JP2008242955A - Information management program, information processor, and information management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To discover the fact of information leakage in an early stage of a time of the illegal use of leaked information without waiting for any damage report caused by the illegal use. <P>SOLUTION: When a transmission request of an address list managed by a transmission destination information management part is received in a database, a dummy information addition part adds a dummy mail address to the address list as the object of the transmission request, and a transmission destination information transmission part transmits the address list as the object of the transmission request to which the dummy mail address is added to the other party which has transmitted the transmission request. Thus, when the other party which has transmitted the transmission request simultaneously transmits electronic mail by using the transmitted address list, the electronic mail is delivered even to a destination shown by the dummy mail address. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an information management program, an information processing apparatus, and an information management system, and more particularly to a technique for managing electronic mail transmission destination information.

Conventionally, a system for preventing leakage of information managed by a computer has been proposed. For example, in the network printing system disclosed in Patent Document 1 below, when a user instructs a print command on the client, the client transmits print data to the print server, and at the same time, the administrator performs inspection and browsing later. Information including a key that can identify the user is transmitted to the print server. The print server creates a print log based on the print data and user information transmitted from the client, and searches by the administrator. Browsing data for use when browsing and reprinting instructions are created. According to this network printing system, since the history can be traced even when information is leaked, it is possible to exert a deterrent against illegal leakage of information.
JP 2004-118243 A

  However, like the network printing system shown in the above-mentioned Patent Document 1, only by creating a browsing data by recording a printing log, leaked information is used by a thief and damage is reported. Information leaks cannot be found. As a result, information leakage could not be detected early.

  The present invention has been made to solve the above problems, and an object thereof is to enable early detection of information leakage.

The invention according to claim 1 of the present invention is an information management program for managing e-mail transmission destination information,
Destination information management means for managing a plurality of email destination information;
When receiving a transmission request for transmission destination information managed by the transmission destination information management means, dummy information addition means for adding predetermined dummy transmission destination information to transmission destination information that is a target of the transmission request;
A computer that functions as transmission destination information transmission means for transmitting transmission destination information to which the transmission request is added to which the dummy transmission destination information has been added by the dummy information addition means to a destination that has transmitted the transmission request. It is.

The invention according to claim 6 is an information processing apparatus for managing e-mail transmission destination information,
Destination information management means for managing a plurality of email destination information;
When a transmission request for transmission destination information managed by the transmission destination information management means is received, predetermined dummy transmission destination information and log information related to the transmission request are added to the transmission destination information targeted for the transmission request. Dummy information adding means for
Transmission destination information transmitting means for transmitting the transmission destination information to which the dummy information is added by the dummy information addition means to the destination that has transmitted the transmission request.

  According to these configurations, when a transmission request for transmission destination information managed by the transmission destination information management unit is received, the dummy information adding unit adds a predetermined dummy to the transmission destination information that is the target of the transmission request. Since the transmission destination information is added, and the transmission destination information transmitting means transmits the transmission destination information to which the dummy transmission destination information is added to the transmission request target to the other party that has transmitted the transmission request. When the other party that has transmitted the transmission request uses the destination information transmitted from the destination information transmitting means to simultaneously transmit data such as documents to the other party indicated by the destination information, the above-mentioned addition is made. The data such as the document is transmitted to the destination indicated by the dummy transmission destination information. Therefore, the destination indicated by the dummy transmission destination information has received the data such as the document, and the reception date / time can specify that the transmission destination information acquired by the transmission request is used and the date / time used. It becomes possible. Therefore, when the destination information acquired by the transmission request is used illegally, the destination indicated by the dummy destination information will receive the data such as the document, and the damage report due to the unauthorized use is reported. Even without waiting, it becomes possible to discover the fact of information leakage early from the time of unauthorized use.

  The invention according to claim 2 is the information management program according to claim 1, wherein the dummy information adding means adds the dummy destination information different for each transmission request. Is to function.

  According to this configuration, the dummy information adding unit adds different dummy destination information every time there is a transmission request. Therefore, when the unauthorized use is performed as described above, the destination of the data such as the document is received. It can be changed for each transmission request. Thereby, it is possible to prevent the amount of data stored in one server (data reception location of the document or the like indicated by the dummy transmission destination information) from increasing excessively, and whether or not the transmission destination information is illegally used. Such a discovery can be easily performed.

  The invention according to claim 3 is the information management program according to claim 2, wherein the information management program is transmitted to the e-mail recipient indicated by the dummy destination information based on the dummy destination information. The computer is further caused to function as a reception instruction transmission means for transmitting a reception instruction of an incoming e-mail.

  According to this configuration, on the basis of the reception instruction of the e-mail sent from the reception instruction transmission unit, the e-mail receiving destination indicated by the dummy transmission destination information has its own mail reception function based on the dummy transmission destination information. Therefore, even if the dummy destination information is different for each transmission request, the dummy destination information for each of the transmission requests is set. Correspondingly, it is possible to receive an electronic mail transmitted based on each dummy transmission destination information.

  The invention according to claim 4 is the information management program according to any one of claims 1 to 3, wherein the dummy information adding means includes a log related to the transmission request in the dummy destination information. The computer functions to accompany the information.

  According to this configuration, since the log information associated with the dummy transmission destination information is accumulated in the e-mail receiving destination indicated by the dummy transmission destination information, the administrator of the transmission destination information can add the log information to the accumulated log information. Based on this, it is possible to more accurately determine the cause of information leakage (such as an unauthorized person).

  The invention according to claim 5 is the information management program according to any one of claims 1 to 4, wherein the dummy destination information transmitting means transmits the dummy destination information to a mail server. In order to further function the computer.

  According to this configuration, based on the dummy transmission destination information sent from the dummy transmission destination information transmission unit, the mail server determines that the dummy transmission destination information is included as a transmission destination of the e-mail and With this judgment date and time, it becomes possible to specify the destination information obtained by the above transmission request and the date and time used, so that it is possible to identify the damage from unauthorized use from the time of unauthorized use. It becomes possible to discover the fact of information leakage at an early stage, and it is possible to find the fact of information leakage before the e-mail is transmitted from the mail server. Furthermore, it is possible to reduce the amount of data stored in the mail receiving destination indicated by the dummy transmission destination information.

The invention according to claim 7 is an information management system for managing e-mail transmission destination information,
When receiving a transmission request for the transmission destination information managed by the transmission destination information management means and the transmission destination information management means for managing a plurality of pieces of electronic mail transmission destination information, The dummy information adding means for adding different dummy destination information for each transmission request and the transmission destination information to which the dummy information is added by the dummy information adding means are transmitted as the transmission request. Destination information transmitting means for transmitting to the other party, and a reception instruction for transmitting an instruction to receive an email transmitted based on the dummy transmission destination information to the electronic mail receiving destination indicated by the dummy transmission destination information A first server having transmitting means;
A setting for receiving an e-mail reception instruction transmitted from the reception instruction transmission means of the first server, and enabling reception of an e-mail based on the dummy transmission destination information based on the reception instruction; And a second server having setting means to perform.

  According to this configuration, on the basis of the reception instruction of the electronic mail sent from the reception instruction transmission means, the second server transmits its mail reception function based on the dummy transmission destination information. Even if the dummy transmission destination information is different for each transmission request, each dummy transmission information can be set in correspondence with the dummy transmission destination information for each transmission request. An e-mail transmitted based on the destination information can be received. Further, the second server can determine information leakage based on the electronic mail received in this way. For example, the second server checks whether a mail has arrived at regular intervals, and sends an e-mail (based on the dummy transmission destination information) from a destination other than a preset destination. It is determined that information leakage has occurred when the e-mail is received. Thus, for example, when the other party that has transmitted the transmission request uses the transmission destination information transmitted from the transmission destination information transmitting means, and simultaneously transmits data such as documents to the other party indicated by the transmission destination information. The second server can specify that the destination information acquired by the transmission request is used and the date and time when the second server receives the data such as the document and the date and time when the data is received.

The invention according to claim 8 is an information management system for managing e-mail transmission destination information,
When receiving a transmission request for the transmission destination information managed by the transmission destination information management means and the transmission destination information management means for managing a plurality of pieces of electronic mail transmission destination information, Dummy information adding means for adding predetermined dummy transmission destination information and log information related to the transmission request; and transmission destination information to which the dummy information is added by the dummy information addition means, A first server having transmission destination information transmission means for transmitting to a destination that has transmitted a transmission request; and dummy transmission destination information transmission means for transmitting the dummy transmission destination information to a mail server;
A mail server having a determination unit that receives the dummy transmission destination information transmitted from the dummy transmission destination information transmission unit of the first server and determines information leakage based on the dummy transmission destination information. is there.

  According to this configuration, based on the dummy transmission destination information transmitted from the dummy transmission destination information transmission unit, the determination unit of the mail server includes the dummy transmission destination information as a transmission destination of the e-mail. It is possible to identify the use of the destination information acquired by the above transmission request and the date and time of use with the judgment and the date and time of the judgment. It is possible to determine the presence or absence of information leakage at an early stage from the time of use, and it is possible to discover the fact of information leakage before an e-mail is transmitted from the mail server. Furthermore, it is possible to reduce the amount of data stored in the mail receiving destination indicated by the dummy transmission destination information.

  According to the first and sixth aspects of the present invention, when the destination information acquired by the transmission request is illegally used, the destination indicated by the dummy destination information is the data such as the document. Therefore, it is possible to detect the fact of information leakage at an early stage from the time of unauthorized use without waiting for a damage report due to unauthorized use.

  According to the second aspect of the present invention, when the unauthorized use is made as described above, the destination of the data such as the document can be changed for each transmission request. It is possible to prevent the amount of data stored in the data reception location of the document etc. from increasing too much, and to easily discover whether or not the transmission destination information has been used illegally.

  According to the third aspect of the present invention, even if the dummy destination information is different for each transmission request as described above, dummy transmission is performed corresponding to each dummy destination information for each transmission request. The e-mail recipient indicated by the destination information can receive an e-mail transmitted based on each dummy destination information.

  According to the fourth aspect of the present invention, the log information associated with the dummy destination information is stored in the e-mail receiving destination indicated by the dummy destination information. Based on the log information to be recorded, it is possible to more accurately determine the cause of information leakage (such as an unauthorized person).

  According to the invention described in claim 5, it is possible to find out the fact of information leakage at an early stage from the time of unauthorized use without waiting for a damage report due to unauthorized use, and an email is transmitted from a mail server. It is possible to discover the fact of information leakage before it is done. Furthermore, it is possible to reduce the amount of data stored in the mail receiving destination indicated by the dummy transmission destination information.

  According to the invention described in claim 7, even if the dummy destination information is different for each transmission request, the second server corresponds to each dummy destination information for each of the transmission requests. The electronic mail transmitted based on each dummy transmission destination information can be received. For example, the second server checks whether a mail has arrived at regular intervals, and sends an e-mail (based on the dummy transmission destination information) from a destination other than a preset destination. Since it is possible to determine that information leakage has occurred by receiving the e-mail), the other party that has transmitted the transmission request uses the destination information transmitted from the destination information transmitting means, When data such as a document is transmitted all at once to the destinations indicated by the destination information, the destination information acquired by the transmission request is obtained by the second server having received the data such as the document and the reception date and time. It is possible to specify what was used and when it was used.

  According to the invention described in claim 8, the administrator of the destination information can determine whether or not there is information leakage at an early stage from the time of unauthorized use without waiting for a damage report due to unauthorized use. In addition, the fact of information leakage can be discovered before an email is transmitted from the mail server. Furthermore, it is possible to reduce the amount of data stored in the mail receiving destination indicated by the dummy transmission destination information.

  Hereinafter, an information management program, an information processing apparatus, and an information management system according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing an information management system according to an embodiment of the present invention. The information management system 1 according to one embodiment of the present invention only needs to combine at least the database 11 with either the dummy server 12 or the SMTP server 13, but in this embodiment, the information management system 1 Assume that the database 11, the dummy server 12, and the SMTP server 13 are provided.

  The database 11, the dummy server 12, and the SMTP server 13 are connected by a LAN (Local Area Network) 4 or the like. The information management system 1 is connected to a personal computer (hereinafter referred to as a PC) 14 and a multi-function device 15 through a LAN 4 so as to be able to communicate with each other, and is configured so that various data can be transmitted and received. Note that a plurality of PCs 14 and multifunction devices 15 may be connected to the LAN 4.

  The information management system 1 is used, for example, inside a company or the like, and a network in the company is configured by a LAN 4, and devices used by users such as employees in the company are the MFP 15 and the PC 14. Become.

  The multifunction machine 15 is a digital copying machine having complex functions such as a scanner function, a facsimile function, a printer function, and a copy function. In the multi function device 15, various functions are realized by combining the above functions. For example, a scanner function, a PC transmission function, an E-mail transmission function, a FAX transmission function, and a data transmission / reception function with the database 11. Etc. are realized.

  Here, the PC transmission function is a function for directly transmitting image data read from a document from the multifunction machine 15 to an arbitrary PC 14 or the like via the LAN 4. The E-mail transmission function transmits image data read from a document as an email attachment file from the multi-function device 15 to the SMTP server 13 via the LAN 4, and from the SMTP server 13 to other PCs 14 in the company or the Internet 6 This is a function for transmitting image data read from a document as an attached file of an e-mail by transmitting an e-mail to an external PC 24, etc. The FAX transmission function is a function for directly transmitting image data read from a document from an MFP 15 to an arbitrary facsimile machine or the like via a telephone line.

  The database 11 (information processing apparatus according to an embodiment of the present invention) is a server that stores various data shared by the PC 14 and the multifunction device 15. The database 11 can manage, search, extract, and transmit / receive the shared data. The database 11 includes a CPU 110 and a storage device 116.

  A storage device 116 such as an HDD is composed of, for example, a magnetic disk, and stores an operating system that is a basic program for overall control of a personal computer, an information management program according to an embodiment of the present invention, and the like. When the information management program is recorded on a recording medium such as a CD-ROM or a flexible disk, the information management program is stored in the storage device 116 by installing the recording medium in a recording medium driving device (not shown). . Further, when the information management program is stored in a WEB server on the Internet, the program may be stored in the storage device 116 by downloading the display control program from the WEB server.

  The CPU 110 executes the display control program under the control of the operating system, so that the transmission destination information management unit 111, the dummy information addition unit 112, the transmission destination information transmission unit 113, the reception instruction transmission unit 114, It functions as the dummy transmission destination information transmission unit 115.

  The transmission destination information management unit (transmission destination information management means) 111 stores and manages a plurality of electronic mail addresses (transmission destination information). When the dummy information adding unit (dummy information adding unit) 112 receives a transmission request for a mail list including a plurality of e-mail addresses managed by the transmission destination information management unit 111 from the PC 14 or the multi-function device 15, the dummy information adding unit 112 A predetermined dummy e-mail address (hereinafter referred to as a dummy address; details will be described later) or the like is added to the target mail list. Further, the dummy information adding unit 112 can add a different dummy address for each mail list transmission request. Further, the dummy information adding unit 112 can attach log information related to the mail list transmission request to the dummy address and the mail list when the dummy address is added. The mail list managed by the transmission destination information management unit 111 is stored in the storage device 116.

  A transmission destination information transmission unit (transmission destination information transmission unit) 113 transmits a mail list that is a target of the transmission request to which a dummy address is added by the dummy information addition unit 112 to a destination (PC 14 or To the MFP 15).

  The reception instruction transmission unit (reception instruction transmission unit) 114 receives an e-mail whose transmission destination is the dummy address with respect to the e-mail receiving destination (dummy server 12 or external dummy server 25) indicated by the dummy address. Transmits an instruction to set the environment (hereinafter referred to as a reception instruction). The dummy transmission destination information transmission unit (dummy transmission destination information transmission means) 115 transmits the dummy address to the mail server.

  The dummy server 12 is a server that receives an e-mail whose destination is the dummy address when an e-mail is transmitted based on the dummy address. The dummy server 12 includes a setting unit (setting unit) 121. When the setting unit 121 receives the reception instruction transmitted from the reception instruction transmission unit 114 of the database 11, the setting unit 121 performs setting so that an email can be received at the dummy address.

  The SMTP server 13 is connected to the transmission destination PC 24 and the external dummy server 25 via the Internet 6 or the like so as to be able to communicate with each other. Between the PC 14 and the multi-function device 15 and the transmission destination PC 24 and the external dummy server 25, electronic Mail can be sent and received. The SMTP server 13 includes a determination unit (determination unit) 131. The determination unit 131 determines that the information leaks when the transmission destination address includes the dummy address received from the dummy transmission destination information transmission unit 115 of the database 11 when an instruction to transmit an e-mail is received.

  The external dummy server 25 is a PC or the like on an Internet network outside the company, and is a server that receives an e-mail based on the dummy address on the Internet network outside the company. The external dummy server 25 includes a setting unit (setting unit) 251 that exhibits the same function as the setting unit 121 of the dummy server 12.

  Note that the configuration of the information management system 1 can be variously changed. The number of the multifunction machine 15 and the PC 14 connected via the LAN 4 or the like is changed, or the LAN 4 and the Internet 6 are connected to each other. In addition to the SMTP server 13, a gateway, a router, and the like may be provided as appropriate.

  Next, a first embodiment of processing at the time of data communication by the information management system 1 will be described. FIG. 2 is a diagram showing an outline of data communication by the information management system 1. FIG. 3 is a flowchart showing a first embodiment of processing at the time of data communication by the information management system 1.

  The PC 14 or the multifunction device 15 transmits to the database 11 an address list transmission request composed of a plurality of e-mail addresses managed by the database 11 (FIG. 2 (1), P1 in FIG. 3), and the database 11, when the transmission request is received (D1 in FIG. 3), the dummy information adding unit 112 of the database 11 adds a predetermined dummy address to the address list that is the target of the transmission request, Further, log information related to the transmission request (sender information of the transmission request (email address, IP address, etc.), reception date / time information, etc.) is attached when the mail list is transmitted (D2 in FIG. 3).

  It should be noted that a computer on the network (LAN 1 or the Internet 6) that is the mail transmission destination indicated by the dummy address is a server (dummy server) in which mail transmission / reception is set in advance so that mail transmission / reception at the dummy address can be performed. 12 or external dummy server 25).

  Subsequently, the transmission destination information transmission unit 113 of the database 11 transmits the address list including the dummy address and the log information to the PC 14 or the multifunction machine 15 that has transmitted the transmission request for the address list (FIG. 2 (2)). ), D3 in FIG.

  The PC 14 or the multifunction device 15 receives the address list and log information from the database 11 (P2 in FIG. 3). In this case, for example, when the address list is stolen by a third party via the PC 14 or the multifunction device 15, the PC 14 or the multifunction device 15 has a predetermined address indicated by all email addresses included in the address list. It is assumed that document or image data is transmitted. Then, the PC 14 or the multifunction device 15 requests the SMTP server 13 to send a mail to the destination indicated by all the mail addresses included in the received address list (P3 in FIG. 3, (3) in FIG. 2). Four)). In FIG. 2, the SMTP server 13 is not shown for simplicity. At this time, the address list received by the PC 14 or the multifunction device 15 includes the dummy address. Therefore, when the PC 14 or the multifunction device 15 requests the SMTP server 13 to transmit the mail, the destination indicated by the dummy address Also, the predetermined document or image data is transmitted.

  In the mail transmission by the SMTP server 13, the dummy server 12 or 25, which is the transmission destination indicated by the dummy address, receives the mail including the predetermined document or the like (S1, FIG. 3, (5) in FIG. 2). The reception of the mail at the dummy server 12 or 25 indicates that the mail address list is acquired from the database 11 to the PC 14 or the multifunction device 15. Therefore, whether the dummy server 12 or 25 or the administrator of the dummy server 12 or 25 has obtained the mail address list properly on the occasion that the mail is received by the dummy server 12 or 25. It becomes possible to investigate whether or not. Further, when the mail is received, the sender information and the transmission date / time information of the mail are attached as log information, so that the dummy servers 12 and 25 or the administrator can send the mail address or IP address included in the log information, It is possible to easily determine whether or not unauthorized acquisition is made based on the transmission request date and time information. In addition, when the dummy server 12 or the administrator thereof determines that the acquisition is unauthorized, it is possible to easily determine the unauthorized person and the date and time based on the log information.

  The dummy servers 12 and 25 or the administrator thereof determine that the dummy server 12 or 25 has received an e-mail based on the dummy address and that the e-mail address has been illegally acquired or information has been leaked. Is also possible. When a mail address is illegally acquired and so-called spam mail or the like is transmitted, a plurality of mail addresses managed by the database 11 are acquired at one time, and an email is often transmitted to all these mail addresses. In this case, an e-mail based on the dummy address is always transmitted.

  Next, a second embodiment of processing at the time of data communication by the information management system 1 will be described. FIG. 4 is a flowchart showing a second embodiment of the process at the time of data communication by the information management system 1. FIG. 5 is a diagram showing an outline of a second embodiment of processing at the time of data communication by the information management system. The description of the same processing as that of the first embodiment shown in FIG. 3 is omitted.

  In the first embodiment, the mail transmission destination computer or the like indicated by the dummy address is set in advance so that mail transmission / reception at the dummy address can be performed. However, in the second embodiment, Each time the dummy information adding unit 112 of the database 11 adds a dummy address, the reception instruction transmitting unit 114 receives an e-mail whose destination is the dummy address to a computer or the like on the network. An instruction to set the environment (reception instruction) is transmitted (D13 in FIG. 4, (a) in FIG. 5), and the computer that receives the reception instruction (S11 in FIG. 4) has the setting unit 121 or 251 Then, the environment is set so as to receive the e-mail with the dummy address (S12 in FIG. 4, (b) in FIG. 5), and the computer is connected to the dummy server. 12 or may function as 25.

  Thereafter, as in the first embodiment, the transmission destination information transmission unit 113 of the database 11 sends the address list including the dummy address and the log information to the PC 14 or the multifunction machine 15 that has transmitted the transmission request for the address list. (D2 and D15 in FIG. 5), the PC 14 or the multifunction device 15 sends the mail to the destination indicated by all the mail addresses included in the received address list to the SMTP server 13. (P12 and P13 in FIG. 4, (3) and (4) in FIG. 5). The dummy server 12 or the like receives the electronic mail (S13 in FIG. 4, (5) in FIG. 5).

  In the case of the second embodiment, the dummy information adding unit 112 of the database 11 creates a different dummy address each time an address list is requested (or creates a dummy address different from the previously created dummy address). And may be added to the address list. In this case, each time a new dummy address is created, the computer that receives the e-mail at the created dummy address can be made different, and it is difficult for an unauthorized person to recognize that a dummy address is added. can do.

  Next, a third embodiment of processing at the time of data communication by the information management system 1 will be described. FIG. 6 is a diagram showing an outline of the third embodiment of the processing at the time of data communication by the information management system 1. FIG. 7 is a flowchart showing a third embodiment of processing at the time of data communication by the information management system 1. Note that the description of the same processing as in the first and second embodiments is omitted.

  In the third embodiment, when the dummy information adding unit 112 of the database 11 receives a transmission request for an address list and adds a dummy address (D21 and D22 in FIG. 7, (1) in FIG. 6), the dummy transmission destination The information transmission unit 115 transmits the dummy address and log information to the SMTP server 13 (D23 in FIG. 7, (2) in FIG. 6).

  The SMTP server 13 receives the dummy address and log information (M21 in FIG. 7). Subsequently, when the SMTP server 13 receives an e-mail transmission request from the PC 14 or the multifunction machine 15 (M22 in FIG. 7), the determination unit 131 of the SMTP server 13 sets the transmission destination address indicated by the e-mail transmission request. Based on whether or not a dummy address is included, it is determined whether or not the electronic mail transmission request is a permitted mail transmission request (M23 in FIG. 7). That is, the determination unit 131 determines whether or not there is information leakage based on whether or not a dummy address is included in the transmission destination address indicated by the e-mail transmission request.

  If the determination unit 131 determines that the dummy address is included, the SMTP server 13 determines that the electronic mail transmission request is not a permitted mail transmission request (NO in M23 in FIG. 7). ) The e-mail is not transmitted to all e-mail addresses based on the e-mail transmission request (M25 in FIG. 7).

  If the determination unit 131 determines that the dummy address is not included, the SMTP server 13 determines that the e-mail transmission request is a permitted mail transmission request (YES in M23 of FIG. 7). ), An e-mail is transmitted to all e-mail addresses based on the e-mail transmission request (M24 in FIG. 7). As a result, the e-mail based on the e-mail transmission request is received by the transmission destination PC 24 indicated by the e-mail address based on the e-mail transmission request (S21).

  According to the third embodiment, the occurrence of information leakage is detected before an e-mail based on the illegally acquired address list is transmitted, and the e-mail is transmitted to the destination indicated by the illegally acquired e-mail address. Can be prevented. Further, since it is not necessary to send an e-mail to the dummy server 12 or 25, it is possible to reduce the processing load applied to the dummy server 12 or 25 and the amount of accumulated data. Further, based on the log information stored in the SMTP server 13, the administrator can easily find out the unauthorized person and the unauthorized date and time by the log information.

  The present invention is not limited to the configuration of the above embodiment, and various modifications can be made. For example, the configuration and processing of the information management program, the information processing apparatus, and the information management system according to the embodiment of the present invention are shown in FIGS. 1 to 7, but the present invention is shown in FIGS. The configuration and processing are not limited to those described above.

It is a figure showing an information management system concerning one embodiment of the present invention. It is a figure which shows the outline of the data communication by an information management system. It is a flowchart which shows 1st Embodiment of the process at the time of the data communication by an information management system. It is a flowchart which shows 2nd Embodiment of the process at the time of data communication by an information management system. It is a figure which shows the outline of 2nd Embodiment of the process at the time of the data communication by an information management system. It is a figure which shows the outline of 3rd Embodiment of the process at the time of the data communication by an information management system. It is a flowchart which shows 3rd Embodiment of the process at the time of data communication by an information management system.

Explanation of symbols

1 Information management system 11 Database 110 CPU
111 Destination information management unit 112 Dummy information addition unit 113 Transmission destination information transmission unit 114 Reception instruction transmission unit 115 Dummy transmission destination information transmission unit 116 Storage device 12 Dummy server 121 Setting unit 13 SMTP server server 131 Determination unit 14, 25 Personal computer 15 MFP 25 External dummy server

Claims (8)

An information management program for managing e-mail destination information,
Destination information management means for managing a plurality of email destination information;
When receiving a transmission request for transmission destination information managed by the transmission destination information management means, dummy information addition means for adding predetermined dummy transmission destination information to transmission destination information that is a target of the transmission request;
Information that causes the computer to function as transmission destination information transmission means for transmitting the transmission destination information that is the target of the transmission request to which the dummy transmission destination information has been added by the dummy information addition means to the other party that has transmitted the transmission request. Management program.   The information management program according to claim 1, wherein the dummy information adding unit causes a computer to function so as to add different dummy destination information for each transmission request.   The computer further functions as reception instruction transmission means for transmitting an instruction to receive an electronic mail transmitted based on the dummy transmission destination information to an electronic mail reception destination indicated by the dummy transmission destination information. The information management program described.   The information management program according to any one of claims 1 to 3, wherein the dummy information adding unit causes a computer to function so that log information regarding the transmission request is attached to the dummy transmission destination information.   5. The information management program according to claim 1, further causing a computer to function as dummy transmission destination information transmission means for transmitting the dummy transmission destination information to a mail server. An information processing apparatus for managing e-mail destination information,
Destination information management means for managing a plurality of email destination information;
When a transmission request for transmission destination information managed by the transmission destination information management means is received, predetermined dummy transmission destination information and log information related to the transmission request are added to the transmission destination information targeted for the transmission request. Dummy information adding means for
An information processing apparatus comprising: transmission destination information transmitting means for transmitting the transmission destination information to which the dummy information is added by the dummy information addition means to the destination that has transmitted the transmission request. An information management system for managing e-mail destination information,
When receiving a transmission request for the transmission destination information managed by the transmission destination information management means and the transmission destination information management means for managing a plurality of pieces of electronic mail transmission destination information, The dummy information adding means for adding different dummy destination information for each transmission request and the transmission destination information to which the dummy information is added by the dummy information adding means are transmitted as the transmission request. Destination information transmitting means for transmitting to the other party, and a reception instruction for transmitting an instruction to receive an email transmitted based on the dummy transmission destination information to the electronic mail receiving destination indicated by the dummy transmission destination information A first server having transmitting means;
A setting for receiving an e-mail reception instruction transmitted from the reception instruction transmission means of the first server, and enabling reception of an e-mail based on the dummy transmission destination information based on the reception instruction; An information management system comprising: a second server having setting means for performing. An information management system for managing e-mail destination information,
When receiving a transmission request for the transmission destination information managed by the transmission destination information management means and the transmission destination information management means for managing a plurality of pieces of electronic mail transmission destination information, Dummy information adding means for adding predetermined dummy transmission destination information and log information related to the transmission request; and transmission destination information to which the dummy information is added by the dummy information addition means, A first server having transmission destination information transmission means for transmitting to a destination that has transmitted a transmission request; and dummy transmission destination information transmission means for transmitting the dummy transmission destination information to a mail server;
An information management system comprising: a mail server having a determination unit that receives the dummy transmission destination information transmitted from the dummy transmission destination information transmission unit of the first server and determines information leakage based on the dummy transmission destination information system.

Images