Information processing system, information processing method, and program
The information processing system addresses the challenge of information leakage in email systems by sending email attachments to an external device and providing link information, allowing secure and convenient access to files without repeated server access.
Patent Information
- Application Number
- JP2021004052
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2021-01-14
- Publication Date
- 2025-04-03
- Estimated Expiration
- 2041-01-14
AI Technical Summary
Existing email systems face challenges in preventing information leakage during email delivery, particularly when attachments contain sensitive information, and recipients must access a server to view attachments, making the process inconvenient.
An information processing system that includes a file sending mechanism to send email attachments to an external device, an email sending mechanism to add information for acquiring the file to the email, and a receiving mechanism to attach the acquired file to the email, thereby reducing information leakage and improving convenience.
The system effectively reduces the risk of information leakage by saving attachments on a server and providing link information, allowing recipients to access files without repeatedly accessing the server, thus enhancing convenience and security.
Smart Images

Figure 0007656165000001 
Figure 0007656165000002 
Figure 0007656165000003
Abstract
Description
[Technical field]
[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]
[0002] 2. Description of the Related Art Information is exchanged on a daily basis using e-mail, and e-mails with files containing confidential information attached are frequently sent and received.
[0003] On the other hand, there have been cases where email data has been illegally obtained during the email delivery route, resulting in the leakage of confidential information contained in attachments, etc.
[0004] Therefore, there is a demand for a mechanism to prevent information leakage during e-mail delivery and to exchange information safely. [Prior art documents] [Patent documents]
[0005] [Patent Document 1] JP 2005-135404 A DISCLOSURE OF THEINVENTION [Problem to be solved by the invention]
[0006] Patent Document 1 describes a technique for safely sending and receiving e-mails in which, when an e-mail contains an attachment, the attachment is separated from the e-mail and a storage area for the separated attachment is added to the e-mail before it is sent.
[0007] However, if the recipient is mistakenly set, confidential information may be disclosed to a person who should not have received the information. In addition, the recipient must access the server where the attachment is saved each time in order to view the attachment, which is time-consuming.
[0008] Therefore, an object of the present invention is to provide a more convenient mechanism for reducing information leakage through e-mail. [Means for solving the problem]
[0009] The information processing system of the present invention is characterized by comprising a file sending means for sending a file attached to an e-mail to an external device, an email sending means for adding information for obtaining the file sent by the file sending means to the e-mail and sending the e-mail, and a receiving means for receiving settings for the disclosure range of the file attached to the e-mail sent by the email sending means.
[0010] The electronic mail system further comprises a receiving means for receiving an e-mail to which information for acquiring the file is added, an acquiring means for acquiring the file from the external device based on the information for acquiring the file, and a file attachment means for attaching the file acquired by the acquiring means to the e-mail received by the receiving means. Effect of the Invention
[0011] According to the present invention, it is possible to provide a more convenient mechanism for reducing information leakage through e-mail. [Brief description of the drawings]
[0012] [Figure 1] FIG. 1 is a diagram showing an example of a configuration of an information processing system. [Diagram 2] FIG. 1 is a diagram showing an example of a hardware configuration of an information processing device; [Diagram 3] Flowchart showing the process when sending an e-mail [Figure 4] Flowchart showing the process of setting the public range of a file [Diagram 5] Flowchart showing the process of attaching a file to a received email [Figure 6] A data table showing file information stored in a server device. [Figure 7] A diagram showing an example of a screen for setting the visibility of a file [Figure 8] A diagram showing an example of a screen for downloading a file DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0013] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.
[0014] FIG. 1 is a diagram showing an example of the configuration of an information processing system according to the present invention.
[0015] As shown in Fig. 1, in the information processing system of the present invention, a sender terminal 101, a server device 102, and a receiver terminal 103 are connected via a network. Note that although the server device 102 is shown as one device in Fig. 1, it may be divided into multiple devices for different functions. Also, it may be in the form of a so-called cloud service.
[0016] A sender terminal 101 is a terminal that is a source of an e-mail and receives instructions to create and send an e-mail.
[0017] The server device 102 is a device that manages files attached to e-mails sent from the sender terminal 101 .
[0018] The recipient terminal 103 is a device for receiving and viewing the e-mail sent from the sender terminal 101. It should be noted that the sending and receiving of e-mails is realized using publicly known technology, and devices necessary for sending and receiving e-mails, such as mail servers (not shown in Figure 1) and cloud environments, are also connected in a communicative manner and realized in cooperation with each other.
[0019] FIG. 2 is a block diagram showing an example of a hardware configuration of an information processing device applicable to the sender terminal 101, the server device 102, and the receiver terminal 103 of the present invention.
[0020] As shown in FIG. 2, the information processing device has a CPU (Central Processing Unit) 201, a ROM (Read Only Memory) 202, a RAM (Random Access Memory) 203, a storage device 204, an input controller 205, an audio controller 206, a video controller 207, a memory controller 208, and a communication I / F controller 209 connected via a system bus 200.
[0021] The CPU 201 comprehensively controls each device and controller connected to the system bus 200 .
[0022] ROM 202 or external memory 213 holds the BIOS (Basic Input / Output System) and OS (Operating System), which are control programs executed by CPU 201, computer-readable and executable programs for realizing this information processing method, and various necessary data (including data tables).
[0023] The RAM 203 functions as a main memory, a work area, etc., for the CPU 201. The CPU 201 loads programs and the like required for executing processes from the ROM 202 or the external memory 213 into the RAM 203, and executes the loaded programs to realize various operations.
[0024] The input controller 205 controls input from an input device such as a keyboard 210 or a pointing device such as a mouse (not shown). If the input device is a touch panel, the user can give various instructions by pressing (touching with a finger or the like) icons, cursors, or buttons displayed on the touch panel.
[0025] The touch panel may be a touch panel capable of detecting positions touched by multiple fingers, such as a multi-touch screen.
[0026] The video controller 207 controls display on an external output device such as a display 212. The display also includes a display of a notebook computer integrated with the main body. Note that the external output device is not limited to a display, and may be, for example, a projector. In addition, an input device is also provided for the device capable of receiving the above-mentioned touch operation.
[0027] The video controller 207 is capable of controlling a video memory (VRAM) for display control, and can use part of the RAM 203 as the video memory area, or can provide a separate dedicated video memory.
[0028] The memory controller 208 controls access to the external memory 213. As the external memory, an external storage device (hard disk) for storing a boot program, various applications, font data, user files, edit files, and various data, a flexible disk (FD), or a compact flash (registered trademark) memory connected to a PCMCIA card slot via an adapter, etc., can be used.
[0029] The communication I / F controller 209 connects and communicates with external devices via a network, and executes communication control processing on the network. For example, communication using TCP / IP, telephone lines such as ISDN, and communication using 4G and 5G lines for mobile phones are possible.
[0030] The CPU 201 enables display on the display 212 by, for example, executing a process of expanding (rasterizing) an outline font in a display information area in the RAM 203. The CPU 201 also enables a user to give instructions using a mouse cursor (not shown) or the like on the display 212.
[0031] Next, the process of sending an e-mail will be described with reference to the flowchart of FIG.
[0032] 3, steps S301 to S306 are processes in which CPU 201 of sender terminal 101 reads and executes a predetermined control program. Steps S307 and S308 are processes in which CPU 201 of server device 102 reads and executes a predetermined control program.
[0033] In step S301, an instruction to send an e-mail created by a user is accepted. Specifically, the instruction to send is accepted by accepting pressing of a send button on a mailer or an operation on a keyboard or the like.
[0034] In step S302, it is determined whether or not an attachment file has been added to the e-mail instructed to be sent in step S301.
[0035] If an attachment has been added (step S302: YES), the process proceeds to step S303; if an attachment has not been added (step S303: NO), the process proceeds to step S306.
[0036] In step S303, the attachment added to the e-mail instructed to be sent in step S301 is sent to the server device 102 to be stored in the server device 102. The server device 102 acquires the file sent from the sender terminal 101 (S307).
[0037] Server device 102 saves the file acquired in step S307, and transmits information for identifying the save destination (information for acquiring the file) to sender terminal 101 (S308).
[0038] In step S304, the attached file sent to server device 102 in step S303 is deleted from the e-mail.
[0039] In step S305, the information for identifying the destination of the file transmitted from server device 102 in step S308 is received, and the information is added to the e-mail instructed to be sent in step S301.
[0040] In this embodiment, information indicating the file save destination is described as being included as a hyperlink in the body of the email, but it is also possible to use a method such as adding a text file or the like containing the information as a new attachment.
[0041] In step S306, the e-mail instructed to be sent in step S301 (if S302: YES, the e-mail for which the processes in S303 to S305 have been executed) is sent to the destination set in the e-mail.
[0042] Through the above processing, the attachment added to the email that has been instructed to be sent is saved in the server device 102, the attachment is not sent, and information identifying the save destination of the attachment is sent to the destination of the email.
[0043] This makes it possible to reduce the risk of information leakage due to unauthorized access to attached files during the e-mail delivery route.
[0044] In the present embodiment, all the attached files are stored in the server device 102, and only the link information is sent to the destination. However, it is also possible to determine whether the attached files satisfy a predetermined condition, store the attached files determined to satisfy the predetermined condition in the server device 102, and send the attached files not satisfying the predetermined condition as they are attached to the e-mail without storing them in the server device 102. The predetermined condition can be set to be whether confidential information is included, whether the file is in a predetermined file format, whether a password is set, or the like. In addition to the condition related to the attached file, a condition related to the destination can be used (for example, in the case of an e-mail sent to a predetermined destination (email address, domain), the attached file can be stored in the server device 102 (or, in the case of an e-mail sent to a predetermined destination, the attached file can be attached and sent as it is), or it can be determined whether to store the attached file in the server device 102 or attach it as it is depending on the number of destinations).
[0045] Next, a process for setting a public recipient of a file stored in the server device 102 will be described with reference to the flowchart of FIG.
[0046] 4, steps S401 to S406 are processes in which CPU 201 of sender terminal 101 reads and executes a predetermined control program. Steps S407 and S408 are processes in which CPU 201 of server device 102 reads and executes a predetermined control program.
[0047] In step S401, a selection of sent e-mail is accepted from the user, for example, from among the e-mails in the sent mailbox of the mailer.
[0048] In step S402, it is determined whether the e-mail whose selection was accepted in step S401 contains a linked file. That is, it is determined whether the e-mail whose selection was accepted is an e-mail to which a file saved in the server device 102 by the process of the flowchart in Fig. 3 was attached. Specifically, this can be determined by adding information to the e-mail data for identifying that the process has been executed in the process of the flowchart in Fig. 3. Alternatively, it may be determined by determining whether the e-mail body contains link information to the file saved in the server device 102.
[0049] If there is a linked file (step S402: YES), the process proceeds to step S403.
[0050] If there is no linked file (step S402: NO), the process of this flowchart ends.
[0051] In step S403, an instruction to set the disclosure range for the attached file stored in the server device 102 is accepted. In this embodiment, the instruction is accepted by pressing an attached file management button prepared in the mailer. Details will be described with reference to FIG. 7.
[0052] In step S404, the destination of the e-mail selected in step S401 and the file attached to the e-mail are displayed.
[0053] In step S405, settings for the persons to whom the file is to be made public for the file attached to the e-mail selected in step S401 are accepted.
[0054] In step S406, the setting contents accepted in step S405 are transmitted to the server device 102.
[0055] In step S407, server device 102 receives the setting contents regarding the disclosure range transmitted from sender terminal 101 in step S406.
[0056] In step S408, the setting contents received in step S407 are stored in association with the file to which the setting is to be applied.
[0057] Next, the process of setting the disclosure range will be described with reference to FIG.
[0058] FIG. 7 is a diagram showing an example of a screen displaying a list of sent emails and the contents of the sent emails.
[0059] In the area (701) on the left side of the screen where sent emails are displayed as a list, sent emails (702) selected by the user are displayed in the email display area (703) on the right side.
[0060] As can be seen in the email text displayed in the email display area, the attached file is stored in the server device 102 (converted into a URL), and link information for obtaining the attached file is described.
[0061] When the user presses the attachment file management button 704, the disclosure range of the attachment file can be set.
[0062] As shown in an area 705 for receiving setting information, information about the attached file and the recipients of the file are displayed.
[0063] In the example of Figure 7, the attached file is "Minutes.doc", and "sato@abc.co.jp" and "tanaka@abc.co.jp" are set as the disclosure recipients (scope of disclosure). The destination of the e-mail is displayed as the disclosure recipient, and the setting of the disclosure recipient is accepted by checking the check box.
[0064] In the example of FIG. 7, a case where there is one attached file is shown, but if there are multiple attached files, it is possible to set disclosure recipients for each file.
[0065] In addition, although the recipient's email address is displayed as the person to whom the email is to be made public, it is also possible to set it so that anyone can view and obtain the email, not just the recipient, or so that only people in a specific domain can view and obtain the email.
[0066] When the setting button 706 is pressed, the setting contents are transmitted to the server device 102 (S406).
[0067] The above process makes it possible to set the disclosure range for a file stored in the server device 102. Since the file remains private until the disclosure range is set, even if an email is sent to the wrong recipient, it is possible to prevent the contents of the file from being leaked to the wrong recipient.
[0068] Next, the process relating to file management at the receiver will be described with reference to the flowchart of FIG.
[0069] Of the processes shown in the flowchart of FIG. 5, steps S504 to S506 are processes in which the CPU 201 of the server device 102 reads and executes a predetermined control program, and the other processes are processes in which the CPU 201 of the receiver terminal 103 reads and executes a predetermined control program.
[0070] In step S501, a selection of received email is accepted from the user. Specifically, a selection of any of the emails in the inbox of the mailer is accepted.
[0071] In step S502, it is determined whether or not the received email, the selection of which was accepted in step S501, contains a linked file. In other words, it is determined whether or not the email, the selection of which was accepted, is an email whose attached file has been saved in server device 102 by the process of the flowchart in FIG.
[0072] Specifically, identification information is added to the e-mail data when it is sent, and the method of determining whether the identification information is present or not can be considered. Alternatively, the method of determining whether the e-mail body contains link information of a file stored in the server device 102 can be used.
[0073] If there is a linked file (step S502: YES), the process proceeds to step S503.
[0074] If there is no linked file (step S502: NO), the processing of this flowchart is terminated (although not shown in this flowchart, normal mailer processing is performed, such as displaying the selected email so that it can be viewed).
[0075] In step S503, an instruction to download (obtain) the file attached to the email selected in step S501 is accepted. In this embodiment, the instruction is accepted by accepting the user's pressing of the download button 806 on the screen shown in Fig. 8, but the instruction may also be accepted by accepting an operation of clicking on link destination information written in the body of the received email or the like.
[0076] The received instruction is then transmitted to the server device 102. The information transmitted here includes information for identifying the user who made the download request, information for identifying the file to be downloaded, and the like.
[0077] In step S504, the server device 102 receives the information transmitted in step S503, and determines whether the user who requested acquisition of the file has the authority (access authority, acquisition authority) to view the file.
[0078] Specifically, the determination is made based on whether the user is registered in the disclosure range shown in FIG. 6. If the authority is established (step S504: YES), the process proceeds to step S505, and the file is transmitted to the receiver terminal 103.
[0079] If the authority is not obtained (step S504: NO), the process proceeds to step S506, and error information indicating that the authority is not obtained is transmitted to the receiver terminal 103.
[0080] In step S507, the information transmitted from the server device 102 in steps S505 and S506 is received, and if the file requested from the server device 102 is received, the process proceeds to step S508, and if error information is received, the process proceeds to step S509.
[0081] In step S508, the file acquired in step S507 is attached to the received email whose selection was accepted in step S501.
[0082] In step S509, error information indicating that there is no acquisition authority is notified, and the process of this flowchart ends.
[0083] Next, the process of attaching a file to a received email will be described with reference to FIG.
[0084] FIG. 8 is a diagram showing an example of a screen displaying a list of received emails and the contents of the received emails.
[0085] In the area (801) on the left side of the screen where received emails are displayed as a list, received emails (802) selected by the user are displayed in the email display area (803) on the right side.
[0086] As can be seen in the email text displayed in the email display area, the attached file is stored in the server device 102 (converted into a URL), and link information for obtaining the attached file is described.
[0087] When the user presses the attachment management button 804, the attachment can be obtained from the server device 102.
[0088] As shown in an area 805 displaying information about attached files, information about the attached files and check boxes for whether or not to download (obtain) each file are displayed.
[0089] In the example of FIG. 8, the attached file is "Minutes.doc" and the check box is checked, which indicates that the file has been selected for download.
[0090] Then, when the download button 806 is pressed, a request to acquire the selected file is sent to the server device 102 (S503).
[0091] The downloaded file is then managed as an attachment to the received email.
[0092] In this embodiment, the process of adding an attachment to a received e-mail has been described, but if you simply want to obtain and view a file, you can view and obtain the file at the link destination by selecting a hyperlink added to the body of the e-mail, etc.
[0093] Through the above processing, even if an attachment is stored on a server or the like and only information such as a URL is added to an e-mail as in the present invention, it is possible to obtain the file from the server or the like after reception and attach it to the received e-mail, eliminating the need to access the server every time a received e-mail is viewed, thereby making it possible to increase the efficiency of e-mail viewing.
[0094] Next, file information stored in server device 102 will be described with reference to FIG.
[0095] 6, server device 102 stores the attachment data transmitted from sender terminal 101. Information stored as the attachment includes the file name, the sender (the sender of the e-mail to which the file is attached), the destination where the attachment is saved, the scope of disclosure, the browsing history, and the like.
[0096] The disclosure range is set as private until the process of the flowchart in Fig. 5 is executed. Also, if the private state continues for a predetermined period of time, or if a request to obtain the file is received while the file is private, a notification may be sent to the sender urging them to set the disclosure range. This makes it possible to prevent a situation in which the sender forgets to set the disclosure range.
[0097] The viewing history is an item that records the history of viewing a file. For example, the file with ID1 has been viewed once by a user identified as sato@abc.co.jp.
[0098] It should be noted that the items shown in FIG. 6 are merely an example, and it is not necessary to include all of these items, and items other than these may also be included.
[0099] The present invention can be embodied, for example, as a system, an apparatus, a method, a program, or a recording medium, etc. Specifically, the present invention may be applied to a system composed of a plurality of devices, or may be applied to an apparatus composed of a single device.
[0100] Moreover, the program in the present invention is a program that enables a computer to execute the processing method of the flowcharts shown in Figures 3 to 5, and the storage medium of the present invention stores a program that enables a computer to execute the processing method of Figures 3 to 5. The program in the present invention may be a program for each processing method of each device in Figures 3 to 5.
[0101] As described above, it goes without saying that the object of the present invention can be achieved by supplying a recording medium on which a program that realizes the functions of the above-mentioned embodiments is recorded to a system or device, and having the computer (or CPU or MPU) of that system or device read and execute the program stored on the recording medium.
[0102] In this case, the program itself read out from the recording medium will realize the novel functions of the present invention, and the recording medium on which the program is recorded will constitute the present invention.
[0103] Examples of recording media for supplying the program include flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, DVD-ROMs, magnetic tapes, non-volatile memory cards, ROMs, EEPROMs, silicon disks, etc.
[0104] Furthermore, it goes without saying that the functions of the above-mentioned embodiments are not only realized by the computer executing a program it has read, but also includes cases where an OS (operating system) running on the computer performs some or all of the actual processing based on the instructions of the program, and the functions of the above-mentioned embodiments are realized through that processing.
[0105] Furthermore, it goes without saying that this also includes cases where a program read from a recording medium is written into a memory provided on a function expansion board inserted into a computer or a function expansion unit connected to a computer, and then a CPU or the like provided on the function expansion board or function expansion unit performs some or all of the actual processing based on the instructions of the program code, thereby realizing the functions of the above-mentioned embodiments.
[0106] The present invention may be applied to a system consisting of multiple devices, or to an apparatus consisting of a single device. Needless to say, the present invention can also be applied to a case where the object is achieved by supplying a program to a system or apparatus. In this case, the effect of the present invention can be enjoyed by the system or apparatus by reading a recording medium storing a program for achieving the present invention into the system or apparatus.
[0107] Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network using a communication program, the system or device can enjoy the effects of the present invention. Note that the present invention also includes configurations that combine the above-mentioned embodiments and their modified examples. [Explanation of symbols]
[0108] 101 Sender terminal 102 Server device 103 Recipient terminal
Claims
1. a file transmission means for transmitting a file attached to an e-mail to a storage device; a mail sending means for adding information for acquiring the file sent by the file sending means to the email and sending the email; a receiving means for receiving a setting of a disclosure range of the file attached to the email; a control means for controlling the file transmitted by the file transmitting means to be managed as a private file until the setting of the range of disclosure is received by the receiving means; An information processing system comprising:
2. The information processing system according to claim 1, characterized in that the reception means receives settings of the range of disclosure of the file by receiving a selection of a destination to which the file is to be made public from among the destinations of the email.
3. a display control means for controlling the display of a list of destinations of the electronic mail; The information processing system according to claim 1 or 2, characterized in that the reception means accepts the setting of the range of disclosure of the file by accepting a selection of a destination to which the file is to be made public from among the destinations of the email listed by the display control means.
4. The information processing system according to any one of claims 1 to 3, characterized in that the reception means, when there are multiple files attached to the e-mail, receives settings for the scope of disclosure for each file.
5. 5. The information processing system according to claim 1, wherein said file transmission means transmits the file to a storage device when the e-mail satisfies a predetermined condition.
6. The predetermined condition is: Whether any files attached to said email contain confidential information; Whether the file attached to the email is in a specified file format; Whether or not the file attached to the email is password protected; 6. The information processing system according to claim 5, wherein the condition is based on at least one of the above.
7. The predetermined condition is:
6. The information processing system according to claim 5, wherein the condition is based on whether the e-mail is an e-mail to be sent to a predetermined destination.
8. The information processing system according to any one of claims 1 to 7, further comprising a notification means for notifying the sender of the email to prompt the sender to set the disclosure range for a file for which the reception means has not accepted the setting of the disclosure range.
9. 9. The information processing system according to claim 1, wherein said mail sending means sends the electronic mail to the destination without attaching the file sent by said file sending means.
10. An information processing system as described in any one of claims 1 to 9, characterized in that the file sending means sends a file attached to an e-mail to a storage device in response to receiving an instruction to send the e-mail.
11. a receiving means for receiving an e-mail to which information for acquiring the file is added; an acquisition means for acquiring the file from the storage device based on information for acquiring the file; a file attachment means for attaching the file acquired by the acquisition means to the e-mail received by the reception means; 11. The information processing system according to claim 1, further comprising:
12. An information processing method in an information processing system, comprising: a file transmission step in which a file transmission means of the information processing system transmits a file attached to an e-mail to a storage device; a mail sending step in which a mail sending means of the information processing system sends an e-mail by adding information for acquiring the file sent by the file sending step to the e-mail; a receiving step in which a receiving means of the information processing system receives a setting of a disclosure range of the file attached to the email transmitted by the email transmitting step; a control step of controlling the control means of the information processing system to manage the file as a private file until the setting of the disclosure range is accepted by the accepting means; An information processing method comprising:
13. A program for causing a computer to function as each of the means according to any one of claims 1 to 11.
Citation Information
Patent Citations
Delivery of document accompanying electronic mail
JP2005135404A
Method for transmitting e-mail
JP2009163525A
Electronic mail system
JP2009188805A
Erroneous transmission / reception of e-mail with attached file prevention system
JP2011248710A
Uploading attachments and inserting links to electronic messages.
JP2014514665A