Confidential Information Browsing Permission Notification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In shared office environments, users with browsing permissions for confidential information may inadvertently disclose sensitive information to others without permissions, leading to security concerns and inefficient discussions due to unclear access restrictions.
Innovation Solution
An information processing apparatus and program that set and manage user permissions for confidential information within documents, notifying users of restricted access and editing documents to indicate permissions, ensuring only authorized users can view sensitive content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If confidential information is concealed by blacking out or deletion for users without browsing permission, then security is improved, but users with browsing permission cannot efficiently discuss with users without permission due to unclear access restrictions
Solution Approach 1:
The patent introduces a notification mechanism as an intermediary between the document content and the user. When a user with browsing permission views confidential information, the system notifies them about other users who do not have permission. This mediator communicates the access restrictions without revealing the actual confidential content to unauthorized users, thus maintaining security while enabling efficient discussion through clear permission awareness.
2Loss of information
If confidential information is made accessible to users with browsing permission, then information availability is improved, but the risk of unauthorized disclosure to users without permission increases
Solution Approach 1:
The system implements a feedback mechanism where users with browsing permission receive notifications about the permission status of confidential information. This feedback loop allows the system to monitor and control information access dynamically, ensuring that even though confidential information is available to authorized users, the system maintains awareness of permission boundaries to prevent unauthorized disclosure.
Solution Approach 2:
The notification system acts as an intermediary that manages the flow of information about permission status without directly controlling the confidential content itself. This mediator enables information availability for authorized users while maintaining security controls by clearly indicating permission boundaries.
3Ease of operation
If users without browsing permission can check concealed parts by referring to the document, then ease of access is improved, but security is worsened as confidential information may be exposed
Solution Approach 1:
The patent extracts the permission status information from the confidential content itself and presents it separately through notifications. Users without browsing permission cannot access the concealed confidential information, but the system extracts and communicates the permission status to users with permission, enabling them to understand access restrictions without exposing the actual confidential content.
Data Source
AI summary
An information processing apparatus includes a processor configured to, for each confidential information which is information included in a document and having confidentiality, set a user to which a browsing permission is not granted for the confidential information, and in a case where the document for which an output request is made from the user includes the confidential information for which the browsing permission is granted to the user and the browsing permission is not granted to another user, notify the user that the browsing permission is not granted to the other user for the confidential information.