Data management device and method

Abstract

To enable automatic deletion of trails.SOLUTION: A data management apparatus selects a trail from management data. The management data includes, for an operation item regarding a system to be operated, data representing a workflow representing one or a plurality of tasks constituting a business of a system operation and associated with the operation item, and data representing a regulation matter associated with the operation item for a standard or a law. A trail is associated with the workflow. The data management apparatus performs deletion determination that is a determination as to whether or not the selected trail can be deleted. The deletion determination includes a determination as to whether or not the current date and time exceeds a deadline to hold the selected trail. The deadline to hold the selected trail is a deadline which is determined from a date and time at which the trail was generated and a holding period represented by the regulation matter associated with the operation item corresponding to the workflow with which the trail is associated. When a result of the deletion determination is true, the data management apparatus deletes the selected trail.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates generally to data management. [Background technology]

[0002] As the amount of data to be stored increases, storage capacity is strained. Techniques for deleting data whose retention period has expired are generally known (for example, see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2004-102809 A Summary of the Invention [Problem to be solved by the invention]

[0004] Each time a workflow, which is a series of tasks in the operation of a system, is performed, a "trail" is accumulated as data showing the work evidence of that workflow.

[0005] Generally, evidence has a retention period based on standards or laws, and deleting evidence carries the risk of violating standards or laws. Therefore, it is easier to take measures to leave evidence rather than deleting it.

[0006] However, if a large amount of evidence is accumulated as data to be stored, it will consume a large amount of storage capacity. Also, some companies adopt the operation of migrating on-premise data to cloud services, but if a large amount of evidence is accumulated, not only will it consume a large amount of storage capacity on the cloud service, but there is also a concern that the service usage fee will increase.

[0007] Therefore, it is conceivable to apply the technology disclosed in Patent Document 1 to the trail.

[0008] However, there is no known technology that enables easy identification and management of which evidence has a retention period based on which standard or law.

[0009] For this reason, simply applying automatic file deletion to evidence may result in the deletion of evidence that is undesirable or should not be deleted. [Means for solving the problem]

[0010] A data management device selects one of the trails when the management data includes one or more trails. The management data includes, for each of a plurality of operation items related to a system to be operated, data representing a workflow that represents one or more tasks constituting the work of system operation and is associated with the operation item, and data representing provisions of a standard or law associated with the operation item. Each time execution of a workflow is started, a trail that is data representing the trace of the workflow is associated with the workflow. The data management device performs a deletion determination that is a determination of whether or not the selected trail can be deleted. The deletion determination includes a determination of whether or not the current date and time has exceeded the retention period of the selected trail. The retention period of the selected trail is a period determined from the generation date and time of the trail and the retention period represented by the provisions associated with the operation item corresponding to the workflow with which the trail is associated. When the result of the deletion determination is true, the data management device executes the deletion of the selected trail. Effect of the Invention

[0011] The present invention can enable automatic deletion of trails. [Brief description of the drawings]

[0012] [Figure 1] 1 shows an example of the configuration of an entire system including a data management device according to a first embodiment. [Diagram 2] 4 shows table entry relationships according to the first embodiment. [Diagram 3]Some examples of workflow entries are shown below. [Figure 4] 13 shows an example of the relationship between workflow entries and trail entries. [Diagram 5] This section shows examples of the relationship between operational items and standards / laws (regulatory matters). [Figure 6] 13 shows the flow of an automatic trail deletion process according to the first embodiment. [Figure 7] 13 shows table entry relationships according to the second embodiment. [Figure 8] This section shows an example of the relationship between operational items and standards / laws (regulatory matters) for one end user. [Figure 9] 13 shows a part of the flow of an automatic trail deletion process according to the second embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] In the following description, an "interface unit" may refer to one or more interface devices. The one or more interface devices may be at least one of the following: One or more I / O (Input / Output) interface devices. The I / O (Input / Output) interface devices are interface devices to at least one of the I / O devices and a remote display computer. The I / O interface device to the display computer may be a communications interface device. The at least one I / O device may be a user interface device, e.g., either an input device such as a keyboard and a pointing device, or an output device such as a display device. One or more communication interface devices. The one or more communication interface devices may be one or more homogeneous communication interface devices (e.g., one or more NICs (Network Interface Cards)) or two or more heterogeneous communication interface devices (e.g., a NIC and an HBA (Host Bus Adapter)).

[0014] In the following description, a "memory" refers to one or more memory devices, which are an example of one or more storage devices, and may typically be a primary storage device. At least one memory device in the memory may be a volatile memory device or a non-volatile memory device.

[0015] In the following description, a "persistent storage device" may be one or more persistent storage devices, which are an example of one or more persistent storage devices. A persistent storage device may typically be a non-volatile storage device (e.g., an auxiliary storage device), and more specifically, may be, for example, a hard disk drive (HDD), a solid state drive (SSD), a non-volatile memory express (NVME) drive, or a storage class memory (SCM).

[0016] Also, in the following description, "storage device" may be at least memory, including memory and persistent storage device.

[0017] Furthermore, in the following description, a "processor" may be one or more processor devices. The at least one processor device may typically be a microprocessor device such as a CPU (Central Processing Unit), but may also be other types of processor devices such as a GPU (Graphics Processing Unit). The at least one processor device may be a single-core or multi-core. The at least one processor device may be a processor core. The at least one processor device may also be a broader processor device such as a circuit that is a collection of gate arrays written in a hardware description language that performs part or all of the processing (e.g., an FPGA (Field-Programmable Gate Array), a CPLD (Complex Programmable Logic Device), or an ASIC (Application Specific Integrated Circuit)).

[0018] In the following description, functions may be described using the expression "yyy unit", but the functions may be realized by one or more computer programs being executed by a processor, or by one or more hardware circuits (e.g., FPGA or ASIC), or by a combination thereof. When a function is realized by a program being executed by a processor, the function may be at least a part of the processor, since the specified processing is performed using a storage device and / or an interface device, etc., as appropriate. Processing described with a function as the subject may be processing performed by a processor or a device having the processor. A program may be installed from a program source. The program source may be, for example, a program distribution computer or a computer-readable recording medium (e.g., a non-transitory recording medium). The description of each function is an example, and multiple functions may be combined into one function, or one function may be divided into multiple functions.

[0019] Hereinafter, some embodiments of the present invention will be described with reference to the drawings. In the following description, "standards / laws" refer to standards or laws. [First embodiment]

[0020] FIG. 1 shows an example of the overall configuration of a system including a data management device 150 according to the first embodiment.

[0021] The data management device 150 is communicatively connected to an IT (Information Technology) system 110 and a user terminal 101 via a communication network 50. The communication network 50 may be any communication network such as the Internet, a WAN (Wide Area Network), or a LAN (Local Area Network).

[0022] The IT system 110 may be a physical computer system (a system composed of one or more physical computers) or a logical computer system based on a physical computer system (e.g., a system having one or more virtual computers). The IT system 110 is a system that provides a given service, and is operated or used by a user. In this embodiment, a "user" may be, for example, any of the following. In other words, the following persons may be collectively referred to as a "user". Customer: An individual or organization (e.g., a company) that operates the IT system 110 and uses the services provided by the data management device 150. It is possible for the customer to have end users. ·Operations staff: A member of the customer who is responsible for the actual work within the operations tasks defined by the workflow (described below). · Operations Manager: A member of the customer who ensures the completion of operations tasks defined in the workflow and assigns operations personnel to the actual work within the operations tasks. End user: An organization or individual (typically a customer of a customer) who uses the IT system 110 under the management of a customer, and who requests operational tasks from the customer (starting point of the workflow) and makes inquiries or complaints as necessary. · Requester: A member of the end users who requests the initial work of an operational task defined in the workflow.

[0023] The user terminal 101 is a user's information processing terminal (for example, a personal computer or a smartphone), and inputs and outputs data to and from the data management device 150 and the IT system 110 according to user operations via, for example, a browser 102 (or a dedicated application).

[0024] The data management device 150 is a physical computer system in this embodiment, but may be a logical computer system based on a physical computer system (for example, a virtual computer or a cloud computing service). The data management device 150 includes an interface device 151, a storage device (for example, a persistent storage device 152 and a memory 153), and a processor 154 connected thereto.

[0025] Communication is performed via the interface device 151. For example, the interface device 151 communicates with the user terminal 101 and the IT system 110 via the communication network 50.

[0026] The persistent storage device 152 stores data such as an operation-regulations association table 161, a standard / law-regulations association table 162, a workflow table 163, an operation item table 164, a standard / laws table 165, a regulation item table 166, and a trail table 167. Each of the tables 161 to 167 has multiple (or one) table entries. The table entries are, for example, records.

[0027] The memory 153 stores one or more computer programs for implementing functions such as a data management unit 171, a workflow execution unit 172, and a trail deletion unit 173. The functions 171 to 173 are implemented by the processor 154 executing the one or more computer programs.

[0028] The data management unit 171 includes a function of selecting an operation item that requires a task at any time and starting a workflow corresponding to the selected operation item, and is operated by, for example, an applicant. The data management unit 171 may also receive a request from a user to generate a new workflow, generate a workflow according to the user's request, and record data of the generated workflow in the workflow table 163.

[0029] The workflow execution unit 172 is a function that transitions through a series of tasks defined in a workflow in order, and is operated by a person who operates the client's system, such as an operations person. The workflow execution unit 172 also records the name of the worker, the start date and time, etc., as evidence. At least a part of the information in the evidence may be manually input by the user. The evidence may also be generated by the workflow execution unit 172 at the time when the first task in a group of tasks defined in the workflow is started.

[0030] The trail deletion unit 173 deletes the trail periodically (or when a specific event occurs, etc.).

[0031] The operation of the IT system 110 can be broadly divided into two types: routine tasks and occasional tasks. A "routine task" is a task that is performed periodically without human intervention (for example, nighttime backup of the system). An "occasional task" is a task that occurs as needed and is performed manually, such as application and approval of procedures (for example, virtual machine rental procedures). A series of tasks required for tasks in system operation is a "workflow," and data that shows the work traces of the workflow is a "trail." A workflow may also be defined for routine tasks, but in this embodiment, a workflow is defined for occasional tasks.

[0032] Furthermore, IT system 110 may be an on-premise system, but in this embodiment, it may be a system in a cloud environment (for example, a system as SaaS). Each time a workflow is implemented in IT system 110, the trail of that workflow is recorded in trail table 167. If a large amount of trails accumulates, this will consume a large amount of storage capacity in persistent storage device 152. Furthermore, if trail table 167 is in the storage of a cloud service, there is a concern that the accumulation of a large amount of trails will result in an increase in the usage fee for the service. However, in this embodiment, trails can be automatically deleted, thereby solving such a problem.

[0033] FIG. 2 shows table entry relationships according to the first embodiment.

[0034] The operation-regulation association table 161 has an operation-regulation association entry 161E. The operation-regulation association entry 161E represents an association between an operation item and a regulation, for example, a pair of an operation item ID and a regulation ID. Since the operation item entry 164E represents an operation item ID, the operation-regulation association entry 161E is associated with the operation item entry 164E through the operation item ID. Also, since the regulation entry 166E represents a regulation ID, the operation-regulation association entry 161E is associated with the regulation entry 166E through the regulation ID. Note that the operation item and the regulation may be in a 1:1 or 1:many relationship. In other words, one operation item is associated with one regulation, but one operation item may be associated with one or multiple regulation.

[0035] The operation item table 164 has an operation item entry 164E for each operation item. The operation item entry 164E represents information about the operation item, for example, an operation item ID and an operation item name. Since the workflow entry 163E represents the operation item name, the operation item entry 164E is associated with the workflow entry 163E through the operation item name. Note that the relationship between the operation item and the workflow may be 1:1 or 1:many. In other words, one workflow is associated with one operation item, but one operation item may be associated with one or multiple workflows.

[0036] The workflow table 163 has a workflow entry 163E for each workflow. The workflow entry 163E indicates information related to the workflow, such as a workflow ID, an operation item name, a task name (system operation name), and the name of each of one or more tasks that constitute the task corresponding to the workflow. Since the trail entry 167E indicates the workflow ID, the workflow entry 163E is associated with the trail entry 167E through the workflow ID. An example of the workflow entry 163E is as shown in FIG. 3. That is, there may be workflow entries 163E1 and 163E2 for workflows for different tasks (system operations), and there may be workflow entries 163E3 and 163E4 for workflows for the same system operation (note that the workflow ID and operation item names are omitted in FIG. 3).

[0037] The trail table 167 has a trail entry 167E for each trail. In this embodiment, the trail entry 167E may correspond to the trail itself, but instead of the trail itself, the trail entry 167E may be data linked to the trail (the entity of the trail). The trail entry 167E indicates information about the trail, such as the workflow ID, the trail ID, the status of the task corresponding to the workflow, the retention period of the trail, and the purpose of the trail, and also indicates the person in charge, start date and time, end date and time, and execution log (or a link to the execution log) for each task that constitutes the task corresponding to the associated workflow. An example of the relationship between the workflow entry and the trail entry is as shown in FIG. 4. The workflow and the trails are in a 1:1 or 1:multiple relationship. In other words, each time a workflow is executed, a trail for the workflow is generated and recorded. Examples of the status of a trail include "Complete", which indicates that the task corresponding to the workflow has been completed up to the last task, "In Progress", which indicates that the task corresponding to the workflow has been started but not yet completed up to the last task, and "Interrupted", which indicates that the task corresponding to the workflow has been started but has been stopped due to an error or other reason. The status may be managed for each task (system operation) or for each task that constitutes the task. In addition to the flow status, which is the status for the workflow, a purpose status, which is the status for the purpose of the trail, may also be prepared. That is, one or both of the flow status and the purpose status may be recorded in the trail entry 167E. The purpose may be recorded in the workflow entry 163E, and the purpose recorded in the workflow entry 163E may be applied to the trail associated with the workflow entry 163E (that is, the purpose may be recorded in the workflow entry 163E instead of or in addition to the trail entry 167E).

[0038] The regulation table 166 has a regulation entry 166E for each regulation. The regulation entry 166E indicates information about the regulation, such as a regulation ID, the name of the standard / law that has the regulation, the relevant part of the regulation, and the trail retention period. Since the standard / law-regulation association entry 162E indicates a regulation ID, the regulation entry 166E is associated with the standard / law-regulation association entry 162E through the regulation ID.

[0039] The standard / law-regulation association table 162 has a standard / law-regulation association entry 162E. The standard / law-regulation association entry 162E represents an association between a standard / law and a regulation, for example, a pair of a regulation ID and a standard / law ID. The standard / law-regulation association entry 162E also represents the relevant part of the standard / law and the certification retention period. Since the standard / law entry 165E represents the standard / law ID, the standard / law-regulation association entry 162E is associated with the standard / law entry 165E through the standard / law ID.

[0040] The standard / law table 165 includes a standard / law entry 165E for each standard / law. The standard / law entry 165E indicates information related to the standard / law, such as the standard / law ID and the standard / law name.

[0041] In the data association exemplified in Fig. 2, the association between table entries 161E and 164E and the association between table entries 161E, 166E, 162E, and 165E may be made in advance by, for example, the data management unit 171. When a workflow is newly generated, workflow entry 163E of the newly generated workflow may be associated by, for example, the data management unit 171 with operation item entry 164E identified from the operation item name corresponding to the workflow. Then, the workflow execution unit 172 newly associates trail entry 167E of the trail of the workflow with workflow entry 163E of the workflow whose execution has started. For example, the trail entry 167 at the start time of the workflow may record the workflow ID, the worker in charge of the first task that has started and the start date and time, and the status "in progress".

[0042] According to the data association illustrated in Fig. 2, an operational item is associated with a workflow, and a standard / law is associated with the operational item, and as a result, it is possible to identify which retention period stipulated in which standard / law is applied to which workflow-generated evidence. Specifically, for example, the data association illustrated in Fig. 2 identifies the operational-standard / law relationship (the correspondence between the operational item and the standard / law (prescribed matters)) illustrated in Fig. 5. This makes it possible to identify the standard / law that is applied to the evidence generated for the workflow, and thus the retention period of the evidence generated for the workflow is determined from the retention period of the standard / law that corresponds to the operational item associated with the workflow (if there are multiple retention periods for multiple standards / laws that are different for the same operational item, the longest retention period may be adopted).

[0043] The retention period in the regulation entry 166E may be a retention period specified from the standard / law having the regulation represented by the regulation entry 166E. Also, since the retention period is recorded in the regulation entry 166E, the standard / law entry 165E or the standard / law-regulation related entry 162E may not have information indicating the retention period. Specifically, for example, the standard / law entry 165E does not need to have information indicating the relevant location and retention period for each regulation.

[0044] 6 shows a flow of the automatic trail deletion process according to the embodiment 1. The automatic trail deletion process is started, for example, periodically.

[0045] The trail deletion unit 173 selects a trail from one or more trails (trail entry 167E) that have not been selected in this automatic trail deletion process (S601), and determines whether or not the trail can be deleted (S602). If the determination in S602 is false (S602: No), the trail is not deleted and the process proceeds to S605.

[0046] If the determination result in S602 is true (S602: Yes), the trail deletion unit 173 executes the deletion of the trail selected in S601 (S603). The trail deletion unit 173 records the deletion history of the trail in a log (S604). After that, the process proceeds to S605.

[0047] After S602: No or S604, the trail deletion unit 173 determines whether there are any trails that have not been selected in this automatic trail deletion process (S605). If the determination result of S605 is true (S605: Yes), the process returns to S601. If the determination result of S605 is false (S605: No), the current automatic trail deletion process ends.

[0048] The details of the determination in S602 are as follows.

[0049] In other words, if this automatic trail deletion process is the first automatic trail deletion process for the trail selected in S601, no retention period is recorded in the trail. Therefore, the trail deletion unit 173 determines whether or not there is a retention period applied to the trail by tracing the data association illustrated in Fig. 2 (for example, by tracing trail entry 167E of the selected trail → workflow entry 163E → operation item entry 164E → operation-regulation related entry 161E → regulation item entry 166E) (S621).

[0050] If the determination result of S621 is true (S621: Yes), the trail deletion unit 173 calculates the retention expiration date of the trail as the date and time from the creation date and time of the trail (typically, the earliest start date and time recorded in the trail (the start date and time of the earliest operation)) to the end of the retention period applied to the trail (the longest retention period if there are multiple different retention periods), records this retention expiration date in the trail, and determines whether the current date and time has exceeded this retention expiration date (S622).

[0051] If the determination result of S621 is false (S621: No) or if the determination result of S622 is true (S622: Yes), the trail deletion unit 173 determines whether the purpose defined for the trail has been completed (S623). The determination of S623 may be made based on, for example, the purpose status of the purpose recorded in the trail.

[0052] If the result of the determination in S623 is true (S623: Yes), the trail deletion unit 173 determines whether the status of the trail is "suspended" (S624).

[0053] If the determination result of S624 is true (S624: Yes), S602: Yes, that is, it is determined that the trail can be deleted.

[0054] If the determination result of any of S622, S623, and S624 is false, S602: No, that is, a determination is made that deletion of the trail is not possible.

[0055] The order of determination is not limited to S621, S622, S623, and S624, and any order may be adopted. For the same trail, the calculation of the retention period in S621 and S622 may be performed for the first automatic trail deletion process, and may be skipped for the second and subsequent automatic trail deletion processes. In other words, the determination in S622 may be a determination of whether the current date and time exceeds the retention period recorded in the trail. The calculation of the retention period for a trail may also be performed when the trail is generated. [Second embodiment]

[0056] The second embodiment will be described below, focusing mainly on the differences from the first embodiment, and explanations of the points in common with the first embodiment will be omitted or simplified.

[0057] FIG. 7 shows table entry relationships according to the second embodiment.

[0058] Trail entry 167E indicates an end user ID. End user IDs may be managed for each task, or for each operation that constitutes a task.

[0059] An end user-standards / legal association table 701 and an end user table 702 are stored in persistent storage 152 .

[0060] The end user-standards / law association table 701 has an end user-standards / law association entry 701E. The end user-standards / law association entry 701E represents an association between an end user and a standard / law, for example, a pair of an end user ID and a standard / law ID. Since the end user entry 702E represents an end user ID, the end user entry 702E is associated with the end user-standards / law association entry 701E through the end user ID. Also, since the standard / law entry 165E represents a standard / law ID, the end user-standards / law association entry 701E is associated with the standard / law entry 165E through the standard / law ID.

[0061] The end user table 702 includes an end user entry 702E for each end user. The end user entry 702E represents information about the end user, such as an end user ID and an end user name.

[0062] According to the data association illustrated in FIG. 7, the retention period of the evidence can be managed on an end-user basis. For example, an end user may specify the operation-standard / legal relationship illustrated in FIG. 5, while another end user may specify the operation-standard / legal relationship illustrated in FIG. 8. That is, when there are multiple standards / laws (e.g., multiple standards / laws specified by a customer) available for an end user to select for one or more operation items, the standards / laws selected by end users for the same operation item may differ. For this reason, even for evidence generated for the same workflow, the retention period differs depending on the end user.

[0063] 9, in the automatic trail deletion process according to the second embodiment, if S621: Yes, the trail deletion unit 173 selects the longest retention period of one or more retention periods corresponding to the end user of the authentication for the trail selected in S601 (S900). In S622, the trail deletion unit 173 calculates the retention period for the authentication using the selected retention period and the generation date and time of the trail, and determines whether the current date and time has exceeded the retention period.

[0064] Since trails are managed per end user, in addition to the retention period, the use of the trail may also be managed for each end user. In other words, the use of the trail may differ depending on the end user. For the same trail, the calculation of the retention period in S621, S900, and S622 may be performed for the first automatic trail deletion process and skipped for the second and subsequent automatic trail deletion processes, or the calculation of the retention period for the trail may be performed when the trail is generated.

[0065] Although several embodiments have been described above, these are merely examples for explaining the present invention, and the scope of the present invention is not limited to these embodiments. The present invention can be implemented in various other forms.

[0066] Furthermore, the above description can be summarized, for example, as follows. The following summary may include supplementary explanations and explanations of modified examples of the above.

[0067] The data management device 150 includes a selection unit that selects one of the trails when the management data includes one or more trails, a determination unit that makes a deletion determination as to whether the selected trail can be deleted, and a deletion unit that deletes the selected trail when the result of the deletion determination is true. In the above-described embodiment, the trail deletion unit 173 corresponds to an example of the selection unit, the determination unit, and the deletion unit.

[0068] The management data includes, for each of a plurality of operation items related to a system to be operated (e.g., IT system 110), data representing a workflow that represents one or a plurality of tasks constituting the work of system operation and that is associated with the operation item, and data representing provisions related to plans / laws that are associated with the operation item. In the above-mentioned embodiment, tables 161 to 167 correspond to an example of management data.

[0069] Each time execution of a workflow starts, a trail, which is data showing evidence of the workflow, is associated with the workflow. In the embodiment described above, each time execution of a workflow starts, the workflow execution unit 172 associates a trail of the execution of the workflow with the workflow entry 163E of the workflow.

[0070] The deletion determination includes a determination of whether the current date and time exceeds the retention period of the selected trail. If the result of this determination is true, the result of the deletion determination may be true. The retention period of the selected trail is a period determined by the generation date and time of the trail and the retention period represented by the provisions associated with the operation item corresponding to the workflow with which the trail is associated.

[0071] The retention period applied to a trail varies depending on what the trail was generated for (specifically, what system operation (business) it was generated for). Trails are mainly used to respond to audits related to standards / laws, but management data is prepared that associates the trail with the standard / law through the operation item that corresponds to the workflow to which the trail is associated, and the retention period applied to the trail can be determined from such management data. This makes it possible to automatically delete trails so that the necessary trails are not available when needed.

[0072] The data management device 150 may further include a deadline calculation unit. The deadline calculation unit may identify an operational item corresponding to the generated trail, identify a prescribed item corresponding to the operational item, and determine whether a retention period is set for the prescribed item. If the result of this determination is true, the deadline calculation unit may calculate the date and time from the generation date and time of the trail to the specified retention period as the retention period of the trail. This makes it possible to identify an appropriate retention period for the trail. Note that in the above-mentioned embodiment, at least one of the data management unit 171, the workflow execution unit 172, and the trail deletion unit 173 may include an example of a deadline calculation unit.

[0073] A trail with an associated trail usage may have associated therewith a usage status that is a status related to that usage. The deletion determination may include a determination of whether the usage is completed based on the usage status recorded in the selected trail. If the result of this determination is true and also a result of a determination of whether the current date and time has exceeded the retention period for the selected trail is true, then the deletion determination may be true.

[0074] There may be cases where it is not desirable to immediately delete a trail because the current date and time exceeds the retention period of the trail. This is because a trail may have different uses depending on the user (e.g., a customer or an end user). For example, a trail may be used to respond to inquiries or complaints (e.g., to identify the person in charge of the work that is the subject of the inquiry or complaint) or to calculate the usage fee of the system to be operated (e.g., usage fee based on the number of trails). It is possible to prevent a trail that can be used for such purposes from being deleted because the retention period has passed, and the trail being missing when it is needed for the purpose. The purpose of the trail may be defined in a workflow or in a trail associated with a workflow. One or more purposes may be defined for one workflow or one trail, and a purpose status may be associated with each purpose. The purpose status of each purpose may be updated as appropriate based on input data from a user (e.g., data on whether the purpose is necessary in the future) and the results of processing by the system to be operated. The purpose status may be updated, for example, by a purpose status update unit that updates the purpose status. The usage status update unit may be included in the data management unit 171, for example.

[0075] A trail may be associated with a flow status, which is a status related to the workflow with which the trail is associated. The flow status associated with the trail may be set to a status indicating interruption when the execution of the workflow with which the trail is associated is interrupted. The interrupted workflow may be restarted from the beginning, and therefore, a trail corresponding to the restart of execution may be newly associated with the workflow. The deletion determination may include a determination of whether the flow status associated with the selected trail is a status indicating interruption. In this way, when the flow status of the trail is interrupted due to a malfunction occurring on the operation target system side that handles the workflow or for other reasons, the workflow is newly executed again and a trail is generated, so that a trail with a flow status of interruption becomes a trail that wastes storage capacity. Such a trail can be detected and automatically deleted. The flow status may be updated, for example, by a flow status update unit that updates the flow status. The flow status update unit may be included in, for example, the data management unit 171 or the workflow execution unit 172.

[0076] In the management data, the operational items may be associated with the provisions in the standards / laws, and the provisions may be associated with the standards / laws that contain the provisions. In other words, the provisions and the standards / laws may be managed separately. This makes it possible to define which provisions in the standards / laws are to be adopted for each customer.

[0077] The users of the system to be operated may be one or more customers and one or more end users for at least one customer. In the management data, the trail may be associated with an end user, and the standard / law may be associated with an end user to whom the provisions in the standard / law apply. In the case where there are multiple different retention periods represented by multiple different provisions associated with the operation item corresponding to the workflow to which the selected trail is associated and the end user associated with the selected trail, the retention period of the selected trail may be a period determined from the generation date and time of the trail and the longest retention period among the multiple different retention periods. In this way, the longest retention period for the end user is selected from the range of the standards / laws corresponding to the operation items excluding the standards / laws not adopted by the end user, so that a retention period shorter than the longest retention period corresponding to the operation items may be selected as the longest retention period. For this reason, it is expected that the trail will be deleted more appropriately and quickly. [Explanation of symbols]

[0078] 150: Data management device

Claims

1. A selection unit that selects one of the trails when management data includes one or more trails; a determination unit that performs a deletion determination for determining whether the selected trail can be deleted; a deletion unit that executes deletion of the selected trail when the result of the deletion determination is true; Equipped with The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; A trail associated with a trail usage is associated with a usage status, which is a status related to the usage. the deletion determination includes determining whether the usage is completed based on a usage status of the usage recorded in the selected trail; Data management device.

2. A selection unit that selects one of the trails when the management data includes one or more trails; a determination unit that performs a deletion determination for determining whether the selected trail can be deleted; a deletion unit that executes deletion of the selected trail when the result of the deletion determination is true; Equipped with The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; A trail has an associated flow status, which is the status of the workflow to which the trail is associated. The flow status associated with a trail will be marked as aborted if the workflow run to which the trail is associated is aborted. The interrupted workflow is restarted from the beginning, and therefore a new trail corresponding to the restart of the workflow is associated with it. The deletion determination includes determining whether a flow status associated with the selected trail is a status representing an interruption. Data management device.

3. A selection unit that selects one of the trails when the management data includes one or more trails; a determination unit that performs a deletion determination for determining whether the selected trail can be deleted; a deletion unit that executes deletion of the selected trail when the result of the deletion determination is true; Equipped with The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; The users of the system are one or more customers and one or more end users for at least one of the customers; In the management data, The trail has an end user associated with it, The standard or law is associated with an end user to whom the provisions of the standard or law apply, When there are multiple different retention periods represented by multiple different regulations associated with an operational item corresponding to a workflow to which the selected trail is associated and an end user associated with the selected trail, the retention period of the selected trail is a period determined from the generation date and time of the trail and the longest retention period among the multiple different retention periods. Data management device.

4. Further comprising a deadline calculation unit, The deadline calculation unit, Identify the corresponding operational items from the generated evidence, Identify the provisions corresponding to the relevant operational items, Determine whether the specified provisions include a retention period; If the result of the determination is true, the date and time from the generation date and time of the trail to the specified retention period is calculated as the retention period of the trail. The data management device according to any one of claims 1 to 3.

5. In the management data, The operational items are associated with provisions in standards or laws, The provisions are associated with standards or laws that contain those provisions; The data management device according to any one of claims 1 to 3.

6. A step in which the computer selects one of the trails when the management data includes one or more trails; a step of performing a deletion determination by the computer, the deletion determination being a determination as to whether the deletion of the selected trail is possible; a computer executing deletion of the selected trail when the result of the deletion determination is true; having The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; A trail associated with a trail usage is associated with a usage status, which is a status related to the usage. the deletion determination includes determining whether the usage is completed based on a usage status of the usage recorded in the selected trail; Data management methods.

7. A step in which a computer selects one of the trails when the management data includes one or more trails; a step of performing a deletion determination by the computer, the deletion determination being a determination as to whether the deletion of the selected trail is possible; a computer executing deletion of the selected trail when the result of the deletion determination is true; having The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; A trail has an associated flow status, which is the status of the workflow to which the trail is associated. The flow status associated with a trail will be marked as aborted if the workflow run to which the trail is associated is aborted. The interrupted workflow is restarted from the beginning, and therefore a new trail corresponding to the restart of the workflow is associated with it. The deletion determination includes determining whether a flow status associated with the selected trail is a status representing an interruption. Data management methods.

8. A step in which a computer selects one of the trails when the management data includes one or more trails; a step of performing a deletion determination by the computer, the deletion determination being a determination as to whether the deletion of the selected trail is possible; a computer executing deletion of the selected trail when the result of the deletion determination is true; having The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; The users of the system are one or more customers and one or more end users for at least one of the customers; In the management data, The trail has an end user associated with it, The standard or law is associated with an end user to whom the provisions of the standard or law apply, When there are multiple different retention periods represented by multiple different regulations associated with an operational item corresponding to a workflow to which the selected trail is associated and an end user associated with the selected trail, the retention period of the selected trail is a period determined from the generation date and time of the trail and the longest retention period among the multiple different retention periods. Data management methods.

9. If the management data contains more than one trail, select one of the trails. performing a deletion determination for determining whether the selected trail can be deleted; If the result of the deletion determination is true, then perform the deletion of the selected trail. Have the computer do this, The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; A trail associated with a trail usage is associated with a usage status, which is a status related to the usage. the deletion determination includes determining whether the usage is completed based on a usage status of the usage recorded in the selected trail; Computer program.

10. When the management data includes one or more trails, selecting one of the trails, performing a deletion determination for determining whether the selected trail can be deleted; If the result of the deletion determination is true, then perform the deletion of the selected trail. Have the computer do this, The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; A trail has an associated flow status, which is the status of the workflow to which the trail is associated. The flow status associated with a trail will be marked as aborted if the workflow run to which the trail is associated is aborted. The interrupted workflow is restarted from the beginning, and therefore a new trail corresponding to the restart of the workflow is associated with it. The deletion determination includes determining whether a flow status associated with the selected trail is a status representing an interruption. Computer program.

11. When the management data includes one or more trails, selecting one of the trails, performing a deletion determination for determining whether the selected trail can be deleted; If the result of the deletion determination is true, then perform the deletion of the selected trail. Have the computer do this, The management data includes, for each of a plurality of operation items related to a system to be operated, data representing one or a plurality of tasks constituting a system operation task and representing a workflow associated with the operation item, and data representing provisions associated with the operation item with respect to a standard or law; Each time a workflow starts to be executed, a trail is associated with the workflow, which is data that represents evidence of the workflow. The deletion determination includes determining whether the current date and time has exceeded a retention period for the selected trail; the retention period of the selected trail is a period determined from the generation date and time of the trail and a retention period represented by a provision associated with an operation item corresponding to the workflow with which the trail is associated; The users of the system are one or more customers and one or more end users for at least one of the customers; In the management data, The trail has an end user associated with it, The standard or law is associated with an end user to whom the provisions of the standard or law apply, When there are multiple different retention periods represented by multiple different regulations associated with an operational item corresponding to a workflow to which the selected trail is associated and an end user associated with the selected trail, the retention period of the selected trail is a period determined from the generation date and time of the trail and the longest retention period among the multiple different retention periods. Computer program.

Images