Information processing device and program

Abstract

To ensure that the content of a folder or a file is hardly inferred by a user not having an access right, as compared with the case where the name of the folder or the file is not altered.SOLUTION: Provided is an information processing device that includes a processor. When receiving, regarding a folder of a file stored in memory, a request for displaying the name of the folder or the file from a terminal device, the processor alters the name of a folder or a file for which a user of the terminal device does not have the right to access to a different character string and outputs the character string to the terminal device.SELECTED DRAWING: Figure 6

Description

[Technical Field]

[0001] The present invention relates to an information processing device and a program. [Background technology]

[0002] As a prior art, Patent Document 1 discloses an encrypted file management device that, when allowing an access source to access an encrypted file, converts the file name of the encrypted file and generates a temporary file name that is completely unrelated to the original file name. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2002-312222 Summary of the Invention [Problem to be solved by the invention]

[0004] To solve the problem that, when the name of a folder or file stored in an information processing device is displayed on a terminal device, if the name of a folder or file to which a user of the terminal device does not have access rights is displayed as is without modification, a user who does not have access rights may be able to guess the contents of the folder or file from the displayed name. The present invention aims to make it more difficult for a user without access rights to guess the contents of a folder or file compared to when the name of the folder or file is not modified. [Means for solving the problem]

[0005] The invention of claim 1 includes a processor, and when the processor receives a request from a terminal device to display the name of a folder or file stored in a memory, the processor: Obtain the name of the folder or file and information about the access rights set for the folder or file, and The user of the terminal device does not have access rights In this case, Enter the name of the folder or file , including a phrase indicating that the user of the terminal device does not have access rights The information processing device converts the information into a character string and outputs it to the terminal device. The invention of claim 2 is as follows: The system is provided with a processor, and when the processor receives a request from a terminal device to display the name of a folder or file stored in a memory, the processor acquires the name of the folder or file and information about the access rights set for the folder or file, and when the user of the terminal device does not have the access right to the folder or file, the processor modifies the name of the folder or file into a character string including a sorting character at the beginning and outputs the name to the terminal device. It is an information processing device. The invention of claim 3 is as follows: 3. The information processing device according to claim 2, wherein the processor determines the characters for sorting based on the names of folders or files to which the user of the terminal device has access rights. The invention of claim 4 is as follows: This information processing device is equipped with a processor, which, when receiving a request from a terminal device to display the name of a folder or file stored in memory, obtains the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have the access rights to the folder or file, modifies the name of the folder or file to a character string with a predetermined extension and outputs the name to the terminal device. The invention of claim 5 is as follows: This information processing device includes a processor, which, when receiving a request from a terminal device to display the name of a folder or file stored in memory, modifies the name of a folder or file to which a user of the terminal device does not have access rights using predetermined modification rules to a different character string and outputs the modified name to the terminal device, and when the user of the terminal device is granted access rights to the folder or file whose name has been modified, restores the name using the modification rules and outputs the name to the terminal device. The invention of claim 6 is as follows: This information processing device is equipped with a processor, and when the processor receives a request from a terminal device to display the name of a folder or file stored in memory, the processor obtains information about the name of the folder or file and the access rights set for the folder or file, and if the user of the terminal device does not have access rights to the folder or file, modifies the name of the folder or file to a character string different from the original name in a manner that differs depending on the type of access rights that the user of the terminal device does not have for the folder or file, and outputs the modified name to the terminal device. The invention of claim 7 is as follows: This program enables a computer to, when it receives a request from a terminal device to display the name of a folder or file stored in memory, obtain the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modify the name of the folder or file to which the user of the terminal device does not have access rights into a string containing words indicating that the user of the terminal device does not have access rights, and output the modified name to the terminal device. The invention of claim 8 is as follows: This program enables a computer to obtain, when it receives a request from a terminal device to display the name of a folder or file stored in memory, the name of the folder or file and information about the access rights set for the folder or file, and if the user of the terminal device does not have access rights to the folder or file, modify the name of the folder or file to which the user of the terminal device does not have access rights into a string that includes a sorting character at the beginning and output the modified name to the terminal device. The invention of claim 9 is as follows: This program enables a computer to, when it receives a request from a terminal device to display the name of a folder or file stored in memory, obtain the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modify the name of the folder or file to which the user of the terminal device does not have access rights into a character string with a predetermined extension and output it to the terminal device. The invention of claim 10 is as follows: This program enables a computer to realize the function of, when it receives a request from a terminal device to display the name of a folder or file stored in memory, modifying the name of a folder or file to which the user of the terminal device does not have access rights using predetermined modification rules to a different string of characters and outputting the modified name to the terminal device, and when the user of the terminal device is granted access rights to the folder or file whose name has been modified, restoring the name using the modification rules and outputting the name to the terminal device. The invention of claim 11 is as follows: This program enables a computer to, when it receives a request from a terminal device to display the name of a folder or file stored in memory, obtain the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modify the name of the folder or file to which the user of the terminal device does not have access rights into a character string different from the original name in a manner that differs depending on the type of access rights that the user of the terminal device does not have for the folder or file, and output the modified name to the terminal device. [Effects of the Invention]

[0006] Claim 1 、2 According to the invention, it is possible to make it more difficult for a user who does not have the access right to guess the contents of a folder or file, compared to when the name of the folder or file is not changed. According to the invention of claim 3, it becomes easier to display both folders or files for which you do not have access rights and folders or files for which you do have access rights together, compared to when the sorting characters are not determined based on the names of folders or files for which you have access rights. According to the inventions of claims 4 to 11, it is possible to make it more difficult for a user who does not have the access right to guess the contents of a folder or file, compared to when the name of the folder or file is not changed. [Brief explanation of the drawings]

[0007] [Figure 1] 1 is a diagram illustrating an example of the overall configuration of an information processing system to which the present embodiment is applied. [Figure 2] FIG. 2 illustrates an example of a hardware configuration of an information processing device. [Figure 3] 10(a) and 10(b) are diagrams showing an example of additional information of files and folders stored in a storage unit. [Figure 4] FIG. 2 illustrates an example of a hardware configuration of a terminal device. [Figure 5]10 is a flowchart showing an example of a processing operation of an information processing unit to which the present embodiment is applied. [Figure 6] FIG. 4 is a diagram showing an example of a display that is displayed on a display device of a terminal device when a user makes a display request to display the names of the file shown in FIG. 3(a) and the folder shown in FIG. 3(b). [Figure 7] 4(a) shows an example of a display that is displayed on the display device of the terminal device when a display request for displaying the name of the file shown in FIG. 3(a) is made by the user. FIG. [Figure 8] 4(a) shows an example of a display that is displayed on the display device of the terminal device when a display request for displaying the name of the file shown in FIG. 3(a) is made by the user. FIG. [Figure 9] 4(a) shows an example of a display that is displayed on the display device of the terminal device when a display request for displaying the name of the file shown in FIG. 3(a) is made by the user. FIG. [Figure 10] FIG. 10 is a diagram showing an example of additional information of files stored in a storage unit, showing the name of each file and information about access rights set for each user to each file. [Figure 11] 4(a) shows an example of a display that is displayed on the display device of the terminal device when a display request for displaying the name of the file shown in FIG. 3(a) is made by the user. FIG. DETAILED DESCRIPTION OF THE INVENTION

[0008] Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings. (Embodiment 1) <Information Processing System 1> Fig. 1 is a diagram showing an example of the overall configuration of an information processing system 1 to which the present embodiment is applied. As shown in Fig. 1, the information processing system 1 includes an information processing device 100 and a plurality of terminal devices 200 connected to the information processing device 100. In the information processing system 1, the information processing device 100 and each of the terminal devices 200 are connected via a communication line 300 such as an Internet line. Furthermore, the information processing device 100 and each of the terminal devices 200 are configured by a computer device such as a PC (Personal Computer), for example.

[0009] <Information processing device 100> Next, a hardware configuration of the information processing device 100 to which this embodiment is applied will be described. 2, the information processing device 100 includes an information processing unit 110 that processes information, a storage unit 120 that stores information, and a communication interface (communication I / F) 130 that realizes communication. In the information processing device 100, the information processing unit 110, the storage unit 120, and the communication I / F 130 are connected to a bus 180, and data is exchanged via this bus 180.

[0010] As shown in FIG. 2, the information processing unit 110 is made up of a CPU (Central Processing Unit) 110a, a ROM (Read Only Memory) 110b, and a RAM (Random Access Memory) 110c. The CPU 110a is an example of a processor, and realizes various functions described below by loading various programs stored in the ROM 110b etc. into the RAM 110c and executing them. The RAM 110c is a memory used as a working memory etc. for the CPU 110a. The ROM 110b is a memory that stores various programs etc. executed by the CPU 110a.

[0011] Here, the program executed by CPU 110a may be provided to terminal device 200 in a state where it is stored in a computer-readable recording medium such as a magnetic recording medium (such as a magnetic tape or a magnetic disk), an optical recording medium (such as an optical disk), a magneto-optical recording medium, or a semiconductor memory. Also, the program executed by CPU 110a may be provided to terminal device 200 using a communication means such as the Internet.

[0012] In addition, in this embodiment, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.). Furthermore, the operations of the processor in this embodiment may not only be performed by one processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processor is not limited to the order described in this embodiment, and may be changed.

[0013] The storage unit 120 is an example of a memory, and is configured by, for example, an HDD (Hard Disk Drive), and stores various types of data. More specifically, the storage unit 120 of this embodiment stores information about files and folders that are available to the user of the terminal device 200 .

[0014] A file refers to a group of data in a predetermined unit. Examples of such files include a document file, an image file, a video file, and an audio file. A file includes content, which is the entity of the file, and additional information added to the content. Content is, for example, document data in a document file, image data in an image file, video data in a video file, and audio data in an audio file. The additional information of a file is information indicating the attributes and settings of the content, such as the name of the file, the access rights set for the user of the terminal device 200, the creation date and time of the file, the update date and time, and the creator. A file name is information given to identify each file. A file name usually includes a unique file name for each file and an extension added to the end of the file name that indicates the type or format of the file.

[0015] A folder stores files and other folders and groups them together. Note that a folder may contain no files or other folders (i.e., it may be empty). A folder contains information about the files stored therein, as well as additional information indicating the attributes and settings of the folder. The additional information of a folder is, for example, the name of the folder, the access rights set for the user of the terminal device 200, the creation date and time of the folder, the update date and time, the creator, etc. Here, the folder name is information given to identify each folder, and is unique to each folder.

[0016] Furthermore, the access rights set for a user with respect to each folder or file are rights that allow the user to perform predetermined operations on the target folder, target file, or file stored in the target folder. There may be multiple types of access rights depending on the target operation, etc. Examples of such access rights include, but are not limited to, a viewing right that allows the user to view the contents of a folder or file, and an editing right that allows the user to edit the contents of a folder or file.

[0017] 3(a) and 3(b) are diagrams showing an example of additional information of files and folders stored in storage unit 120. Fig. 3(a) shows an example of additional information of a file, and Fig. 3(b) shows an example of additional information of a folder. Fig. 3(a) and 3(b) show, as additional information of files and folders, the name of each file or folder, and information about the access rights set for each user to each file or folder. As shown in Figures 3(a) to (b), the memory unit 120 stores, for each of multiple users (in this example, User A, User B, and User C) who operate the terminal device 200, whether or not they have access rights (yes / no) to each file or folder.

[0018] The storage unit 120 also stores information about multiple users who operate the terminal device 200. The storage unit 120 stores, as information about users, for example, identification information that identifies each user. Here, the identification information is information for identifying multiple users from each other, and examples include user names and IDs assigned to each user. The storage unit 120 may also store authentication information, such as a password used by the information processing unit 110 to authenticate each user.

[0019] Furthermore, the storage unit 120 stores information about modification rules used in the process of modifying the names of folders or files performed by the information processing unit 110. The modification rules will be explained later. Furthermore, the storage unit 120 may store the renamed name of a folder or file whose name has been modified by the information processing unit 110.

[0020] <Terminal Device 200> Next, a description will be given of the hardware configuration of the terminal device 200 to which this embodiment is applied. FIG. 4, the terminal device 200 includes an information processing unit 210 having a CPU 210a, a ROM 210b, and a RAM 210c for processing information, a storage unit 220 for storing information, and a communication interface (communication I / F) 230 for realizing communication. The terminal device 200 also includes an operation reception device 240 for receiving operations by a user, and a display device 250 for displaying information. In the terminal device 200, the information processing unit 210, the storage unit 220, the communication I / F 230, the operation reception device 240, and the display device 250 are connected to a bus 280, and data is exchanged via the bus 280.

[0021] The operation reception device 240 includes, for example, a mouse, a keyboard, or a touch panel. The operation reception device 240 is used by a user of the terminal device 200 to input information to the information processing system 1. In this embodiment, the operation reception device 240 is used by a user to make a request to display a list of folders or files stored in the information processing device 100. The display device 250 includes, for example, a liquid crystal display or an organic EL (Electro Luminescence) display.

[0022] Although details will be described later, in the terminal device 200 of this embodiment, a user operates the operation reception device 240 to issue a display request to the information processing device 100 to display the names of folders or files stored in the storage unit 120 of the information processing device 100. Then, the terminal device 200 receives information (an output list to be described later) including the names of the folders or files for which the display request has been made from the information processing device 100, and causes the display device 250 to display the names of the folders or files.

[0023] <Processing by Information Processing Device 100> In the information processing system 1 of this embodiment, when a display request to display the names of folders or files stored in the memory unit 120 is made from the terminal device 200 to the information processing device 100, the information processing device 100 performs a process of modifying the names of folders or files to which the user of the terminal device 200 does not have access rights. Next, the operation of the information processing system 1 according to this embodiment will be described using a flowchart, focusing on the operation of the information processing unit 110 of the information processing device 100. Fig. 5 is a flowchart showing an example of the processing operation of the information processing unit 110 to which this embodiment is applied.

[0024] First, the user of the terminal device 200 operates the operation reception device 240 of the terminal device 200 to select one or more folders or files from among the folders or files stored in the storage unit 120. Then, the user of the terminal device 200 makes a display request to the information processing device 100 to display the names of the selected folders or files on the display device 250. In the information processing device 100, the information processing unit 110 receives a display request from the terminal device 200 (step 101). Here, the folder or file for which the information processing unit 110 accepts a display request may be, for example, a plurality of folders or files that are grouped and stored in one folder, or may be a single folder or file.

[0025] Next, the information processing unit 110 acquires information about the folder or file for which the display request was accepted in step 101 from the storage unit 120 (step 102). In step 102, the information processing unit 110 obtains, from the storage unit 120, information about the folders or files, including at least the access rights set for each folder or file, and the names of each folder or file, from the additional information of each folder or file.

[0026] Next, the information processing unit 110 authenticates the user of the terminal device 200 that accepted the display request in step 101 (step 103). There are no particular limitations on the method for authenticating a user, but for example, the information processing unit 110 requests the terminal device 200 to transmit identification information for identifying the user and authentication information used to authenticate the user via the communication I / F 130. Upon receiving the transmission request, the user operates the operation reception device 240 of the terminal device 200 to send the identification information and authentication information from the terminal device 200 to the information processing device 100. In the information processing device 100, the information processing unit 110 identifies and authenticates the user of the terminal device 200 based on the identification information and authentication information transmitted from the terminal device 200.

[0027] Next, the information processing unit 110 determines whether or not the access right is set for the user authenticated in step 103 for one of the folders or files (hereinafter referred to as the target folder or file) for which a display request was received in step 101, based on the information about the access right acquired in step 102 (step 104).

[0028] If the user has been granted access rights to the target folder or file (YES in step 104), information processing unit 110 proceeds to step 106, which will be described later, and continues the process. On the other hand, if the user does not have access rights to the target folder or file (NO in step 104), the information processing unit 110 executes a modification process to modify the name of this folder or file (step 105). In addition, the information processing unit 110 executes a modification process to modify the name of a folder or file to which the user does not have access rights, to a character string different from the name before modification. The modification process to modify the name of a folder or file will be described in detail later.

[0029] Next, the information processing unit 110 creates output data for the target folder or file to be output to the terminal device 200 (step 106). The output data is information to be displayed on the display device 250 of the terminal device 200, and includes the name of the target folder or file. If the user has not been granted access rights to the target folder or file and the information processing unit 110 has performed a modification process to modify the name of the folder or file in step 105, the information processing unit 110 uses the modified name of the folder or file as the output data. On the other hand, if the user has been granted access rights to the target folder or file, the information processing unit 110 uses the original name of the target folder or file as the output data.

[0030] Next, the information processing unit 110 determines whether or not there is an unprocessed folder or file that has not been subjected to the processes of steps 104 to 106 among the folders or files acquired in step 102 (step 107). If there are any unprocessed folders or files (YES in step 107), the information processing unit 110 returns to step 104 and continues the processing.

[0031] On the other hand, if there are no unprocessed folders or files (NO in step 107), information processing unit 110 groups the output data for each folder or file created in step 106 and creates an output list consisting of the group of folders or files (step 108). The output list includes the names of all folders or files acquired in step 102. More specifically, the output list includes the original names of folders or files acquired in step 102 to which the user has access rights, and the modified names performed in step 105 for folders or files to which the user does not have access rights.

[0032] Subsequently, the information processing unit 110 outputs the output list created in step 108 to the terminal device 200 via the communication I / F 130 (step 109). Upon receiving the output list, the terminal device 200 displays the names of the folders or files included in the output list on the display device 250 under the control of the information processing unit 210. As a result, folders or files to which the user of the terminal device 200 does not have access rights are displayed on the display device 250 with the names after the modification performed in step 105. On the other hand, folders or files to which the user of the terminal device 200 has access rights are displayed with their original names as they are.

[0033] Generally, a character string related to the contents of a folder or file is often used as the name of the folder or file. In this case, if the original name of a folder or file to which the user of the terminal device 200 does not have access rights is displayed on the display device 250, the user may be able to guess the contents of the folder or file from the displayed name. In contrast to this, in the present embodiment, for folders or files to which the user does not have access rights, the information processing unit 110 of the information processing device 100 performs a name modification process. As a result, for folders or files to which the user does not have access rights, the original names are not displayed on the display device 250, but the modified names are displayed. As a result, compared to when the original names of folders or files to which the user does not have access rights are displayed on the display device 250, the user is less likely to guess the contents of the folders or files from the displayed names.

[0034] <Modification process> As described above, the information processing unit 110 of this embodiment modifies the name of a folder or file to which the user does not have access rights to a character string different from the original name. The modified character string is not particularly limited as long as it is different from the original name, but the information processing unit 110 can, for example, modify the name of a folder or file to which the user does not have access rights to a character string that has no meaning. Furthermore, the information processing unit 110 can modify the name to a character string that includes a specific character string that satisfies a predetermined condition.

[0035] Furthermore, the information processing unit 110 may perform the modification in accordance with a predetermined modification rule. The predetermined modification rule is not particularly limited as long as it can modify the name of a folder or file into a character string different from the original name. An example of such a modification rule is an encryption key that encrypts the original name of a folder or file into a meaningless character string. The encryption method of the encryption key used to modify the folder or file name is not particularly limited, and may be a symmetric key encryption or a public key encryption. Further, the modification rule may be a conversion formula or a conversion table that replaces the original name of a folder or file with a predetermined word or character. Furthermore, the information processing unit 110 may use a combination of multiple modification rules.

[0036] Next, the modification process for modifying the name of a folder or file, which is performed by the information processing unit 110 of the information processing device 100, will be described in more detail with a specific example. (Example 1 of modification processing) Here, we will explain an example in which a display request to display the names of the file shown in Figure 3(a) and the folder shown in Figure 3(b) is made by user A (hereinafter, sometimes simply referred to as user) of terminal device 200. FIG. 6 shows an example of a display that is displayed on the display device 250 of the terminal device 200 when a user requests the display of the file shown in FIG. 3(a) and the name of the folder shown in FIG. 3(b).

[0037] As shown in Figure 3(a), of the five files for which the user requested to display, "2020_0115_Customer_Name_List.pdf," "2020_0820_PC_Regular_Inventory.xlsx," "Meeting_Minutes.xdw," "Application_Form.doc," and "Emergency_Contact_Address_List.xlsx," the user does not have access rights to two of the files, "2020_0115_Customer_Name_List.pdf" and "Emergency_Contact_Address_List.xlsx." In this case, the information processing unit 110 performs a modification process to modify the names of the two files, "2020_0115_customer_list.pdf" and "emergency_contact_address_book.xlsx."

[0038] In this example, the information processing unit 110 changes the name of a file to which the user does not have access rights into a meaningless character string. Specifically, the information processing unit 110 changes the unique file name "2020_0115_CustomerName.pdf" to the meaningless string "0cu3r-fujnsu89alFk" in the file name "2020_0115_CustomerName.pdf" to which the user does not have access. Similarly, the information processing unit 110 changes the unique file name "EmergencyContactAddressBook.xlsx" to the meaningless string "Lxmx71psabCqjis" in the file name "EmergencyContactAddressBook.xlsx" to which the user does not have access. Note that in this example, the file extensions for each file name are left unchanged.

[0039] Furthermore, as shown in FIG. 3(b), the user does not have access rights to two of the three folders for which the user has made a display request: "15_Address Book" and "90_Customer List." In this case, similar to the file example described above, the information processing unit 110 changes the names of the two folders, "15_Address Book" and "90_Customer List," to meaningless strings of characters. Specifically, the information processing unit 110 changes the name of the folder, "15_Address Book," to which the user does not have access rights, to the meaningless string "s8a6FxcVg." Similarly, the information processing unit 110 changes the name of the folder, "90_Customer List," to which the user does not have access rights, to the meaningless string "pt1xUalkdnart."

[0040] On the other hand, the information processing unit 110 does not change the names of the files "2020_0820_PC Periodic Inventory.xlsx," "Meeting Minutes.xdw," and "Application Form.doc" to which the user has access rights, and the folder "00_Communication" to which the user has access rights.

[0041] Then, the information processing unit 110 outputs, as output data to the terminal device 200, the altered names of folders or files to which the user does not have access rights, and the original names of folders or files to which the user has access rights. The terminal device 200 displays the output data received from the information processing device 100 on the display device 250 under the control of the information processing unit 210 .

[0042] 6, the terminal device 200 displays the names of the files requested to be displayed by the user as a window W1 on the display device 250. In the window W1, for the files "2020_0115_CustomerName.pdf" and "EmergencyContactAddressBook.xlsx" to which the user does not have access rights, the modified names "0cu3r-fujnsu89alFk.pdf" and "Lxmx71psabCqjis.xlsx," which are made up of meaningless characters, are displayed. This prevents a user from guessing the contents of files "2020_0115_CustomerList.pdf" and "Emergency Contact Address Book.xlsx," to which the user does not have access rights, even if the user sees the names of the files displayed in window W1.

[0043] 6, the terminal device 200 displays the names of the folders requested to be displayed by the user as window W2 on the display device 250. In window W2, the folders "15_Address Book" and "90_Customer List," to which the user does not have access rights, are displayed with modified names, "s8a6FxcVg" and "pt1xUalkdnart," which are meaningless character strings. This prevents the user from guessing the contents of the folders "15_Address Book" and "90_Customer List," to which the user does not have access rights, even when looking at the folder names displayed in window W2.

[0044] On the other hand, in window W1, the original names of the files "2020_0820_PC Periodic Inventory.xlsx," "Meeting Minutes.xdw," and "Application Form.doc" to which the user has access rights are displayed as they are. Similarly, in window W2, the original name of the folder "00_Communication" to which the user has access rights is displayed as it is. This allows the user to guess the contents of the files and folders from the displayed file and folder names, and to perform operations such as viewing and editing on the respective files and folders as necessary.

[0045] (Example 2 of modification processing) Here, an example will be described in which a display request to display the name of the file shown in Fig. 3(a) is made by user A (hereinafter, sometimes simply referred to as "user") of terminal device 200. Note that although the example will be described in relation to the name of a file, the same processing can be performed on the name of a folder. FIG. 7 is a diagram showing an example of a display that is displayed on the display device 250 of the terminal device 200 when a display request for displaying the name of the file shown in FIG. 3(a) is made by the user.

[0046] The information processing unit 110 modifies the name of a file to which the user does not have access rights to a character string that includes a specific character string that satisfies a predetermined condition. By including the specific character string in the modified name of the file to which the user does not have access rights, when the modified name is displayed on the display device 250 of the terminal device 200, it is possible to provide the user with information that the user does not have access rights based on the specific character string, or to rearrange multiple files.

[0047] In this example, the information processing unit 110 changes the name of a file to which the user does not have access rights to a character string containing a phrase indicating that the user does not have access rights. Note that the phrase indicating that the user does not have access rights is an example of a specific character string that satisfies a predetermined condition. Here, a phrase indicating no access rights is a phrase that, when a user visually recognizes the phrase, allows the user to recognize that the user does not have access rights to the file. The phrase indicating no access rights may be a single word, or may be a compound word or sentence made up of multiple words. Specific examples of such phrases indicating no access rights include, but are not limited to, "no access rights," "cannot be viewed," and "no access rights."

[0048] The information processing unit 110 changes the unique file name "2020_0115_CustomerName.pdf" to a string "NoAccessRight_c3-unu9lk," which is a combination of the phrase "NoAccessRight" indicating a lack of access rights and the meaningless string "c3-unu9lk" for the file name "2020_0115_CustomerName.pdf" to a string "NoAccessRight_c3-unu9lk." Similarly, the information processing unit 110 changes the unique file name "EmergencyContactAddressBook.xlsx" to a string "NoAccessRight_xx1sbqi," which is a combination of the phrase "NoAccessRight" indicating a lack of access rights and the meaningless string "xx1sbqi." Note that in this example, the file extensions for each file name are left unchanged.

[0049] Then, the terminal device 200 displays the names of the files requested to be displayed by the user as a window W1 on the display device 250. Specifically, as shown in Fig. 7, for the files "2020_0115_CustomerName.pdf" and "EmergencyContactAddressBook.xlsx" to which the user does not have access rights, the window W1 displays modified names "NoAccessRight_c3-unu9lk.pdf" and "NoAccessRight_xx1sbqi.xlsx," which combine a phrase indicating that the user does not have access rights with a meaningless character string, respectively. This prevents a user from guessing the contents of files "2020_0115_CustomerList.pdf" and "Emergency Contact Address Book.xlsx," to which the user does not have access rights, even if the user sees the names of the files displayed in window W1.

[0050] Furthermore, in this example, the modified names of files to which the user does not have access rights include a phrase indicating that the user does not have access rights.

[0051] Generally, when the names of files stored in the information processing device 100 are displayed on the display device 250 of the terminal device 200, the user needs to perform a further operation to know whether or not the user has the right to access each file. Specifically, to know whether or not the user has the right to access a file, the user needs to actually access the file or display a display screen (for example, a properties screen) that displays information about the access rights to the file. In contrast, in this example, the modified name of a file to which the user does not have access rights includes a phrase indicating that the user does not have access rights, so that the user does not need to actually access the file or display a screen showing information about the file's access rights in order to know whether the user has access rights to the file. In other words, the user does not need to actually access the file or display a screen showing information about the file's access rights. In other words, the user can easily find out whether they have access rights to the file.

[0052] (Example 3 of modification processing) Here, an example will be described in which a display request to display the name of the file shown in Fig. 3(a) is made by user A (hereinafter, sometimes simply referred to as "user") of terminal device 200. Note that although the example will be described in relation to the name of a file, the same processing can be performed on the name of a folder. Fig. 8 is a diagram showing an example of a display that is displayed on the display device 250 of the terminal device 200 when a display request for displaying the names of the files shown in Fig. 3(a) is made by the user. Details will be described later, but Fig. 8 shows the state after a list of multiple files displayed as window W1 on the display device 250 has been sorted by file name.

[0053] In this example, when there are multiple files to which the user does not have access rights, the information processing unit 110 changes the name of each file to a character string that includes a sorting character at the beginning. The sorting character is an example of a specific character string that satisfies a predetermined condition. Here, the sorting character is a character that is used to display the names of multiple files in a list, collectively in one place, all of the file names that contain the sorting character. The sorting character is not particularly limited, but can be, for example, a combination of predetermined numbers, alphabets, or other characters. The number of characters in the sorting character is not particularly limited, and can be one character or multiple characters. Furthermore, the sorting character included at the beginning of the names of multiple files can be the same character, or some characters can be different.

[0054] The information processing unit 110 renames the unique file name "2020_0115_CustomerName.pdf" to "001_0cu3r-fujnsu89alFk," combining the sorting character "001" and the meaningless string "0cu3r-fujnsu89alFk" to "001_0cu3r-fujnsu89alFk." Similarly, the information processing unit 110 renames the unique file name "Emergency Contact Address Book.xlsx" to "002_Lxmx71psabCqjis," combining the sorting character "002" and the meaningless string "Lxmx71psabCqjis." Note that in this example, the file extensions for each file name are left unchanged.

[0055] Then, the terminal device 200 displays the names of the files requested to be displayed by the user as a window W1 on the display device 250. Specifically, as shown in Fig. 8, in the window W1, for the files "2020_0115_CustomerName.pdf" and "EmergencyContactAddressBook.xlsx" to which the user does not have access rights, the modified names "001_0cu3r-fujnsu89alFk.pdf" and "002_Lxmx71psabCqjis.xlsx," which are combinations of sorting characters and meaningless character strings, are displayed, respectively. This prevents a user from guessing the contents of files "2020_0115_CustomerList.pdf" and "Emergency Contact Address Book.xlsx," to which the user does not have access rights, even if the user sees the names of the files displayed in window W1.

[0056] Also, when the list of multiple files displayed in window W1 is sorted by file name, files to which the user does not have access rights will contain sorting characters in their modified names, and will be displayed together in one place in the list, as shown in Figure 8. Specifically, when the list of multiple files displayed in window W1 is sorted by file name, the names of the multiple files are rearranged based on a predetermined order. When sorting by file name in ascending order, the multiple files are rearranged so that the first character of the file name is, for example, a symbol, a number, an English letter, a katakana or hiragana, and finally, a kanji. Also, the multiple files are rearranged, for example, in ascending numerical order if the first character is a number, in alphabetical order if the first character is an English letter, and in alphabetical order if the first character is a katakana or hiragana. In this example, the files "2020_0115_CustomerName.pdf" and "EmergencyContactAddressBook.xlsx," to which the user does not have access, have the sorting characters "001" and "002" at the beginning of their modified names, respectively. As a result, when the list of multiple files displayed in window W1 is sorted by file name, the files "2020_0115_CustomerName.pdf" and "EmergencyContactAddressBook.xlsx," to which the user does not have access, are displayed together at the top of the list of multiple files based on the above-mentioned ordering, as shown in Figure 8.

[0057] In the above example, the numbers "001" and "002" are used as the sorting characters, but the sorting characters are not limited to these. In addition, the characters for sorting may be predetermined and stored in the memory unit 120, etc., or may be determined by the information processing unit 110, for example, based on the names of files for which the user has requested display and whose names will not be modified (i.e., files to which the user has access rights).

[0058] Specifically, the information processing unit 110 determines the names of files to which the user has access rights among multiple files for which the user has requested display, and determines a sorting character that will cause the files to be sorted above or below the files to which the user has access rights when sorting a list of multiple files by file name. For example, if the first character of the name of a file to which the user has access rights is hiragana, katakana, or kanji, a character consisting of a number or an alphabetic character is determined as the sorting character. As a result, when a list of multiple files is sorted by file name, the modified names of files to which the user does not have access rights are displayed together above files to which the user has access rights. In addition, the modified names of files to which the user does not have access rights and the names of files to which the user has access rights are displayed together in one place.

[0059] (Example 4 of modification processing) The information processing unit 110 changes the name of a file to which the user does not have access rights to a character string having a predetermined extension. Note that the predetermined extension is an example of a specific character string that satisfies a predetermined condition. In this example, by changing the name of a file to which the user does not have access rights to a string with a predetermined extension, when the names of multiple files displayed in window W1 (see Figure 6, etc.) of display device 250 are sorted by extension, they can be displayed together in one place.

[0060] (Example 5 of modification processing) Here, an example will be described in which a display request to display the name of the file shown in Fig. 3(a) is made by user A (hereinafter, sometimes simply referred to as "user") of terminal device 200. Note that although the example will be described in relation to the name of a file, the same processing can be performed on the name of a folder. FIG. 9 is a diagram showing an example of a display that is displayed on the display device 250 of the terminal device 200 when a display request for displaying the name of the file shown in FIG. 3(a) is made by the user.

[0061] In this example, the information processing unit 110 changes the name of a file to which the user does not have access rights to a character string that includes one or more first characters of the original name. Note that the one or more first characters of the original name are an example of a specific character string that satisfies a predetermined condition.

[0062] Specifically, the information processing unit 110 renames the unique file name "2020_0115_CustomerName.pdf" to which the user does not have access, leaving the first eight characters "2020_011" intact, and changing the first eight characters after the first eight characters ("5_CustomerName") to the meaningless string "c3-unu9lk," resulting in a string "2020_011c3-unu9lk." Similarly, the information processing unit 110 renames the unique file name "EmergencyContactAddressBook.xlsx" to which the user does not have access, leaving the first four characters ("EmergencyContact") intact, and changing the first four characters after the first four characters ("AddressBook") to the meaningless string "xx1sbqi," resulting in a string "EmergencyContactxx1sbqi." Note that in this example, the file extensions for each file name are left unchanged.

[0063] In this way, by changing the name of a file to which the user does not have access rights to a character string that includes the first one or more characters of the original name, when the names of multiple files are displayed in window W1, the names of files to which the user does have access rights and the changed names of files to which the user does not have access rights are displayed in the same order as they are stored in the information processing device 100. In other words, the names of multiple files displayed in window W1 are displayed in the same order as before the names of the files to which the user does not have access rights were changed.

[0064] In this example, the modified name of the file to which the user does not have access rights contains one or more of the first characters of the original name, but the characters after the first one or more characters are modified to a meaningless string. This makes it less likely that the user will be able to guess the contents of the file to which the user does not have access rights, even when looking at the name of the file displayed in window W1, compared to when the name of the file to which the user does not have access rights is not modified.

[0065] (Example 6 of modification processing) In the above example, a single type of access right is set for each folder or file, but as mentioned above, multiple types of access rights may exist. Here, we will explain the process when there are access rights including a viewing right that allows the contents of a folder or file to be viewed and an editing right that allows the contents of a folder or file to be edited. FIG. 10 is a diagram showing an example of additional information of files stored in storage unit 120, showing the name of each file and information about the access rights set for each user to each file.

[0066] Here, the processing by the information processing unit 110 when a display request to display the name of the file shown in Fig. 10 is made by the user of the terminal device 200 will be described as an example. Note that although the description here takes the name of a file as an example, the same processing can be performed for the name of a folder. FIG. 11 is a diagram showing an example of a display that is displayed on the display device 250 of the terminal device 200 when a display request for displaying the names of the files shown in FIG. 10 is made by the user.

[0067] As shown in Figure 10, of the five files for which the user has requested display, "2020_0115_CustomerName.pdf," "2020_0820_PCRegularInventory.xlsx," "MeetingMinutes.xdw," "ApplicationForm.doc," and "EmergencyContactAddressBook.xlsx," the user does not have either the right to view or the right to edit the file "2020_0115_CustomerName.pdf." Furthermore, of the five files, "2020_0115_CustomerName.pdf," "2020_0820_PCRegularInventory.xlsx," "MeetingMinutes.xdw," "ApplicationForm.doc," and "EmergencyContactAddressBook.xlsx," the user has the right to view the file "EmergencyContactAddressBook.xlsx" but does not have the right to edit it. In this case, the information processing unit 110 may perform different modification processes on the two files "2020_0115_customer_list.pdf" and "emergency_contact_address_book.xlsx" depending on the type of access right that is set.

[0068] In this example, the information processing unit 110 modifies the name of a file for which the user does not have both the viewing right and the editing right as access rights into a meaningless character string. Specifically, the information processing unit 110 changes the unique file name "2020_0115_Customer List.pdf" of a file for which the user does not have both viewing and editing rights to the meaningless string "0cu3r-fujnsu89alFk."

[0069] Furthermore, the information processing unit 110 modifies the name of a file for which the user does not have the right to edit as an access right (i.e., the user has the right to view) to a character string including a phrase indicating that the user does not have the right to access (edit) the file. In this example, the information processing unit 110 modifies the name of a file for which the user does not have the right to edit as an access right to the file to a character string including both the original name and a phrase indicating that the user does not have the right to access the file. Specifically, the information processing unit 110 modifies the unique file name "Emergency Contact Address Book" of the file name "Emergency Contact Address Book.xlsx" for which the user does not have editing rights to a string "Not Editable_Emergency Contact Address Book", which is a combination of the original file name "Emergency Contact Address Book" and the phrase "Not Editable", which indicates that the user does not have access rights. In this example, the extensions in the names of the files are left unchanged.

[0070] Then, the terminal device 200 displays the name of the file requested to be displayed by the user as a window W1 on the display device 250. Specifically, as shown in Fig. 11, for the file "2020_0115_customer_list.pdf" for which the user does not have both the viewing right and the editing right as access rights, the modified name "0cu3r-fujnsu89alFk.pdf" consisting of meaningless characters is displayed in window W1. This prevents a user from guessing the contents of the file "2020_0115_CustomerList.pdf," for which the user does not have both viewing and editing rights, even if the user sees the name of the file displayed in window W1.

[0071] Also, as shown in Figure 11, in window W1, for the file "Emergency Contact Address Book.xlsx" for which the user has the right to view but not the right to edit, a modified name "Not Editable_Emergency Contact Address Book.xlsx" is displayed, which is a combination of the original name and a phrase indicating that the user does not have the right to access the file.

[0072] Note that since the user has the right to view this file "Emergency Contact Address Book.xlsx," there is no problem even if the user guesses the contents of the file. In addition, in this example, the original name is included in the modified name of the file "Emergency Contact Address Book.xlsx," "Non-Editable_Emergency Contact Address Book.xlsx," so the user can guess the contents of the file from the displayed file name and view the file if necessary.

[0073] <Processing in response to operations on the terminal device 200> Next, we will explain the processing performed by the information processing unit 110 of the information processing device 100 when the name of a folder or file is displayed on the display device 250 based on the output list output from the information processing device 100, and then the user performs an operation on the name of the folder or file displayed on the display device 250.

[0074] For example, a user of the terminal device 200 uses the operation reception device 240 to select the name of a folder or file displayed in a window W1 or W2 (see FIG. 6, etc.) of the display device 250, and performs an operation such as open, delete, copy, or move on the selected folder or file. The information processing unit 210 of the terminal device 200 outputs the name of the folder or file on which the user performed the operation and information related to the performed operation to the information processing device 100. Here, as described above, the display device 250 displays the original name of a folder or file to which the user has access rights, and displays the name modified by the information processing unit 110 of a folder or file to which the user does not have access rights. Therefore, when an operation is performed on a folder or file to which the user has access rights, the information processing unit 210 outputs the original name to the information processing device 100. Furthermore, when an operation is performed on a folder or file to which the user does not have access rights, the information processing unit 210 outputs the modified name to the information processing device 100.

[0075] The information processing unit 110 of the information processing device 100 compares the name of the folder or file received from the terminal device 200 with the names of folders or files stored in the storage unit 120 . When an operation is performed on a folder or file to which the user has access rights, the original name of the folder or file is output from the terminal device 200 to the information processing device 100, so the name of the folder or file received from the terminal device 200 matches the name of the folder or file stored in the storage unit 120. Therefore, the information processing unit 110 executes the operation performed by the user on the folder or file with the matching name.

[0076] On the other hand, when an operation is performed on a folder or file to which the user does not have access rights, the modified name of the folder or file is output from the terminal device 200 to the information processing device 100. In this case, none of the names of the folders or files stored in the storage unit 120 match the name of the folder or file received from the terminal device 200 (i.e., the modified name). Therefore, the information processing unit 110 does not perform the operation that the user performed on any folder or file, and then sends an error notification to the terminal device 200 indicating that the operation cannot be performed.

[0077] <Restoration process of altered name by information processing unit 110> Next, an example of processing performed by information processing unit 110 when a user changes the name of a folder or file to which the user does not have access rights and then is granted access rights to this folder or file will be described. As described above, the information processing unit 110 modifies the name of a folder or file to which the user does not have access rights using a predetermined modification rule. When the user is newly granted access rights to a folder or file whose name has been modified, the information processing unit 110 may use this modification rule to perform a process of restoring the modified name of the folder or file to its original name.

[0078] Then, the information processing unit 110 outputs the restored name of the folder or file to the terminal device 200 via the communication I / F 130. The terminal device 200 receives the restored name of the folder or file and displays the restored name of the folder or file on the display device 250. The user can guess the contents of the folder or file from the restored name of the folder or file displayed on the display device 250, and can perform operations such as viewing and editing the folder or file as necessary.

[0079] Although the embodiments have been described above, the technical scope of the present invention is not limited to the scope of the above-described embodiments. It is clear from the claims that various modifications and improvements to the above-described embodiments are also included in the technical scope of the present invention. [Explanation of symbols]

[0080] 1...information processing system, 100...information processing device, 110...information processing unit, 120...storage unit, 130...communication I / F, 200...terminal device, 210...information processing unit, 220...storage unit, 230...communication I / F, 240...operation reception device, 250...display device, 300...communication line

Claims

1. a processor; When the processor receives a request from a terminal device to display the name of a folder or file stored in memory, it acquires the name of the folder or file and information about the access rights set for the folder or file, and when the user of the terminal device does not have the access rights to the folder or file, it modifies the name of the folder or file to a character string including a phrase indicating that the user of the terminal device does not have the access rights, and outputs the name to the terminal device. Information processing device.

2. a processor; When the processor receives a request from a terminal device to display the name of a folder or file stored in memory, it acquires the name of the folder or file and information about the access rights set for the folder or file, and when the user of the terminal device does not have the access rights to the folder or file, it modifies the name of the folder or file to a character string including a sorting character at the beginning and outputs the name to the terminal device. Information processing device.

3. 3. The information processing apparatus according to claim 2, wherein the processor determines the characters for sorting based on the names of folders or files to which the user of the terminal device has access rights.

4. a processor; When the processor receives a request from a terminal device to display the name of a folder or file stored in memory, the processor acquires the name of the folder or file and information about the access rights set for the folder or file, and when the user of the terminal device does not have the access rights to the folder or file, the processor changes the name of the folder or file to a character string with a predetermined extension and outputs the name to the terminal device. Information processing device.

5. a processor; The processor: When a request to display the name of a folder or file stored in a memory is received from a terminal device, the name of the folder or file to which the user of the terminal device does not have access rights is changed to a different character string using a predetermined change rule, and the changed name is output to the terminal device; When a user of the terminal device is granted an access right to a folder or file whose name has been altered, the name is restored using the alteration rule and output to the terminal device. Information processing device.

6. a processor; When the processor receives a request from a terminal device to display the name of a folder or file stored in memory, it acquires the name of the folder or file and information about the access rights set for the folder or file, and when the user of the terminal device does not have the access rights to the folder or file, it modifies the name of the folder or file to a character string different from the original name in a different manner depending on the type of access rights that the user of the terminal device does not have to the folder or file, and outputs the modified name to the terminal device. Information processing device.

7. On the computer, A program that, when receiving a request from a terminal device to display the name of a folder or file stored in memory, obtains the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modifies the name of the folder or file to which the user of the terminal device does not have access rights into a string containing words indicating that the user of the terminal device does not have access rights, and outputs the modified name to the terminal device.

8. On the computer, A program that, when receiving a request from a terminal device to display the name of a folder or file stored in memory, obtains the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modifies the name of the folder or file to which the user of the terminal device does not have access rights into a string that includes a sorting character at the beginning and outputs the modified name to the terminal device.

9. On the computer, A program that, when receiving a request from a terminal device to display the name of a folder or file stored in memory, obtains the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modifies the name of the folder or file to which the user of the terminal device does not have access rights into a string with a predetermined extension and outputs the name to the terminal device.

10. On the computer, A program that, when a request is received from a terminal device to display the name of a folder or file stored in memory, modifies the name of a folder or file to which the user of the terminal device does not have access rights using predetermined modification rules to a different string of characters, and outputs the modified name to the terminal device; and, when the user of the terminal device is granted access rights to the folder or file whose name has been modified, restores the name using the modification rules and outputs the name to the terminal device.

11. On the computer, A program that, when receiving a request from a terminal device to display the name of a folder or file stored in memory, obtains the name of the folder or file and information about the access rights set for the folder or file, and, if the user of the terminal device does not have access rights to the folder or file, modifies the name of the folder or file to which the user of the terminal device does not have access rights to a string different from the original name in a manner that differs depending on the type of access rights that the user of the terminal device does not have for the folder or file, and outputs the modified name to the terminal device.

Images