diagram of the operation of the document processing system 10 when executing a workflow.

[0049] When a document (hereinafter referred to as a "target document") is input to a document input destination set in any of the workflows stored in the document processing system 10, the data acquisition unit 31 acquires the target document (S101), as shown in FIG. 5.

[0050] When the processing of S101 is completed, the data acquisition unit 31 notifies the workflow processing unit 32 of an instruction to execute processing within the workflow that is set in the workflow (hereinafter referred to as the "target workflow") that is associated with the document input destination to which the target document acquired in S101 was input (S102).

[0051] When the workflow processing unit 32 receives the notification in S102, it executes the in-workflow process set in the target workflow (S103).

[0052] When the process of S103 ends, the workflow processing unit 32 notifies the data output unit 33 of data indicating the execution result of the process of S103 (S104).

[0053] When the process of S104 ends, the data output unit 33 outputs the data notified in S104 to the execution result output destination set in the target workflow (S105).

[0054] Next, the operation of the script execution unit 32b will be described.

[0055] FIG. 6 is a flowchart showing an example of the operation of the script execution unit 32b.

[0056] When the workflow processing unit 32 executes a process in the workflow by the script execution unit 32b (hereinafter referred to as a "process in the target workflow") in the process of S103, the workflow processing unit 32 starts the script execution unit 32b on the custom code execution unit 32a. When started, the script execution unit 32b executes the operation shown in FIG.

[0057] 6, the script execution unit 32b acquires the current setting of the security policy of the environment, such as a computer, in which a script for processing within a target workflow (hereinafter referred to as the "target script") is executed, i.e., the environment, such as a computer, in which the document processing system 10 operates (S121). For example, the script execution unit 32b may acquire the current setting of the security policy of the environment, such as a computer, in which the document processing system 10 operates, by using a Get-ExecutionPolicy command of PowerShell.

[0058] When the process of S121 is completed, the script execution unit 32b determines whether the level of the security policy indicated in the setting acquired in S121 is equal to or higher than the level indicated in the pre-reduction lower limit information 14d (S122). The level indicated in the pre-reduction lower limit information 14d is, for example, "Restricted."

[0059] When the script execution unit 32b determines in S122 that the security policy level indicated in the setting acquired in S121 is equal to or higher than the level indicated in the pre-reduction lower limit information 14d, it executes the target workflow process by lowering the security policy level of the job of the target workflow process to the level indicated in the post-reduction lower limit information 14e and executing the target script without lowering the security policy level of the environment, such as the computer, in which the document processing system 10 operates (S123). The level indicated in the post-reduction lower limit information 14e is, for example, "Unrestricted". For example, when the level indicated in the post-reduction lower limit information 14e is "Unrestricted", the script execution unit 32b executes the target script by adding the Unrestricted option.

[0060] In addition, in the target workflow, the path of the script file of the target script is specified as a setting value of the custom code for processing within the target workflow. Therefore, the script execution unit 32b can identify the script file of the target script from among the script files stored in the storage unit 14 by the path specified in the target workflow.

[0061] If the script execution unit 32b determines in S122 that the security policy level indicated in the settings acquired in S121 is not higher than the level indicated in the pre-reduction lower limit information 14d, that is, that the security policy level indicated in the settings acquired in S121 is lower than the level indicated in the pre-reduction lower limit information 14d, it executes the target workflow process by executing the target script without lowering either the security policy level of the environment, such as the computer, in which the document processing system 10 operates or the security policy level of the job of the target workflow process (S124).

[0062] When the process of S123 or S124 ends, the script execution unit 32b judges whether or not the execution result of the script has been notified from PowerShell (S125). Note that the script execution unit 32b can recognize that the execution of the target script has been successful by being notified of the execution result of the script from PowerShell.

[0063] If the script execution unit 32b determines in S125 that the execution result of the script has not been notified from PowerShell, it determines whether or not an error has been notified from PowerShell (S126). Note that the script execution unit 32b can recognize that the execution of the target script has failed by receiving an error notification from PowerShell.

[0064] If the script execution unit 32b determines in S126 that no error has been notified from PowerShell, it executes the process of S125.

[0065] When the script execution unit 32b determines in S125 that the execution result of the script has been notified from PowerShell, or determines in S126 that an error has been notified from PowerShell, the operation shown in FIG. 6 ends.

[0066] Next, an example of a target workflow will be described.

[0067] For example, we will explain the case where the target document is a password-protected ZIP file, and the target workflow is a workflow that includes an intra-workflow process that executes, as the target script, a script that unzips the password-protected ZIP file as the target document using the password as an argument.

[0068] FIG. 7 is a flowchart of a part of the operation of the script execution unit 32b when executing an example of a target workflow.

[0069] As shown in FIG. 7, the script execution unit 32b acquires the user identification information included in the file name of the password-protected ZIP file as the target document (S141).

[0070] When the process of S141 ends, the script execution unit 32b acquires the password associated with the identification information acquired in S141 in the password list information 14f (S142).

[0071] When the process of S142 ends, the script execution unit 32b executes the target script as shown in FIG. 6 using the password acquired in S141 as an argument (S143), and ends the operation shown in FIG.

[0072] In the operation shown in Fig. 7, the script execution unit 32b acquires the user's identification information included in the file name of the target document. However, the script execution unit 32b may acquire the user's identification information from a location other than the file name of the target document. For example, when the target document is sent by email to a specific destination, the script execution unit 32b may acquire the user's identification information included in the subject of the email.

[0073] In the operation shown in Fig. 7, the target script is a script that decompresses a password-protected ZIP file as a target document, using the password as an argument. However, the target document may be something other than a password-protected ZIP file. For example, the target document may be a password-protected PDF (Portable Document Format) file, and the target workflow may be a workflow that includes an in-workflow process that executes, as the target script, a script that decompresses a password-protected PDF file as a target document, using the password as an argument.

[0074] Fig. 8 is a flowchart of a part of the operation of the script execution unit 32b, which is an example different from the example shown in Fig. 6. Fig. 9 is a flowchart of the operation subsequent to the operation shown in Fig. 8.

[0075] When started, the script execution unit 32b may execute the operations shown in FIGS. 8 to 9 instead of the operations shown in FIG.

[0076] As shown in FIGS. 8 and 9, the script execution unit 32b executes the target script to execute the process within the target workflow (S161).

[0077] When the process of S161 ends, the script execution unit 32b determines whether or not the execution result of the script has been notified from PowerShell (S162).

[0078] If the script execution unit 32b determines in S162 that the execution result of the script has not been notified from PowerShell, it determines whether or not an error has been notified from PowerShell (S163).

[0079] If the script execution unit 32b determines in S163 that no error has been notified from PowerShell, it executes the process of S162.

[0080] When the script execution unit 32b determines in S163 that an error has been notified from PowerShell, it obtains the current settings of the security policy of the computer executing the target script, i.e., the environment of the computer on which the document processing system 10 operates (S164), similar to the processing of S121.

[0081] The script execution unit 32b determines whether the level of the security policy indicated in the setting acquired in S164 is higher than the level indicated in the post-reduction lower limit information 14e (S165).

[0082] If the script execution unit 32b determines in S165 that the security policy level indicated in the setting acquired in S164 is higher than the level indicated in the lower limit information 14e after lowering, it inquires of the user whether or not to lower the security policy level of the job of the process in the target workflow by one level below the security policy level indicated in the setting acquired in S164 and execute the target script again (S166). For example, the script execution unit 32b may execute the inquiry of S166 to an email address associated with the target workflow.

[0083] After the process of S166, the script execution unit 32b judges whether or not the user has responded to the inquiry in S166 until it determines that the user has responded to the inquiry in S166 (S167).

[0084] When the script execution unit 32b determines in S167 that there has been a response from the user to the inquiry in S166, it determines whether or not the response to the inquiry in S166 is to lower the security policy level of the job processing within the target workflow by one level below the security policy level indicated in the settings acquired in S164 and re-execute the target script (S168).

[0085] If the script execution unit 32b determines in S168 that the answer to the inquiry in S166 is to lower the security policy level of the job of the target workflow process by one level from the security policy level indicated in the settings acquired in S164 and re-execute the target script, it re-executes the target workflow process by re-executing the target script without lowering the security policy level of the environment, such as the computer, in which the document processing system 10 operates, and by lowering the security policy level of the job of the target workflow process by one level from the security policy level indicated in the settings acquired in S164 (S169).

[0086] When the process of S169 ends, the script execution unit 32b determines whether or not the execution result of the script has been notified from PowerShell (S170).

[0087] If the script execution unit 32b determines in S170 that the execution result of the script has not been notified from PowerShell, the script execution unit 32b determines whether or not an error has been notified from PowerShell (S171).

[0088] If the script execution unit 32b determines in S171 that no error has been notified from PowerShell, it executes the process of S170.

[0089] When the script execution unit 32b determines in S171 that an error has been notified from PowerShell, it determines whether or not the security policy level of the job of the target workflow process the last time the target workflow process was executed is higher than the level indicated in the lower limit information 14e after reduction (S172).

[0090] If the script execution unit 32b determines in S172 that the security policy level of the job of the target workflow process when the target workflow process was executed last time is higher than the level indicated in the lower limit information 14e, it inquires of the user whether or not to lower the security policy level of the job of the target workflow process by one level from the security policy level of the job of the target workflow process when the target workflow process was executed last time and execute the target script again (S173). For example, the script execution unit 32b may execute the inquiry of S173 to an email address associated with the target workflow.

[0091] After the process of S173, the script execution unit 32b judges whether or not the user has responded to the inquiry in S173 until it determines that the user has responded to the inquiry in S173 (S174).

[0092] When the script execution unit 32b determines in S174 that there has been a response from the user to the inquiry in S173, it determines whether the response to the inquiry in S173 is to lower the security policy level of the job of the target workflow process by one level from the security policy level of the job of the target workflow process when the target workflow process was executed last time, and to re-execute the target script (S175).

[0093] If the script execution unit 32b determines in S175 that the answer to the inquiry in S173 is an answer to re-execute the target script with the security policy level of the job of the target workflow process lowered by one level from the security policy level of the job of the target workflow process when the target workflow process was executed the previous time, it re-executes the target workflow process by re-executing the target script without lowering the security policy level of the environment, such as a computer, in which the document processing system 10 operates, and lowering the security policy level of the job of the target workflow process by one level from the security policy level of the job of the target workflow process when the target workflow process was executed the previous time (S176).

[0094] When the process of S176 ends, the script execution unit 32b executes the process of S170.

[0095] The script execution unit 32b determines in S162 that the execution result of the script has been notified from PowerShell, determines in S165 that the level of the security policy indicated in the setting acquired in S164 is not higher than the level indicated in the lower limit information 14e after lowering, determines in S168 that the answer to the inquiry in S166 is not an answer that the security policy level of the job of the target workflow process is lowered by one level from the security policy level indicated in the setting acquired in S164 and the target script is executed again, or determines in S168 that the execution result of the script has been notified from PowerShell. If it is determined in S170 that the execution result has been notified, if it is determined in S172 that the security policy level of the job of the target workflow process the previous time the target workflow process was executed is not higher than the level indicated in the lower limit information 14e, or if it is determined in S175 that the answer to the inquiry in S173 is not an answer that the security policy level of the job of the target workflow process will be lowered by one level below the security policy level of the job of the target workflow process the previous time the target workflow process was executed and the target script will be executed again, the operations shown in FIGS. 8 and 9 are terminated.

[0096] FIG. 10 is a flowchart of an example of the operation of the script execution unit 32b, which is different from the examples shown in FIG. 6 and FIG. 8 to FIG.

[0097] When started, the script execution unit 32b may execute the operation shown in FIG. 10 instead of the operation shown in FIG. 6 and FIGS. 8 to 9.

[0098] As shown in FIG. 10, the script execution unit 32b executes the target workflow process by setting the security policy level of the job of the target workflow process to the lowest level, "Unrestricted," without lowering the security policy level of the environment, such as the computer, in which the document processing system 10 operates, and executing the target script (S181).

[0099] When the process of S181 ends, the script execution unit 32b determines whether or not the execution result of the script has been notified from PowerShell (S182).

[0100] If the script execution unit 32b determines in S182 that the execution result of the script has not been notified from PowerShell, it determines whether or not an error has been notified from PowerShell (S183).

[0101] If the script execution unit 32b determines in S183 that no error has been notified from PowerShell, it executes the process of S182.

[0102] When the script execution unit 32b determines in S182 that the execution result of the script has been notified from PowerShell, or determines in S183 that an error has been notified from PowerShell, the operation shown in FIG. 10 ends.

[0103] As described above, document processing system 10 sets the security policy level of a processing job within a workflow and executes the job (S123, S169, S176, S181) without lowering the security policy level of the environment in which document processing system 10 operates, so that document processing system 10 can execute workflows other than those that can be executed at the security policy level of the environment in which document processing system 10 operates, without lowering the security policy level of the environment in which document processing system 10 operates.

[0104] When the current level of the security policy of the environment in which document processing system 10 operates is the first level or higher (YES in S122), document processing system 10 lowers the security policy level of the processing job in the workflow to a second level lower than the first level and executes the job (S123) without lowering the security policy level of the environment in which document processing system 10 operates. Therefore, it is possible to execute workflows other than workflows that can be executed at the security policy level of the environment in which document processing system 10 operates, without lowering the security policy level of the environment in which document processing system 10 operates.

[0105] When an error occurs in the execution of a processing job within a workflow (YES in S163), document processing system 10 lowers the security policy level of the job where the error occurred by one level from the current level of the security policy of the environment in which document processing system 10 operates, and when the user instructs document processing system 10 to re-execute the job (YES in S168), document processing system 10 lowers the security policy level of the job where the error occurred by one level from the current level of the security policy of the environment in which document processing system 10 operates, without lowering the security policy level of the environment in which document processing system 10 operates, and re-executes the job (S169).Therefore, it is possible to execute workflows other than those that can be executed at the security policy level of the environment in which document processing system 10 operates, without lowering the security policy level of the environment in which document processing system 10 operates.

[0106] If an error occurs during the execution of a job with a lowered security policy level (YES in S171), and the user instructs document processing system 10 to lower the security policy level of the job where the error occurred by one level from the previous level of the security policy of the job and re-execute the job (YES in S175), document processing system 10 lowers the security policy level of the job where the error occurred by one level from the previous level of the security policy of the job and re-executes the job (S176) without lowering the security policy level of the environment in which document processing system 10 operates.Therefore, it is possible to execute workflows other than those that can be executed at the security policy level of the environment in which document processing system 10 operates, without lowering the security policy level of the environment in which document processing system 10 operates.

[0107] The document processing system 10 sets the security policy level of the processing job in the workflow to the lowest level and executes the job (S181) without lowering the security policy level of the environment in which the document processing system 10 operates, so that a workflow other than the workflow that can be executed at the security policy level of the environment in which the document processing system 10 operates can be executed without lowering the security policy level of the environment in which the document processing system 10 operates.

[0108] In this embodiment, the document processing system 10 is configured with one computer. However, the document processing system 10 may be configured with multiple computers. [Explanation of symbols]

[0109] 10 Document processing system (computer) 14a Word processing programs 14b Workflow

Claims

1. A document processing system that executes a workflow in which, when a document is input as electronic data to a specific input destination, at least one process is executed on the document and a result of the process is output to a specific output destination, comprising: A document processing system characterized in that a security policy level of a specific processing job in the workflow is set and the job is executed without lowering the security policy level of the environment in which the document processing system operates.

2. A document processing system as described in claim 1, characterized in that when the current level of the security policy of the environment is a first level or higher, the level of the security policy of the environment is not lowered, but the level of the security policy of the job is lowered to a second level lower than the first level, and the job is executed.

3. The document processing system according to claim 1, characterized in that when an error occurs during the execution of the job, and a user instructs that the level of the security policy of the job in which the error occurred be lowered by one level from the current level of the security policy of the environment and the job be executed again, the level of the security policy of the job in which the error occurred is lowered by one level from the current level of the security policy of the environment without lowering the level of the security policy of the environment, and the job is executed again.

4. The document processing system according to claim 3, characterized in that when an error occurs during the execution of the job in which the security policy level has been lowered, and when a user instructs that the security policy level of the job in which the error occurred be lowered by one level from the previous level of the security policy of the job and the job be executed again, the security policy level of the job in which the error occurred is lowered by one level from the previous level of the security policy of the job, without lowering the security policy level of the environment, and the job is executed again.

5. 2. The document processing system according to claim 1, wherein the level of the security policy of the job is set to the lowest level without lowering the level of the security policy of the environment, and the job is executed.

6. A document processing program characterized by setting the security policy level of a job of a specific processing in the workflow, without lowering the security policy level of the environment in which a document processing system operates, which executes a workflow in which, when a document is input as electronic data to a specific input destination, at least one process is performed on the document and the execution result is output to a specific output destination, and causing a computer to perform an operation of executing the job.

Images